merge

Author: dtunikov

.env.example

@@ -42,6 +42,11 @@ PG2_USER=postgres
 PG2_PASSWORD=postgres
 PG2_DATABASE=postgres
 
+# Client certificate (mutual TLS) auth test, paths relative to repo root
+PG_MTLS_ROOT_CA_PATH=volumes/pg-tls/server.crt
+PG_MTLS_CLIENT_CERT_PATH=volumes/pg-tls/client.crt
+PG_MTLS_CLIENT_KEY_PATH=volumes/pg-tls/client.key
+
 PEERDB_CATALOG_HOST=host.docker.internal
 PEERDB_CATALOG_PORT=9901
 PEERDB_CATALOG_USER=postgres

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,84 @@
+name: Bug report
+description: Report a problem with PeerDB
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to file a bug report! Please fill out the fields below so we can reproduce and triage the issue.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A clear and concise description of what the bug is, including the expected behavior and what actually happened.
+      placeholder: When I run a CDC mirror to ..., I expected ... but instead ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps_to_reproduce
+    attributes:
+      label: Steps to reproduce
+      description: Step-by-step instructions to reproduce the behavior.
+      placeholder: |
+        1. Create a peer with ...
+        2. Create a mirror with ...
+        3. Observe ...
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: PeerDB version
+      description: The PeerDB version (or Docker image tag / commit SHA) you are running.
+      placeholder: e.g. v0.30.0 or stable-dev
+    validations:
+      required: true
+
+  - type: dropdown
+    id: source_connector
+    attributes:
+      label: Source connector
+      description: If this issue relates to a source connector, select it here. Leave blank if not applicable.
+      options:
+        - Postgres
+        - MySQL
+        - MongoDB
+        - BigQuery
+        - Other
+    validations:
+      required: false
+
+  - type: markdown
+    attributes:
+      value: |
+        ### ⚠️ Deprecated destination connectors
+
+        The following destination connectors are **deprecated**: **Snowflake**, **BigQuery**, **ElasticSearch**, **Kafka**, **Redpanda**, **Confluent**, **Azure Event Hubs**, **Google Pub/Sub**, and **S3**.
+
+        These destinations are no longer actively maintained, but remain functional. Bugs affecting only these destinations are unlikely to be prioritized. Note: BigQuery is deprecated **only as a destination** — it remains a supported source. See the [deprecated connectors documentation](https://github.com/PeerDB-io/peerdb/blob/main/docs/deprecated-connectors.md) for details and migration guidance.
+
+  - type: dropdown
+    id: destination_connector
+    attributes:
+      label: Destination connector
+      description: If this issue relates to a destination connector, select it here (see the deprecation notice above). Leave blank if not applicable.
+      options:
+        - ClickHouse
+        - ClickHouse Cloud
+        - Postgres
+        - S3
+        - Snowflake
+        - BigQuery
+        - ElasticSearch
+        - Kafka
+        - Redpanda
+        - Confluent
+        - Azure Event Hubs
+        - Google Pub/Sub
+        - Other
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,77 @@
+name: Feature request
+description: Suggest a feature or improvement for PeerDB
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting an improvement! Please describe the problem you are trying to solve and what you would like to happen.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem / motivation
+      description: What problem are you trying to solve, and what is the use case?
+      placeholder: When replicating ..., I need ... but currently ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: Describe what you would like to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or workarounds you have considered.
+    validations:
+      required: false
+
+  - type: dropdown
+    id: source_connector
+    attributes:
+      label: Source connector
+      description: If this request relates to a source connector, select it here. Leave blank if not applicable.
+      options:
+        - Postgres
+        - MySQL
+        - MongoDB
+        - BigQuery
+        - Other
+    validations:
+      required: false
+
+  - type: markdown
+    attributes:
+      value: |
+        ### ⚠️ Deprecated destination connectors
+
+        The following destination connectors are **deprecated** and no longer actively maintained: **Snowflake**, **BigQuery**, **ElasticSearch**, **Kafka**, **Redpanda**, **Confluent**, **Azure Event Hubs**, **Google Pub/Sub**, and **S3**. New features for these destinations are unlikely to be prioritized. Note: BigQuery is deprecated **only as a destination** — it remains a supported source. See the [deprecated connectors documentation](https://github.com/PeerDB-io/peerdb/blob/main/docs/deprecated-connectors.md).
+
+  - type: dropdown
+    id: destination_connector
+    attributes:
+      label: Destination connector
+      description: If this request relates to a destination connector, select it here (see the deprecation notice above). Leave blank if not applicable.
+      options:
+        - ClickHouse
+        - ClickHouse Cloud
+        - Postgres
+        - S3
+        - Snowflake
+        - BigQuery
+        - ElasticSearch
+        - Kafka
+        - Redpanda
+        - Confluent
+        - Azure Event Hubs
+        - Google Pub/Sub
+        - Other
+    validations:
+      required: false

.github/labeler.yml

@@ -0,0 +1,53 @@
+# Configuration for actions/labeler@v5.
+# Applies the `deprecated` label to PRs that touch deprecated destination connectors:
+# Snowflake, BigQuery, ElasticSearch, Kafka (incl. Confluent/Redpanda), Azure Event Hubs, Google Pub/Sub, S3.
+# ClickHouse and Postgres (the actively-maintained destinations) are intentionally excluded.
+deprecated:
+  - changed-files:
+      - any-glob-to-any-file:
+          # Destination-only connectors — the whole connector is deprecated.
+          - flow/connectors/snowflake/**
+          - flow/connectors/elasticsearch/**
+          - flow/connectors/eventhub/**
+          - flow/connectors/kafka/**
+          - flow/connectors/pubsub/**
+          - flow/connectors/s3/**
+          # End-to-end tests
+          - flow/e2e/snowflake*.go
+          - flow/e2e/elasticsearch*.go
+          - flow/e2e/eventhub*.go
+          - flow/e2e/kafka*.go
+          - flow/e2e/pubsub*.go
+          - flow/e2e/s3_*.go
+          # UI peer forms
+          - ui/components/PeerForms/SnowflakeForm.tsx
+          - ui/components/PeerForms/ElasticsearchConfigForm.tsx
+          - ui/components/PeerForms/KafkaConfig.tsx
+          - ui/components/PeerForms/PubSubConfig.tsx
+          - ui/components/PeerForms/S3Form.tsx
+          - ui/components/PeerForms/Eventhubs/**
+          # UI peer-create helpers. The literal `[` in the [peerType] dynamic
+          # route segment is escaped as `[[]` so minimatch treats it literally
+          # rather than as a character class.
+          - ui/app/peers/create/[[]peerType]/helpers/sf.ts
+          - ui/app/peers/create/[[]peerType]/helpers/es.ts
+          - ui/app/peers/create/[[]peerType]/helpers/eh.ts
+          - ui/app/peers/create/[[]peerType]/helpers/ka.ts
+          - ui/app/peers/create/[[]peerType]/helpers/ps.ts
+          - ui/app/peers/create/[[]peerType]/helpers/s3.ts
+          # BigQuery is dual-role: only its DESTINATION is deprecated, while its
+          # source is actively maintained and lives in the same directory. List
+          # the destination-specific files explicitly so BigQuery *source*
+          # changes (source.go, source_schema.go, qrep_object_pull.go,
+          # bigquery_source_test.go) are never auto-labeled as deprecated.
+          # (A `!`-negation / `all-globs-to-all-files` block was tried first but
+          # silently disables the whole labeler config in actions/labeler v5.)
+          - flow/connectors/bigquery/bigquery.go
+          - flow/connectors/bigquery/merge_stmt_generator.go
+          - flow/connectors/bigquery/qrep.go
+          - flow/connectors/bigquery/qrep_avro_sync.go
+          - flow/connectors/bigquery/clustering.go
+          - flow/e2e/bigquery_test.go
+          - flow/e2e/bigquery_qrep_test.go
+          - ui/components/PeerForms/BigqueryConfig.tsx
+          - ui/app/peers/create/[[]peerType]/helpers/bq.ts

.github/workflows/auto-retry-flaky-tests.yml

@@ -27,7 +27,7 @@ jobs:
 
       - name: Detect flaky test failures
         id: detect
-        uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # main
+        uses: anthropics/claude-code-action@f87768c6d25f92ae6efa7175e223ef77d4cbf97f # main
         with:
           allowed_bots: 'renovate'
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude-code-review-dependencies-updates.yml

@@ -25,7 +25,7 @@ jobs:
 
       - name: Run Claude Code Review
         id: claude-review
-        uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1
+        uses: anthropics/claude-code-action@f87768c6d25f92ae6efa7175e223ef77d4cbf97f # v1
         with:
           allowed_bots: 'renovate'
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude-code-review.yml

@@ -28,7 +28,7 @@ jobs:
 
       - name: Run Claude Code Review
         id: claude-review
-        uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1
+        uses: anthropics/claude-code-action@f87768c6d25f92ae6efa7175e223ef77d4cbf97f # v1
         with:
           allowed_bots: 'renovate'
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1
+        uses: anthropics/claude-code-action@f87768c6d25f92ae6efa7175e223ef77d4cbf97f # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 

.github/workflows/codeql-analysis.yml

@@ -47,12 +47,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+      uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+      uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
       with:
         category: "/language:${{matrix.language}}"