Merge branch 'main' into customer-mysql-cdc-keepalive

Author: ilidemi

.claude/CLAUDE.md

@@ -8,3 +8,7 @@ See `docs/` for detailed architecture and design documents:
 
 - `docs/peerdb-architecture.md` — Architecture overview: system components, connector matrix, data flows (CDC, QRep, snapshot), type system, configuration, and observability.
 - `docs/deep-dive-design-document.md` — Implementation-level deep dive: code-level details for each CDC connector, normalization engine, snapshot system, workflow orchestration, and known limitations.
+
+## GitHub interactions
+
+- NEVER modify PR descriptions or titles. Always report actions and changes as PR comments instead.

.env.example

@@ -0,0 +1,42 @@
+CI_MONGO_HOST=host.docker.internal
+CI_MONGO_PORT=11017
+CI_MONGO_ADMIN_URI=mongodb://host.docker.internal:11017
+CI_MONGO_ADMIN_USERNAME=admin
+CI_MONGO_ADMIN_PASSWORD=admin
+CI_MONGO_URI=mongodb://host.docker.internal:11017
+CI_MONGO_USERNAME=csuser
+CI_MONGO_PASSWORD=cspass
+
+CI_CLICKHOUSE_HOST=host.docker.internal
+CI_CLICKHOUSE_HTTP_PORT=11123
+CI_CLICKHOUSE_NATIVE_PORT=11000
+
+CI_MYSQL_HOST=host.docker.internal
+CI_MYSQL_GTID_PORT=3306
+CI_MYSQL_POS_PORT=3307
+CI_MARIADB_PORT=3308
+CI_MYSQL_ROOT_PASSWORD=cipass
+CI_MYSQL_VERSION=mysql-gtid
+
+CI_MYSQL_PORT=3306 # Default is gtid
+
+PG_HOST=host.docker.internal
+PG_PORT=5436
+PG_USER=postgres
+PG_PASSWORD=postgres
+PG_DATABASE=postgres
+
+PEERDB_CATALOG_HOST=host.docker.internal
+PEERDB_CATALOG_PORT=9901
+PEERDB_CATALOG_USER=postgres
+PEERDB_CATALOG_PASSWORD=postgres
+PEERDB_CATALOG_DATABASE=postgres
+
+AWS_REGION=us-east-1
+AWS_ACCESS_KEY_ID=_peerdb_minioadmin
+AWS_SECRET_ACCESS_KEY=_peerdb_minioadmin
+AWS_ENDPOINT_URL_S3=http://host.docker.internal:9001
+AWS_EC2_METADATA_DISABLED="true"
+
+MINIO_ROOT_USER=_peerdb_minioadmin
+MINIO_ROOT_PASSWORD=_peerdb_minioadmin

.github/workflows/auto-retry-flaky-tests.yml

@@ -27,7 +27,7 @@ jobs:
 
       - name: Detect flaky test failures
         id: detect
-        uses: anthropics/claude-code-action@88c168b39e7e64da0286d812b6e9fbebb6708185 # main
+        uses: anthropics/claude-code-action@6cad158a175744eb2e76f7f5fd108ec63145598c # main
         with:
           allowed_bots: 'renovate'
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude-code-review.yml

@@ -28,7 +28,7 @@ jobs:
 
       - name: Run Claude Code Review
         id: claude-review
-        uses: anthropics/claude-code-action@88c168b39e7e64da0286d812b6e9fbebb6708185 # v1
+        uses: anthropics/claude-code-action@6e2bd52842c65e914eba5c8badd17560bd26b5de # v1
         with:
           allowed_bots: 'renovate'
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/claude.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@88c168b39e7e64da0286d812b6e9fbebb6708185 # v1
+        uses: anthropics/claude-code-action@6e2bd52842c65e914eba5c8badd17560bd26b5de # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 

.github/workflows/customer-docker.yml

@@ -26,7 +26,7 @@ jobs:
       - uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: ghcr.io
           username: ${{github.actor}}

.github/workflows/dev-docker.yml

@@ -33,7 +33,7 @@ jobs:
       - uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: ghcr.io
           username: ${{github.actor}}

.github/workflows/flow.yml

@@ -3,10 +3,18 @@ name: Flow build and test
 on:
   pull_request:
     branches: [main]
+    # Ignore changes to files that don't require builds or validations.
+    # If more complex build avoidance is required, or for other events than pull_request, push, and pull_request_target,
+    # replace this with a gate step in the job.
+    paths-ignore: &ignore_paths
+        - '.claude/**'
+        - 'README.md'
   push:
     branches: [main]
+    paths-ignore: *ignore_paths
   pull_request_target:
     branches: [main]
+    paths-ignore: *ignore_paths
 
 permissions:
   id-token: write
@@ -46,7 +54,7 @@ jobs:
           --health-timeout 5s
           --health-retries 5
       redpanda:
-        image: redpandadata/redpanda@sha256:48345e234472429b87cb4737fe11938ee8009774f818c9b6d8456aa2784f9c29
+        image: redpandadata/redpanda@sha256:65a7a93449f113a2941e0e8a9cd7eb1ed3ba153547b6b2b47f11796e9f754345
         ports:
           - 9092:9092
           - 9644:9644
@@ -59,7 +67,7 @@ jobs:
           xpack.security.enabled: false
           xpack.security.enrollment.enabled: false
       otelcol:
-        image: otel/opentelemetry-collector-contrib:0.148.0@sha256:8164eab2e6bca9c9b0837a8d2f118a6618489008a839db7f9d6510e66be3923c
+        image: otel/opentelemetry-collector-contrib:0.149.0@sha256:0fba96233274f6d665ac8831ad99dfe6479a9a20459f6e2719c0d20945773b46
         ports:
           - 4317:4317
       toxiproxy:
@@ -78,7 +86,7 @@ jobs:
           - 49002:49002
           - 49003:49003
       openssh:
-        image: linuxserver/openssh-server:latest@sha256:f8e221e7dce7979a0110d13451e0be8d539b86d818c0fb7c71c5271ddf32f3bf
+        image: linuxserver/openssh-server:latest@sha256:57c13941ef385d735cca18ee969eeba18e42ab95480c97af2182505aacdfe307
         ports:
           - 2222:2222
         env:
@@ -482,6 +490,11 @@ jobs:
           PEERDB_CATALOG_USER: postgres
           PEERDB_CATALOG_PASSWORD: postgres
           PEERDB_CATALOG_DATABASE: postgres
+          PG_HOST: localhost
+          PG_PORT: 5432
+          PG_USER: postgres
+          PG_PASSWORD: postgres
+          PG_DATABASE: postgres
           PEERDB_SWITCHBOARD_ENABLED: "true"
           PEERDB_QUEUE_FORCE_TOPIC_CREATION: "true"
           ELASTICSEARCH_TEST_ADDRESS: http://localhost:9200

.github/workflows/stable-docker.yml

@@ -23,7 +23,7 @@ jobs:
       - uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
         with:
           registry: ghcr.io
           username: ${{github.actor}}

.github/workflows/update-docker-compose-stable.yaml

@@ -97,7 +97,7 @@ jobs:
           git diff --exit-code || echo "changes=true" >> "$GITHUB_OUTPUT"
       - name: Get next version
         if: ${{ steps.update-peerdb-version.outputs.changes == 'true' }}
-        uses: reecetech/version-increment@2024.10.1
+        uses: reecetech/version-increment@a29aa752dc3b8118a2dc2ed93faf0e95a73a9c7e # 2024.10.1
         id: version
         with:
           scheme: semver