Merge pull request #3288 from emqx/20251222-sync-release-6.0

sync release-6.0

Author: Meggielqk

.github/workflows/auto-translate-issues.yaml

@@ -17,7 +17,7 @@ jobs:
   translate:
     runs-on: ubuntu-latest
     steps:
-    - uses: emqx/translate-issue-action@59470e9ed84de890a81a4a3ac10d0a45a2ed5d03 # v1.0.3
+    - uses: emqx/translate-issue-action@ac780c33a803ed87b694108fd709e4251569ec8c # v1.0.5
       with:
         issue_number: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.issue_number || github.event.issue.number }}
         gemini_api_key: ${{ secrets.GEMINI_API_KEY }}

.github/workflows/check_markdown.yaml

@@ -1,13 +1,21 @@
 name: Check Docs
 
-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - 'release-[0-9].[0-9]'
+      - 'release-[0-9].[0-9][0-9]'
+  pull_request:
+    branches:
+      - 'release-[0-9].[0-9]'
+      - 'release-[0-9].[0-9][0-9]'
 
 jobs:
   markdown_check:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
     - name: check markdown
       run: |
@@ -16,11 +24,14 @@ jobs:
         markdownlint -c .github/workflows/markdown_config.json ./zh_CN
         markdownlint -c .github/workflows/markdown_config.json ./ja_JP
 
+    - name: Spell Check Repo
+      uses: crate-ci/[email protected]
+
   directory_check:
     runs-on: ubuntu-latest
     steps:
     - name: check out code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
     - name: check directory config
       run: |

.github/workflows/deploy_docs.yaml

@@ -5,6 +5,9 @@ on:
     tags:
       - v*
   pull_request:
+    branches:
+      - 'release-[0-9].[0-9]'
+      - 'release-[0-9].[0-9][0-9]'
 
 jobs:
   prepare:
@@ -13,7 +16,7 @@ jobs:
       versions: ${{ steps.set_environment.outputs.versions }}
       docs_types: ${{ steps.set_environment.outputs.docs_types }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
 
@@ -52,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: clone docs
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         fetch-depth: 0
         path: docs-files
@@ -72,7 +75,7 @@ jobs:
         owner: ${{ github.repository_owner }}
 
     - name: clone frontend
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         repository: 'emqx/docs-emqx-com-frontend'
         ref: next
@@ -204,7 +207,7 @@ jobs:
 
     - name: set aws credentials
       if: github.event_name == 'push'
-      uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+      uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
       with:
         aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

.github/workflows/openhands-resolver.yaml

@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           repository: All-Hands-AI/OpenHands
           ref: 0.39.1
@@ -67,7 +67,7 @@ jobs:
           cat /tmp/requirements.txt
 
       - name: Cache pip dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ${{ env.pythonLocation }}/lib/python3.12/site-packages/*
           key: ${{ runner.os }}-pip-openhands-resolver-${{ hashFiles('/tmp/requirements.txt') }}
@@ -123,7 +123,7 @@ jobs:
           fi
 
       - name: Upload output.jsonl as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         if: always() # Upload even if the previous steps fail
         with:
           name: resolver-output

.github/workflows/pr-checks.yaml

@@ -2,7 +2,9 @@ name: PR Checks
 
 on:
   pull_request:
-
+    branches:
+      - 'release-[0-9].[0-9]'
+      - 'release-[0-9].[0-9][0-9]'
 jobs:
   pr-checks:
     runs-on: ubuntu-latest

.github/workflows/translate_to_ja.yaml

@@ -42,7 +42,7 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           token: ${{ steps.app-token.outputs.token }}
           fetch-depth: 0

.github/workflows/update-api-and-cfg-manual.yaml

@@ -33,7 +33,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Generate GitHub App token
         id: app-token
@@ -45,7 +45,7 @@ jobs:
           repositories: |
             emqx
 
-      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           pattern: "emqx*-schema-dump"
           repository: "emqx/emqx"
@@ -91,7 +91,7 @@ jobs:
           done
           gh pr create --title "update api docs and configuration manual for ${VERSION}" --body '' --base ${BASE_BRANCH} --head ${NEW_BRANCH} --label update-api-cfg --repo ${{ github.repository }}
 
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: "swagger"
           path: |

.github/workflows/update-changelog.yaml

@@ -30,7 +30,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Generate GitHub App token
         id: app-token
@@ -40,7 +40,7 @@ jobs:
           private-key: ${{ secrets.AUTH_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
 
-      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: changes
           repository: emqx/emqx

_typos.toml

@@ -0,0 +1,51 @@
+[default]
+extend-ignore-re = [
+  "[A-Fa-f0-9]{8,}",                # hexadecimal tokens
+  "[A-Za-z0-9+/=]{12,}",           # base64-like random blobs
+  "([A-Z0-9]{2,}-){2,}[A-Z0-9]+",  # cipher suites (PSK-3DES-EDE-CBC-SHA)
+  "([A-Za-z]{2,}_){1,}[A-Za-z]+"   # snake_case config fields (may contain abbreviations)
+]
+extend-ignore-words-re = ["^custome$"]
+
+[default.extend-words]
+# EMQX specific terms
+emqx = "emqx"
+kuiper = "kuiper"
+neuron = "neuron"
+mqtt = "mqtt"
+suback = "suback"
+puback = "puback"
+qos = "qos"
+mosquitto = "mosquitto"
+alis = "alis"
+wxs = "wxs" 
+
+# Technical jargon
+k8s = "k8s"
+auth = "auth"
+repo = "repo"
+schemas = "schemas"
+
+# Ordinal numbers
+1st = "1st"
+2nd = "2nd"
+3rd = "3rd"
+
+# Words that appeared in false positives
+succee = "succee"
+smal = "smal"
+siz = "siz"
+iif = "iif"
+EACG = "EACG"
+EDE = "EDE"
+HPE = "HPE"
+AKS = "AKS"
+aks = "aks"
+TKE = "TKE"
+Sur = "Sur"
+
+[default.extend-identifiers]
+iif = "iif"
+
+[files]
+extend-exclude = ["redocly", "cfg-manual-docgen", "hocon"]

current-version.env

@@ -1,4 +1,4 @@
 EE_VERSION=6.0.1
-CE_VERSION=5.9.0
+CE_VERSION=5.8.8
 EE_MINOR_VERSION=6.0
-CE_MINOR_VERSION=5.9
+CE_MINOR_VERSION=5.8