backport #8541 - release 14.0

.devcontainer/requirements.txt

@@ -1,9 +1,9 @@
-black==24.3.0
+black==26.3.1
 click==8.1.7
 isort==5.12.0
 mypy-extensions==1.0.0
 packaging==23.2
-pathspec==0.11.2
+pathspec==1.0.0
 platformdirs==4.0.0
 tomli==2.0.1
 typing_extensions==4.8.0

.devcontainer/src/test/regress/Pipfile

@@ -4,33 +4,33 @@ url = "https://pypi.python.org/simple"
 verify_ssl = true
 
 [packages]
-mitmproxy = {git = "https://github.com/citusdata/mitmproxy.git", ref = "main"}
+mitmproxy = {git = "https://github.com/citusdata/mitmproxy.git", ref = "70bad9a3c098f605e5f8b25553e5db5334018ff1"}
 "aioquic" = ">=1.2.0,<1.3.0"
 "mitmproxy-rs" = ">=0.12.6,<0.13.0"
 argon2-cffi = ">=23.1.0"
 bcrypt = ">=4.1.2"
 brotli = "<=1.2.0"
 h11 = "==0.16.0"
 h2 = "==4.3.0"
-tornado = ">=6.5.1,<6.6.0"
+tornado = ">=6.5.5,<6.6.0"
 zstandard = ">=0.25.0"
 construct = "*"
 docopt = "==0.6.2"
-cryptography = "==44.0.3"
-pytest = "*"
+cryptography = "==46.0.7"
+pytest = "==9.0.3"
 psycopg = "*"
 filelock = "*"
 pytest-asyncio = "*"
 pytest-timeout = "*"
 pytest-xdist = "*"
 pytest-repeat = "*"
 pyyaml = "*"
-werkzeug = "==3.1.4"
+werkzeug = "==3.1.6"
 "typing-extensions" = ">=4.13.2,<5"
 pyperclip = "==1.9.0"
 
 [dev-packages]
-black = "==24.10.0"
+black = "==26.3.1"
 isort = "*"
 flake8 = "*"
 flake8-bugbear = "*"

.github/actions/save_logs_and_results/action.yml

@@ -6,7 +6,7 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: actions/upload-artifact@v4.6.0
+  - uses: actions/upload-artifact@v5
     name: Upload logs
     with:
       name: ${{ inputs.folder }}

.github/actions/setup_extension/action.yml

@@ -17,7 +17,7 @@ runs:
           echo "PG_MAJOR=${{ inputs.pg_major }}" >> $GITHUB_ENV
         fi
     shell: bash
-  - uses: actions/download-artifact@v4.1.8
+  - uses: actions/download-artifact@v5
     with:
       name: build-${{ env.PG_MAJOR }}
   - name: Install Extension

.github/actions/upload_coverage/action.yml

@@ -7,7 +7,7 @@ inputs:
 runs:
   using: composite
   steps:
-  - uses: codecov/codecov-action@v3
+  - uses: codecov/codecov-action@v5
     with:
       flags: ${{ inputs.flags }}
       token: ${{ inputs.codecov_token }}

.github/workflows/build_and_test.yml

@@ -3,6 +3,10 @@ run-name: Build & Test - ${{ github.event.pull_request.title || github.ref_name
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
+env:
+  # Opt JavaScript actions (e.g. actions/checkout@v5, actions/upload-artifact@v5)
+  # into Node.js 24 early to silence the Node 20 deprecation warning.
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 on:
   workflow_dispatch:
     inputs:
@@ -32,7 +36,7 @@ jobs:
       style_checker_image_name: "ghcr.io/citusdata/stylechecker"
       style_checker_tools_version: "0.8.33"
       sql_snapshot_pg_version: "18.3"
-      image_suffix: "-vac4338a"
+      image_suffix: "-v4271d84"
       pg16_version: '{ "major": "16", "full": "16.13" }'
       pg17_version: '{ "major": "17", "full": "17.9" }'
       pg18_version: '{ "major": "18", "full": "18.3" }'
@@ -48,7 +52,7 @@ jobs:
       image: ${{ needs.params.outputs.build_image_name }}:${{ needs.params.outputs.sql_snapshot_pg_version }}${{ needs.params.outputs.image_suffix }}
       options: --user root
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Check Snapshots
       run: |
         git config --global --add safe.directory ${GITHUB_WORKSPACE}
@@ -62,7 +66,7 @@ jobs:
     - name: Check Snapshots
       run: |
         git config --global --add safe.directory ${GITHUB_WORKSPACE}
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
     - name: Check C Style
@@ -118,14 +122,14 @@ jobs:
       image: "${{ matrix.image_name }}:${{ fromJson(matrix.pg_version).full }}${{ matrix.image_suffix }}"
       options: --user root
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Expose $PG_MAJOR to Github Env
       run: echo "PG_MAJOR=${PG_MAJOR}" >> $GITHUB_ENV
       shell: bash
     - name: Build
       run: "./ci/build-citus.sh"
       shell: bash
-    - uses: actions/upload-artifact@v4.6.0
+    - uses: actions/upload-artifact@v5
       with:
         name: build-${{ env.PG_MAJOR }}
         path: |-
@@ -200,8 +204,8 @@ jobs:
       make_targets: '["check-split", "check-multi", "check-multi-1", "check-isolation", "check-operations", "check-follower-cluster", "check-add-backup-node", "check-columnar", "check-columnar-isolation", "check-enterprise", "check-enterprise-isolation", "check-enterprise-isolation-logicalrep-1", "check-enterprise-isolation-logicalrep-2", "check-enterprise-isolation-logicalrep-3"]'
       image_suffix: ${{ needs.params.outputs.image_suffix }}
       image_name: ${{ needs.params.outputs.test_image_name }}
-      citus_libdir: "/opt/citus-versions/v14.0.0"
-      citus_libdir_label: "v14.0.0"
+      citus_libdir: "/opt/citus-versions/v14.0.1"
+      citus_libdir_label: "v14.0.1"
       n_1_mode: "all"
     secrets:
       codecov_token: ${{ secrets.CODECOV_TOKEN }}
@@ -238,8 +242,8 @@ jobs:
       image_suffix: ${{ needs.params.outputs.image_suffix }}
       image_name: ${{ needs.params.outputs.test_image_name }}
       citus_version: "14.0-1"
-      citus_libdir: "/opt/citus-versions/v14.0.0"
-      citus_libdir_label: "v14.0.0"
+      citus_libdir: "/opt/citus-versions/v14.0.1"
+      citus_libdir_label: "v14.0.1"
       n_1_mode: "workeronly"
     secrets:
       codecov_token: ${{ secrets.CODECOV_TOKEN }}
@@ -258,8 +262,8 @@ jobs:
       image_suffix: ${{ needs.params.outputs.image_suffix }}
       image_name: ${{ needs.params.outputs.test_image_name }}
       citus_version: "14.0-1"
-      citus_libdir: "/opt/citus-versions/v14.0.0"
-      citus_libdir_label: "v14.0.0"
+      citus_libdir: "/opt/citus-versions/v14.0.1"
+      citus_libdir_label: "v14.0.1"
       n_1_mode: "coordinatoronly"
     secrets:
       codecov_token: ${{ secrets.CODECOV_TOKEN }}
@@ -283,7 +287,7 @@ jobs:
           - ${{ needs.params.outputs.pg18_version }}
         parallel: [0,1,2,3,4,5] # workaround for running 6 parallel jobs
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: "./.github/actions/setup_extension"
     - name: Test arbitrary configs
       run: |-
@@ -335,7 +339,7 @@ jobs:
       old_pg_major: ${{ matrix.old_pg_major }}
       new_pg_major: ${{ matrix.new_pg_major }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: "./.github/actions/setup_extension"
       with:
         pg_major: "${{ env.old_pg_major }}"
@@ -389,7 +393,7 @@ jobs:
           - ${{ needs.params.outputs.pg16_version }}
           - ${{ needs.params.outputs.pg17_version }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: "./.github/actions/setup_extension"
       with:
         skip_installation: true
@@ -433,12 +437,12 @@ jobs:
     needs:
     - build
     steps:
-    - uses: actions/checkout@v4
-    - uses: azure/login@v1
+    - uses: actions/checkout@v5
+    - uses: azure/login@v2
       with:
         creds: ${{ secrets.AZURE_CREDENTIALS }}
     - name: install dependencies and run ch_benchmark tests
-      uses: azure/CLI@v1
+      uses: azure/cli@v2
       with:
         inlineScript: |
           cd ./src/test/hammerdb
@@ -451,12 +455,12 @@ jobs:
     needs:
     - build
     steps:
-    - uses: actions/checkout@v4
-    - uses: azure/login@v1
+    - uses: actions/checkout@v5
+    - uses: azure/login@v2
       with:
         creds: ${{ secrets.AZURE_CREDENTIALS }}
     - name: install dependencies and run tpcc_benchmark tests
-      uses: azure/CLI@v1
+      uses: azure/cli@v2
       with:
         inlineScript: |
           cd ./src/test/hammerdb
@@ -470,7 +474,7 @@ jobs:
     outputs:
       json: ${{ steps.parallelization.outputs.json }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: "./.github/actions/parallelization"
         id: parallelization
         with:
@@ -483,7 +487,7 @@ jobs:
     outputs:
       tests: ${{ steps.detect-regression-tests.outputs.tests }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
     - name: Detect regression tests need to be ran
@@ -538,8 +542,8 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.prepare_parallelization_matrix_32.outputs.json) }}
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/download-artifact@v4.1.8
+    - uses: actions/checkout@v5
+    - uses: actions/download-artifact@v5
     - uses: "./.github/actions/setup_extension"
     - name: Run minimal tests
       run: |-

.github/workflows/codeql.yml

@@ -1,5 +1,8 @@
 name: "CodeQL"
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
 on:
   schedule:
     - cron: '59 23 * * 6'
@@ -21,7 +24,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4

.github/workflows/devcontainer.yml

@@ -7,6 +7,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
 on:
   push:
     paths:
@@ -34,7 +37,7 @@ jobs:
             type=sha
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
       -
         name: 'Login to GitHub Container Registry'
         uses: docker/login-action@v3

.github/workflows/flaky_test_debugging.yml

@@ -3,6 +3,8 @@ run-name: Flaky test debugging - ${{ inputs.flaky_test }} (${{ inputs.flaky_test
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 on:
   workflow_dispatch:
     inputs:
@@ -28,13 +30,13 @@ jobs:
       image: ${{ vars.build_image_name }}:${{ vars.pg16_version  }}${{ vars.image_suffix }}
       options: --user root
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Configure, Build, and Install
       run: |
         echo "PG_MAJOR=${PG_MAJOR}" >> $GITHUB_ENV
         ./ci/build-citus.sh
       shell: bash
-    - uses: actions/upload-artifact@v4.6.0
+    - uses: actions/upload-artifact@v5
       with:
         name: build-${{ env.PG_MAJOR }}
         path: |-
@@ -46,7 +48,7 @@ jobs:
     outputs:
       json: ${{ steps.parallelization.outputs.json }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: "./.github/actions/parallelization"
         id: parallelization
         with:
@@ -67,7 +69,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.prepare_parallelization_matrix.outputs.json) }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: "./.github/actions/setup_extension"
     - name: Run minimal tests
       run: |-

.github/workflows/packaging-test-pipelines.yml

@@ -1,5 +1,8 @@
 name: Build tests in packaging images
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
 on:
   pull_request:
     types: [opened, reopened,synchronize]
@@ -19,7 +22,7 @@ jobs:
       pg_versions: ${{ steps.get-postgres-versions.outputs.pg_versions }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 2
       - name: Get Postgres Versions
@@ -58,7 +61,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set Postgres and python parameters for rpm based distros
         run: |
@@ -133,7 +136,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set pg_config path and python parameters for deb based distros
         run: |

.github/workflows/run_tests.yml

@@ -1,4 +1,6 @@
 name: Run Tests
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 on:
   workflow_call:
     inputs:
@@ -55,7 +57,7 @@ jobs:
         --cap-add=SYS_NICE
         --security-opt seccomp=unconfined
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: "./.github/actions/setup_extension"
       - name: Fix PostgreSQL library permissions for symlink setup
         if: ${{ inputs.citus_libdir != '' }}