release v0.26.1 (dbt package v0.26.1) (#2391)

.github/dependency-review-config.yml

@@ -0,0 +1,45 @@
+# Permissive licenses
+allow-licenses:
+  - MIT
+  - MIT-0
+  - Apache-2.0
+  - BSD-2-Clause
+  - BSD-2-Clause-Views
+  - BSD-3-Clause
+  - ISC
+  - PSF-2.0
+  - Python-2.0
+  - CNRI-Python
+  - 0BSD
+  - BlueOak-1.0.0
+  - CC0-1.0
+  - CC-BY-3.0
+  - CC-BY-4.0
+  - Unlicense
+  - NCSA
+  - ZPL-2.1
+  - HPND-Markus-Kuhn
+  - Artistic-2.0
+  - Artistic-1.0-Perl
+  # Permissive licenses without official SPDX IDs (ScanCode identifiers)
+  - LicenseRef-scancode-public-domain
+  - LicenseRef-scancode-public-domain-disclaimer
+  - LicenseRef-scancode-protobuf
+  # Weak copyleft (LGPL/MPL) — safe as libraries in commercial software
+  - MPL-2.0
+  - LGPL-2.1-only
+  - LGPL-2.1-or-later
+  - LGPL-3.0-only
+  - LGPL-3.0-or-later
+  - LGPL-3.0
+
+fail-on-severity: high
+
+# Packages with GPL in compound license expressions that are actually
+# safe (dual-licensed, LGPL, or CPython license boilerplate).
+# These are exempted individually so that genuinely GPL-only packages
+# are still blocked.
+allow-dependencies-licenses:
+  - pkg:pypi/aiohappyeyeballs
+  - pkg:pypi/lxml
+  - pkg:pypi/typing-extensions

.github/scripts/bump_packages_version.py

@@ -0,0 +1,51 @@
+import os
+import sys
+
+from ruamel.yaml import YAML
+from ruamel.yaml.comments import CommentedMap
+
+PACKAGES_FILE = "./elementary/monitor/dbt_project/packages.yml"
+
+
+def bump_packages_version(version: str) -> None:
+    yaml = YAML()
+    yaml.preserve_quotes = True
+    yaml.indent(mapping=2, sequence=4, offset=2)
+
+    with open(PACKAGES_FILE) as f:
+        data = yaml.load(f)
+
+    packages = data.get("packages") or []
+    elementary_found = False
+    for i, pkg in enumerate(packages):
+        if "git" in pkg and "dbt-data-reliability" in pkg["git"]:
+            new_pkg = CommentedMap()
+            new_pkg["package"] = "elementary-data/elementary"
+            new_pkg["version"] = version
+            packages[i] = new_pkg
+            elementary_found = True
+            break
+        if pkg.get("package") == "elementary-data/elementary":
+            pkg["version"] = version
+            elementary_found = True
+            break
+
+    if not elementary_found:
+        print(
+            "::error::Could not find elementary-data/elementary or "
+            "dbt-data-reliability entry in packages.yml"
+        )
+        sys.exit(1)
+
+    with open(PACKAGES_FILE, "w") as f:
+        yaml.dump(data, f)
+
+    print(f"Updated packages.yml to version {version}")
+
+
+if __name__ == "__main__":
+    version = os.environ.get("PKG_VERSION", "")
+    if not version:
+        print("::error::PKG_VERSION environment variable is not set")
+        sys.exit(1)
+    bump_packages_version(version)

.github/workflows/assign-devin-prs.yml

@@ -0,0 +1,34 @@
+name: Auto-assign Devin PRs
+
+on:
+  pull_request:
+    types: [opened]
+
+permissions: {}
+
+jobs:
+  assign:
+    if: github.actor == 'devin-ai-integration[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      issues: write
+    steps:
+      - name: Extract and assign requesting user
+        uses: actions/github-script@v8
+        with:
+          script: |
+            const body = context.payload.pull_request.body || '';
+            const match = body.match(/Requested by[:\s]*(?:@(\w[\w-]*)|[\w][\w\s]*\(@(\w[\w-]*)\))/);
+            const user = match?.[1] || match?.[2];
+            if (user) {
+              await github.rest.issues.addAssignees({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                assignees: [user]
+              });
+              console.log(`Assigned PR #${context.issue.number} to @${user}`);
+            } else {
+              console.log('Could not determine requesting user from PR description');
+            }

.github/workflows/build-docker-image.yml

@@ -0,0 +1,47 @@
+name: Build Docker image
+on:
+  workflow_dispatch:
+
+permissions: {}
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push-docker-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout Elementary
+        uses: actions/checkout@v6
+
+      - name: Set up QEMU for multi-platform support
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx for multi-platform support
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to the container registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: false
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/bump-version.yml

@@ -20,72 +20,117 @@ on:
         type: string
         required: false
 
+permissions: {}
+
 jobs:
   validate-version:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       validated-cli-version: ${{ steps.validate-cli-input.outputs.cli-validation }}
       default-dbt-package-version: ${{ steps.validate-cli-input.outputs.cli-validation }}
       validated-dbt-package-version: ${{ steps.validate-dbt-package-input.outputs.dbt-package-validation }}
     steps:
       - name: validate cli version input
         id: validate-cli-input
-        run: echo "cli-validation=$(echo ${{ inputs.cli-version }} | sed -n '/^[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/p')" >> $GITHUB_OUTPUT
+        env:
+          CLI_VERSION: ${{ inputs.cli-version }}
+        run: |
+          if [[ "$CLI_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "cli-validation=$CLI_VERSION" >> "$GITHUB_OUTPUT"
+          fi
       - name: validate dbt package version
         if: ${{ inputs.dbt-package-version }}
         id: validate-dbt-package-input
-        run: echo "dbt-package-validation=$(echo ${{ inputs.dbt-package-version }} | sed -n '/^[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/p')" >> $GITHUB_OUTPUT
+        env:
+          DBT_PACKAGE_VERSION: ${{ inputs.dbt-package-version }}
+        run: |
+          if [[ "$DBT_PACKAGE_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "dbt-package-validation=$DBT_PACKAGE_VERSION" >> "$GITHUB_OUTPUT"
+          fi
       - name: echo versions
+        env:
+          CLI_VERSION: ${{ steps.validate-cli-input.outputs.cli-validation }}
+          DBT_PACKAGE_VERSION: ${{ steps.validate-dbt-package-input.outputs.dbt-package-validation }}
         run: |
-          echo "cli version: ${{ steps.validate-cli-input.outputs.cli-validation }}"
-          echo "dbt package version: ${{ steps.validate-dbt-package-input.outputs.dbt-package-validation }}"
+          echo "cli version: $CLI_VERSION"
+          echo "dbt package version: $DBT_PACKAGE_VERSION"
       - name: fail on invalid input
-        if: ${{ steps.validate-cli-input.outputs.cli-validation == '' }}
-        uses: actions/github-script@v6
+        if: ${{ steps.validate-cli-input.outputs.cli-validation == '' || (inputs.dbt-package-version != '' && steps.validate-dbt-package-input.outputs.dbt-package-validation == '') }}
+        uses: actions/github-script@v8
         with:
           script: |
             core.setFailed("Invalid version inputs")
 
   bump-version:
     needs: validate-version
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      CLI_VERSION: ${{ needs.validate-version.outputs.validated-cli-version }}
+      DBT_PACKAGE_VERSION: ${{ needs.validate-version.outputs.validated-dbt-package-version || needs.validate-version.outputs.default-dbt-package-version }}
+      RELEASE_BRANCH: release/v${{ needs.validate-version.outputs.validated-cli-version }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
-      - name: Create release branch
-        run: git checkout -b release/v${{ inputs.cli-version }}
-      - name: Initial config
-        run: |
-          git config user.name "GitHub Actions"
-          git config user.email noreply@github.com
+        uses: actions/checkout@v6
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+      # dbt-core==1.8 is the first dbt version we support
+      - name: Install dependencies
+        run: pip install "dbt-core==1.8" "ruamel.yaml==0.18.10"
       - name: Bump version
         run: |
-          sed -i 's/^version = "[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*"/version = "${{ inputs.cli-version }}"/' ./pyproject.toml
-      - name: Bump version for package (using input)
-        if: ${{ needs.validate-version.outputs.validated-dbt-package-version != ''}}
+          sed -i "s/^version = \"[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*\"/version = \"$CLI_VERSION\"/" ./pyproject.toml
+      - name: Bump dbt package version
+        env:
+          PKG_VERSION: ${{ env.DBT_PACKAGE_VERSION }}
         run: |
-          sed -i 's/version: [0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/version: ${{ needs.validate-version.outputs.validated-dbt-package-version }}/' ./elementary/monitor/dbt_project/packages.yml
-          sed -i 's/version: [0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/version: ${{ needs.validate-version.outputs.validated-dbt-package-version }}/' ./docs/_snippets/quickstart-package-install.mdx
-      - name: Bump version for package (using default)
-        if: ${{ needs.validate-version.outputs.validated-dbt-package-version == ''}}
-        run: |
-          sed -i 's/version: [0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/version: ${{ needs.validate-version.outputs.default-dbt-package-version }}/' ./elementary/monitor/dbt_project/packages.yml
-          sed -i 's/version: [0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/version: ${{ needs.validate-version.outputs.default-dbt-package-version }}/' ./docs/_snippets/quickstart-package-install.mdx
-      - name: Commit changes
-        run: git commit -am "release v${{ inputs.cli-version }}"
-      - name: Push code
-        run: git push origin release/v${{ inputs.cli-version }}
+          python .github/scripts/bump_packages_version.py
+          dbt deps --lock --project-dir elementary/monitor/dbt_project
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v8.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ env.RELEASE_BRANCH }}
+          base: master
+          commit-message: "release v${{ env.CLI_VERSION }} (dbt package v${{ env.DBT_PACKAGE_VERSION }})"
+          title: "Release v${{ env.CLI_VERSION }} (dbt package v${{ env.DBT_PACKAGE_VERSION }})"
+          body: "Opened automatically using bump version workflow"
 
-  create-pr:
-    needs: bump-version
+  update-docs-branch:
+    needs: validate-version
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      DBT_PACKAGE_VERSION: ${{ needs.validate-version.outputs.validated-dbt-package-version || needs.validate-version.outputs.default-dbt-package-version }}
+      DOCS_RELEASE_BRANCH: release/docs-v${{ needs.validate-version.outputs.validated-cli-version }}
     steps:
-      - uses: actions/checkout@v3
-      - name: create pull request
-        uses: repo-sync/pull-request@v2
+      - name: Checkout docs branch
+        uses: actions/checkout@v6
+        with:
+          ref: docs
+      - name: Bump dbt package
+        run: |
+          files=(
+            docs/snippets/quickstart-package-install.mdx
+            docs/data-tests/dbt/upgrade-package.mdx
+          )
+          for file in "${files[@]}"; do
+            sed -i "s/version: [0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$/version: $DBT_PACKAGE_VERSION/" "./$file"
+          done
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v8.0.0
         with:
-          source_branch: "release/v${{ inputs.cli-version }}"
-          destination_branch: "master"
-          pr_title: "release/v${{ inputs.cli-version }}"
-          pr_body: "Open automatically using bump version workflow"
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ env.DOCS_RELEASE_BRANCH }}
+          base: docs
+          commit-message: "docs: bump package version to v${{ env.DBT_PACKAGE_VERSION }}"
+          title: "Docs: bump dbt package to v${{ env.DBT_PACKAGE_VERSION }}"
+          body: "Opened automatically using bump version workflow"