Merge branch 'master' into fix/issue-1833-sandbox-watch-mode

Author: manast

.github/pull_request_template.md

@@ -1,30 +1,70 @@
 <!--
-  Thank you for submitting a PR! 
+  Thank you for submitting a PR!
   Please fill out all sections below to help us understand your changes.
+
+  PR TITLE FORMAT
+  ───────────────
+  We use Conventional Commits: <type>(<scope>): <description>
+
+  If your change affects one or more ports, append a tag at the end of the
+  PR title (outside the conventional-commit part) to indicate their status:
+
+    [python] / [elixir] / [php] / [rust]
+      → The change is ONLY relevant to that port (Node.js is NOT affected).
+        Multiple ports can be listed: [python][elixir]
+
+    (python) / (elixir) / (php) / (rust)
+      → The change affects that port AND Node.js.
+        Multiple ports can be listed: (python)(php)
+
+  Examples:
+    fix(worker): handle stalled jobs correctly (python)(elixir)
+    docs: update rate-limiting guide [python]
+    feat(queue): add group priority support
+
+  Please check all three ports below before setting your title.
+-->
+
+### Port Impact Checklist
+
+<!--
+  Review each port and tick every box that applies.
+  If a port is not affected at all, leave its box unchecked.
 -->
 
+- [ ] **Python** – does this change need to be ported or documented in the Python library?
+- [ ] **Elixir** – does this change need to be ported or documented in the Elixir library?
+- [ ] **PHP** – does this change need to be ported or documented in the PHP library?
+- [ ] **Rust** – does this change need to be ported or documented in the Rust library?
+
 ### Why
-<!-- 
+
+<!--
   1. Why is this change necessary?
   2. What problem does it solve or improve?
   3. Link to any relevant issues, if applicable.
 -->
+
 _Enter your explanation here._
 
 ### How
+
 <!--
   1. How did you implement this?
   2. Outline the approach or steps taken.
   3. List any resources or documentation that helped you.
 -->
+
 _Enter the implementation details here._
 
 ### Additional Notes (Optional)
+
 <!--
-  Use this space for additional considerations: 
+  Use this space for additional considerations:
   - Potential side effects
-  - Dependencies 
+  - Dependencies
   - Testing instructions
   - Anything else reviewers should know
 -->
+
 _Any extra info here._

.github/workflows/api.yml

@@ -19,7 +19,7 @@ jobs:
           # check out all branches
           fetch-depth: 0
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'yarn'

.github/workflows/codeql-analysis.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4
+        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4
+        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4
+        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4

.github/workflows/elixir-test.yml

@@ -0,0 +1,111 @@
+name: Elixir Tests
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master, next]
+
+concurrency:
+  group: elixir-test-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  changes:
+    runs-on: ubuntu-latest
+    outputs:
+      should_run: ${{ steps.filter.outputs.elixir }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          filters: |
+            elixir:
+              - 'elixir/**'
+              - 'src/commands/**'
+              - '.github/workflows/elixir-test.yml'
+
+  test:
+    needs: changes
+    runs-on: ubuntu-latest
+
+    name: testing elixir@${{ matrix.elixir-version }}, otp@${{ matrix.otp-version }}, redis@${{ matrix.redis-version }}
+
+    strategy:
+      matrix:
+        node-version: [lts/*]
+        elixir-version: ['1.17']
+        otp-version: ['27.x']
+        redis-version: [7-alpine]
+
+    steps:
+      - name: Skip when Elixir files are unchanged
+        if: needs.changes.outputs.should_run != 'true'
+        run: echo "No Elixir-related changes detected; skipping Elixir test steps."
+
+      - name: Checkout repository
+        if: needs.changes.outputs.should_run == 'true'
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Use Node.js ${{ matrix.node-version }}
+        if: needs.changes.outputs.should_run == 'true'
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'yarn'
+
+      - name: Start Redis
+        if: needs.changes.outputs.should_run == 'true'
+        uses: supercharge/redis-github-action@bc274cb7238cd63a45029db04ee48c07a72609fd # 1.8.1
+        with:
+          redis-version: ${{ matrix.redis-version }}
+
+      - if: needs.changes.outputs.should_run == 'true'
+        run: yarn install --ignore-engines --frozen-lockfile --non-interactive
+      - if: needs.changes.outputs.should_run == 'true'
+        run: yarn generate:raw:scripts
+      - if: needs.changes.outputs.should_run == 'true'
+        run: yarn copy:lua:elixir
+
+      - name: Set up Elixir
+        if: needs.changes.outputs.should_run == 'true'
+        uses: erlef/setup-beam@v1
+        with:
+          elixir-version: ${{ matrix.elixir-version }}
+          otp-version: ${{ matrix.otp-version }}
+
+      - name: Restore dependencies cache
+        if: needs.changes.outputs.should_run == 'true'
+        uses: actions/cache@v5
+        with:
+          path: elixir/deps
+          key: ${{ runner.os }}-mix-deps-${{ matrix.elixir-version }}-${{ matrix.otp-version }}-${{ hashFiles('elixir/mix.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-mix-deps-${{ matrix.elixir-version }}-${{ matrix.otp-version }}-
+
+      - name: Install Elixir dependencies
+        if: needs.changes.outputs.should_run == 'true'
+        working-directory: elixir
+        run: |
+          mix local.hex --force
+          mix local.rebar --force
+          mix deps.get
+
+      - name: Compile
+        if: needs.changes.outputs.should_run == 'true'
+        working-directory: elixir
+        run: mix compile --warnings-as-errors
+
+      - name: Run tests
+        if: needs.changes.outputs.should_run == 'true'
+        working-directory: elixir
+        run: mix test --include integration
+
+      - name: Check formatting
+        if: needs.changes.outputs.should_run == 'true'
+        working-directory: elixir
+        run: mix format --check-formatted

.github/workflows/osv-scanner-scheduled.yml

@@ -0,0 +1,23 @@
+name: OSV-Scanner Scan (default branch + schedule)
+
+on:
+  schedule:
+    - cron: '30 12 * * 1'
+  push:
+    branches: [master]
+
+permissions:
+  actions: read
+  security-events: write
+  contents: read
+
+jobs:
+  scan-scheduled:
+    uses: 'google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8'
+    with:
+      # fail the build only on the scheduled full scan, not on every push to master
+      fail-on-vuln: ${{ github.event_name == 'schedule' }}
+      scan-args: |-
+        --config=osv-scanner.toml
+        -r
+        ./

.github/workflows/osv-scanner.yml

@@ -1,24 +1,19 @@
-name: OSV-Scanner Scheduled Scan
+name: OSV-Scanner PR Scan
 
 on:
-  schedule:
-    - cron: '30 12 * * 1'
   pull_request:
     branches: [master]
   merge_group:
     branches: [master]
 
 permissions:
-  # Required to upload SARIF file to CodeQL. See: https://github.com/github/codeql-action/issues/2117
   actions: read
-  # Require writing security events to upload SARIF file to security tab
   security-events: write
-  # Only need to read contents
   contents: read
 
 jobs:
-  scan-scheduled:
-    uses: 'google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.5'
+  scan-pr:
+    uses: 'google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8'
     with:
       scan-args: |-
         --config=osv-scanner.toml

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: '24.14.1'
           cache: 'yarn'
@@ -106,7 +106,9 @@ jobs:
         with:
           python-version: '3.14.3'
           cache: 'pip'
-      - run: yarn copy:lua:python
+      - name: Copy Lua scripts for Python
+        if: ${{ contains(env.commitmsg, '[python]') || contains(env.commitmsg, '(python)') }}
+        run: yarn copy:lua:python
       - name: Install Python dependencies
         run: |
           python -m pip install --upgrade pip
@@ -158,6 +160,7 @@ jobs:
             
             # Add and commit changes (only add files that exist)
             git add pyproject.toml || true
+            git add bullmq/__init__.py || true
             git add ../docs/gitbook/python/changelog.md || true
             
             # Check if there are actually changes to commit after adding
@@ -174,6 +177,7 @@ jobs:
 
               This PR contains:
               - Updated pyproject.toml
+              - Updated __init__.py
               - Updated changelog
               - Updated API documentation (if any)
 
@@ -377,3 +381,90 @@ jobs:
           else
             echo "No changes detected after semantic-release"
           fi
+
+      # Rust Release
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+      - name: Copy Lua scripts for Rust
+        if: ${{ contains(env.commitmsg, '[rust]') || contains(env.commitmsg, '(rust)') }}
+        run: yarn copy:lua:rust
+      - name: Cache Cargo registry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            rust/target
+          key: ${{ runner.os }}-cargo-release-${{ hashFiles('rust/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-release-
+      - name: Install dependencies Rust
+        if: ${{ contains(env.commitmsg, '[rust]') || contains(env.commitmsg, '(rust)') }}
+        working-directory: rust
+        run: yarn install --frozen-lockfile --non-interactive
+      - name: Release Rust
+        id: semantic_release_rust
+        if: ${{ contains(env.commitmsg, '[rust]') || contains(env.commitmsg, '(rust)') }}
+        working-directory: rust
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+        run: npx semantic-release
+      - name: Create PR with Rust release changes
+        if: ${{ success() && steps.semantic_release_rust.outcome == 'success' }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        working-directory: rust
+        run: |
+          # Check if there are any changes to commit
+          if [[ -n $(git status --porcelain) ]]; then
+            # Get the version from Cargo.toml
+            VERSION=$(grep -m 1 '^version' Cargo.toml | cut -d'"' -f2)
+            BRANCH_NAME="release/vrs${VERSION}"
+            
+            echo "Creating PR for release version: vrs${VERSION}"
+            
+            # Create and switch to new branch
+            git checkout -b $BRANCH_NAME
+            
+            # Configure git
+            git config --local user.email "action@github.com"
+            git config --local user.name "GitHub Action"
+            
+            # Add and commit changes
+            git add Cargo.toml || true
+            git add Cargo.lock || true
+            git add CHANGELOG.md || true
+            
+            # Check if there are actually changes to commit after adding
+            if [[ -n $(git diff --cached --name-only) ]]; then
+              git commit -m "chore(release): vrs${VERSION}"
+              
+              # Push the branch
+              git push origin $BRANCH_NAME
+              
+              # Create PR using GitHub CLI
+              gh pr create \
+                --title "chore(release): vrs${VERSION}" \
+                --body "Automated release PR for version vrs${VERSION}
+
+              This PR contains:
+              - Updated rust/Cargo.toml version
+              - Updated rust/Cargo.lock
+              - Updated rust/CHANGELOG.md
+
+              Please review and merge to complete the release process." \
+                --head $BRANCH_NAME \
+                --base master
+              
+              echo "Created PR for release vrs${VERSION}"
+              git checkout origin/master
+            else
+              echo "No changes to commit after staging files"
+              git checkout origin/master
+              git branch -D $BRANCH_NAME
+            fi
+          else
+            echo "No changes detected after semantic-release"
+          fi