Merge remote-tracking branch 'upstream/main' into update_cel

Change-Id: I3a8d31480d66de9a95a0be716b69d4b98e2b5d6f
kyessenov · Mar 25, 2024 · 5684394 · 5684394
2 parents e335ff4 + ecb8d8d
commit 5684394
Show file tree

Hide file tree

Showing 480 changed files with 10,490 additions and 4,795 deletions.
diff --git a/.github/config.yml b/.github/config.yml
@@ -172,6 +172,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-android-all:
@@ -181,6 +182,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
     push: never
@@ -191,6 +193,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-asan:
@@ -200,6 +203,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-cc:
@@ -209,6 +213,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-compile-time-cc:
@@ -221,6 +226,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-coverage:
@@ -230,19 +236,22 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-core:
     paths:
     - "**/*"
     - "*"
+    - mobile/.bazelrc
   mobile-format:
     paths:
     - .bazelrc
     - .bazelversion
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-ios:
@@ -252,6 +261,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-ios-all:
@@ -261,6 +271,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
     push: never
@@ -271,6 +282,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-perf:
@@ -280,6 +292,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-release-validation:
@@ -289,6 +302,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   mobile-tsan:
@@ -298,6 +312,7 @@ run:
     - .github/config.yml
     - bazel/external/quiche.BUILD
     - bazel/repository_locations.bzl
+    - mobile/.bazelrc
     - mobile/**/*
     - tools/code_format/check_format.py
   precheck-deps:

diff --git a/.github/workflows/_cache.yml b/.github/workflows/_cache.yml
@@ -29,7 +29,7 @@ on:
 # For a job that does, you can restore with something like:
 #
 #    steps:
-#    - uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].27
+#    - uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].29
 #      with:
 #        key: "${{ needs.env.outputs.build-image }}"
 #
@@ -39,28 +39,28 @@ jobs:
   docker:
     runs-on: ubuntu-22.04
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: appauth
       name: Appauth (mutex lock)
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].29
       id: docker
       name: Prime Docker cache (${{ inputs.image-tag }})
       with:
         image-tag: ${{ inputs.image-tag }}
         lock-token: ${{ steps.appauth.outputs.token }}
         lock-repository: ${{ inputs.lock-repository }}
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: data
       name: Cache data
       with:
         input-format: yaml
         input: |
           cached: ${{ steps.docker.outputs.cached }}
           key: ${{ inputs.image-tag }}
-    - uses: envoyproxy/toolshed/gh-actions/json/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/json/[email protected].29
       name: Summary
       with:
         json: ${{ steps.data.outputs.value }}

diff --git a/.github/workflows/_finish.yml b/.github/workflows/_finish.yml
@@ -36,7 +36,7 @@ jobs:
       actions: read
       contents: read
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Incoming data
       id: needs
       with:
@@ -87,21 +87,21 @@ jobs:
                    summary: "Check has finished",
                    text: $text}}}}
 
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Print summary
       with:
         input: ${{ toJSON(steps.needs.outputs.value).summary-title }}
         filter: |
           "## \(.)"
         options: -Rr
         output-path: GITHUB_STEP_SUMMARY
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       name: Update check
       with:
         action: update

diff --git a/.github/workflows/_load.yml b/.github/workflows/_load.yml
@@ -91,7 +91,7 @@ jobs:
     # Handle any failure in triggering job
     # Remove any `checks` we dont care about
     # Prepare a check request
-    - uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].29
       name: Load env
       id: data
       with:
@@ -102,21 +102,21 @@ jobs:
         GH_TOKEN: ${{ github.token }}
 
     #  Update the check
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       name: Update check
       if: ${{ fromJSON(steps.data.outputs.data).data.check.action == 'RUN' }}
       with:
         action: update
         checks: ${{ toJSON(fromJSON(steps.data.outputs.data).checks) }}
         token: ${{ steps.appauth.outputs.token }}
 
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Print request summary
       with:
         input: |
@@ -136,7 +136,7 @@ jobs:
           | $summary.summary as $summary
           | "${{ inputs.template-request-summary }}"
 
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: request-output
       name: Load request
       with:

diff --git a/.github/workflows/_load_env.yml b/.github/workflows/_load_env.yml
@@ -63,18 +63,18 @@ jobs:
       request: ${{ steps.env.outputs.data }}
       trusted: true
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       id: checkout
       name: Checkout Envoy repository
     - name: Generate environment variables
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/[email protected].29
       id: env
       with:
         branch-name: ${{ inputs.branch-name }}
@@ -86,7 +86,7 @@ jobs:
 
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].29
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}

diff --git a/.github/workflows/_mobile_container_ci.yml b/.github/workflows/_mobile_container_ci.yml
@@ -147,6 +147,7 @@ jobs:
       steps-pre: ${{ inputs.steps-pre }}
       steps-post: ${{ inputs.steps-post }}
       target: ${{ inputs.target }}
+      timeout-minutes: ${{ inputs.timeout-minutes }}
       trusted: ${{ fromJSON(inputs.request).request.trusted }}
       upload-name: ${{ inputs.upload-name }}
       upload-path: ${{ inputs.upload-path }}

diff --git a/.github/workflows/_precheck_deps.yml b/.github/workflows/_precheck_deps.yml
@@ -55,4 +55,4 @@ jobs:
         ref: ${{ fromJSON(inputs.request).request.sha }}
         persist-credentials: false
     - name: Dependency Review
-      uses: actions/dependency-review-action@9129d7d40b8c12c1ed0f60400d00c92d437adcce  # v4.1.3
+      uses: actions/dependency-review-action@733dd5d4a5203f238c33806593ec0f5fc5343d8c  # v4.2.4
diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
@@ -40,14 +40,14 @@ jobs:
       env: ${{ steps.data.outputs.value }}
       config: ${{ steps.config.outputs.config }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       id: checkout
       name: Checkout Envoy repository
       with:
@@ -60,7 +60,7 @@ jobs:
     # *ALL* variables collected should be treated as untrusted and should be sanitized before
     # use
     - name: Generate environment variables from commit
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/[email protected].29
       id: env
       with:
         branch-name: ${{ steps.checkout.outputs.branch-name }}
@@ -71,7 +71,7 @@ jobs:
         vars: ${{ toJSON(vars) }}
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/github/env/[email protected].29
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}
@@ -87,7 +87,7 @@ jobs:
         target-branch: ${{ fromJSON(steps.env.outputs.data).request.target-branch }}
 
     - name: Environment data
-      uses: envoyproxy/toolshed/gh-actions/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: data
       with:
         input: |

diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
@@ -96,7 +96,7 @@ on:
       summary-post:
         type: string
         default: |
-          - uses: envoyproxy/toolshed/gh-actions/envoy/run/[email protected].27
+          - uses: envoyproxy/toolshed/gh-actions/envoy/run/[email protected].29
             with:
               context: %{{ inputs.context }}
       steps-pre:
@@ -158,15 +158,15 @@ jobs:
     name: ${{ inputs.command }} ${{ inputs.target }}
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
     # This controls which input vars are exposed to the run action (and related steps)
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       name: Context
       id: context
       with:
@@ -187,11 +187,11 @@ jobs:
           | . * {$config, $check}
     - if: ${{ inputs.cache-build-image }}
       name: Restore Docker cache ${{ inputs.cache-build-image && format('({0})', inputs.cache-build-image) || '' }}
-      uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].27
+      uses: envoyproxy/toolshed/gh-actions/docker/cache/[email protected].29
       with:
         image_tag: ${{ inputs.cache-build-image }}
 
-    - uses: envoyproxy/toolshed/gh-actions/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/[email protected].29
       id: appauth
       name: Appauth
       if: ${{ inputs.trusted }}
@@ -202,7 +202,7 @@ jobs:
         # - the workaround is to allow the token to be passed through.
         token: ${{ github.token }}
         token-ok: true
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       id: checkout
       name: Checkout Envoy repository
       with:
@@ -219,15 +219,15 @@ jobs:
         token: ${{ inputs.trusted && steps.appauth.outputs.token || github.token }}
 
     # This is currently only use by mobile-docs and can be removed once they are updated to the newer website
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       id: checkout-extra
       name: Checkout extra repository (for publishing)
       if: ${{ inputs.checkout-extra }}
       with:
         config: ${{ inputs.checkout-extra }}
         ssh-key: ${{ inputs.trusted && inputs.ssh-key-extra || '' }}
 
-    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].27
+    - uses: envoyproxy/toolshed/gh-actions/github/[email protected].29
       name: Run CI ${{ inputs.command }} ${{ inputs.target }}
       with:
         args: ${{ inputs.args != '--' && inputs.args || inputs.target }}