Stable 25.8 - Port the Community PR workflow

.github/workflows/auto_releases.yml

@@ -33,7 +33,7 @@ jobs:
           EOF
           echo "DRY_RUN=true" >> "$GITHUB_ENV"
       - name: Check out repository code
-        uses: ClickHouse/checkout@v1
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0  # full history needed
       - name: Debug Info

.github/workflows/cancel.yml

@@ -6,14 +6,30 @@ env:
 
 on: # yamllint disable-line rule:truthy
   workflow_run:
-    workflows: ["PR","PullRequestCI", "ReleaseBranchCI", "DocsCheck", "BackportPR"]
+    workflows: ["PR", "Community PR", "PullRequestCI", "ReleaseBranchCI", "DocsCheck", "BackportPR"]
     types:
       - requested
 jobs:
   cancel:
     runs-on: ubuntu-latest
     steps:
-      - uses: styfle/cancel-workflow-action@0.9.1
+      - uses: actions/github-script@v8
         with:
-          all_but_latest: true
-          workflow_id: ${{ github.event.workflow.id }}
+          script: |
+            const workflow_id = context.payload.workflow.id
+            const { owner, repo } = context.repo
+            const runs = await github.paginate(
+              github.rest.actions.listWorkflowRuns,
+              { owner, repo, workflow_id, per_page: 100 }
+            )
+            const active = runs.filter((r) =>
+              ["queued", "in_progress", "waiting", "pending"].includes(r.status)
+            )
+            active.sort((a, b) => Date.parse(b.created_at) - Date.parse(a.created_at))
+            for (const run of active.slice(1)) {
+              await github.rest.actions.cancelWorkflowRun({
+                owner,
+                repo,
+                run_id: run.id,
+              })
+            }

.github/workflows/cherry_pick.yml

@@ -28,9 +28,9 @@ jobs:
           REPO_TEAM=core
           EOF
       - name: Check out repository code
-        uses: Altinity/checkout@19599efdf36c4f3f30eb55d5bb388896faea69f
+        uses: actions/checkout@v6
         with:
-          clear-repository: true
+          clean: true
           token: ${{secrets.ROBOT_CLICKHOUSE_COMMIT_TOKEN}}
           fetch-depth: 0
       - name: Debug Info

.github/workflows/compare_fails.yml

@@ -53,13 +53,13 @@ jobs:
           echo "Found commit statuses, proceeding with comparison."
 
       - name: Check out repository code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ inputs.current_ref || github.ref }}
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: '3.x'
           cache: 'pip'
@@ -103,7 +103,7 @@ jobs:
           cat comparison_results.md >> $GITHUB_STEP_SUMMARY
 
       - name: Upload comparison results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: comparison-results
           path: |

.github/workflows/create_release.yml

@@ -70,7 +70,7 @@ jobs:
     runs-on: [self-hosted, release-maker]
     steps:
       - name: Check out repository code
-        uses: Altinity/checkout@19599efdf36c4f3f30eb55d5bb388896faea69f
+        uses: actions/checkout@v6
         with:
           token: ${{secrets.ROBOT_CLICKHOUSE_COMMIT_TOKEN}}
           fetch-depth: 0
@@ -149,7 +149,7 @@ jobs:
           git diff HEAD
       - name: Create ChangeLog PR
         if: ${{ inputs.type == 'patch' && ! inputs.dry-run && ! inputs.only-repo && ! inputs.only-docker }}
-        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
+        uses: peter-evans/create-pull-request@v8
         with:
           author: "robot-clickhouse <robot-clickhouse@users.noreply.github.com>"
           token: ${{ secrets.ROBOT_CLICKHOUSE_COMMIT_TOKEN }}

.github/workflows/docker_publish.yml

@@ -52,7 +52,7 @@ jobs:
       image_archives_path: ${{ steps.set_path.outputs.image_archives_path }}
     steps:
       - name: Docker Hub Login
-        uses: docker/login-action@v2
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
@@ -127,7 +127,7 @@ jobs:
 
       - name: Upload image archives
         if: ${{ github.event.inputs.upload_artifacts || inputs.upload_artifacts }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: docker-images-backup
           path: image_archives/

.github/workflows/grype_scan.yml

@@ -38,10 +38,10 @@ jobs:
         runs-on: [self-hosted, altinity-on-demand, altinity-style-checker-aarch64]
         steps:
         - name: Checkout repository
-          uses: actions/checkout@v4
+          uses: actions/checkout@v6
 
         - name: Set up Docker
-          uses: docker/setup-buildx-action@v3
+          uses: docker/setup-buildx-action@v4
 
         - name: Set up Python
           run: |
@@ -128,7 +128,7 @@ jobs:
 
         - name: Set commit status
           if: always()
-          uses: actions/github-script@v7
+          uses: actions/github-script@v8
           with:
             github-token: ${{ secrets.GITHUB_TOKEN }}
             script: |
@@ -147,7 +147,7 @@ jobs:
 
         - name: Upload artifacts
           if: always()
-          uses: actions/upload-artifact@v4
+          uses: actions/upload-artifact@v7
           with:
             name: grype-results-${{ hashFiles('raw.log') }}
             path: |