(improvement) Cython row_parser: cache ParseDesc for prepared statements

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
- - package-ecosystem: "pip"
+ - package-ecosystem: "uv"
  directory: "/docs"
  schedule:
  interval: "daily"

.github/workflows/build-pre-release.yml

@@ -15,7 +15,7 @@ on:
 
 jobs:
  build-and-publish:
- uses: ./.github/workflows/lib-build-and-push.yml
+ uses: ./.github/workflows/lib-build.yml
  with:
  python-version: ${{ inputs.python-version }}
  target: ${{ inputs.target }}

.github/workflows/build-push.yml

@@ -10,11 +10,12 @@ on:
 jobs:
  build-and-publish:
  name: "Build wheels"
- uses: ./.github/workflows/lib-build-and-push.yml
- with:
- upload: false
+ uses: ./.github/workflows/lib-build.yml
 
- # TODO: Remove when https://github.com/pypa/gh-action-pypi-publish/issues/166 is fixed and update build-and-publish.with.upload to ${{ endsWith(github.event.ref, 'scylla') }}
+ # Publishing is a separate job (not inside the reusable workflow) because PyPI Trusted Publishing
+ # requires the *caller* workflow path in the OIDC token. A reusable workflow would embed its own
+ # path instead, causing an `invalid-publisher` error on the PyPI side.
+ # See: https://github.com/pypa/gh-action-pypi-publish/issues/166
  publish:
  name: "Publish wheels to PyPi"
  if: ${{ endsWith(github.event.ref, 'scylla') }}
@@ -23,11 +24,11 @@ jobs:
  permissions:
  id-token: write
  steps:
- - uses: actions/download-artifact@v7
+ - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
  with:
  path: dist
  merge-multiple: true
 
- - uses: pypa/gh-action-pypi-publish@release/v1
+ - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
  with:
  skip-existing: true

.github/workflows/build-test.yml

@@ -18,6 +18,4 @@ jobs:
  test-wheels-build:
  name: "Test wheels building"
  if: "!contains(github.event.pull_request.labels.*.name, 'disable-test-build')"
- uses: ./.github/workflows/lib-build-and-push.yml
- with:
- upload: false
+ uses: ./.github/workflows/lib-build.yml

.github/workflows/call_jira_sync.yml

@@ -0,0 +1,18 @@
+name: Sync Jira Based on PR Events
+
+on:
+ pull_request_target:
+ types: [opened, edited, ready_for_review, review_requested, labeled, unlabeled, closed]
+
+permissions:
+ contents: read
+ pull-requests: write
+ issues: write
+
+jobs:
+ jira-sync:
+ uses: scylladb/github-automation/.github/workflows/main_pr_events_jira_sync.yml@47138e9130250ee1a35166cff7dd0e94c8897196 # main 2026-06-01
+ with:
+ caller_action: ${{ github.event.action }}
+ secrets:
+ caller_jira_auth: ${{ secrets.USER_AND_KEY_FOR_JIRA_AUTOMATION }}

.github/workflows/docs-pages.yml

@@ -24,14 +24,14 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Checkout
- uses: actions/checkout@v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
  with:
  ref: ${{ github.event.repository.default_branch }}
  persist-credentials: false
  fetch-depth: 0
 
  - name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
  with:
  working-directory: docs
  enable-cache: true

.github/workflows/docs-pr.yml

@@ -2,6 +2,9 @@ name: "Docs / Build PR"
 # For more information,
 # see https://sphinx-theme.scylladb.com/stable/deployment/production.html#available-workflows
 
+permissions:
+ contents: read
+
 on:
  push:
  branches:
@@ -28,13 +31,13 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Checkout
- uses: actions/checkout@v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
  with:
  persist-credentials: false
  fetch-depth: 0
 
  - name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
  with:
  working-directory: docs
  enable-cache: true

.github/workflows/integration-tests.yml

@@ -38,7 +38,7 @@ jobs:
  if: "!contains(github.event.pull_request.labels.*.name, 'disable-integration-tests')"
  runs-on: ubuntu-24.04
  env:
- SCYLLA_VERSION: release:2025.2
+ SCYLLA_VERSION: release:2026.1
  strategy:
  fail-fast: false
  matrix:
@@ -56,10 +56,10 @@ jobs:
  event_loop_manager: "asyncore"
 
  steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
  - name: Set up JDK ${{ matrix.java-version }}
- uses: actions/setup-java@v5
+ uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
  with:
  java-version: ${{ matrix.java-version }}
  distribution: 'adopt'
@@ -68,7 +68,7 @@ jobs:
  run: sudo apt-get install libev4 libev-dev
 
  - name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
  with:
  python-version: ${{ matrix.python-version }}
 
@@ -77,6 +77,12 @@ jobs:
  - name: Build driver
  run: uv sync
 
+ - name: Cache Scylla download
+ uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+ with:
+ path: ~/.ccm/repository
+ key: scylla-${{ env.SCYLLA_VERSION }}-${{ runner.os }}
+
  # This is to get honest accounting of test time vs download time vs build time.
  # Not strictly necessary for running tests.
  - name: Download Scylla
@@ -92,4 +98,4 @@ jobs:
  if [[ "${{ matrix.python-version }}" =~ t$ ]]; then
  export PYTHON_GIL=0
  fi
- uv run pytest tests/integration/standard/ tests/integration/cqlengine/
+ uv run pytest -v tests/integration/standard/ tests/integration/cqlengine/

.github/workflows/lib-build-and-push.yml → .github/workflows/lib-build.yml

@@ -1,14 +1,8 @@
-name: Build and upload to PyPi
+name: Build wheels
 
 on:
  workflow_call:
  inputs:
- upload:
- description: 'Upload to PyPI'
- type: boolean
- required: false
- default: false
-
  python-version:
  description: 'Python version to run on'
  type: string
@@ -83,11 +77,11 @@ jobs:
  include: ${{ fromJson(needs.prepare-matrix.outputs.matrix) }}
 
  steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
  - name: Checkout tag ${{ inputs.target_tag }}
  if: inputs.target_tag != ''
- uses: actions/checkout@v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
  with:
  ref: ${{ inputs.target_tag }}
 
@@ -102,7 +96,7 @@ jobs:
  echo "CIBW_BEFORE_TEST_WINDOWS=(exit 0)" >> $GITHUB_ENV;
 
  - name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
  with:
  python-version: ${{ inputs.python-version }}
 
@@ -117,7 +111,7 @@ jobs:
 
  - name: Install Conan
  if: runner.os == 'Windows'
- uses: turtlebrowser/get-conan@main
+ uses: turtlebrowser/get-conan@c171f295f3f507360ee018736a6608731aa2109d # v1.2
 
  - name: Configure libev for Windows
  if: runner.os == 'Windows'
@@ -146,14 +140,14 @@ jobs:
  if: matrix.target != 'linux-aarch64'
  shell: bash
  run: |
-GITHUB_WORKFLOW_REF="scylladb/python-driver/.github/workflows/lib-build-and-push.yml@refs/heads/master" cibuildwheel --output-dir wheelhouse
+ cibuildwheel --output-dir wheelhouse
 
  - name: Build wheels for linux aarch64
  if: matrix.target == 'linux-aarch64'
  run: |
-GITHUB_WORKFLOW_REF="scylladb/python-driver/.github/workflows/lib-build-and-push.yml@refs/heads/master" CIBW_BUILD="cp3*" cibuildwheel --archs aarch64 --output-dir wheelhouse
+ CIBW_BUILD="cp3*" cibuildwheel --archs aarch64 --output-dir wheelhouse
 
- - uses: actions/upload-artifact@v6
+ - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
  with:
  name: wheels-${{ matrix.target }}-${{ matrix.os }}
  path: ./wheelhouse/*.whl
@@ -162,34 +156,17 @@ jobs:
  name: Build source distribution
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
  - name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
  with:
  python-version: ${{ inputs.python-version }}
 
  - name: Build sdist
  run: uv build --sdist
 
- - uses: actions/upload-artifact@v6
+ - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
  with:
  name: source-dist
  path: dist/*.tar.gz
-
- upload_pypi:
- if: inputs.upload
- needs: [build-wheels, build-sdist]
- runs-on: ubuntu-24.04
- permissions:
- id-token: write
-
- steps:
- - uses: actions/download-artifact@v7
- with:
- path: dist
- merge-multiple: true
-
- - uses: pypa/gh-action-pypi-publish@release/v1
- with:
- skip-existing: true

.github/workflows/publish-manually.yml

@@ -39,15 +39,17 @@ on:
 jobs:
  build-and-publish:
  name: "Build wheels"
- uses: ./.github/workflows/lib-build-and-push.yml
+ uses: ./.github/workflows/lib-build.yml
  with:
- upload: false
  python-version: ${{ inputs.python-version }}
  ignore_tests: ${{ inputs.ignore_tests }}
  target_tag: ${{ inputs.target_tag }}
  target: ${{ inputs.target }}
 
- # TODO: Remove when https://github.com/pypa/gh-action-pypi-publish/issues/166 is fixed and update build-and-publish.with.upload to ${{ inputs.upload }}
+ # Publishing is a separate job (not inside the reusable workflow) because PyPI Trusted Publishing
+ # requires the *caller* workflow path in the OIDC token. A reusable workflow would embed its own
+ # path instead, causing an `invalid-publisher` error on the PyPI side.
+ # See: https://github.com/pypa/gh-action-pypi-publish/issues/166
  publish:
  name: "Publish wheels to PyPi"
  needs: build-and-publish
@@ -56,11 +58,11 @@ jobs:
  permissions:
  id-token: write
  steps:
- - uses: actions/download-artifact@v7
+ - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
  with:
  path: dist
  merge-multiple: true
 
- - uses: pypa/gh-action-pypi-publish@release/v1
+ - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
  with:
  skip-existing: true