Skip to content

Comments

Enhance Python bindings for ArcadeDB#3466

Merged
robfrank merged 2 commits intoArcadeData:mainfrom
humemai:contrib/python-bindings-upstream-main
Feb 17, 2026
Merged

Enhance Python bindings for ArcadeDB#3466
robfrank merged 2 commits intoArcadeData:mainfrom
humemai:contrib/python-bindings-upstream-main

Conversation

@tae898
Copy link
Contributor

@tae898 tae898 commented Feb 17, 2026

Bring the latest changes to the python bindings to upstream main

- Updated `pyproject.toml` to clarify the requirement for `py7zr`.
- Added `build_graph_now` parameter to `create_vector_index` method in `Database` class to control immediate graph building.
- Modified `DatabaseFactory` and `create_database` functions to accept optional JVM arguments for better configuration.
- Enhanced `Importer` class to support JVM arguments, improving memory management during data import.
- Refined JVM startup logic in `jvm.py` to allow for more flexible configuration and deduplication of heap size arguments.
- Introduced tests for OLTP mixed workload scenarios and CSV import handling of complex data types, null values, and performance.
- Updated vector index creation tests to verify eager graph building behavior.
- Improved documentation and comments throughout the code for clarity and maintainability.
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @tae898, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on enhancing the Python bindings for ArcadeDB by expanding platform compatibility, significantly reducing package size, and improving the flexibility of JVM configuration. It also introduces new query language examples and robust dataset management tools, making the Python integration more powerful and user-friendly for a wider range of use cases and environments.

Highlights

  • Expanded Platform Support: Added official support for Windows x86_64, increasing the number of supported platforms from 3 to 4. This is reflected in the README and build scripts.
  • Significant Package Size Reduction: Optimized the bundled JRE size from ~249MB to ~60MB and the compressed wheel size from ~116MB to ~68MB, leading to a much smaller overall package footprint.
  • Enhanced JVM Argument Management: Introduced programmatic control for JVM heap size and other arguments, allowing for more flexible configuration directly from Python code. Improved out-of-memory error messages to guide users on increasing heap size via jvm_kwargs.
  • New Gremlin Query Examples: Added a comprehensive demonstrate_gremlin_queries function to the 02_social_network_graph.py example, showcasing various Gremlin traversals.
  • Advanced Dataset Management and Generation: The download_data.py script was significantly expanded to support new dataset types (TPC-H, LDBC SNB, MSMARCO embeddings) and features like Stack Overflow vector generation, subset creation, and schema inference.
  • Improved Vector Index Control: Added a build_graph_now parameter to create_vector_index to control eager graph building, providing more flexibility for performance tuning after bulk operations.
  • Removed Server Mode Example: The 08_server_mode_rest_api.py example, which demonstrated running ArcadeDB as a server with concurrent HTTP clients, has been removed.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog
  • bindings/python/.gitignore
    • Added local-jars/ to the ignore list for local build artifacts.
  • bindings/python/Dockerfile.build
    • Updated the base image for the JRE builder from eclipse-temurin:25-jdk-jammy to amazoncorretto:25.
    • Installed findutils and binutils for necessary tooling in the JRE builder stage.
  • bindings/python/README.md
    • Updated the test count from 258 to 260 passing tests.
    • Increased the reported number of supported platforms from 3 to 4, explicitly listing Windows x86_64.
    • Reduced the reported bundled JRE size from ~249MB to ~60MB.
    • Reduced the reported compressed wheel size from ~116MB to ~68MB.
    • Reduced the reported total uncompressed size from ~281MB to ~95MB.
    • Updated the 'Building from Source' section to include Windows in native build instructions.
  • bindings/python/build.sh
    • Updated the Maven Docker image from maven:3.9-eclipse-temurin-25 to maven:3.9-amazoncorretto-25.
    • Added windows/amd64 to the list of supported platforms in the usage instructions.
    • Added a description for the optional JAR_LIB_DIR argument in the usage instructions.
    • Updated the package features to reflect support for 4 platforms instead of 3.
  • bindings/python/examples/02_social_network_graph.py
    • Added a call to demonstrate_gremlin_queries(db) within the demonstrate_graph_queries function.
    • Implemented demonstrate_gremlin_queries function, showcasing various Gremlin graph traversal examples.
  • bindings/python/examples/04_csv_import_documents.py
    • Updated documentation to recommend using the --heap-size argument instead of the ARCADEDB_JVM_ARGS environment variable for setting JVM heap.
    • Added a --heap-size command-line argument to the script's argument parser.
    • Modified the JVM heap configuration check to prioritize the --heap-size argument.
    • Passed jvm_kwargs to the arcadedb.create_database call to allow programmatic heap size configuration.
  • bindings/python/examples/06_vector_search_recommendations.py
    • Updated documentation to recommend using the --heap-size argument for large datasets.
    • Modified import_from_jsonl function to accept an optional jvm_kwargs parameter.
    • Modified generate_embeddings function to accept an optional force_embed parameter.
    • Added a --heap-size command-line argument to the script's argument parser.
    • Passed jvm_kwargs to arcadedb.create_database and arcadedb.open_database calls.
    • Passed force_embed argument to generate_embeddings calls.
  • bindings/python/examples/08_server_mode_rest_api.py
    • Removed the entire file, discontinuing the 08_server_mode_rest_api.py example.
  • bindings/python/examples/README.md
    • Added a link to the download_data.md guide.
    • Removed an extraneous empty line.
    • Added a note for 04_csv_import_documents.py about downloading the MovieLens dataset.
    • Removed the entries for 07_stackoverflow_multimodel.py and 08_server_mode_rest_api.py examples.
  • bindings/python/examples/download_data.py
    • Expanded the list of available datasets to include stackoverflow-tiny, stackoverflow-xlarge, stackoverflow-full (renamed from large), TPC-H benchmarks (tpch-sf1, sf10, sf100), LDBC SNB benchmarks (ldbc-snb-sf1, sf10, sf100), and MSMARCO v2.1 embeddings (msmarco-1m, 5m, 10m).
    • Added utility functions for cleaning directories (ensure_clean_dir), parsing TPC-H DDL (parse_tpch_ddl), iterating TPC-H records (_iter_tpch_records), converting TPC-H .tbl to CSV (convert_tpch_tbl_to_csv), and generating TPC-H CSV and schema (generate_tpch_csv_and_schema).
    • Added functions for inferring and merging data types (_infer_value_type, _merge_types), detecting CSV headers (_looks_like_header), and applying LDBC overrides (_apply_ldbc_overrides).
    • Implemented generate_ldbc_snb_schema for LDBC SNB datasets.
    • Modified download_movielens to use ensure_clean_dir for better cleanup.
    • Updated download_stackoverflow to support new dataset sizes (tiny, large, xlarge, full) and utilize ensure_clean_dir.
    • Added helper functions _write_stackoverflow_subset and _write_stackoverflow_subset_by_bytes for creating Stack Overflow dataset subsets.
    • Introduced functions for Stack Overflow vector generation: _iter_stackoverflow_rows, _clean_stackoverflow_text, _VectorShardWriter, and embed_stackoverflow_vectors.
    • Added download_tpch and download_ldbc_snb functions for generating benchmark datasets via Docker.
    • Implemented convert_msmarco_parquet_to_shards and download_msmarco for handling MSMARCO embedding datasets.
    • Added _count_xml_rows_fast and emit_stackoverflow_entity_counts for faster XML row counting and entity count reporting.
    • Updated the main function to handle the new dataset choices and associated download/generation logic.
    • Added new command-line arguments for Stack Overflow vector generation: --no-vectors, --vector-model, --vector-batch-size, --vector-shard-size, --vector-max-rows, --vector-gt-queries, and --vector-gt-topk.
    • Adjusted the sample_size logic for Stack Overflow verification to include xlarge and full datasets.
  • bindings/python/pyproject.toml
    • Updated a comment for the py7zr dependency, removing specific example reference.
  • bindings/python/src/arcadedb_embedded/core.py
    • Added build_graph_now parameter to create_vector_index to control eager graph construction, defaulting to True.
    • Modified create_vector_index to conditionally call index.build_graph_now() based on the new parameter.
    • Modified DatabaseFactory.__init__ to accept an optional jvm_kwargs dictionary, which is passed to start_jvm.
    • Updated create_database and open_database convenience functions to accept an optional jvm_kwargs parameter.
  • bindings/python/src/arcadedb_embedded/importer.py
    • Imported the jpype module.
    • Modified Importer.__init__ to accept an optional jvm_kwargs dictionary, ensuring JVM is started with these parameters if not already configured.
    • Improved the out-of-memory error message in _import_using_java to suggest using jvm_kwargs for heap size configuration.
    • Modified import_xml function to accept an optional jvm_kwargs parameter, which is passed to the Importer constructor.
  • bindings/python/src/arcadedb_embedded/jvm.py
    • Introduced a global _JVM_CONFIG variable to track the JVM's initial configuration.
    • Modified start_jvm to accept heap_size, disable_xml_limits, and jvm_args parameters for programmatic JVM configuration.
    • Added logic to prevent re-configuring the JVM if it's already started with different parameters, raising an ArcadeDBError.
    • Implemented _normalize_jvm_args to standardize JVM argument input.
    • Implemented _parse_memory_size to convert JVM memory strings (e.g., '8g') to bytes.
    • Implemented _dedupe_max_heap to handle multiple -Xmx arguments, retaining the largest valid value.
    • Updated _build_jvm_args to integrate the new programmatic parameters, handle XML entity limits, and ensure robust heap size management.
  • bindings/python/src/arcadedb_embedded/server.py
    • Modified ArcadeDBServer.__init__ to accept an optional jvm_kwargs dictionary, which is passed to start_jvm.
  • bindings/python/src/arcadedb_embedded/vector.py
    • Changed the default overquery_factor in find_nearest_approximate from 1 to 4 for potentially better recall.
    • Updated the docstring for build_graph_now for clarity.
  • bindings/python/tests/README.md
    • Updated the reported test count from 258 to 260 tests.
  • bindings/python/tests/test_concurrency.py
    • Imported mean from the statistics module and ArcadeDBError from arcadedb_embedded.exceptions.
    • Added test_oltp_mixed_workload_threads to test multi-threaded OLTP-style mixed read/write workloads within a single process.
  • bindings/python/tests/test_importer.py
    • Added test_csv_complex_data_types to verify CSV import with various data types and edge cases.
    • Added test_csv_null_and_empty_values to test CSV handling of NULL, empty strings, and missing values.
    • Added test_csv_unicode_and_special_chars to ensure correct import of Unicode and special characters.
    • Reordered test_large_dataset_performance to appear after the new CSV tests.
  • bindings/python/tests/test_jvm_args.py
    • Updated calls to _build_jvm_args to pass the new heap_size, disable_xml_limits, and jvm_args parameters.
    • Added test_dedupe_heap_keeps_max to verify that multiple -Xmx arguments correctly result in the maximum heap size being used.
  • bindings/python/tests/test_vector.py
    • Added test_create_vector_index_build_graph_now_default_true to confirm eager graph building by default.
    • Added test_create_vector_index_build_graph_now_can_be_disabled to verify that eager graph building can be explicitly disabled.
    • Marked several approximate search tests (test_lsm_vector_search_approximate_product, test_lsm_vector_search_approximate_typeindex, test_lsm_vector_search_approximate_persistence) with @pytest.mark.skip.
    • Modified the filler vector generation in test_lsm_vector_search_approximate_overquery to ensure unique vectors and better test conditions.
    • Adjusted the assertion threshold in test_lsm_vector_search_approximate_overquery from 0.9 to 0.899.
Ignored Files
  • Ignored by pattern: .github/workflows/** (2)
    • .github/workflows/test-python-bindings.yml
    • .github/workflows/test-python-examples.yml
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@mergify
Copy link
Contributor

mergify bot commented Feb 17, 2026

🧪 CI Insights

Here's what we observed from your CI run for 67056af.

🟢 All jobs passed!

But CI Insights is watching 👀

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

The pull request significantly enhances the ArcadeDB Python bindings by adding support for Windows, expanding dataset options in examples, and providing more robust JVM configuration options. The introduction of programmatic heap size control and improved XML limit handling are valuable additions. However, there are some copy-paste errors in the new Gremlin example and potential issues with JVM argument parsing when spaces are involved.

@tae898
Copy link
Contributor Author

tae898 commented Feb 17, 2026

@robfrank

I removed a couple of python examples, since they were kinda messy. I'm adding cleaner examples and will soon make a new PR for them.

@codecov
Copy link

codecov bot commented Feb 17, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.86%. Comparing base (fcd6a39) to head (67056af).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3466      +/-   ##
==========================================
- Coverage   62.86%   62.86%   -0.01%     
==========================================
  Files        1296     1296              
  Lines       85831    85831              
  Branches    17641    17641              
==========================================
- Hits        53960    53956       -4     
+ Misses      24181    24178       -3     
- Partials     7690     7697       +7     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@robfrank robfrank added this to the 26.3.1 milestone Feb 17, 2026
@robfrank robfrank merged commit 650e2bb into ArcadeData:main Feb 17, 2026
46 of 54 checks passed
@robfrank
Copy link
Collaborator

good job @tae898 , thanks a lot!

robfrank pushed a commit that referenced this pull request Feb 20, 2026
* Enhance Python bindings for ArcadeDB

- Updated `pyproject.toml` to clarify the requirement for `py7zr`.
- Added `build_graph_now` parameter to `create_vector_index` method in `Database` class to control immediate graph building.
- Modified `DatabaseFactory` and `create_database` functions to accept optional JVM arguments for better configuration.
- Enhanced `Importer` class to support JVM arguments, improving memory management during data import.
- Refined JVM startup logic in `jvm.py` to allow for more flexible configuration and deduplication of heap size arguments.
- Introduced tests for OLTP mixed workload scenarios and CSV import handling of complex data types, null values, and performance.
- Updated vector index creation tests to verify eager graph building behavior.
- Improved documentation and comments throughout the code for clarity and maintainability.

* fix(python): correct gremlin labels and robust JVM arg parsing

(cherry picked from commit 650e2bb)
mergify bot added a commit that referenced this pull request Feb 22, 2026
Bumps the github-actions group with 3 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [github/codeql-action](https://github.com/github/codeql-action) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action).
Updates `anthropics/claude-code-action` from 1.0.51 to 1.0.55
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.55
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.55>
>
> v1.0.54
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.54>
>
> v1.0.53
> -------
>
> What's Changed
> --------------
>
> * fix: grant write permissions and use [`@​main`](https://github.com/main) in claude workflow by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#950](https://redirect.github.com/anthropics/claude-code-action/pull/950)
> * feat: add display\_report option to disable step summary by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#952](https://redirect.github.com/anthropics/claude-code-action/pull/952)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.53>
>
> v1.0.52
> -------
>
> What's Changed
> --------------
>
> * Fix stale claudeCodeVersion and update bump script to keep run.ts in sync by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#943](https://redirect.github.com/anthropics/claude-code-action/pull/943)
> * fix: revert to colon-based wildcard syntax for git permissions by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#949](https://redirect.github.com/anthropics/claude-code-action/pull/949)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.52>


Commits

* [`edd85d6`](anthropics/claude-code-action@edd85d6) chore: bump Claude Code to 2.1.49 and Agent SDK to 0.2.49
* [`0cf5eee`](anthropics/claude-code-action@0cf5eee) chore: bump Claude Code to 2.1.47 and Agent SDK to 0.2.47
* [`e6cb7a7`](anthropics/claude-code-action@e6cb7a7) chore: bump Claude Code to 2.1.45 and Agent SDK to 0.2.45
* [`2f8ba26`](anthropics/claude-code-action@2f8ba26) chore: bump Claude Code to 2.1.44 and Agent SDK to 0.2.44
* [`cc5ef44`](anthropics/claude-code-action@cc5ef44) feat: add display\_report option to disable step summary ([#952](https://redirect.github.com/anthropics/claude-code-action/issues/952))
* [`f6a1c4c`](anthropics/claude-code-action@f6a1c4c) fix: grant write permissions and use [`@​main`](https://github.com/main) in claude workflow ([#950](https://redirect.github.com/anthropics/claude-code-action/issues/950))
* [`68cfeea`](anthropics/claude-code-action@68cfeea) Revert "fix: replace deprecated :\* with modern \* wildcard in git permissions ...
* [`f508883`](anthropics/claude-code-action@f508883) Fix stale claudeCodeVersion in run.ts and update bump automation ([#943](https://redirect.github.com/anthropics/claude-code-action/issues/943))
* See full diff in [compare view](anthropics/claude-code-action@ea36d6a...edd85d6)
  
Updates `github/codeql-action` from 4.32.3 to 4.32.4
Release notes

*Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).*

> v4.32.4
> -------
>
> * Update default CodeQL bundle version to [2.24.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2). [#3493](https://redirect.github.com/github/codeql-action/pull/3493)
> * Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. [#3473](https://redirect.github.com/github/codeql-action/pull/3473)
> * When the CodeQL Action is run [with debugging enabled in Default Setup](https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup) and [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries), the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. [#3486](https://redirect.github.com/github/codeql-action/pull/3486)
> * Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. [#3485](https://redirect.github.com/github/codeql-action/pull/3485)
> * Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a [nightly CodeQL CLI release](https://github.com/dsp-testing/codeql-cli-nightlies) instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. [#3484](https://redirect.github.com/github/codeql-action/pull/3484)


Changelog

*Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.32.4 - 20 Feb 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2). [#3493](https://redirect.github.com/github/codeql-action/pull/3493)
> * Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. [#3473](https://redirect.github.com/github/codeql-action/pull/3473)
> * When the CodeQL Action is run [with debugging enabled in Default Setup](https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup) and [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries), the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. [#3486](https://redirect.github.com/github/codeql-action/pull/3486)
> * Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. [#3485](https://redirect.github.com/github/codeql-action/pull/3485)
> * Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a [nightly CodeQL CLI release](https://github.com/dsp-testing/codeql-cli-nightlies) instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. [#3484](https://redirect.github.com/github/codeql-action/pull/3484)
>
> 4.32.3 - 13 Feb 2026
> --------------------
>
> * Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [#3466](https://redirect.github.com/github/codeql-action/pull/3466)
>
> 4.32.2 - 05 Feb 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.1). [#3460](https://redirect.github.com/github/codeql-action/pull/3460)
>
> 4.32.1 - 02 Feb 2026
> --------------------
>
> * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#3422](https://redirect.github.com/github/codeql-action/pull/3422)
> * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#3421](https://redirect.github.com/github/codeql-action/pull/3421)
>
> 4.32.0 - 26 Jan 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://redirect.github.com/github/codeql-action/pull/3425)
>
> 4.31.11 - 23 Jan 2026
> ---------------------
>
> * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://redirect.github.com/github/codeql-action/pull/3409)
> * Improved error handling throughout the CodeQL Action. [#3415](https://redirect.github.com/github/codeql-action/pull/3415)
> * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://redirect.github.com/github/codeql-action/pull/3318)
> * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://redirect.github.com/github/codeql-action/pull/3403)
>
> 4.31.10 - 12 Jan 2026
> ---------------------
>
> * Update default CodeQL bundle version to 2.23.9. [#3393](https://redirect.github.com/github/codeql-action/pull/3393)
>
> 4.31.9 - 16 Dec 2025
> --------------------
>
> No user facing changes.
>
> 4.31.8 - 11 Dec 2025
> --------------------

... (truncated)


Commits

* [`89a39a4`](github/codeql-action@89a39a4) Merge pull request [#3494](https://redirect.github.com/github/codeql-action/issues/3494) from github/update-v4.32.4-39ba80c47
* [`e5d84c8`](github/codeql-action@e5d84c8) Apply remaining review suggestions
* [`0c20209`](github/codeql-action@0c20209) Apply suggestions from code review
* [`314172e`](github/codeql-action@314172e) Fix typo
* [`cdda72d`](github/codeql-action@cdda72d) Add changelog entries
* [`cfda84c`](github/codeql-action@cfda84c) Update changelog for v4.32.4
* [`39ba80c`](github/codeql-action@39ba80c) Merge pull request [#3493](https://redirect.github.com/github/codeql-action/issues/3493) from github/update-bundle/codeql-bundle-v2.24.2
* [`00150da`](github/codeql-action@00150da) Add changelog note
* [`d97dce6`](github/codeql-action@d97dce6) Update default bundle to codeql-bundle-v2.24.2
* [`50fdbb9`](github/codeql-action@50fdbb9) Merge pull request [#3492](https://redirect.github.com/github/codeql-action/issues/3492) from github/henrymercer/new-repository-properties-ff
* Additional commits viewable in [compare view](github/codeql-action@9e907b5...89a39a4)
  
Updates `actions/dependency-review-action` from 4.8.2 to 4.8.3
Release notes

*Sourced from [actions/dependency-review-action's releases](https://github.com/actions/dependency-review-action/releases).*

> 4.8.3
> -----
>
> Dependency Review Action v4.8.3
> -------------------------------
>
> This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.
>
> We have also updated the release process to use a long-lived `v4` **branch** for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.
>
> What's Changed
> --------------
>
> * GitHub Actions can't push to our protected main by [`@​dangoor`](https://github.com/dangoor) in [actions/dependency-review-action#1017](https://redirect.github.com/actions/dependency-review-action/pull/1017)
> * Bump actions/stale from 9.1.0 to 10.1.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#995](https://redirect.github.com/actions/dependency-review-action/pull/995)
> * Bump github/codeql-action from 3 to 4 by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1003](https://redirect.github.com/actions/dependency-review-action/pull/1003)
> * Bump actions/setup-node from 4 to 6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1005](https://redirect.github.com/actions/dependency-review-action/pull/1005)
> * Upgrade glob to address a vulnerability by [`@​brrygrdn`](https://github.com/brrygrdn) in [actions/dependency-review-action#1024](https://redirect.github.com/actions/dependency-review-action/pull/1024)
> * Bump js-yaml by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1020](https://redirect.github.com/actions/dependency-review-action/pull/1020)
> * Addressing vulnerabilities by [`@​Ahmed3lmallah`](https://github.com/Ahmed3lmallah) in [actions/dependency-review-action#1036](https://redirect.github.com/actions/dependency-review-action/pull/1036)
> * Bump fast-xml-parser from 5.3.3 to 5.3.5 by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1050](https://redirect.github.com/actions/dependency-review-action/pull/1050)
> * Bump fast-xml-parser from 5.3.5 to 5.3.6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1053](https://redirect.github.com/actions/dependency-review-action/pull/1053)
> * Properly truncate long summaries and catch errors by [`@​juxtin`](https://github.com/juxtin) in [actions/dependency-review-action#1052](https://redirect.github.com/actions/dependency-review-action/pull/1052)
> * Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory by [`@​dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#931](https://redirect.github.com/actions/dependency-review-action/pull/931)
> * Changes for Release 4.8.3 by [`@​ahpook`](https://github.com/ahpook) in [actions/dependency-review-action#1054](https://redirect.github.com/actions/dependency-review-action/pull/1054)
>
> **Full Changelog**: <https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3>


Commits

* [`05fe457`](actions/dependency-review-action@05fe457) Merge pull request [#1054](https://redirect.github.com/actions/dependency-review-action/issues/1054) from actions/ahpook/release-4.8.3
* [`3a8496c`](actions/dependency-review-action@3a8496c) Update generated package files for v4.8.3
* [`0f22a01`](actions/dependency-review-action@0f22a01) Update CONTRIBUTING for new release process
* [`58be343`](actions/dependency-review-action@58be343) Updating package versions for 4.8.3
* [`9284e0c`](actions/dependency-review-action@9284e0c) Merge pull request [#931](https://redirect.github.com/actions/dependency-review-action/issues/931) from actions/dependabot/npm\_and\_yarn/spdx-licenses-20...
* [`8b76656`](actions/dependency-review-action@8b76656) Bump spdx-expression-parse in the spdx-licenses group across 1 directory
* [`43f5f02`](actions/dependency-review-action@43f5f02) Merge pull request [#1052](https://redirect.github.com/actions/dependency-review-action/issues/1052) from actions/juxtin/fix-long-summaries
* [`f0033fc`](actions/dependency-review-action@f0033fc) Merge pull request [#1053](https://redirect.github.com/actions/dependency-review-action/issues/1053) from actions/dependabot/npm\_and\_yarn/fast-xml-parser...
* [`b379e2e`](actions/dependency-review-action@b379e2e) Bump fast-xml-parser from 5.3.5 to 5.3.6
* [`2e1cf54`](actions/dependency-review-action@2e1cf54) Properly truncate long summaries and catch errors
* Additional commits viewable in [compare view](actions/dependency-review-action@3c4e3dc...05fe457)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
skofra0 pushed a commit to skofra0/arcadedb that referenced this pull request Feb 23, 2026
Bumps the github-actions group with 2 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [github/codeql-action](https://github.com/github/codeql-action).
Updates `anthropics/claude-code-action` from 1.0.46 to 1.0.51
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.51
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.51>
>
> v1.0.50
> -------
>
> What's Changed
> --------------
>
> * revert: undo PR checkout fork support and unique branch naming by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#937](https://redirect.github.com/anthropics/claude-code-action/pull/937)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.50>
>
> v1.0.49
> -------
>
> What's Changed
> --------------
>
> * fix: replace deprecated :\* with modern \* wildcard in git permissions by [`@​Dave-London`](https://github.com/Dave-London) in [anthropics/claude-code-action#929](https://redirect.github.com/anthropics/claude-code-action/pull/929)
> * fix: skip CI MCP server installation when actions:read permission is missing by [`@​OctavianGuzu`](https://github.com/OctavianGuzu) in [anthropics/claude-code-action#933](https://redirect.github.com/anthropics/claude-code-action/pull/933)
> * Fix/PR checkout branch name conflicts by [`@​kirisame-wang`](https://github.com/kirisame-wang) in [anthropics/claude-code-action#931](https://redirect.github.com/anthropics/claude-code-action/pull/931)
>
> New Contributors
> ----------------
>
> * [`@​OctavianGuzu`](https://github.com/OctavianGuzu) made their first contribution in [anthropics/claude-code-action#933](https://redirect.github.com/anthropics/claude-code-action/pull/933)
> * [`@​kirisame-wang`](https://github.com/kirisame-wang) made their first contribution in [anthropics/claude-code-action#931](https://redirect.github.com/anthropics/claude-code-action/pull/931)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.49>
>
> v1.0.48
> -------
>
> What's Changed
> --------------
>
> * Fix PR checkout to support fork PRs by [`@​Tsuesun`](https://github.com/Tsuesun) in [anthropics/claude-code-action#851](https://redirect.github.com/anthropics/claude-code-action/pull/851)
>
> New Contributors
> ----------------
>
> * [`@​Tsuesun`](https://github.com/Tsuesun) made their first contribution in [anthropics/claude-code-action#851](https://redirect.github.com/anthropics/claude-code-action/pull/851)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.48>
>
> v1.0.47
> -------
>
> What's Changed
> --------------
>
> * Update claude-opus-4-5 to claude-opus-4-6 in workflow by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#909](https://redirect.github.com/anthropics/claude-code-action/pull/909)
> * fix: skip dev dependencies in CI install step by [`@​Dave-London`](https://github.com/Dave-London) in [anthropics/claude-code-action#919](https://redirect.github.com/anthropics/claude-code-action/pull/919)
>
> New Contributors
> ----------------
>
> * [`@​Dave-London`](https://github.com/Dave-London) made their first contribution in [anthropics/claude-code-action#919](https://redirect.github.com/anthropics/claude-code-action/pull/919)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.47>


Commits

* [`ea36d6a`](anthropics/claude-code-action@ea36d6a) chore: bump Claude Code to 2.1.42 and Agent SDK to 0.2.42
* [`c22f7c3`](anthropics/claude-code-action@c22f7c3) revert: undo PR checkout fork support and unique branch naming ([ArcadeData#937](https://redirect.github.com/anthropics/claude-code-action/issues/937))
* [`f669191`](anthropics/claude-code-action@f669191) fix: use unique local branch names for PR checkout to avoid conflicts ([ArcadeData#931](https://redirect.github.com/anthropics/claude-code-action/issues/931))
* [`8c383c5`](anthropics/claude-code-action@8c383c5) fix: skip CI MCP server installation when actions:read permission is missing ...
* [`1bb0e74`](anthropics/claude-code-action@1bb0e74) fix: replace deprecated :\* with modern \* wildcard in git permissions ([ArcadeData#929](https://redirect.github.com/anthropics/claude-code-action/issues/929))
* [`23ed4cb`](anthropics/claude-code-action@23ed4cb) chore: bump Claude Code to 2.1.39 and Agent SDK to 0.2.39
* [`21e3fe0`](anthropics/claude-code-action@21e3fe0) Fix PR checkout to support fork PRs ([ArcadeData#851](https://redirect.github.com/anthropics/claude-code-action/issues/851))
* [`b433f16`](anthropics/claude-code-action@b433f16) chore: bump Claude Code to 2.1.38 and Agent SDK to 0.2.38
* [`7695f78`](anthropics/claude-code-action@7695f78) fix: skip dev dependencies in CI install step ([ArcadeData#919](https://redirect.github.com/anthropics/claude-code-action/issues/919))
* [`d5b01b6`](anthropics/claude-code-action@d5b01b6) Update claude-opus-4-5 to claude-opus-4-6 in workflow ([ArcadeData#909](https://redirect.github.com/anthropics/claude-code-action/issues/909))
* See full diff in [compare view](anthropics/claude-code-action@6c61301...ea36d6a)
  
Updates `github/codeql-action` from 4.32.2 to 4.32.3
Release notes

*Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).*

> v4.32.3
> -------
>
> * Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [ArcadeData#3466](https://redirect.github.com/github/codeql-action/pull/3466)


Changelog

*Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.32.3 - 13 Feb 2026
> --------------------
>
> * Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [ArcadeData#3466](https://redirect.github.com/github/codeql-action/pull/3466)
>
> 4.32.2 - 05 Feb 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.1). [ArcadeData#3460](https://redirect.github.com/github/codeql-action/pull/3460)
>
> 4.32.1 - 02 Feb 2026
> --------------------
>
> * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [ArcadeData#3422](https://redirect.github.com/github/codeql-action/pull/3422)
> * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [ArcadeData#3421](https://redirect.github.com/github/codeql-action/pull/3421)
>
> 4.32.0 - 26 Jan 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [ArcadeData#3425](https://redirect.github.com/github/codeql-action/pull/3425)
>
> 4.31.11 - 23 Jan 2026
> ---------------------
>
> * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [ArcadeData#3409](https://redirect.github.com/github/codeql-action/pull/3409)
> * Improved error handling throughout the CodeQL Action. [ArcadeData#3415](https://redirect.github.com/github/codeql-action/pull/3415)
> * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [ArcadeData#3318](https://redirect.github.com/github/codeql-action/pull/3318)
> * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [ArcadeData#3403](https://redirect.github.com/github/codeql-action/pull/3403)
>
> 4.31.10 - 12 Jan 2026
> ---------------------
>
> * Update default CodeQL bundle version to 2.23.9. [ArcadeData#3393](https://redirect.github.com/github/codeql-action/pull/3393)
>
> 4.31.9 - 16 Dec 2025
> --------------------
>
> No user facing changes.
>
> 4.31.8 - 11 Dec 2025
> --------------------
>
> * Update default CodeQL bundle version to 2.23.8. [ArcadeData#3354](https://redirect.github.com/github/codeql-action/pull/3354)
>
> 4.31.7 - 05 Dec 2025
> --------------------
>
> * Update default CodeQL bundle version to 2.23.7. [ArcadeData#3343](https://redirect.github.com/github/codeql-action/pull/3343)
>
> 4.31.6 - 01 Dec 2025
> --------------------

... (truncated)


Commits

* [`9e907b5`](github/codeql-action@9e907b5) Merge pull request [ArcadeData#3479](https://redirect.github.com/github/codeql-action/issues/3479) from github/update-v4.32.3-4bf6fa4e2
* [`1814c9f`](github/codeql-action@1814c9f) Update changelog for v4.32.3
* [`4bf6fa4`](github/codeql-action@4bf6fa4) Merge pull request [ArcadeData#3478](https://redirect.github.com/github/codeql-action/issues/3478) from github/mbg/changelog/add-connection-test-entry
* [`9658e23`](github/codeql-action@9658e23) Merge pull request [ArcadeData#3476](https://redirect.github.com/github/codeql-action/issues/3476) from github/henrymercer/retry-auth-errors
* [`be75dd9`](github/codeql-action@be75dd9) Add changelog entry for [ArcadeData#3466](https://redirect.github.com/github/codeql-action/issues/3466)
* [`05bca54`](github/codeql-action@05bca54) Apply suggestion from [`@​Copilot`](https://github.com/Copilot)
* [`2d6b98c`](github/codeql-action@2d6b98c) Merge pull request [ArcadeData#3475](https://redirect.github.com/github/codeql-action/issues/3475) from github/henrymercer/retry-auth-errors
* [`876cecb`](github/codeql-action@876cecb) Avoid requesting features in CCR
* [`43b46a1`](github/codeql-action@43b46a1) Retry API authentication errors since these can be transient
* [`8ad4b6e`](github/codeql-action@8ad4b6e) Merge pull request [ArcadeData#3472](https://redirect.github.com/github/codeql-action/issues/3472) from github/dependabot/github\_actions/dot-github/wor...
* Additional commits viewable in [compare view](github/codeql-action@45cbd0c...9e907b5)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants