backport: -> LTS v1.4

.github/workflows/publish.yml

@@ -16,6 +16,7 @@ jobs:
     timeout-minutes: 30
     permissions:
       contents: write
+      id-token: write  # Required for OIDC trusted publishing
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -30,6 +31,9 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 22.x
+          registry-url: 'https://registry.npmjs.org/'
+      - name: Upgrade npm for OIDC support
+        run: npm install -g [email protected]
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "dir=$(yarn cache dir)" >> "$GITHUB_OUTPUT"
@@ -59,12 +63,10 @@ jobs:
         run: yarn lerna run --concurrency 1 build
         env:
           NODE_OPTIONS: --max_old_space_size=4096
-      - name: Set NPM token
-        run: echo //registry.npmjs.org/:_authToken="$NPM_TOKEN" > ~/.npmrc
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: NPM publish
         run: ./node_modules/.bin/lerna publish from-package --yes
+        env:
+          NPM_CONFIG_PROVENANCE: true
 
   native_linux:
     # Please use minimal possible version of ubuntu, because it produces constraint on glibc
@@ -153,16 +155,17 @@ jobs:
     strategy:
       matrix:
         node-version: [22.x]
-        os-version: ["macos-13"]
         target: ["x86_64-apple-darwin", "aarch64-apple-darwin"]
         python-version: ["3.9", "3.10", "3.11", "3.12", "fallback"]
         include:
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             package_target_arch: x64
             package_target_platform: darwin
             package_target_libc: unknown
             tar_executable: gtar
           - target: aarch64-apple-darwin
+            os-version: macos-14
             package_target_arch: arm64
             package_target_platform: darwin
             package_target_libc: unknown
@@ -590,27 +593,31 @@ jobs:
           - x86_64-unknown-linux-musl
           - aarch64-unknown-linux-gnu
         include:
-          - target: x86_64-unknown-linux-gnu
-            os: ubuntu-24.04
+          # Please use minimal possible version of ubuntu, because it produces constraint on glibc
+          - os: ubuntu-22.04
+            target: x86_64-unknown-linux-gnu
+            image: cubejs/rust-cross:x86_64-unknown-linux-gnu-15082024
             executable_name: cubestored
             strip: true
             compress: false
-          - target: x86_64-unknown-linux-musl
-            os: ubuntu-24.04
+          - os: ubuntu-22.04
+            target: x86_64-unknown-linux-musl
+            image: cubejs/rust-cross:x86_64-unknown-linux-musl-15082024
             executable_name: cubestored
             strip: true
             # cubestored: CantPackException: bad DT_HASH nbucket=0x344  len=0x1890
             compress: false
-          - target: aarch64-unknown-linux-gnu
-            os: ubuntu-24.04
+          - os: ubuntu-24.04-arm
+            image: cubejs/rust-builder:bullseye-llvm-18
+            target: aarch64-unknown-linux-gnu
             executable_name: cubestored
             # Unable to recognise the format of the input file `rust/cubestore/target/aarch64-unknown-linux-gnu/release/cubestored'
             strip: false
             # UPX is broken, issue https://github.com/cube-js/cube/issues/4474
             compress: false
       fail-fast: false
     container:
-      image: cubejs/rust-cross:${{ matrix.target }}-15082024
+      image: ${{ matrix.image }}
     permissions:
       contents: write
     steps:
@@ -626,7 +633,7 @@ jobs:
       - uses: Swatinem/rust-cache@v2
         with:
           workspaces: ./rust/cubestore -> target
-          prefix-key: v0-rust-cubestore-cross
+          prefix-key: v1-rust-cubestore-cross
           key: target-${{ matrix.target }}
       - name: Build with Cargo
         run: |
@@ -678,7 +685,7 @@ jobs:
             tar_executable: tar
             # Please use minimal possible version of macOS, because it produces constraint on libstdc++
           - target: x86_64-apple-darwin
-            os: macos-13
+            os: macos-15-intel
             executable_name: cubestored
             # upx has been disabled because it is crashing for macOS Ventura or above! It was disabled on 2024-09-05.
             strip: false

.github/workflows/rust-cubesql.yml

@@ -232,20 +232,25 @@ jobs:
       matrix:
         # We do not need to test under all versions, we do it under linux
         node-version: [22.x]
-        os-version: ["macos-14"]
         target: ["x86_64-apple-darwin", "aarch64-apple-darwin"]
         include:
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             python-version: "3.9"
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             python-version: "3.10"
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             python-version: "3.11"
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             python-version: "3.12"
           - target: x86_64-apple-darwin
+            os-version: macos-15-intel
             python-version: "fallback"
           - target: aarch64-apple-darwin
+            os-version: macos-14
             python-version: "fallback"
       fail-fast: false
 

.github/workflows/rust-cubestore-master.yml

@@ -180,7 +180,7 @@ jobs:
             # cubestored.exe: CantPackException: superfluous data between sections
             compress: false
             # Please use minimal possible version of macOS, because it produces constraint on libstdc++
-          - os: macos-13
+          - os: macos-15-intel
             target: x86_64-apple-darwin
             executable_name: cubestored
             # upx has been disabled because it is crashing for macOS Ventura or above! It was disabled on 2024-09-05.
@@ -264,16 +264,19 @@ jobs:
           # Please use minimal possible version of ubuntu, because it produces constraint on glibc
           - os: ubuntu-22.04
             target: x86_64-unknown-linux-gnu
+            image: cubejs/rust-cross:x86_64-unknown-linux-gnu-15082024
             executable_name: cubestored
             strip: true
             compress: false
           - os: ubuntu-22.04
             target: x86_64-unknown-linux-musl
+            image: cubejs/rust-cross:x86_64-unknown-linux-musl-15082024
             executable_name: cubestored
             strip: true
             # cubestored: CantPackException: bad DT_HASH nbucket=0x344  len=0x1890
             compress: false
-          - os: ubuntu-22.04
+          - os: ubuntu-24.04-arm
+            image: cubejs/rust-builder:bullseye-llvm-18
             target: aarch64-unknown-linux-gnu
             executable_name: cubestored
             # Unable to recognise the format of the input file `rust/cubestore/target/aarch64-unknown-linux-gnu/release/cubestored'
@@ -282,7 +285,7 @@ jobs:
             compress: false
       fail-fast: false
     container:
-      image: cubejs/rust-cross:${{ matrix.target }}-15082024
+      image: ${{ matrix.image }}
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
@@ -296,7 +299,7 @@ jobs:
       - uses: Swatinem/rust-cache@v2
         with:
           workspaces: ./rust/cubestore -> target
-          prefix-key: v0-rust-cubestore-cross
+          prefix-key: v1-rust-cubestore-cross
           key: target-${{ matrix.target }}
       - name: Build with Cargo
         run: |

.github/workflows/rust-cubestore.yml

@@ -119,7 +119,7 @@ jobs:
             # cubestored.exe: CantPackException: superfluous data between sections
             compress: false
             # Please use minimal possible version of macOS, because it produces constraint on libstdc++
-          - os: macos-13
+          - os: macos-15-intel
             target: x86_64-apple-darwin
             executable_name: cubestored
             # upx has been disabled because it is crashing for macOS Ventura or above! It was disabled on 2024-09-05.
@@ -203,16 +203,19 @@ jobs:
           # Please use minimal possible version of ubuntu, because it produces constraint on glibc
           - os: ubuntu-22.04
             target: x86_64-unknown-linux-gnu
+            image: cubejs/rust-cross:x86_64-unknown-linux-gnu-15082024
             executable_name: cubestored
             strip: true
             compress: false
           - os: ubuntu-22.04
             target: x86_64-unknown-linux-musl
+            image: cubejs/rust-cross:x86_64-unknown-linux-musl-15082024
             executable_name: cubestored
             strip: true
             # cubestored: CantPackException: bad DT_HASH nbucket=0x344  len=0x1890
             compress: false
-          - os: ubuntu-22.04
+          - os: ubuntu-24.04-arm
+            image: cubejs/rust-builder:bullseye-llvm-18
             target: aarch64-unknown-linux-gnu
             executable_name: cubestored
             # Unable to recognise the format of the input file `rust/cubestore/target/aarch64-unknown-linux-gnu/release/cubestored'
@@ -221,7 +224,7 @@ jobs:
             compress: false
       fail-fast: false
     container:
-      image: cubejs/rust-cross:${{ matrix.target }}-15082024
+      image: ${{ matrix.image }}
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
@@ -235,7 +238,7 @@ jobs:
       - uses: Swatinem/rust-cache@v2
         with:
           workspaces: ./rust/cubestore -> target
-          prefix-key: v0-rust-cubestore-cross
+          prefix-key: v1-rust-cubestore-cross
           key: target-${{ matrix.target }}
       - name: Build with Cargo
         run: |

package.json

@@ -10,7 +10,8 @@
     ],
     "nohoist": [
       "packages/cubejs-client-ngx/*",
-      "**/vue/*"
+      "**/vue/*",
+      "**/inquirer"
     ]
   },
   "scripts": {
@@ -27,7 +28,7 @@
   "author": "Cube Dev, Inc.",
   "dependencies": {
     "core-js": "^3.34.0",
-    "lerna": "^8.2.2"
+    "lerna": "^9.0.0"
   },
   "files": [
     "src",

packages/cubejs-api-gateway/package.json

@@ -49,7 +49,8 @@
     "nexus": "^1.1.0",
     "node-fetch": "^2.6.1",
     "ramda": "^0.27.0",
-    "uuid": "^8.3.2"
+    "uuid": "^8.3.2",
+    "zod": "^4.1.13"
   },
   "devDependencies": {
     "@cubejs-backend/linter": "1.4.0",