Merge remote-tracking branch 'upstream/main' into CI/TrrigerByLabel

Signed-off-by: Yury-Fridlyand <[email protected]>

.github/codeql/codeql-config.yml

@@ -0,0 +1,2 @@
+paths-ignore:
+    - "examples/kotlin/*"

.github/json_matrices/build-matrix.json

@@ -5,7 +5,7 @@
         "RUNNER": "ubuntu-latest",
         "ARCH": "x64",
         "TARGET": "x86_64-unknown-linux-gnu",
-        "PACKAGE_MANAGERS": ["pypi", "npm"],
+        "PACKAGE_MANAGERS": ["pypi", "npm", "maven"]
         "run": "always",
         "languages": ["python", "node", "java", "go", "dotnet"]
     },
@@ -15,7 +15,7 @@
         "RUNNER": ["self-hosted", "Linux", "ARM64"],
         "ARCH": "arm64",
         "TARGET": "aarch64-unknown-linux-gnu",
-        "PACKAGE_MANAGERS": ["pypi", "npm"],
+        "PACKAGE_MANAGERS": ["pypi", "npm", "maven"],
         "CONTAINER": "2_28",
         "languages": ["python", "node", "java", "go", "dotnet"]
     },
@@ -25,7 +25,7 @@
         "RUNNER": "macos-12",
         "ARCH": "x64",
         "TARGET": "x86_64-apple-darwin",
-        "PACKAGE_MANAGERS": ["pypi", "npm"],
+        "PACKAGE_MANAGERS": ["pypi", "npm", "maven"],
         "languages": ["python", "node", "java", "go", "dotnet"]
     },
     {
@@ -34,7 +34,7 @@
         "RUNNER": "macos-latest",
         "ARCH": "arm64",
         "TARGET": "aarch64-apple-darwin",
-        "PACKAGE_MANAGERS": ["pypi", "npm"],
+        "PACKAGE_MANAGERS": ["pypi", "npm", "maven"],
         "languages": ["python", "node", "java", "go", "dotnet"]
     },
     {

.github/workflows/codeql.yml

@@ -0,0 +1,63 @@
+name: "CodeQL"
+
+on:
+    push:
+        branches: 
+          - "main"
+          - "v.?[0-9]+.[0-9]+.[0-9]+"
+          - "v.?[0-9]+.[0-9]+"
+          - "v?[0-9]+.[0-9]+.[0-9]+"
+          - "v?[0-9]+.[0-9]+"
+    pull_request:
+        branches: 
+          - "main"
+          - "v.?[0-9]+.[0-9]+.[0-9]+"
+          - "v.?[0-9]+.[0-9]+"
+          - "v?[0-9]+.[0-9]+.[0-9]+"
+          - "v?[0-9]+.[0-9]+"
+    schedule:
+        - cron: "37 18 * * 6"
+
+jobs:
+    analyze:
+        name: Analyze (${{ matrix.language }})
+        runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+        permissions:
+            # required for all workflows
+            security-events: write
+
+        strategy:
+            fail-fast: false
+            matrix:
+                include:
+                    - language: csharp
+                      build-mode: none
+                    - language: go
+                      build-mode: autobuild
+                    - language: java-kotlin
+                      build-mode: none # This mode only analyzes Java. Set this to 'autobuild' or 'manual' to analyze Kotlin too.
+                    - language: javascript-typescript
+                      build-mode: none
+                    - language: python
+                      build-mode: none
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+
+            # Initializes the CodeQL tools for scanning.
+            - name: Initialize CodeQL
+              uses: github/codeql-action/init@v3
+              with:
+                  languages: ${{ matrix.language }}
+                  build-mode: ${{ matrix.build-mode }}
+                  config-file: .github/codeql/codeql-config.yml
+
+            - if: matrix.build-mode == 'manual'
+              shell: bash
+              run: |
+                  echo 'TODO: build commands for all java and kotlin codes.'
+
+            - name: Perform CodeQL Analysis
+              uses: github/codeql-action/analyze@v3
+              with:
+                  category: "/language:${{matrix.language}}"