Merge upstream main into feat/generate-sn6-schema-validation

Resolved conflicts in 4 files:
- score_sync_toml/__init__.py: keep needscfg_exclude_vars (PR) + use .append() (upstream)
- score_metamodel/__init__.py: use upstream SN6 API (needs_links/needs_fields), remove Any import
- score_source_code_linker/__init__.py: use upstream module_grouped_needs.repo + 2-arg get_github_link
- requirements.rst: keep needextend for metamodel.yaml source_code_link (PR feature)

Author: Arnaud Riess

.bazelversion

@@ -1 +1 @@
-8.3.0
+8.4.2

.devcontainer/devcontainer.json

@@ -1,5 +1,5 @@
 {
     "name": "eclipse-s-core",
-    "image": "ghcr.io/eclipse-score/devcontainer:1.0.0",
+    "image": "ghcr.io/eclipse-score/devcontainer:v1.2.0",
     "updateContentCommand": "bazel run //:ide_support"
 }

.github/actions/link-check/action.yml

@@ -1,3 +1,15 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
 name: 'Link Check and Automated Issue'
 description: 'Checks links, parses results, and creates or updates an issue with findings.'
 inputs:

.github/actions/link-check/link_check.sh

@@ -1,3 +1,15 @@
 #!/usr/bin/env bash
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
 set -e
 bazel run //:docs_link_check > linkcheck_output.txt || true

.github/actions/link-check/link_parser.py

@@ -1,3 +1,15 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
 import argparse
 import re
 import sys
@@ -51,18 +63,16 @@ def generate_markdown_table(broken_links: list[BrokenLink]) -> str:
     table += "|----------|-------------|-----------|\n"
 
     for link in broken_links:
-        table += (
-            f"| {link.location} | {link.line_nr} | {link.reasoning} |\n"
-        )
+        table += f"| {link.location} | {link.line_nr} | {link.reasoning} |\n"
 
     return table
 
 
 def generate_issue_body(broken_links: list[BrokenLink]) -> str:
     markdown_table = generate_markdown_table(broken_links)
     return f"""
-# Broken Links Report. 
-**Last updated: {datetime.now().strftime('%d-%m-%Y %H:%M')}**
+# Broken Links Report.
+**Last updated: {datetime.now().strftime("%d-%m-%Y %H:%M")}**
 
 The following broken links were detected in the documentation:
 {markdown_table}
@@ -71,9 +81,10 @@ def generate_issue_body(broken_links: list[BrokenLink]) -> str:
 
 > To test locally if all link issues are resolved use `bazel run //:docs_link_check`
 
---- 
+---
 This issue will be auto updated regularly if link issues are found.
-You may close it if you wish, though a new one will be created if link issues are still present. 
+You may close it if you wish.
+Though a new one will be created if link issues are still present.
 
 """
 
@@ -85,11 +96,11 @@ def strip_ansi_codes(text: str) -> str:
 
 
 if __name__ == "__main__":
-    argparse = argparse.ArgumentParser(
+    arg = argparse.ArgumentParser(
         description="Parse broken links from Sphinx log and generate issue body."
     )
-    argparse.add_argument("logfile", type=str, help="Path to the Sphinx log file.")
-    args = argparse.parse_args()
+    arg.add_argument("logfile", type=str, help="Path to the Sphinx log file.")
+    args = arg.parse_args()
     with open(args.logfile) as f:
         log_content_raw = f.read()
     log_content = strip_ansi_codes(log_content_raw)

.github/workflows/copyright.yml .github/workflows/bzlmod-lock.yml.github/workflows/copyright.yml renamed to .github/workflows/bzlmod-lock.yml

@@ -10,15 +10,19 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 # *******************************************************************************
-
-name: Copyright checks
+name: Bzlmod Lockfile Check
+permissions:
+  contents: read
 on:
   pull_request:
     types: [opened, reopened, synchronize]
   merge_group:
     types: [checks_requested]
+  push:
+    branches:
+      - main
 jobs:
-  copyright-check:
-    uses: eclipse-score/cicd-workflows/.github/workflows/copyright.yml@main
+  bzlmod-lock:
+    uses: eclipse-score/cicd-workflows/.github/workflows/bzlmod-lock-check.yml@c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0
     with:
-      bazel-target: "run //:copyright.check"
+      working-directory: .

.github/workflows/consumer_test.yml

@@ -33,19 +33,38 @@ jobs:
 
       - name: Prepare Python
         run: |
-          bazel run //:ide_support
+          bazel run --lockfile_mode=error //:ide_support
 
       - name: Prepare report directory
         run: |
           mkdir -p reports
 
-      # The pipefail ensures that non 0 exit codes inside the pytest execution get carried into the pipe 
+      # The pipefail ensures that non 0 exit codes inside the pytest execution get carried into the pipe
       # & make the tests red in the end. Without this we only would check the exit code of the 'tee' command.
       - name: Run Consumer tests
 
         run: |
-          set -o pipefail
-          .venv_docs/bin/python -m pytest -s -v src/tests/ --repo="$CONSUMER" --junitxml="reports/${{ matrix.consumer }}.xml" | tee "reports/${{ matrix.consumer }}.log"
+          pytest_rc=0
+          .venv_docs/bin/python -m pytest -vv src/tests/ \
+          --repo="$CONSUMER" \
+          --junitxml="reports/${{ matrix.consumer }}.xml" \
+          || pytest_rc=$?
+
+
+          if [ -f "consumer_test.log" ]; then
+            src_log="consumer_test.log"
+          else
+            echo "consumer_test.log not found; expected at ./consumer_test.log"
+          exit ${pytest_rc:-1}
+          fi
+
+          dest_log="reports/${{ matrix.consumer }}.log"
+          mv "$src_log" "$dest_log"
+
+          tail -n 15 "$dest_log" >> "$GITHUB_STEP_SUMMARY"
+
+          cat "$dest_log"
+          exit $pytest_rc
         env:
           FORCE_COLOR: "1"
           TERM: xterm-256color

.github/workflows/daily.yml

@@ -0,0 +1,40 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+
+name: Daily Maintenance
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  pages: write
+  id-token: write
+
+on:
+  # Runs every day at midnight UTC
+  schedule:
+    - cron: '0 0 * * *'
+
+  # On changes to this workflow file
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '.github/workflows/daily.yml'
+
+  # Manually trigger the workflow from the GitHub UI
+  workflow_dispatch: {}
+
+jobs:
+  maintenance:
+    uses: eclipse-score/cicd-workflows/.github/workflows/daily.yml@829b3e11ccbf924a5782f7bfed647cb1619fdf78 # v0.0.1

.github/workflows/format.yml

@@ -25,9 +25,9 @@ permissions:
 
 jobs:
   license-check:
-    uses: eclipse-score/cicd-workflows/.github/workflows/license-check.yml@main
+    uses: eclipse-score/cicd-workflows/.github/workflows/license-check.yml@c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0
     with:
       repo-url: "${{ github.server_url }}/${{ github.repository }}"
-      bazel-target: "run //src:license-check"
+      bazel-target: "run --lockfile_mode=error //src:license-check"
     secrets:
       dash-api-token: ${{ secrets.ECLIPSE_GITLAB_API_TOKEN }}