Pg 16 sync main (#793)

* Use `charmcraft test` & concierge (#762)

* Update charmcraft.yaml build tools (#760)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [DPE-6020] Better promote-to-primary unit scope error handling (#759)

* Bump libs

* Flip default scope

* Better action failure

* Wrong attr

* Revert scope

* Bump libs

* Handle async replica switchover

* Unit tests

* Bump cosl

* Disable Nextcloud test (#767)

* Update canonical/data-platform-workflows action to v30 (#770)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Use _promote_charm.yaml (#771)

Use `charmcraft promote` and auto-generate release notes

* [DPE-5827] Set all nodes to synchronous replicas (#672)

* Set all nodes to synchronous replicas

* Fix template var

* Also change config patching

* Update sync nodes during upgrade

* Revert are_writes_increasing changes

* Add back logging

* Try without logs

* Tactical sleep

* Log removal error

* Remove logs

* Tweak replication test

* Pass down unit

* Wait for test app to idle

* Add comment

* Port config changes

* Copy policy test

* Fix import

* Missed param removal

* Unit test

* Missing attr

* Add logs

* Add timeout to connection

* Log conn str

* Fix num of standbys

* Charm fixture

* Remove stepdown hook

* Config description

* Revert conn str

* Add async scaling test

* Typo

* Don't remove standby and primary

* Update dependency psutil to v7 (#772)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency cryptography to v44.0.1 [SECURITY] (#764)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update canonical/data-platform-workflows action to v30.0.2 (#765)

* Update canonical/data-platform-workflows action to v30.0.2

* Update promote.yaml

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Carl Csaposs <carl.csaposs@canonical.com>

* [DPE-6323] Handle missing stanza output (#727)

* Handle missing stanza output

* Update libs

* Unit tests

* Update canonical/has-signed-canonical-cla action to v2 (#773)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [MISC] Define charm constants (#774)

* Lock file maintenance Python dependencies (#743)

* Lock file maintenance Python dependencies

* Backoff boto3 1.36

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dragomir Penev <dragomir.penev@canonical.com>

* Update charmcraft.yaml build tools (#768)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update canonical/data-platform-workflows action to v30.1.3 (#776)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency uv to v0.6.3 (#780)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [MISC] Sanitize PostgreSQL extra-user-roles arg (#782)

* [MISC] Fix PostgreSQL lib function signature (#786)

* [MISC] Skip backup and subordinate tests without creds (#789)

* Bump libs

* Skip backup tests without creds

* Skip subordinate tests

* Update tests/integration/test_subordinates.py

Co-authored-by: Carl Csaposs <carl.csaposs@canonical.com>

---------

Co-authored-by: Carl Csaposs <carl.csaposs@canonical.com>

* Update dependency jinja2 to v3.1.6 [SECURITY] (#788)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Disable cache

* Reduce required approvals on Renovate pull requests by 1 (#787)

* Sync docs from Discourse (#748)

Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>

* Cleanup juju 2 tests

* Linting

* Integration test diffs

* Try with series for ubuntu pro subordinate

* Filter terminated units

* Bump PG version

* Disable pgaudit for timescale and postgis

* Linting

* Remove tests

* Remove param for secrets

* Linting

* Idle when disabling pgaudit

* Actually disable audit

* Disable timescale in object test

* Try to disable plugins between tests

* Update canonical/data-platform-workflows action to v30.2.0 (#792)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Try to disable pgaudit in general

---------

Co-authored-by: Carl Csaposs <carl.csaposs@canonical.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Sinclert Pérez <sinclert.perez@canonical.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: 5 people

.github/release.yaml

@@ -0,0 +1,8 @@
+changelog:
+  categories:
+    - title: Features
+      labels:
+        - enhancement
+    - title: Bug fixes
+      labels:
+        - bug

.github/workflows/approve_renovate_pr.yaml

@@ -0,0 +1,15 @@
+# Copyright 2025 Canonical Ltd.
+# See LICENSE file for licensing details.
+name: Approve Renovate pull request
+
+on:
+  pull_request:
+    types:
+      - opened
+
+jobs:
+  approve-pr:
+    name: Approve Renovate pull request
+    uses: canonical/data-platform-workflows/.github/workflows/approve_renovate_pr.yaml@v30.2.0
+    permissions:
+      pull-requests: write  # Needed to approve PR

.github/workflows/check_pr.yaml

@@ -0,0 +1,18 @@
+# Copyright 2025 Canonical Ltd.
+# See LICENSE file for licensing details.
+name: Check pull request
+
+on:
+  pull_request:
+    types:
+      - opened
+      - labeled
+      - unlabeled
+      - edited
+    branches:
+      - main
+
+jobs:
+  check-pr:
+    name: Check pull request
+    uses: canonical/data-platform-workflows/.github/workflows/check_charm_pr.yaml@v30.2.0

.github/workflows/ci.yaml

@@ -27,7 +27,7 @@ on:
 jobs:
   lint:
     name: Lint
-    uses: canonical/data-platform-workflows/.github/workflows/lint.yaml@v29.1.0
+    uses: canonical/data-platform-workflows/.github/workflows/lint.yaml@v30.2.0
 
   unit-test:
     name: Unit test charm
@@ -49,47 +49,19 @@ jobs:
 
   build:
     name: Build charm
-    uses: canonical/data-platform-workflows/.github/workflows/build_charm.yaml@v29.1.0
+    uses: canonical/data-platform-workflows/.github/workflows/build_charm.yaml@v30.2.0
     with:
-      cache: false
+      cache: false  # TODO remove when 16/edge branch is set up
+
   integration-test:
-    strategy:
-      fail-fast: false
-      matrix:
-        juju:
-          - agent: 3.6.2  # renovate: juju-agent-pin-minor
-            libjuju: ==3.6.1.0
-            allure_on_amd64: true
-        architecture:
-          - amd64
-        include:
-          - juju:
-              agent: 3.6.2  # renovate: juju-agent-pin-minor
-              allure_on_amd64: true
-            architecture: arm64
-    name: Integration | ${{ matrix.juju.agent }} | ${{ matrix.architecture }}
+    name: Integration test charm
     needs:
       - lint
       - unit-test
       - build
-    uses: canonical/data-platform-workflows/.github/workflows/integration_test_charm.yaml@v29.1.0
+    uses: ./.github/workflows/integration_test.yaml
     with:
       artifact-prefix: ${{ needs.build.outputs.artifact-prefix }}
-      architecture: ${{ matrix.architecture }}
-      cloud: lxd
-      juju-agent-version: ${{ matrix.juju.agent }}
-      libjuju-version-constraint: ${{ matrix.juju.libjuju }}
-      _beta_allure_report: ${{ matrix.juju.allure_on_amd64 && matrix.architecture == 'amd64' }}
-    secrets:
-      integration-test: |
-        {
-          "AWS_ACCESS_KEY": "${{ secrets.AWS_ACCESS_KEY }}",
-          "AWS_SECRET_KEY": "${{ secrets.AWS_SECRET_KEY }}",
-          "GCP_ACCESS_KEY": "${{ secrets.GCP_ACCESS_KEY }}",
-          "GCP_SECRET_KEY": "${{ secrets.GCP_SECRET_KEY }}",
-          "UBUNTU_PRO_TOKEN" : "${{ secrets.UBUNTU_PRO_TOKEN }}",
-          "LANDSCAPE_ACCOUNT_NAME": "${{ secrets.LANDSCAPE_ACCOUNT_NAME }}",
-          "LANDSCAPE_REGISTRATION_KEY": "${{ secrets.LANDSCAPE_REGISTRATION_KEY }}",
-        }
+    secrets: inherit
     permissions:
-      contents: write  # Needed for Allure Report beta
+      contents: write  # Needed for Allure Report

.github/workflows/cla-check.yml

@@ -9,4 +9,4 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check if Canonical's Contributor License Agreement has been signed
-        uses: canonical/has-signed-canonical-cla@v1
+        uses: canonical/has-signed-canonical-cla@v2