Bring protegrity/arrow main branch up to date

.clang-format

@@ -20,3 +20,4 @@ ColumnLimit: 90
 DerivePointerAlignment: false
 IncludeBlocks: Preserve
 IndentPPDirectives: AfterHash
+QualifierAlignment: Left

.clang-tidy

@@ -27,7 +27,6 @@ Checks: |
 # produce HeaderFilterRegex from cpp/build-support/lint_exclusions.txt with:
 # echo -n '^('; sed -e 's/*/\.*/g' cpp/build-support/lint_exclusions.txt | tr '\n' '|'; echo ')$'
 HeaderFilterRegex: '^(.*codegen.*|.*_generated.*|.*windows_compatibility.h|.*pyarrow_api.h|.*pyarrow_lib.h|.*python/config.h|.*python/platform.h|.*thirdparty/ae/.*|.*vendored/.*|.*RcppExports.cpp.*|)$'
-AnalyzeTemporaryDtors: true
 CheckOptions:
   - key:             google-readability-braces-around-statements.ShortStatementLines
     value:           '1'

.editorconfig

@@ -50,15 +50,6 @@ indent_style = space
 indent_size = 2
 indent_style = space
 
-[*.go]
-indent_size = 8
-indent_style = tab
-tab_width = 8
-
-[*.{js,ts}]
-indent_size = 4
-indent_style = space
-
 [*.{py,pyx,pxd,pxi}]
 indent_size = 4
 indent_style = space

.env

@@ -37,6 +37,10 @@ DOCKER_BUILDKIT=1
 ARCH=amd64
 ARCH_ALIAS=x86_64
 ARCH_SHORT=amd64
+# For aarch64
+# ARCH=arm64v8
+# ARCH_ALIAS=aarch64
+# ARCH_SHORT=arm64
 
 # Default repository to pull and push images from
 REPO=apache/arrow-dev
@@ -47,14 +51,14 @@ ULIMIT_CORE=-1
 
 # Default versions for platforms
 ALMALINUX=8
-ALPINE_LINUX=3.18
+ALPINE_LINUX=3.22
 DEBIAN=12
-FEDORA=39
+FEDORA=42
 UBUNTU=22.04
 
 # Default versions for various dependencies
 CLANG_TOOLS=14
-CMAKE=3.25.0
+CMAKE=3.26.0
 CUDA=11.7.1
 DASK=latest
 DOTNET=8.0
@@ -65,14 +69,15 @@ KARTOTHEK=latest
 # LLVM 12 and GCC 11 reports -Wmismatched-new-delete.
 LLVM=18
 MAVEN=3.8.7
-NODE=18
+NODE=20
 NUMBA=latest
+NUMBA_CUDA=latest
 NUMPY=latest
 PANDAS=latest
-PYTHON=3.9
-PYTHON_IMAGE_TAG=3.9
-PYTHON_ABI_TAG=cp39
-R=4.4
+PYTHON=3.10
+PYTHON_IMAGE_TAG=3.10
+PYTHON_ABI_TAG=cp310
+R=4.5
 SPARK=master
 TURBODBC=latest
 
@@ -82,6 +87,7 @@ R_ORG=rhub
 R_TAG=latest
 
 # Env vars for R builds
+R_UPDATE_CLANG=false
 R_CUSTOM_CCACHE=false
 ARROW_R_DEV=TRUE
 R_PRUNE_DEPS=FALSE
@@ -90,14 +96,14 @@ TZ=UTC
 # Used through docker-compose.yml and serves as the default version for the
 # ci/scripts/install_vcpkg.sh script. Prefer to use short SHAs to keep the
 # docker tags more readable.
-VCPKG="f7423ee180c4b7f40d43402c2feb3859161ef625"    # 2024.06.15 Release
+VCPKG="4334d8b4c8916018600212ab4dd4bbdc343065d1"    # 2025.09.17 Release
 
 # This must be updated when we update
 # ci/docker/python-*-windows-*.dockerfile or the vcpkg config.
 # This is a workaround for our CI problem that "archery docker build" doesn't
 # use pulled built images in dev/tasks/python-wheels/github.windows.yml.
-PYTHON_WHEEL_WINDOWS_IMAGE_REVISION=2025-02-25
-PYTHON_WHEEL_WINDOWS_TEST_IMAGE_REVISION=2025-02-25
+PYTHON_WHEEL_WINDOWS_IMAGE_REVISION=2025-10-13
+PYTHON_WHEEL_WINDOWS_TEST_IMAGE_REVISION=2025-10-13
 
 # Use conanio/${CONAN_BASE}:{CONAN_VERSION} for "docker compose run --rm conan".
 # See https://github.com/conan-io/conan-docker-tools#readme and

.gitattributes

@@ -1,4 +1,5 @@
 cpp/src/arrow/util/bpacking_*_generated.h linguist-generated=true
+cpp/src/parquet/chunker_*_generated.h linguist-generated=true
 cpp/src/generated/*.cpp linguist-generated=true
 cpp/src/generated/*.h linguist-generated=true
 go/**/*.s linguist-generated=true

.github/CODEOWNERS

@@ -33,16 +33,12 @@
 /cpp/src/arrow/engine @westonpace
 /cpp/src/arrow/flight/ @lidavidm
 /cpp/src/parquet @wgtmac
-/csharp/ @curthagenlocher
-/go/ @zeroshade
-/java/ @lidavidm
-/js/ @domoritz @trxcllnt
 /matlab/ @kevingurney @kou @sgilmore10
+/python/ @AlenkaF @raulcd @rok
 /python/pyarrow/_flight.pyx @lidavidm
 /python/pyarrow/**/*gandiva* @wjones127
 /r/ @jonkeane @thisisnic
 /ruby/ @kou
-/swift/ @kou
 
 # Docs
 # /docs/

.github/dependabot.yml

@@ -24,41 +24,3 @@ updates:
     commit-message:
       prefix: "MINOR: [CI] "
     open-pull-requests-limit: 10
-  - package-ecosystem: "gomod"
-    directory: "/swift/CDataWGo/"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: "MINOR: [Swift] "
-    open-pull-requests-limit: 10
-  - package-ecosystem: "gomod"
-    directory: "/swift/data-generator/swift-datagen/"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: "MINOR: [Swift] "
-    open-pull-requests-limit: 10
-  - package-ecosystem: "npm"
-    directory: "/js/"
-    schedule:
-      interval: "monthly"
-    commit-message:
-      prefix: "MINOR: [JS] "
-    open-pull-requests-limit: 10
-  - package-ecosystem: "nuget"
-    directory: "/csharp/"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: "MINOR: [C#] "
-    open-pull-requests-limit: 10
-    ignore:
-      - dependency-name: "Microsoft.Extensions.*"
-        update-types:
-          - "version-update:semver-major"
-      - dependency-name: "Microsoft.Bcl.*"
-        update-types:
-          - "version-update:semver-major"
-      - dependency-name: "System.*"
-        update-types:
-          - "version-update:semver-major"

.github/workflows/archery.yml

@@ -58,16 +58,16 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout Arrow
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Git Fixup
         shell: bash
         run: git branch $ARCHERY_DEFAULT_BRANCH origin/$ARCHERY_DEFAULT_BRANCH || true
       - name: Setup Python
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v6.0.0
         with:
-          python-version: '3.9'
+          python-version: '3.12'
       - name: Install pygit2 binary wheel
         run: pip install pygit2 --only-binary pygit2
       - name: Install Archery, Crossbow- and Test Dependencies

.github/workflows/check_labels.yml

@@ -0,0 +1,75 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+name: Check Labels Reusable
+
+on:
+  workflow_call:
+    inputs:
+      parent-workflow:
+        description: "The parent workflow filename (without .yml)"
+        required: true
+        type: string
+    outputs:
+      ci-extra-labels:
+        description: "The extra CI labels"
+        value: ${{ jobs.check-labels.outputs.ci-extra-labels }}
+      force:
+        description: "Whether to force running the jobs"
+        value: ${{ jobs.check-labels.outputs.force }}
+
+jobs:
+  check-labels:
+    name: Check labels
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      ci-extra-labels: ${{ steps.check.outputs.ci-extra-labels }}
+      force: ${{ steps.check.outputs.force }}
+    steps:
+      - name: Checkout Arrow
+        if: github.event_name == 'pull_request'
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Check
+        id: check
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -ex
+          case "${GITHUB_EVENT_NAME}" in
+            push|schedule|workflow_dispatch)
+              echo "force=true" >> "${GITHUB_OUTPUT}"
+              ;;
+            pull_request)
+              {
+                echo "ci-extra-labels<<LABELS"
+                gh pr view ${{ github.event.number }} \
+                  --jq '[.labels[].name | select(startswith("CI: Extra"))]' \
+                  --json labels \
+                  --repo ${GITHUB_REPOSITORY}
+                echo "LABELS"
+              } >> "${GITHUB_OUTPUT}"
+              git fetch origin ${GITHUB_BASE_REF}
+              git diff --stat origin/${GITHUB_BASE_REF}..
+              if git diff --stat origin/${GITHUB_BASE_REF}.. | \
+                   grep \
+                     --fixed-strings ".github/workflows/${{ inputs.parent-workflow }}.yml" \
+                     --quiet; then
+                echo "force=true" >> "${GITHUB_OUTPUT}"
+              fi
+              ;;
+          esac

.github/workflows/comment_bot.yml

@@ -36,20 +36,20 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout Arrow
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           path: arrow
           # fetch the tags for version number generation
           fetch-depth: 0
       - name: Set up Python
-        uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: 3.12
       - name: Install Archery and Crossbow dependencies
         run: pip install -e arrow/dev/archery[bot]
       - name: Handle GitHub comment event
         env:
-          ARROW_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CROSSBOW_GITHUB_TOKEN: ${{ secrets.CROSSBOW_GITHUB_TOKEN }}
         run: |
           archery --debug trigger-bot \
@@ -63,7 +63,7 @@ jobs:
     if: github.event.comment.body == 'take'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |