Add support for Azure Blob Storage and ADLS Gen2 in Hive connector

.devcontainer/Dockerfile

@@ -0,0 +1,18 @@
+FROM ubuntu:24.04
+
+# Install necessary tools
+RUN apt-get update && apt-get install -y \
+    # Intellij IDEA dev container prerequisites
+	curl \
+	git \
+	unzip \
+    # Java 8 and 17 jdk
+	openjdk-8-jdk \
+    openjdk-17-jdk \
+    # for documentation
+    python3 \
+    python3-pip \
+    python3.12-venv \
+    fonts-freefont-otf \
+    xindy
+

.devcontainer/devcontainer.json

@@ -0,0 +1,6 @@
+{
+    "name": "PrestoDB Dev Container",
+    "build": {
+      "dockerfile": "Dockerfile"
+    }
+}

.github/actions/maven-owasp-scan/action.yml

@@ -0,0 +1,39 @@
+name: Maven OWASP Dependency Check Scan
+description: Runs OWASP dependency check Maven scan with consistent settings
+inputs:
+  working-directory:
+    description: Working directory for Maven command
+    required: false
+    default: .
+  owasp-version:
+    description: OWASP dependency check plugin version
+    required: false
+    default: 12.1.3
+  data-directory:
+    description: OWASP data directory path
+    required: false
+    default: /tmp/.owasp/dependency-check-data
+
+runs:
+  using: composite
+  steps:
+    - name: Run OWASP dependency check
+      env:
+        OWASP_VERSION: ${{ inputs.owasp-version }}
+        OWASP_DATA_DIRECTORY: ${{ inputs.data-directory }}
+      working-directory: ${{ inputs.working-directory }}
+      shell: bash
+      run: |
+        mvn org.owasp:dependency-check-maven:$OWASP_VERSION:aggregate \
+          -DskipTests \
+          -Dformat=JSON \
+          -DprettyPrint=true \
+          -DfailOnError=false \
+          -DossindexAnalyzerEnabled=true \
+          -DnvdApiAnalyzerEnabled=false \
+          -DnodeAnalyzerEnabled=false \
+          -DassemblyAnalyzerEnabled=false \
+          -DcentralAnalyzerEnabled=false \
+          -DnuspecAnalyzerEnabled=false \
+          -DnvdValidForHours=168 \
+          -DdataDirectory=$OWASP_DATA_DIRECTORY

.github/labeler.yml

@@ -1,2 +1,2 @@
 docs:
-  - all: ['**/*.rst']
+  - all: ['**/*.rst']

.github/stale.yml

@@ -2,21 +2,21 @@ staleLabel: stale
 daysUntilClose: 7
 
 pulls:
-    daysUntilStale: 180 # ~6 months
-    markComment: >
-        This pull request has been automatically marked as stale because it has not had
-        recent activity. If you'd still like this PR merged, please comment on the task,
-        make sure you've addressed reviewer comments, and rebase on the latest master.
-        Thank you for your contributions!
+  daysUntilStale: 180 # ~6 months
+  markComment: >
+    This pull request has been automatically marked as stale because it has not had
+    recent activity. If you'd still like this PR merged, please comment on the task,
+    make sure you've addressed reviewer comments, and rebase on the latest master.
+    Thank you for your contributions!
 
 issues:
-    daysUntilStale: 730 # ~2 years
-    exemptLabels:
-        - bug
-    markComment: >
-        This issue has been automatically marked as stale because it has not had
-        any activity in the last 2 years. If you feel that this issue is important,
-        just comment and the stale tag will be removed; otherwise it will be
-        closed in 7 days. This is an attempt to ensure that our open issues remain
-        valuable and relevant so that we can keep track of what needs to be done and
-        prioritize the right things.
+  daysUntilStale: 730 # ~2 years
+  exemptLabels:
+    - bug
+  markComment: >
+    This issue has been automatically marked as stale because it has not had
+    any activity in the last 2 years. If you feel that this issue is important,
+    just comment and the stale tag will be removed; otherwise it will be
+    closed in 7 days. This is an attempt to ensure that our open issues remain
+    valuable and relevant so that we can keep track of what needs to be done and
+    prioritize the right things.

.github/workflows/arrow-flight-tests.yml

@@ -3,14 +3,17 @@ name: arrow flight tests
 on:
   pull_request:
     paths-ignore:
-      - 'presto-docs/**'
+      - presto-docs/**
+
+permissions:
+  contents: read
 
 env:
   CONTINUOUS_INTEGRATION: true
-  MAVEN_OPTS: "-Xmx1024M -XX:+ExitOnOutOfMemoryError"
-  MAVEN_INSTALL_OPTS: "-Xmx2G -XX:+ExitOnOutOfMemoryError"
-  MAVEN_FAST_INSTALL: "-B -V --quiet -T 1C -DskipTests -Dair.check.skip-all --no-transfer-progress -Dmaven.javadoc.skip=true"
-  MAVEN_TEST: "-B -Dair.check.skip-all -Dmaven.javadoc.skip=true -DLogTestDurationListener.enabled=true --no-transfer-progress --fail-at-end"
+  MAVEN_OPTS: -Xmx1024M -XX:+ExitOnOutOfMemoryError
+  MAVEN_INSTALL_OPTS: -Xmx2G -XX:+ExitOnOutOfMemoryError
+  MAVEN_FAST_INSTALL: -B -V --quiet -T 1C -DskipTests -Dair.check.skip-all --no-transfer-progress -Dmaven.javadoc.skip=true
+  MAVEN_TEST: -B -Dair.check.skip-all -Dmaven.javadoc.skip=true -DLogTestDurationListener.enabled=true --no-transfer-progress --fail-at-end
   RETRY: .github/bin/retry
 
 jobs:
@@ -19,9 +22,9 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        java: [ 17.0.15 ]
+        java: [17.0.15]
         modules:
-          - ":presto-base-arrow-flight"  # Only run tests for the `presto-base-arrow-flight` module
+          - :presto-base-arrow-flight # Only run tests for the `presto-base-arrow-flight` module
 
     timeout-minutes: 80
     concurrency:
@@ -33,13 +36,14 @@ jobs:
       - uses: actions/checkout@v4
         with:
           show-progress: false
+          persist-credentials: false
 
       # Set up Java and dependencies for the build environment
       - uses: actions/setup-java@v4
         with:
-          distribution: 'temurin'
+          distribution: temurin
           java-version: ${{ matrix.java }}
-          cache: 'maven'
+          cache: maven
       - name: Download nodejs to maven cache
         run: .github/bin/download_nodejs
 
@@ -56,13 +60,20 @@ jobs:
   prestocpp-linux-build-for-test:
     runs-on: ubuntu-22.04
     container:
-      image: prestodb/presto-native-dependency:0.292-20250204112033-cf8ba84
+      image: prestodb/presto-native-dependency:0.297-202601311423-22d722a9
+    concurrency:
+      group: ${{ github.workflow }}-prestocpp-linux-build-for-test-${{ github.event.pull_request.number }}
+      cancel-in-progress: true
     env:
       CCACHE_DIR: "${{ github.workspace }}/ccache"
       DEPENDENCY_DIR: "${{ github.workspace }}/adapter-deps/download"
       INSTALL_PREFIX: "${{ github.workspace }}/adapter-deps/install"
+    permissions:
+      actions: write
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Fix git permissions
         # Usually actions/checkout does this but as we run in a container
@@ -111,7 +122,7 @@ jobs:
             -DCMAKE_PREFIX_PATH=/usr/local \
             -DThrift_ROOT=/usr/local \
             -DCMAKE_CXX_COMPILER_LAUNCHER=ccache \
-            -DMAX_LINK_JOBS=4
+            -DMAX_LINK_JOBS=3
           ninja -C _build/release -j 4
 
       - name: Ccache after
@@ -143,14 +154,14 @@ jobs:
     needs: prestocpp-linux-build-for-test
     runs-on: ubuntu-22.04
     container:
-      image: prestodb/presto-native-dependency:0.292-20250204112033-cf8ba84
+      image: prestodb/presto-native-dependency:0.297-202601311423-22d722a9
     env:
       INSTALL_PREFIX: "${{ github.workspace }}/adapter-deps/install"
     strategy:
       fail-fast: false
       matrix:
         modules:
-          - ":presto-base-arrow-flight"  # Only run tests for the `presto-base-arrow-flight` module
+          - :presto-base-arrow-flight # Only run tests for the `presto-base-arrow-flight` module
 
     timeout-minutes: 80
     concurrency:
@@ -159,6 +170,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Fix git permissions
         # Usually actions/checkout does this but as we run in a container
@@ -187,16 +200,16 @@ jobs:
       - name: Install OpenJDK8
         uses: actions/setup-java@v4
         with:
-          distribution: 'temurin'
+          distribution: temurin
           java-version: 17.0.15
-          cache: 'maven'
+          cache: maven
       - name: Download nodejs to maven cache
         run: .github/bin/download_nodejs
 
       - name: Maven install
         env:
           # Use different Maven options to install.
-          MAVEN_OPTS: "-Xmx2G -XX:+ExitOnOutOfMemoryError"
+          MAVEN_OPTS: -Xmx2G -XX:+ExitOnOutOfMemoryError
         run: |
           export MAVEN_OPTS="${MAVEN_INSTALL_OPTS}"
           ./mvnw install ${MAVEN_FAST_INSTALL} -am -pl ${{ matrix.modules }}

.github/workflows/codenotify.yml

@@ -9,15 +9,19 @@ on:
 jobs:
   codenotify:
     runs-on: ubuntu-latest
-    name: "Label and notify"
+    name: Label and notify
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           show-progress: false
-      - uses: sourcegraph/codenotify@v0.6.4
+          persist-credentials: false
+      - uses: sourcegraph/codenotify@54e4320f0d93f162a371d8d9dc1fb11018199746 # v0.6.4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/labeler@v4.3.0
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/conventional-commit-check.yml

@@ -0,0 +1,67 @@
+name: Semantic Commit Check
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - edited
+      - synchronize
+
+permissions:
+  contents: read
+
+jobs:
+  semantic-pr:
+    concurrency:
+      group: ${{ github.workflow }}-semantic-commit-check-${{ github.event.pull_request.number }}
+      cancel-in-progress: true
+    name: Validate PR Title
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/action-semantic-pull-request@2d952a1bf90a6a7ab8f0293dc86f5fdf9acb1915 # v5.5.3
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          types: |
+            feat
+            fix
+            docs
+            refactor
+            perf
+            test
+            build
+            ci
+            chore
+            revert
+            misc
+          requireScope: false
+          scopes: |
+            parser
+            analyzer
+            planner
+            optimizer
+            spi
+            scheduler
+            protocol
+            connector
+            resource
+            security
+            function
+            type
+            expression
+            operator
+            client
+            server
+            native
+            native-pos
+            testing
+            docs
+            build
+            ci
+            ui
+            deps
+            plugin-[a-zA-Z][a-zA-Z0-9-]*
+          subjectPattern: ^[A-Z].*[^.]$
+          subjectPatternError: |
+            The PR title subject must start with a capital letter and not end with a period.

.github/workflows/dependency-review.yml

@@ -0,0 +1,25 @@
+name: Dependency Review
+on: pull_request
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v4
+        with:
+          fail-on-severity: high
+          fail-on-scopes: runtime, unknown, development
+          comment-summary-in-pr: always
+          show-openssf-scorecard: true
+          warn-on-openssf-scorecard-level: 5
+          retry-on-snapshot-warnings: true