Merge remote-tracking branch 'upstream/main' into rasters-mapvalidator

Author: bluedotblue

.github/workflows/additional_checks.yml

@@ -36,9 +36,9 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
-          python-version: "3.13"
+          python-version: "3.14"
       - name: Install uv and restore its cache
-        uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0
+        uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7.1.0
         with:
           # To not have the last commit JSON and release notes files affected on
           # releases, if copying the contents displayed in the CI logs.
@@ -67,7 +67,7 @@ jobs:
               ""
       - name: "Cache pre-commit"
         # Not used for releases, only for running pre-commit
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4  # zizmor: ignore[cache-poisoning]
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0  # zizmor: ignore[cache-poisoning]
         with:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}

.github/workflows/apt.txt

@@ -8,6 +8,7 @@ libgdal-dev
 libgl1-mesa-dev
 libglu1-mesa-dev
 liblapacke-dev
+libncurses-dev
 libnetcdf-dev
 libpdal-dev
 libpng-dev

.github/workflows/build_ubuntu-24.04.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+
+# The make step requires something like:
+# export LD_LIBRARY_PATH="$LD_LIBRARY_PATH:$PREFIX/lib"
+# further steps additionally require:
+# export PATH="$PATH:$PREFIX/bin"
+
+# fail on non-zero return code from a subprocess
+set -e
+
+# print commands
+set -x
+
+if [ -z "$1" ]; then
+    echo "Usage: $0 PREFIX"
+    exit 1
+fi
+
+# Adding -Werror to make's CFLAGS is a workaround for configuring with
+# an old version of configure, which issues compiler warnings and
+# errors out. This may be removed with upgraded configure.in file.
+makecmd="make"
+if [[ "$#" -ge 2 ]]; then
+    ARGS=("$@")
+    makecmd="make CFLAGS='$CFLAGS ${ARGS[@]:1}' CXXFLAGS='$CXXFLAGS ${ARGS[@]:1}'"
+fi
+
+# non-existent variables as an errors
+set -u
+
+export INSTALL_PREFIX=$1
+
+./configure \
+    --enable-largefile \
+    --prefix="$INSTALL_PREFIX/" \
+    --with-blas \
+    --with-bzlib \
+    --with-cxx \
+    --with-fftw \
+    --with-freetype \
+    --with-freetype-includes="/usr/include/freetype2/" \
+    --with-geos \
+    --with-lapack \
+    --with-libsvm \
+    --with-netcdf \
+    --with-openmp \
+    --with-pdal \
+    --with-proj-share=/usr/share/proj \
+    --with-pthread \
+    --with-readline \
+    --with-sqlite \
+    --with-tiff \
+    --with-zstd
+
+eval $makecmd
+make install

.github/workflows/build_ubuntu-24.04_without_x.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+
+# The make step requires something like:
+# export LD_LIBRARY_PATH="$LD_LIBRARY_PATH:$PREFIX/lib"
+# further steps additionally require:
+# export PATH="$PATH:$PREFIX/bin"
+
+# fail on non-zero return code from a subprocess
+set -e
+
+# print commands
+set -x
+
+if [ -z "$1" ]; then
+    echo "Usage: $0 PREFIX"
+    exit 1
+fi
+
+# Adding -Werror to make's CFLAGS is a workaround for configuring with
+# an old version of configure, which issues compiler warnings and
+# errors out. This may be removed with upgraded configure.in file.
+makecmd="make"
+if [[ "$#" -eq 2 ]]; then
+    makecmd="make CFLAGS='$CFLAGS $2' CXXFLAGS='$CXXFLAGS $2'"
+fi
+
+# non-existent variables as an errors
+set -u
+
+export INSTALL_PREFIX=$1
+
+./configure \
+    --enable-largefile \
+    --prefix="$INSTALL_PREFIX/" \
+    --without-blas \
+    --without-lapack \
+    --with-bzlib \
+    --with-cxx \
+    --with-fftw \
+    --with-freetype \
+    --with-freetype-includes="/usr/include/freetype2/" \
+    --with-geos \
+    --with-netcdf \
+    --with-pdal \
+    --with-proj-share=/usr/share/proj \
+    --with-readline \
+    --with-sqlite \
+    --with-tiff \
+    --with-zstd \
+    --without-openmp \
+    --without-pthread
+
+eval $makecmd
+make install

.github/workflows/cmake.yml

@@ -24,7 +24,7 @@ permissions:
 
 jobs:
   build-cmake:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     env:
       CMAKE_VERSION: "3.22.0"
     steps:
@@ -48,6 +48,8 @@ jobs:
           sudo apt-get update -y
           sudo apt-get install -y wget git gawk findutils ninja-build libpq-dev \
             gettext unixodbc-dev libnetcdf-dev
+          LC_ALL=C.UTF-8 sudo add-apt-repository -y ppa:ubuntugis/ubuntugis-unstable
+          sudo apt-get update -y
           xargs -a <(awk '! /^ *(#|$)/' ".github/workflows/apt.txt") -r -- \
               sudo apt-get install -y --no-install-recommends --no-install-suggests
       - name: Print build environment variables

.github/workflows/codeql-analysis.yml

@@ -19,7 +19,7 @@ permissions: {}
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       actions: read
@@ -53,13 +53,15 @@ jobs:
         run: |
           sudo apt-get update -y
           sudo apt-get install -y wget git gawk findutils
+          LC_ALL=C.UTF-8 sudo add-apt-repository -y ppa:ubuntugis/ubuntugis-unstable
+          sudo apt-get update -y
           xargs -a <(awk '! /^ *(#|$)/' ".github/workflows/apt.txt") -r -- \
               sudo apt-get install -y --no-install-recommends --no-install-suggests
       - uses: rui314/setup-mold@725a8794d15fc7563f59595bd9556495c0564878 # v1
         if: ${{ matrix.language == 'c-cpp' }}
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
+        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql/codeql-config.yml
@@ -79,11 +81,11 @@ jobs:
       - name: Build
         if: ${{ matrix.language == 'c-cpp' }}
         env:
-          CFLAGS: -std=gnu11
-          CXXFLAGS: -std=c++11
-        run: .github/workflows/build_ubuntu-22.04.sh "${HOME}/install"
+          CFLAGS: -std=gnu17
+          CXXFLAGS: -std=c++17
+        run: .github/workflows/build_ubuntu-24.04.sh "${HOME}/install"
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
+        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/coverity.yml

@@ -14,7 +14,7 @@ permissions:
   # https://github.com/OSGeo/PROJ/blob/905c9a6c2da3dc6b7aa2c89d3ab78d9d1a9cd070/.github/workflows/coverity-scan.yml
 jobs:
   coverity:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     if: github.repository == 'OSGeo/grass'
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
@@ -25,6 +25,8 @@ jobs:
         run: |
           sudo apt-get update -y
           sudo apt-get install -y wget git gawk findutils
+          LC_ALL=C.UTF-8 sudo add-apt-repository -y ppa:ubuntugis/ubuntugis-unstable
+          sudo apt-get update -y
           xargs -a <(awk '! /^ *(#|$)/' ".github/workflows/apt.txt") -r -- \
               sudo apt-get install -y --no-install-recommends --no-install-suggests
 

.github/workflows/create_release_draft.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
-          python-version: '3.13'
+          python-version: '3.14'
       - name: Create output directory
         run: |
           mkdir "${OUT_DIR}"
@@ -75,7 +75,7 @@ jobs:
           sha256sum "${GRASS}.tar.xz" > "${GRASS}.tar.xz.sha256"
       - name: Publish draft distribution to GitHub (for tags only)
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           name: GRASS ${{ github.ref_name }}
           body: |

.github/workflows/docker.yml

@@ -84,25 +84,40 @@ jobs:
           latest_tag="$(git tag --sort=-v:refname \
             | grep -E '^[0-9]+\.[0-9]+\.[0-9]+$' \
             | head -n 1)"
-          latest_rel_branch="$(git branch --all --list 'origin/*' \
-            --contains "${latest_tag}" --format "%(refname:lstrip=3)")"
           echo "latest_tag=${latest_tag}" >> "${GITHUB_OUTPUT}"
           echo "latest_tag is: ${latest_tag}"
+          if [ -z "$latest_tag" ]; then
+              echo "Error getting latest tag information"
+              echo "error_latest=yes" >> "${GITHUB_OUTPUT}"
+              exit 0
+          fi
+          latest_rel_branch="$(git branch --all --list 'origin/*' \
+            --contains "${latest_tag}" --format "%(refname:lstrip=3)" || echo "")"
           echo "latest_rel_branch=${latest_rel_branch}" >> "${GITHUB_OUTPUT}"
           echo "latest_rel_branch is: ${latest_rel_branch}"
+          if [ -z "$latest_rel_branch" ]; then
+              echo "Error getting latest release branch information"
+              echo "error_latest_rel_branch=yes" >> "${GITHUB_OUTPUT}"
+              exit 0
+          fi
+          echo "error_latest=no" >> "${GITHUB_OUTPUT}"
+          echo "error_latest_rel_branch=no" >> "${GITHUB_OUTPUT}"
       - name: Get enable values for meta step
         id: enable
         run: |
           latest="${{
             (github.ref || format('{0}{1}', 'refs/tags/', github.event.release.tag_name))
               == format('refs/tags/{0}', steps.tag-branch.outputs.latest_tag)
-            && matrix.os == 'ubuntu' }}"
+            && matrix.os == 'ubuntu' && steps.tag-branch.outputs.error_latest == 'no' }}"
           current="${{
             ( contains(fromJSON('["tag", "release"]'), github.event_name)
               && (github.ref || format('{0}{1}', 'refs/tags/', github.event.release.tag_name))
                   == format('refs/tags/{0}', steps.tag-branch.outputs.latest_tag)
             )
-            || github.ref == format('refs/heads/{0}', steps.tag-branch.outputs.latest_rel_branch)
+            || ( github.ref == format('refs/heads/{0}', steps.tag-branch.outputs.latest_rel_branch)
+                  && steps.tag-branch.outputs.error_latest == 'no'
+                  && steps.tag-branch.outputs.error_latest_rel_branch == 'no'
+                )
           }}"
           echo "latest=${latest}" >> "${GITHUB_OUTPUT}"
           echo "latest is ${latest}"
@@ -130,14 +145,14 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Login to Docker Hub
         if: ${{ github.repository_owner == 'OSGeo' && github.event_name != 'pull_request' }}
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN  }}

.github/workflows/documentation.yml

@@ -19,11 +19,11 @@ jobs:
       group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
       cancel-in-progress: true
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     env:
       PYTHONWARNINGS: always
       # renovate: datasource=python-version depName=python
-      PYTHON_VERSION: "3.13"
+      PYTHON_VERSION: "3.14"
 
     steps:
       - name: Checkout core
@@ -42,6 +42,8 @@ jobs:
             graphviz \
             libpq-dev \
             unixodbc-dev
+          LC_ALL=C.UTF-8 sudo add-apt-repository -y ppa:ubuntugis/ubuntugis-unstable
+          sudo apt-get update -y
           xargs -a <(awk '! /^ *(#|$)/' "grass/.github/workflows/apt.txt") -r -- \
               sudo apt-get install -y --no-install-recommends --no-install-suggests