[FLINK-xxxxx] Add GEOGRAPHY logical type support

.github/actions/job_init/action.yml

@@ -38,6 +38,13 @@ inputs:
     description: "Runs tools/azure-pipelines/free_disk_space.sh to remove unneeded pre-installed software from the runner (only works for jobs that run directly on the host, not in a container)."
     required: false
     default: "false"
+outputs:
+  maven-cache-hit:
+    description: "Whether the Maven package cache was restored via an exact key match. Callers should only save a new cache when this is not 'true'."
+    value: ${{ steps.maven-cache-restore.outputs.cache-hit }}
+  maven-cache-key:
+    description: "The cache key computed for the Maven package cache, for use by a caller's own explicit save step (placed after Maven has actually run)."
+    value: ${{ steps.maven-cache-key.outputs.key }}
 runs:
   using: "composite"
   steps:
@@ -105,14 +112,20 @@ runs:
         echo "namespace=${ns}" >> "${GITHUB_OUTPUT}"
         echo "Cache namespace: ${ns}"
 
-    - name: "Setup Maven package cache"
+    - name: "Compute Maven package cache key"
       if: ${{ inputs.maven_repo_folder != '' }}
-      uses: actions/cache@v5
+      id: maven-cache-key
+      shell: bash
+      run: echo "key=${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}" >> "${GITHUB_OUTPUT}"
+
+    - name: "Restore Maven package cache"
+      if: ${{ inputs.maven_repo_folder != '' }}
+      id: maven-cache-restore
+      uses: actions/cache/restore@v6
       with:
         path: ${{ inputs.maven_repo_folder }}
-        key: ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}-${{ github.run_id }}
+        key: ${{ steps.maven-cache-key.outputs.key }}
         restore-keys: |
-          ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}-
           ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-
           ${{ runner.os }}-maven-
 

.github/actions/last_workflow_run/action.yml

@@ -0,0 +1,65 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+name: "Finds the most recent run of a workflow on a branch"
+description: "Queries the GitHub Actions API for the most recent run of a given workflow on a given branch, optionally filtered by status, and exposes its head SHA and conclusion."
+inputs:
+  workflow_id:
+    description: "Workflow file name, e.g. ci.yml"
+    required: true
+  branch:
+    description: "Branch name to query"
+    required: true
+  status:
+    description: "Optional run status filter, e.g. success. Leave empty to match any status."
+    required: false
+    default: ""
+outputs:
+  sha:
+    description: "Head SHA of the matched run, or empty string if none found"
+    value: ${{ steps.resolve.outputs.sha }}
+  conclusion:
+    description: "Conclusion of the matched run, or empty string if none found"
+    value: ${{ steps.resolve.outputs.conclusion }}
+runs:
+  using: "composite"
+  steps:
+    - name: "Query workflow runs"
+      id: resolve
+      uses: actions/github-script@v7
+      with:
+        script: |
+          const workflowId = "${{ inputs.workflow_id }}";
+          const branch = "${{ inputs.branch }}";
+          const status = "${{ inputs.status }}";
+
+          const params = {
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            workflow_id: workflowId,
+            branch: branch,
+            per_page: 1
+          };
+          if (status) {
+            params.status = status;
+          }
+
+          const { data } = await github.rest.actions.listWorkflowRuns(params);
+          const run = data.workflow_runs[0];
+
+          core.setOutput('sha', run?.head_sha ?? '');
+          core.setOutput('conclusion', run?.conclusion ?? '');

.github/workflows/ci.yml

@@ -22,9 +22,14 @@ on:
   push:
     paths-ignore:
       - 'docs/**'
+      - '.idea/**'
       - '**.md'
+      - '.asf.yaml'
+      - '.editorconfig'
+      - '.git-blame-ignore-revs'
       - '.gitignore'
       - '.gitattributes'
+      - 'azure-pipelines.yml'
   workflow_dispatch:
 
 concurrency:

.github/workflows/community-review.yml

@@ -24,6 +24,10 @@ on:
   schedule:
     - cron: '00 00,08,16 * * *'
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 # Same permission as stale Github action
 permissions:
   issues: write

.github/workflows/docs.yml

@@ -19,6 +19,10 @@ on:
     - cron: '0 0 * * *' # Deploy every day
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
   build-documentation:
     if: github.repository == 'apache/flink'

.github/workflows/nightly-trigger.yml

@@ -28,6 +28,9 @@ jobs:
     if: github.repository == 'apache/flink'
     permissions:
       actions: write
+    concurrency:
+      group: ${{ github.workflow }}-${{ matrix.branch }}
+      cancel-in-progress: true
     strategy:
       matrix:
         branch:
@@ -36,6 +39,19 @@ jobs:
           - release-1.20
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          sparse-checkout: |
+            .github/actions/last_workflow_run
+
+      - name: "Resolve last nightly run"
+        id: last-nightly
+        uses: "./.github/actions/last_workflow_run"
+        with:
+          workflow_id: "nightly.yml"
+          branch: ${{ matrix.branch }}
+
       - name: Trigger Workflow
         uses: actions/github-script@v7
         with:
@@ -52,17 +68,8 @@ jobs:
 
             // Compare SHA from last nightly against current
             // if it is same, then no need to run nightly for the same SHA again.
-            const { data: runsData } = await github.rest.actions.listWorkflowRuns({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              workflow_id: 'nightly.yml',
-              branch: branch,
-              per_page: 1
-            });
-
-            const lastRun = runsData.workflow_runs[0];
-            const lastBuiltSha = lastRun?.head_sha;
-            const lastConclusion = lastRun?.conclusion;
+            const lastBuiltSha = '${{ steps.last-nightly.outputs.sha }}' || undefined;
+            const lastConclusion = '${{ steps.last-nightly.outputs.conclusion }}' || undefined;
 
             // Skip the scheduled run only if there are no new commits AND the
             // previous nightly was green. If the last run failed/was cancelled,

.github/workflows/nightly.yml

@@ -21,6 +21,10 @@ name: "Nightly (beta)"
 on:
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions: read-all
 
 jobs:

.github/workflows/stale.yml

@@ -28,6 +28,10 @@ on:
         default: 20
         type: number
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 permissions:
   issues: write
   pull-requests: write

.github/workflows/template.flink-ci.yml

@@ -88,6 +88,7 @@ jobs:
           persist-credentials: false
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -123,6 +124,15 @@ jobs:
           # use minimum here because we only need these artifacts to speed up the build
           retention-days: 1
 
+      # Only saves when the restore in job_init wasn't an exact hit, i.e. pom.xml actually
+      # changed since the last save for this namespace - avoids re-uploading an unchanged cache.
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
+
   packaging:
     name: "Test packaging/licensing"
     needs: compile
@@ -145,6 +155,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -166,7 +177,14 @@ jobs:
       - name: "Test"
         working-directory: ${{ env.CONTAINER_LOCAL_WORKING_DIR }}
         run: |
-          ${{ inputs.environment }} ./tools/ci/compile_ci.sh || exit $?
+          ${{ inputs.environment }} ./tools/ci/compile_ci.sh -Dmaven.clean.skip=true || exit $?
+
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
 
   test:
     name: "Test (module: ${{ matrix.module }})"
@@ -212,6 +230,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -315,6 +334,13 @@ jobs:
         if: ${{ !cancelled() && (failure() || steps.docker-cache.outputs.cache-hit != 'true') }}
         run: ./tools/azure-pipelines/cache_docker_images.sh save
 
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
+
   e2e:
     name: "E2E (group ${{ matrix.group }})"
     needs: compile
@@ -353,6 +379,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -446,3 +473,10 @@ jobs:
       - name: "Save Docker images to Cache"
         if: ${{ !cancelled() && (failure() || steps.docker-cache.outputs.cache-hit != 'true') }}
         run: ./tools/azure-pipelines/cache_docker_images.sh save
+
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}

.github/workflows/template.pre-compile-checks.yml

@@ -59,19 +59,36 @@ jobs:
         with:
           jdk_version: ${{ inputs.jdk_version }}
 
-      - name: "Checkstyle"
-        uses: "./.github/actions/run_mvn"
+      - name: "Resolve last green commit for spotless ratchet"
+        id: last-green
+        uses: "./.github/actions/last_workflow_run"
         with:
-          maven-parameters: "checkstyle:check -T1C"
+          workflow_id: "ci.yml"
+          branch: ${{ github.ref_name }}
+          status: "success"
 
-      - name: "Spotless"
-        if: (success() || failure())
+      - name: "Fetch last green commit"
+        if: steps.last-green.outputs.sha != ''
+        shell: bash
+        run: |
+          sha="${{ steps.last-green.outputs.sha }}"
+          if git -c safe.directory='*' fetch --depth=1 origin "${sha}" \
+             && git -c safe.directory='*' cat-file -e "${sha}^{commit}"; then
+            echo "RATCHET_SHA=${sha}" >> "${GITHUB_ENV}"
+            echo "Ratcheting spotless from ${sha}"
+          else
+            echo "Could not fetch ${sha}; running full spotless check."
+          fi
+
+      - name: "Checkstyle & Spotless"
         uses: "./.github/actions/run_mvn"
         with:
-          maven-parameters: "spotless:check -T1C"
+          maven-parameters: >-
+            checkstyle:check spotless:check -T1C -fae
+            ${{ env.RATCHET_SHA && format('-Dspotless.ratchetFrom={0}', env.RATCHET_SHA) || '' }}
 
       - name: "License Headers"
         if: (success() || failure())
         uses: "./.github/actions/run_mvn"
         with:
-          maven-parameters: "org.apache.rat:apache-rat-plugin:check -N"
+          maven-parameters: "-T1C org.apache.rat:apache-rat-plugin:check -N"