[FLINK-xxxxx] Add SQL geography construction/functions

.github/actions/job_init/action.yml

@@ -38,6 +38,13 @@ inputs:
     description: "Runs tools/azure-pipelines/free_disk_space.sh to remove unneeded pre-installed software from the runner (only works for jobs that run directly on the host, not in a container)."
     required: false
     default: "false"
+outputs:
+  maven-cache-hit:
+    description: "Whether the Maven package cache was restored via an exact key match. Callers should only save a new cache when this is not 'true'."
+    value: ${{ steps.maven-cache-restore.outputs.cache-hit }}
+  maven-cache-key:
+    description: "The cache key computed for the Maven package cache, for use by a caller's own explicit save step (placed after Maven has actually run)."
+    value: ${{ steps.maven-cache-key.outputs.key }}
 runs:
   using: "composite"
   steps:
@@ -105,14 +112,20 @@ runs:
         echo "namespace=${ns}" >> "${GITHUB_OUTPUT}"
         echo "Cache namespace: ${ns}"
 
-    - name: "Setup Maven package cache"
+    - name: "Compute Maven package cache key"
       if: ${{ inputs.maven_repo_folder != '' }}
-      uses: actions/cache@v5
+      id: maven-cache-key
+      shell: bash
+      run: echo "key=${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}" >> "${GITHUB_OUTPUT}"
+
+    - name: "Restore Maven package cache"
+      if: ${{ inputs.maven_repo_folder != '' }}
+      id: maven-cache-restore
+      uses: actions/cache/restore@v6
       with:
         path: ${{ inputs.maven_repo_folder }}
-        key: ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}-${{ github.run_id }}
+        key: ${{ steps.maven-cache-key.outputs.key }}
         restore-keys: |
-          ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-${{ hashFiles('**/pom.xml') }}-
           ${{ runner.os }}-ns-${{ steps.cache-ns.outputs.namespace }}-maven-
           ${{ runner.os }}-maven-
 

.github/workflows/community-review.yml

@@ -24,6 +24,10 @@ on:
   schedule:
     - cron: '00 00,08,16 * * *'
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 # Same permission as stale Github action
 permissions:
   issues: write

.github/workflows/docs.yml

@@ -19,6 +19,10 @@ on:
     - cron: '0 0 * * *' # Deploy every day
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
   build-documentation:
     if: github.repository == 'apache/flink'

.github/workflows/nightly-trigger.yml

@@ -28,6 +28,9 @@ jobs:
     if: github.repository == 'apache/flink'
     permissions:
       actions: write
+    concurrency:
+      group: ${{ github.workflow }}-${{ matrix.branch }}
+      cancel-in-progress: true
     strategy:
       matrix:
         branch:

.github/workflows/nightly.yml

@@ -21,6 +21,10 @@ name: "Nightly (beta)"
 on:
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 permissions: read-all
 
 jobs:

.github/workflows/stale.yml

@@ -28,6 +28,10 @@ on:
         default: 20
         type: number
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 permissions:
   issues: write
   pull-requests: write

.github/workflows/template.flink-ci.yml

@@ -88,6 +88,7 @@ jobs:
           persist-credentials: false
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -123,6 +124,15 @@ jobs:
           # use minimum here because we only need these artifacts to speed up the build
           retention-days: 1
 
+      # Only saves when the restore in job_init wasn't an exact hit, i.e. pom.xml actually
+      # changed since the last save for this namespace - avoids re-uploading an unchanged cache.
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
+
   packaging:
     name: "Test packaging/licensing"
     needs: compile
@@ -145,6 +155,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -166,7 +177,14 @@ jobs:
       - name: "Test"
         working-directory: ${{ env.CONTAINER_LOCAL_WORKING_DIR }}
         run: |
-          ${{ inputs.environment }} ./tools/ci/compile_ci.sh || exit $?
+          ${{ inputs.environment }} ./tools/ci/compile_ci.sh -Dmaven.clean.skip=true || exit $?
+
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
 
   test:
     name: "Test (module: ${{ matrix.module }})"
@@ -212,6 +230,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -315,6 +334,13 @@ jobs:
         if: ${{ !cancelled() && (failure() || steps.docker-cache.outputs.cache-hit != 'true') }}
         run: ./tools/azure-pipelines/cache_docker_images.sh save
 
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}
+
   e2e:
     name: "E2E (group ${{ matrix.group }})"
     needs: compile
@@ -353,6 +379,7 @@ jobs:
             tools
 
       - name: "Initialize job"
+        id: job-init
         uses: "./.github/actions/job_init"
         with:
           jdk_version: ${{ inputs.jdk_version }}
@@ -446,3 +473,10 @@ jobs:
       - name: "Save Docker images to Cache"
         if: ${{ !cancelled() && (failure() || steps.docker-cache.outputs.cache-hit != 'true') }}
         run: ./tools/azure-pipelines/cache_docker_images.sh save
+
+      - name: "Save Maven package cache"
+        if: ${{ !cancelled() && steps.job-init.outputs.maven-cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: ${{ env.MAVEN_REPO_FOLDER }}
+          key: ${{ steps.job-init.outputs.maven-cache-key }}

.github/workflows/template.pre-compile-checks.yml

@@ -74,4 +74,4 @@ jobs:
         if: (success() || failure())
         uses: "./.github/actions/run_mvn"
         with:
-          maven-parameters: "org.apache.rat:apache-rat-plugin:check -N"
+          maven-parameters: "-T1C org.apache.rat:apache-rat-plugin:check -N"

docs/content.zh/docs/sql/reference/data-types.md

@@ -1515,6 +1515,12 @@ without requiring upfront schema definition. For example, if a new field is adde
 can be directly incorporated into the `VARIANT` data without modifying the table schema. This is
 particularly useful in dynamic environments where schemas may evolve over time.
 
+A primitive-valued `VARIANT` can be converted to a scalar type with `CAST` or `TRY_CAST`. Numeric
+targets are lenient: a variant holding any numeric value casts to any numeric type, so a JSON integer
+such as `PARSE_JSON('42')` casts to `INT` or `BIGINT`. Other targets require the stored value to be of
+the matching kind. When the value cannot be converted, `CAST` fails the job and `TRY_CAST` returns
+`NULL`. Use the `JSON_STRING` function to obtain the JSON string representation of a `VARIANT`.
+
 **Declaration**
 
 {{< tabs "25c30432-8460-441d-a036-9416d8202882" >}}
@@ -1729,7 +1735,7 @@ COALESCE(TRY_CAST('non-number' AS INT), 0) --- 结果返回数字 0 的 INT 格
 | `ROW`                                  |                   Y                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |  !³   |      N       |   N   |     N     |    N     |
 | `STRUCTURED`                           |                   Y                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      !³      |   N   |     N     |    N     |
 | `RAW`                                  |                   Y                   |                    !                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |  Y⁴   |     N     |    N     |
-| `VARIANT`                              |                   N                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     N     |    N     |
+| `VARIANT`                              |                   N                   |                    !                     |     !     |     !     |     !     |     !      |     !     |    !     |    !    |    !     |   !    |   N    |      !      |        !        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     Y     |    N     |
 | `BITMAP`                               |                   Y                   |                   Y⁷                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     N     |    N     |
 
 备注：

docs/content/docs/sql/reference/data-types.md

@@ -1523,6 +1523,12 @@ without requiring upfront schema definition. For example, if a new field is adde
 can be directly incorporated into the `VARIANT` data without modifying the table schema. This is 
 particularly useful in dynamic environments where schemas may evolve over time.
 
+A primitive-valued `VARIANT` can be converted to a scalar type with `CAST` or `TRY_CAST`. Numeric 
+targets are lenient: a variant holding any numeric value casts to any numeric type, so a JSON integer 
+such as `PARSE_JSON('42')` casts to `INT` or `BIGINT`. Other targets require the stored value to be of 
+the matching kind. When the value cannot be converted, `CAST` fails the job and `TRY_CAST` returns 
+`NULL`. Use the `JSON_STRING` function to obtain the JSON string representation of a `VARIANT`.
+
 **Declaration**
 
 {{< tabs "25c30432-8460-441d-a036-9416d8202882" >}}
@@ -1738,7 +1744,7 @@ The matrix below describes the supported cast pairs, where "Y" means supported,
 | `ROW`                                  |                   Y                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |  !³   |      N       |   N   |     N     |    N     |
 | `STRUCTURED`                           |                   Y                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      !³      |   N   |     N     |    N     |
 | `RAW`                                  |                   Y                   |                    !                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |  Y⁴   |     N     |    N     |
-| `VARIANT`                              |                   N                   |                    N                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     N     |    N     |
+| `VARIANT`                              |                   N                   |                    !                     |     !     |     !     |     !     |     !      |     !     |    !     |    !    |    !     |   !    |   N    |      !      |        !        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     Y     |    N     |
 | `BITMAP`                               |                   Y                   |                   Y⁷                     |     N     |     N     |     N     |     N      |     N     |    N     |    N    |    N     |   N    |   N    |      N      |        N        |     N      |    N    |     N      |   N   |   N   |      N       |   N   |     N     |    N     |
 
 Notes:

docs/data/sql_functions.yml

@@ -952,7 +952,6 @@ json:
       '"abc"' IS JSON
       -- FALSE
       'abc' IS JSON
-      NULL IS JSON
 
       -- TRUE
       '1' IS JSON SCALAR
@@ -967,6 +966,12 @@ json:
       '{}' IS JSON ARRAY
       -- TRUE
       '{}' IS JSON OBJECT
+
+      -- NULL
+      NULL IS JSON
+      NULL IS JSON SCALAR
+      NULL IS JSON OBJECT
+      NULL IS JSON ARRAY
       ```
   - sql: JSON_EXISTS(jsonValue, path [ { TRUE | FALSE | UNKNOWN | ERROR } ON ERROR ])
     table: STRING.jsonExists(STRING path [, JsonExistsOnError onError])

docs/data/sql_functions_zh.yml

@@ -1081,7 +1081,6 @@ json:
       '"abc"' IS JSON
       -- FALSE
       'abc' IS JSON
-      NULL IS JSON
 
       -- TRUE
       '1' IS JSON SCALAR
@@ -1096,6 +1095,12 @@ json:
       '{}' IS JSON ARRAY
       -- TRUE
       '{}' IS JSON OBJECT
+
+      -- NULL
+      NULL IS JSON
+      NULL IS JSON SCALAR
+      NULL IS JSON OBJECT
+      NULL IS JSON ARRAY
       ```
   - sql: JSON_EXISTS(jsonValue, path [ { TRUE | FALSE | UNKNOWN | ERROR } ON ERROR ])
     table: STRING.jsonExists(STRING path [, JsonExistsOnError onError])

docs/static/generated/rest_v1_sql_gateway.yml

@@ -403,6 +403,7 @@ components:
       - DESCRIPTOR
       - VARIANT
       - BITMAP
+      - GEOGRAPHY
     OpenSessionRequestBody:
       type: object
       properties:

docs/static/generated/rest_v2_sql_gateway.yml

@@ -477,6 +477,7 @@ components:
       - DESCRIPTOR
       - VARIANT
       - BITMAP
+      - GEOGRAPHY
     OpenSessionRequestBody:
       type: object
       properties:

docs/static/generated/rest_v3_sql_gateway.yml

@@ -506,6 +506,7 @@ components:
       - DESCRIPTOR
       - VARIANT
       - BITMAP
+      - GEOGRAPHY
     OpenSessionRequestBody:
       type: object
       properties:

docs/static/generated/rest_v4_sql_gateway.yml

@@ -516,6 +516,7 @@ components:
       - DESCRIPTOR
       - VARIANT
       - BITMAP
+      - GEOGRAPHY
     OpenSessionRequestBody:
       type: object
       properties:

flink-dist/src/main/flink-bin/README.txt

@@ -11,22 +11,29 @@ If you have any questions, ask on our Mailing lists:
    user@flink.apache.org
    dev@flink.apache.org
 
-This distribution includes cryptographic software.  The country in 
-which you currently reside may have restrictions on the import, 
-possession, use, and/or re-export to another country, of 
-encryption software.  BEFORE using any encryption software, please 
+This distribution includes cryptographic software.  The country in
+which you currently reside may have restrictions on the import,
+possession, use, and/or re-export to another country, of
+encryption software. BEFORE using any encryption software, please
 check your country's laws, regulations and policies concerning the
-import, possession, or use, and re-export of encryption software, to 
-see if this is permitted.  See <http://www.wassenaar.org/> for more
-information.
-
-The U.S. Government Department of Commerce, Bureau of Industry and
-Security (BIS), has classified this software as Export Commodity 
-Control Number (ECCN) 5D002.C.1, which includes information security
-software using or performing cryptographic functions with asymmetric
-algorithms.  The form and manner of this Apache Software Foundation
-distribution makes it eligible for export under the License Exception
-ENC Technology Software Unrestricted (TSU) exception (see the BIS 
-Export Administration Regulations, Section 740.13) for both object 
-code and source code.
-
+import, possession, or use, and re-export of encryption software, to
+see if this is permitted. See http://www.wassenaar.org for
+more information.
+
+The Apache Software Foundation has classified this software as Export
+Commodity Control Number (ECCN) 5D002, which includes information
+security software using or performing cryptographic functions with
+asymmetric algorithms. The form and manner of this Apache Software
+Foundation distribution makes it eligible for export under the
+"publicly available" Section 742.15(b) exemption (see the BIS Export
+Administration Regulations, Section 742.15(b)) for both object code
+and source code.
+
+The following provides more details on the included cryptographic
+software:
+
+  * Apache Flink uses the built-in Java TLS/SSL (JSSE) libraries to
+    secure network communication (RPC, REST, blob transfer, and
+    connector traffic). Alternatively, the OpenSSL-based SSL engine
+    can be enabled (security.ssl.provider: OPENSSL), using the
+    flink-shaded-netty-tcnative packaging of OpenSSL/BoringSSL.