Merge branch 'trunk' into python

Author: VietND96

.ffmpeg/Dockerfile

@@ -1,7 +1,10 @@
 FROM ubuntu:noble AS builder
-ARG FFMPEG_VERSION="7.1"
-ARG RCLONE_VER="v1.69.0"
+ARG FFMPEG_VERSION="7.1.1"
+ARG RCLONE_VER="v1.69.1"
 ARG GO_VERSION="latest"
+ARG GO_CRYPTO_VERSION="v0.35.0"
+ARG GO_OAUTH2_VERSION="v0.27.0"
+ARG GO_NET_VERSION="v0.36.0"
 
 USER root
 
@@ -28,13 +31,14 @@ RUN if [ "${GO_VERSION}" = "latest" ]; then \
     && go version
 
 RUN cd /usr/local/src \
-    && git clone https://github.com/rclone/rclone.git \
+    && git clone https://github.com/rclone/rclone.git --filter=blob:none \
     && cd rclone \
     && git checkout ${RCLONE_VER} \
     # Patch deps version in go.mod to fix CVEs
-#    && sed -i "s|golang.org/x/crypto v.*|golang.org/x/crypto ${GO_CRYPTO_VERSION}|g" go.mod \
-#    && sed -i "s|golang.org/x/net v.*|golang.org/x/net ${GO_NET_VERSION}|g" go.mod \
-#    && go mod tidy \
+    && sed -i "s|golang.org/x/crypto v.*|golang.org/x/crypto ${GO_CRYPTO_VERSION}|g" go.mod \
+    && sed -i "s|golang.org/x/oauth2 v.*|golang.org/x/oauth2 ${GO_OAUTH2_VERSION}|g" go.mod \
+    && sed -i "s|golang.org/x/net v.*|golang.org/x/net ${GO_NET_VERSION}|g" go.mod \
+    && go mod tidy \
     # Build rclone
     && make \
     && mv ~/go/bin/rclone /usr/local/bin/ \
@@ -44,7 +48,7 @@ RUN cd /usr/local/src \
 # Install x264 from source
 #======================================
 RUN cd /usr/local/src \
-    && git clone https://code.videolan.org/videolan/x264.git \
+    && git clone https://code.videolan.org/videolan/x264.git --filter=blob:none \
     && cd x264 \
     && ./configure --prefix="/usr/local" --enable-static \
     && make \
@@ -54,9 +58,9 @@ RUN cd /usr/local/src \
 # Install FFmpeg from source
 #======================================
 RUN cd /usr/local/src \
-    && git clone https://github.com/FFmpeg/FFmpeg.git \
+    && git clone https://github.com/FFmpeg/FFmpeg.git --filter=blob:none \
     && cd FFmpeg \
-    && git checkout release/${FFMPEG_VERSION} \
+    && git checkout n${FFMPEG_VERSION} \
     && rm -rf .git \
     && PKG_CONFIG_PATH="/usr/local/lib/pkgconfig" FFMPEG_VERSION=${FFMPEG_VERSION} ./configure \
     --prefix="/usr/local" \

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -56,7 +56,7 @@ body:
     attributes:
       label: Docker Selenium version (image tag)
       description: What version of Docker Selenium are you using?
-      placeholder: 4.28.1-20250202? Please use the full tag, avoid "latest"
+      placeholder: 4.29.0-20250303? Please use the full tag, avoid "latest"
     validations:
       required: true
   - type: input

.github/workflows/build-ffmpeg.yml

@@ -20,7 +20,7 @@ on:
 jobs:
   deploy:
     name: Build and Deploy FFmpeg
-    runs-on: blacksmith-8vcpu-ubuntu-2204
+    runs-on: ubuntu-24.04
     permissions: write-all
     steps:
       - name: Checkout code

.github/workflows/build-test.yml

@@ -13,13 +13,23 @@ on:
         required: false
         type: string
         default: 'false'
+      test-patched-keda:
+        description: 'Test patched KEDA (true/false)'
+        required: false
+        default: ''
+        type: string
   workflow_dispatch:
     inputs:
       rerunFailedOnly:
         description: 'Rerun only failed jobs'
         required: false
         type: boolean
         default: true
+      test-patched-keda:
+        description: 'Test patched KEDA (true/false)'
+        required: false
+        default: ''
+        type: string
   push:
     branches:
       - trunk
@@ -58,6 +68,7 @@ jobs:
     secrets: inherit
     with:
       release: ${{ inputs.release == 'true' }}
+      test-patched-keda: ${{ github.event.inputs.test-patched-keda }}
 
   rerun-workflow-when-failure:
     name: Rerun workflow when failure

.github/workflows/deploy.yml

@@ -51,7 +51,7 @@ jobs:
       - build-test
     if: (contains(toJson(github.event.commits), '[deploy]') == true || (github.event_name == 'workflow_dispatch' && github.event.inputs.release == 'true')) && !failure() && !cancelled()
     name: Deploy and Release
-    runs-on: blacksmith-8vcpu-ubuntu-2204
+    runs-on: ubuntu-24.04
     permissions: write-all
     steps:
       - name: Free Disk Space (Ubuntu)

.github/workflows/docker-test.yml

@@ -172,19 +172,22 @@ jobs:
       - name: Format and lint scripts
         run: |
           make format_shell_scripts
+      - name: Disable QEMU
+        if: matrix.test-strategy == 'test_node_relay' && contains(matrix.os, 'amd') == true
+        run: echo "DOCKER_ENABLE_QEMU=false >> $GITHUB_ENV"
       - name: Set up containerd image store feature
         uses: nick-invision/retry@master
         with:
           timeout_minutes: 10
           max_attempts: 3
           command: |
-            make setup_dev_env
+            DOCKER_ENABLE_QEMU=${DOCKER_ENABLE_QEMU} make setup_dev_env
       - name: Output Docker info
         run: docker info
       - name: Set up Python
         uses: actions/setup-python@main
         with:
-          python-version: '3.11'
+          python-version: '3.13'
           check-latest: true
       - name: Enable KVM
         if: matrix.test-strategy == 'test_node_relay' && contains(matrix.os, 'arm') == false

.github/workflows/helm-chart-test.yml

@@ -13,6 +13,11 @@ on:
         required: false
         type: string
         default: 'false'
+      test-patched-keda:
+        description: 'Test patched KEDA (true/false)'
+        required: false
+        default: ''
+        type: string
   workflow_dispatch:
     inputs:
       request-timeout:
@@ -27,6 +32,11 @@ on:
         description: 'Test parameter for different log level'
         required: false
         default: 'FINE'
+      test-patched-keda:
+        description: 'Test patched KEDA (true/false)'
+        required: false
+        default: ''
+        type: string
 
 permissions:
   contents: read
@@ -40,68 +50,85 @@ jobs:
       matrix:
         include:
           - k8s-version: 'v1.26.15'
-            test-strategy: disabled
             cluster: 'minikube'
             helm-version: 'v3.11.3'
             docker-version: '26.1.4'
-            python-version: '3.8'
+            python-version: '3.9'
             test-upgrade: true
             service-mesh: false
-            os: ubuntu-24.04
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: disabled
           - k8s-version: 'v1.27.16'
-            test-strategy: job
             cluster: 'minikube'
             helm-version: 'v3.12.3'
             docker-version: '26.1.4'
             python-version: '3.9'
             test-upgrade: true
             service-mesh: true
-            os: ubuntu-24.04
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: job
           - k8s-version: 'v1.28.15'
-            test-strategy: deployment
             cluster: 'minikube'
             helm-version: 'v3.13.3'
             docker-version: '26.1.4'
             python-version: '3.10'
             test-upgrade: true
             service-mesh: true
-            os: ubuntu-24.04
-          - k8s-version: 'v1.29.13'
-            test-strategy: job_https
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: deployment
+          - k8s-version: 'v1.29.15'
             cluster: 'minikube'
             helm-version: 'v3.14.3'
-            docker-version: '26.1.4'
+            docker-version: '27.5.1'
             python-version: '3.11'
             test-upgrade: true
             service-mesh: false
-            os: ubuntu-24.04
-          - k8s-version: 'v1.30.9'
-            test-strategy: job_hostname
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: job_https
+          - k8s-version: 'v1.30.11'
             cluster: 'minikube'
             helm-version: 'v3.15.4'
-            docker-version: '26.1.4'
+            docker-version: '27.5.1'
             python-version: '3.12'
             test-upgrade: true
             service-mesh: false
-            os: ubuntu-24.04
-          - k8s-version: 'v1.31.5'
-            test-strategy: deployment_https
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: job_hostname
+          - k8s-version: 'v1.31.7'
             cluster: 'minikube'
             helm-version: 'v3.16.4'
             docker-version: '27.4.1'
             python-version: '3.13'
             test-upgrade: true
             service-mesh: false
-            os: ubuntu-24.04
-          - k8s-version: 'v1.32.1'
+            os: ubuntu-22.04
+            check-records-output: true
+            test-strategy: deployment_https
+          - k8s-version: 'v1.32.3'
+            cluster: 'minikube'
+            helm-version: 'v3.17.0'
+            docker-version: '26.1.4'
+            python-version: '3.10'
+            test-upgrade: true
+            service-mesh: true
+            os: ubuntu-22.04
+            check-records-output: true
             test-strategy: playwright_connect_grid
+          - k8s-version: 'v1.32.3'
             cluster: 'minikube'
             helm-version: 'v3.17.0'
             docker-version: '26.1.4'
             python-version: '3.10'
             test-upgrade: true
             service-mesh: true
-            os: ubuntu-24.04
+            os: ubuntu-22.04
+            check-records-output: false
+            test-strategy: job_relay
     env:
       CLUSTER: ${{ matrix.cluster }}
       KUBERNETES_VERSION: ${{ matrix.k8s-version }}
@@ -110,6 +137,11 @@ jobs:
       DOCKER_VERSION: ${{ matrix.docker-version }}
       TEST_UPGRADE_CHART: ${{ matrix.test-upgrade }}
       SERVICE_MESH: ${{ matrix.service-mesh }}
+      CHECK_RECORD_OUTPUT: ${{ matrix.check-records-output }}
+      SAUCE_ACCESS_KEY: ${{ secrets.SAUCE_ACCESS_KEY }}
+      SAUCE_USERNAME: ${{ secrets.SAUCE_USERNAME }}
+      SAUCE_REGION: ${{ secrets.SAUCE_REGION }}
+      TEST_PATCHED_KEDA: ${{ github.event.inputs.test-patched-keda }}
     steps:
       - name: Free Disk Space (Ubuntu)
         uses: jlumbroso/free-disk-space@main
@@ -200,8 +232,13 @@ jobs:
           timeout_minutes: 30
           max_attempts: 3
           command: |
-            NAME=${IMAGE_REGISTRY} VERSION=${BRANCH} BUILD_DATE=${BUILD_DATE} TEST_UPGRADE_CHART=false make chart_test_autoscaling_${{ matrix.test-strategy }} \
-            && NAME=${IMAGE_REGISTRY} VERSION=${BRANCH} BUILD_DATE=${BUILD_DATE} make test_video_integrity
+            NAME=${IMAGE_REGISTRY} VERSION=${BRANCH} BUILD_DATE=${BUILD_DATE} TEST_UPGRADE_CHART=false make chart_test_autoscaling_${{ matrix.test-strategy }}
+            exit_code=$?
+            if [[ "${CHECK_RECORD_OUTPUT}" = "true" ]] && [[ "${exit_code}" -eq 0 ]]; then
+              NAME=${IMAGE_REGISTRY} VERSION=${BRANCH} BUILD_DATE=${BUILD_DATE} make test_video_integrity
+              exit_code=$?
+            fi
+            exit ${exit_code}
       - name: Upload Helm chart package
         if: always()
         uses: actions/upload-artifact@main