chore: update CodeQL workflow and cleanup dist.sh file

Upgraded CodeQL GitHub Actions to v3 for improved security and features. Enhanced .gitignore and pom.xml to exclude and clean up dist.sh files during build and packaging.

Removed unused hugegraph-struct dependency from hugegraph-store. Updated NOTICE copyright year to 2025.

Author: imbajin

.github/workflows/codeql-analysis.yml

@@ -43,18 +43,18 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
           # By default, queries listed here will override any specified in a config file.
           # Prefix the list here with "+" to use these queries and those in the config file.
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3

.gitignore

@@ -66,6 +66,8 @@ output/
 tree.txt
 *.versionsBackup
 .flattened-pom.xml
+**/dependency-reduced-pom.xml
+install-dist/dist.sh
 
 
 # eclipse ignore

hugegraph-store/pom.xml

@@ -85,11 +85,6 @@
                 <artifactId>hg-store-transfer</artifactId>
                 <version>${project.version}</version>
             </dependency>
-            <dependency>
-                <groupId>org.apache.hugegraph</groupId>
-                <artifactId>hugegraph-struct</artifactId>
-                <version>${project.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-slf4j-impl</artifactId>

install-dist/pom.xml

@@ -60,11 +60,12 @@
                                     md5sum $root_path/target/${final.name}.tar.gz
                                     echo -n "hugegraph tar.gz available at: "
                                     echo "$root_path/target/${final.name}.tar.gz"
-                                    rm -f ${project.basedir}/dist.sh
                                 </echo>
                                 <exec executable="${shell-executable}" dir="${project.basedir}" failonerror="true">
                                     <arg line="./dist.sh"/>
                                 </exec>
+                                <!-- Ensure dist.sh is always deleted after execution -->
+                                <delete file="${project.basedir}/dist.sh" quiet="true"/>
                             </tasks>
                         </configuration>
                     </execution>
@@ -84,6 +85,14 @@
                         <fileset>
                             <directory>${project.basedir}/../${final.name}</directory>
                         </fileset>
+                        <!-- Clean up dist.sh if it exists -->
+                        <fileset>
+                            <directory>${project.basedir}</directory>
+                            <includes>
+                                <include>dist.sh</include>
+                            </includes>
+                            <followSymlinks>false</followSymlinks>
+                        </fileset>
                     </filesets>
                 </configuration>
             </plugin>

install-dist/release-docs/NOTICE

@@ -1,5 +1,5 @@
 Apache HugeGraph(incubating)
-Copyright 2022-2024 The Apache Software Foundation
+Copyright 2022-2025 The Apache Software Foundation
 
 This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).

pom.xml

@@ -207,6 +207,7 @@
                             <!-- Maven -->
                             <exclude>.repository/**</exclude>
                             <exclude>**/.flattened-pom.xml</exclude>
+                            <exclude>**/install-dist/dist.sh</exclude>
                             <!-- Test generated data -->
                             <exclude>**/rocksdb-*/**</exclude>
                             <exclude>**/hbase-*/**</exclude>