sync: main to stable

.gitattributes

@@ -31,6 +31,7 @@ catalog/pkg/openapi/model_catalog_source_list.go linguist-generated=true
 catalog/pkg/openapi/model_catalog_source_preview_response.go linguist-generated=true
 catalog/pkg/openapi/model_catalog_source_preview_response_all_of_summary.go linguist-generated=true
 catalog/pkg/openapi/model_error.go linguist-generated=true
+catalog/pkg/openapi/model_field_filter.go linguist-generated=true
 catalog/pkg/openapi/model_filter_option.go linguist-generated=true
 catalog/pkg/openapi/model_filter_option_range.go linguist-generated=true
 catalog/pkg/openapi/model_filter_options_list.go linguist-generated=true

.github/workflows/async-upload-test.yml

@@ -39,7 +39,7 @@ jobs:
       run:
         working-directory: jobs/async-upload
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -66,7 +66,7 @@ jobs:
       run:
         working-directory: jobs/async-upload
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -89,7 +89,7 @@ jobs:
         working-directory: jobs/async-upload
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Set up Python

.github/workflows/build-and-push-async-upload.yml

@@ -31,7 +31,7 @@ jobs:
       packages: write
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6.0.0
+      uses: actions/checkout@v6.0.1
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3

.github/workflows/build-and-push-csi-image.yml

@@ -38,7 +38,7 @@ jobs:
         if: github.head_ref == '' && github.ref == 'refs/heads/main'
         run: echo "BUILD_CONTEXT=main" >> $GITHUB_ENV
       # checkout branch
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       # set image version
       - name: Set main-branch environment
         if: env.BUILD_CONTEXT == 'main'

.github/workflows/build-and-push-image.yml

@@ -42,7 +42,7 @@ jobs:
         if: github.head_ref == '' && github.ref == 'refs/heads/main'
         run: echo "BUILD_CONTEXT=main" >> $GITHUB_ENV
       # checkout branch
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       # Set up QEMU for multi-architecture builds
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3

.github/workflows/build-and-push-ui-images-standalone.yml

@@ -29,7 +29,7 @@ jobs:
       packages: write
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6.0.0
+      uses: actions/checkout@v6.0.1
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3

.github/workflows/build-and-push-ui-images.yml

@@ -29,7 +29,7 @@ jobs:
       packages: write
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6.0.0
+      uses: actions/checkout@v6.0.1
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3

.github/workflows/build-image-pr.yml

@@ -25,7 +25,7 @@ jobs:
   build-and-test-image:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Generate Tag
         shell: bash
         id: tags

.github/workflows/build-image-ui-pr.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # checkout branch
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Build UI Image
         shell: bash
         run: ./scripts/build_deploy.sh

.github/workflows/build.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
       - name: Setup Go
         uses: actions/setup-go@v6
         with:

.github/workflows/check-db-schema-structs.yaml

@@ -14,7 +14,7 @@ jobs:
   check-mysql-schema-structs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Setup Go
         uses: actions/setup-go@v6
         with:
@@ -34,7 +34,7 @@ jobs:
   check-postgres-schema-structs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Setup Go
         uses: actions/setup-go@v6
         with:

.github/workflows/check-gitattributes.yaml

@@ -8,6 +8,6 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Validate OpenAPI spec
         run: ./scripts/gen_gitattributes.sh --check

.github/workflows/check-openapi-spec-pr.yaml

@@ -12,7 +12,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Validate OpenAPI spec
         run: |
           make openapi/validate

.github/workflows/controller-test.yml

@@ -39,7 +39,7 @@ jobs:
           echo "tag=${tag}" >> $GITHUB_OUTPUT
 
       - name: Clone the code
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
 
       - name: Setup Go
         uses: actions/setup-go@v6

.github/workflows/csi-test.yml

@@ -35,7 +35,7 @@ jobs:
   build-and-test-csi-image:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
 
       - name: Generate tag
         shell: bash

.github/workflows/first-time-contributor-pr.yml

@@ -15,14 +15,14 @@ permissions: # set contents: read at top-level, per OpenSSF ScoreCard rule Token
 
 jobs:
   welcome:
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    # do NOT skip the entire workflow as that generates troubles with Prow/Tide, i.e. do not do `if` checks here
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
       issues: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
 
       - name: Install PyYAML
         run: pip3 install pyyaml
@@ -50,6 +50,7 @@ jobs:
           echo "Approvers: ${{ steps.set-approvers.outputs.approvers }}"
 
       - name: Welcome first-time contributors message
+        if: ${{ github.actor != 'dependabot[bot]' }}
         uses: actions/first-interaction@v3
         continue-on-error: true
         with:

.github/workflows/go-mod-tidy-diff-check.yml

@@ -16,7 +16,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout code
-              uses: actions/checkout@v6.0.0
+              uses: actions/checkout@v6.0.1
 
             - name: Set up Go
               uses: actions/setup-go@v6

.github/workflows/prepare.yml

@@ -8,7 +8,7 @@ jobs:
   prepare:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
       - name: Setup Go
         uses: actions/setup-go@v6
         with:

.github/workflows/python-release.yml

@@ -16,7 +16,7 @@ jobs:
       FORCE_COLOR: "1"
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Set up Python

.github/workflows/python-tests.yml

@@ -31,7 +31,7 @@ jobs:
       FORCE_COLOR: "1"
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
       - name: Set up Python ${{ matrix.python }}
         uses: actions/setup-python@v6
         with:
@@ -74,7 +74,7 @@ jobs:
         nodejs: ["20"]
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
       - name: Set up Python
@@ -148,7 +148,7 @@ jobs:
       DEPLOY_MANIFEST_DB: "${{ matrix.manifest-db }}"
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
       - name: Set up Python ${{ matrix.python }}
         uses: actions/setup-python@v6
         with:
@@ -268,7 +268,7 @@ jobs:
       FORCE_COLOR: "1"
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
       - name: Set up Python ${{ matrix.python }}
         uses: actions/setup-python@v6
         with:

.github/workflows/scorecard.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v6.0.0 # unify for Dependabot bump
+        uses: actions/checkout@v6.0.1 # unify for Dependabot bump
         with:
           persist-credentials: false
 

.github/workflows/test-fuzz.yml

@@ -53,7 +53,7 @@ jobs:
             }
 
       - name: Checkout PR
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
         with:
           ref: ${{ fromJson(steps.pr.outputs.result).sha }}
 

.github/workflows/trivy-image-scanning.yaml

@@ -24,7 +24,7 @@ jobs:
         ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
 
       - name: Sanitize image name for SARIF filename
         run: |

.github/workflows/ui-bff-build.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
 
       - name: Setup Go
         uses: actions/setup-go@v6

.github/workflows/ui-frontend-build.yml

@@ -26,7 +26,7 @@ jobs:
   test-and-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.0
+      - uses: actions/checkout@v6.0.1
 
       - name: Set up Node.js
         uses: actions/setup-node@v6

api/openapi/catalog.yaml

@@ -831,6 +831,19 @@ components:
         message:
           description: Error message
           type: string
+    FieldFilter:
+      type: object
+      required:
+        - operator
+        - value
+      properties:
+        operator:
+          type: string
+          description: Filter operator (e.g., '<', '=', '>', 'IN')
+          example: '<'
+        value:
+          description: Filter value (can be number, string, or array)
+          example: 70
     FilterOption:
       type: object
       required:
@@ -867,6 +880,13 @@ components:
           description: A single filter option.
           additionalProperties:
             $ref: "#/components/schemas/FilterOption"
+        namedQueries:
+          type: object
+          description: Predefined named queries for common filtering scenarios
+          additionalProperties:
+            type: object
+            additionalProperties:
+              $ref: "#/components/schemas/FieldFilter"
     MetadataBoolValue:
       description: A bool property value.
       type: object

api/openapi/src/catalog.yaml

@@ -746,6 +746,19 @@ components:
         max:
           type: number
           format: double
+    FieldFilter:
+      type: object
+      required:
+        - operator
+        - value
+      properties:
+        operator:
+          type: string
+          description: Filter operator (e.g., '<', '=', '>', 'IN')
+          example: '<'
+        value:
+          description: Filter value (can be number, string, or array)
+          example: 70
     FilterOptionsList:
       description: List of FilterOptions
       type: object
@@ -755,6 +768,13 @@ components:
           description: A single filter option.
           additionalProperties:
             $ref: "#/components/schemas/FilterOption"
+        namedQueries:
+          type: object
+          description: Predefined named queries for common filtering scenarios
+          additionalProperties:
+            type: object
+            additionalProperties:
+              $ref: "#/components/schemas/FieldFilter"
     OrderByField:
       description: |-
         Supported fields for ordering result entities.