Merge pull request #1158 from percona/release-2.10.0

Release 2.10.0

Author: sandraromanchenko

.github/pr-badge.yml

@@ -0,0 +1,5 @@
+label: "JIRA"
+url: "https://jira.percona.com/browse/$issuePrefix"
+message: "$issuePrefix"
+color: "green"
+when: "$issuePrefix"

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ on:
     paths-ignore:
       - "e2e-tests/**"
       - "packaging/**"
-      - "version/**"      
+      - "version/**"
 
 jobs:
   test:
@@ -45,7 +45,7 @@ jobs:
         test: [logical, physical, incremental, external]
     env:
       PBM_BRANCH: ${{ github.event.inputs.pbm_branch || github.ref_name }}
-      GO_VER: ${{ github.event.inputs.go_ver || '1.22-bullseye' }}
+      GO_VER: ${{ github.event.inputs.go_ver || '1.23-bullseye' }}
       PR_NUMBER: ${{ github.event.number|| github.event.inputs.pr_ver }}
       MAKE_TARGET: 'build-cover'
     steps:

.github/workflows/codecov.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v4
         with:
-          go-version: "1.22"
+          go-version: "1.23"
       - name: test
         run: go test -v ./... -covermode=atomic -coverprofile=cover.out
 

.github/workflows/reviewdog.yml

@@ -51,13 +51,12 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v4
         with:
-          go-version: "1.22"
+          go-version: "1.23"
       - name: golangci-lint
         uses: reviewdog/action-golangci-lint@v2
         with:
           reporter: github-pr-review
           level: error
-          golangci_lint_version: v1.64.8
 
   gofmt:
     name: runner / gofmt
@@ -66,7 +65,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v4
         with:
-          go-version: "1.22"
+          go-version: "1.23"
       - run: go install golang.org/x/tools/cmd/goimports@latest
       - run: go install mvdan.cc/gofumpt@latest
       - run: goimports -w -local "github.com/percona" $(find . -not -path "*/vendor/*" -name "*.go")
@@ -82,7 +81,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v4
         with:
-          go-version: "1.22"
+          go-version: "1.23"
       - run: go install mvdan.cc/sh/v3/cmd/shfmt@latest
       - run: shfmt -f . | grep -v 'vendor' | xargs shfmt -w -s
       - name: suggester / shfmt

.github/workflows/trivy.yml

@@ -11,17 +11,20 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-
-      - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
         with:
-          scan-type: "fs"
-          ignore-unfixed: true
-          format: "sarif"
-          output: "trivy-results.sarif"
-          severity: "CRITICAL,HIGH"
+          ref: ${{ github.event.pull_request.head.sha }}
 
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: "trivy-results.sarif"
+      - name: Download latest trivy
+        run: |
+          mkdir -p ${{ github.workspace }}/trivy
+          LATEST_TRIVY_VERSION=$(curl --retry 5 --retry-connrefused --retry-delay 5 --fail -s https://api.github.com/repos/aquasecurity/trivy/releases/latest | jq -r .tag_name)
+          TRIVY_VERSION_STRIPPED=$(echo "$LATEST_TRIVY_VERSION" | sed 's/^v//')
+          wget --tries=5 --retry-connrefused --waitretry=5 -O ${{ github.workspace }}/trivy/trivy.tar.gz \
+              https://github.com/aquasecurity/trivy/releases/download/$LATEST_TRIVY_VERSION/trivy_${TRIVY_VERSION_STRIPPED}_Linux-64bit.tar.gz && break || sleep 5
+          tar -xzf ${{ github.workspace }}/trivy/trivy.tar.gz -C ${{ github.workspace }}/trivy
+
+      - name: Generate SBOM
+        run: ${{ github.workspace }}/trivy/trivy fs --format cyclonedx --output ${{ github.workspace }}/sbom.json ${{ github.workspace }}
+
+      - name: Run trivy scan on SBOM
+        run: ${{ github.workspace }}/trivy/trivy sbom ${{ github.workspace }}/sbom.json --severity HIGH,CRITICAL --ignore-unfixed --exit-code=1

.golangci.yml

@@ -1,33 +1,41 @@
+version: "2"
 linters:
-  presets:
-    - bugs
-    - error
-    - unused
   enable:
     - errname
     - predeclared
-    - stylecheck
-    # - ireturn
-    # - gomnd
+    - staticcheck
     - misspell
     - nilerr
     - nilnil
     - lll
-    # - gocritic
-    - typecheck
-    # - goconst
     - gochecknoinits
-    # - forbidigo
     - nonamedreturns
   disable:
     - contextcheck
     - exhaustive
     - gosec
     - wrapcheck
-
-linters-settings:
-  govet:
-    disable:
-      - composites
-  misspell:
-    locale: "US"
+  settings:
+    govet:
+      disable:
+        - composites
+    misspell:
+      locale: US
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

CONTRIBUTING.md

@@ -53,7 +53,7 @@ Otherwise, we will contact you for additional information or with the request to
 
 To build Percona Backup for MongoDB from source code, you require the following:
 
-* Go 1.22 or above. See [Installing and setting up Go tools](
+* Go 1.23 or above. See [Installing and setting up Go tools](
 https://golang.org/doc/install) for more information
 * make
 * ``krb5-devel`` for Red Hat Enterprise Linux / CentOS or ``libkrb5-dev`` for Debian / Ubuntu. This package is required for Kerberos authentication in Percona Server for MongoDB.

Makefile

@@ -1,4 +1,4 @@
-.PHONY: build-pbm build-agent build install install-pbm install-agent test
+.PHONY: build-pbm build-agent build install install-pbm install-agent test completion completion-bash completion-zsh
 
 GOOS?=$(shell go env GOOS)
 GOMOD?=on
@@ -129,3 +129,28 @@ install-agent-cover:
 	$(ENVS) go install -cover -ldflags="$(LDFLAGS)" $(BUILD_FLAGS) ./cmd/pbm-agent
 install-stest-cover:
 	$(ENVS) go install -cover -ldflags="$(LDFLAGS)" $(BUILD_FLAGS) ./cmd/pbm-speed-test
+
+# COMPLETION SCRIPTS
+completion: completion-bash completion-zsh
+
+completion-dir-bash:
+	mkdir -p ./bin/completions/bash
+
+completion-dir-zsh:
+	mkdir -p ./bin/completions/zsh
+
+completion-bash: completion-dir-bash completion-bash-pbm completion-bash-agent completion-bash-stest
+completion-bash-pbm:
+	./bin/pbm completion bash > ./bin/completions/bash/pbm
+completion-bash-agent:
+	./bin/pbm-agent completion bash > ./bin/completions/bash/pbm-agent
+completion-bash-stest:
+	./bin/pbm-speed-test completion bash > ./bin/completions/bash/pbm-speed-test
+
+completion-zsh: completion-dir-zsh completion-zsh-pbm completion-zsh-agent completion-zsh-stest
+completion-zsh-pbm:
+	./bin/pbm completion zsh > ./bin/completions/zsh/_pbm
+completion-zsh-agent:
+	./bin/pbm-agent completion zsh > ./bin/completions/zsh/_pbm-agent
+completion-zsh-stest:
+	./bin/pbm-speed-test completion zsh > ./bin/completions/zsh/_pbm-speed-test

README.md

@@ -1,7 +1,7 @@
 # Percona Backup for MongoDB
 [![Go Report Card](https://goreportcard.com/badge/github.com/percona/percona-backup-mongodb)](https://goreportcard.com/report/github.com/percona/percona-backup-mongodb) [![CLA assistant](https://cla-assistant.percona.com/readme/badge/percona/percona-backup-mongodb)](https://cla-assistant.percona.com/percona/percona-backup-mongodb)
 
-![PBM logo](backup-mongo.jpeg)
+![PBM logo](percona-backup-for-mongodb.png)
 
 Percona Backup for MongoDB (PBM) is a distributed, low-impact solution for achieving
 consistent backups of MongoDB sharded clusters and replica sets. Percona Backup for MongoDB supports Percona Server for MongoDB and MongoDB Community Edition v5.0 and higher.