Merge branch 'develop' of https://github.com/rudderlabs/rudder-transformer into technocrats/ONCEHUB-114580

Author: ArjavJain27

.github/scripts/versions.json

@@ -48,6 +48,13 @@
     "Latest Version rolled out": "Not versioned (Braze maintains backward compatibility without versioning)",
     "Sunset Date Current Version used in backend": "Not Available"
   },
+  {
+    "Destination": "Campaign Manager",
+    "Version currently referred in CloudMode Services": "/dfareporting/v5/userprofiles/:profileId/conversions/batchinsert, /dfareporting/v5/userprofiles/:profileId/conversions/batchupdate",
+    "Link to check Versions documentation": "https://developers.google.com/doubleclick-advertisers/rest/v5/ https://developers.google.com/doubleclick-advertisers/deprecation",
+    "Latest Version rolled out": "v5",
+    "Sunset Date Current Version used in backend": "v4 is deprecated and sunsets on Feb 26, 2026. v5 is current (no sunset announced)."
+  },
   {
     "Destination": "CleverTap",
     "Version currently referred in CloudMode Services": "/1/upload, /1/delete/profiles.json",
@@ -64,10 +71,10 @@
   },
   {
     "Destination": "Criteo Audience",
-    "Version currently referred in CloudMode Services": "/2025-04/audiences/:audienceId/contactlist",
+    "Version currently referred in CloudMode Services": "/2025-10/audiences/:audienceId/contactlist",
     "Link to check Versions documentation": "https://developers.criteo.com/marketing-solutions/docs/versioning-policy",
     "Latest Version rolled out": "v2025-10 (supported until October 2026)",
-    "Sunset Date Current Version used in backend": "April 2026 (12 months after release - version 2025-04 released April 2025)"
+    "Sunset Date Current Version used in backend": "October 2026 (12 months after release - version 2025-10 released October 2025)"
   },
   {
     "Destination": "Customer IO",
@@ -112,25 +119,25 @@
     "Sunset Date Current Version used in backend": "Not Available"
   },
   {
-    "Destination": "GAEC",
-    "Version currently referred in CloudMode Services": "/v19/customers/:customerId/uploadClickConversions, /v19/customers/:customerId/uploadCallConversions, /v19/customers/:customerId/googleAds:searchStream, /v19/customers/:customerId/offlineUserDataJobs",
-    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/release-notes",
-    "Latest Version rolled out": "v20",
-    "Sunset Date Current Version used in backend": "v19 will be deprecated in February 2026"
+    "Destination": "GOOGLE_ADWORDS_ENHANCED_CONVERSIONS",
+    "Version currently referred in CloudMode Services": "/v22/customers/:customerId/uploadClickConversions, /v22/customers/:customerId/uploadCallConversions, /v22/customers/:customerId/googleAds:searchStream, /v22/customers/:customerId/offlineUserDataJobs (currently used: v22)",
+    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/sunset-dates https://developers.google.com/google-ads/api/docs/release-notes",
+    "Latest Version rolled out": "v23 (released Jan 28, 2026)",
+    "Sunset Date Current Version used in backend": "v22 sunset: October 2026 (tentative). Latest available: v23 (released Jan 28, 2026) with sunset February 2027."
   },
   {
     "Destination": "GOOGLE_ADWORDS_OFFLINE_CONVERSIONS",
-    "Version currently referred in CloudMode Services": "/v19/customers/:customerId/uploadClickConversions, /v19/customers/:customerId/uploadCallConversions, /v19/customers/:customerId/googleAds:searchStream, /v19/customers/:customerId/offlineUserDataJobs",
-    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/sunset-dates",
-    "Latest Version rolled out": "v20",
-    "Sunset Date Current Version used in backend": "v19 will be deprecated in February 2026"
+    "Version currently referred in CloudMode Services": "/v22/customers/:customerId/uploadClickConversions, /v22/customers/:customerId/uploadCallConversions, /v22/customers/:customerId/googleAds:searchStream, /v22/customers/:customerId/offlineUserDataJobs (currently used: v22)",
+    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/sunset-dates https://developers.google.com/google-ads/api/docs/release-notes",
+    "Latest Version rolled out": "v23 (released Jan 28, 2026)",
+    "Sunset Date Current Version used in backend": "v22 sunset: October 2026 (tentative). Latest available: v23 (released Jan 28, 2026) with sunset February 2027."
   },
   {
     "Destination": "GOOGLE_ADWORDS_REMARKETING_LISTS",
-    "Version currently referred in CloudMode Services": "/v19/customers/:customerId/offlineUserDataJobs, /v19/customers/:customerId/offlineUserDataJobs/:jobId:create, /v19/customers/:customerId/offlineUserDataJobs/:jobId:addOperations",
-    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/sunset-dates\nhttps://developers.google.com/google-ads/api/docs/release-notes",
-    "Latest Version rolled out": "v20",
-    "Sunset Date Current Version used in backend": "v17 @June 4, 2025 v18 September 2025, v19 will be deprecated in February 2026"
+    "Version currently referred in CloudMode Services": "/v22/customers/:customerId/offlineUserDataJobs, /v22/customers/:customerId/offlineUserDataJobs/:jobId:create, /v22/customers/:customerId/offlineUserDataJobs/:jobId:addOperations (currently used: v22)",
+    "Link to check Versions documentation": "https://developers.google.com/google-ads/api/docs/sunset-dates https://developers.google.com/google-ads/api/docs/release-notes",
+    "Latest Version rolled out": "v23 (released Jan 28, 2026)",
+    "Sunset Date Current Version used in backend": "v22 sunset: October 2026 (tentative). Latest available: v23 (released Jan 28, 2026) with sunset February 2027."
   },
   {
     "Destination": "Google Analytics 4 (GA4)",

.github/workflows/allure-test-reporter.yml

@@ -7,10 +7,6 @@ on:
       - reopened
       - synchronize
 
-permissions:
-  contents: read
-  id-token: write # allows the JWT to be requested from GitHub's OIDC provider
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.sha }}
   cancel-in-progress: true
@@ -19,19 +15,21 @@ jobs:
   generate-tag-names:
     runs-on: ubuntu-latest
     name: Generate Tag Names
+    permissions:
+      contents: read # to checkout repository code (actions/checkout)
     # Skip for the release pull requests as staging artifacts will be generated
     if: startsWith(github.event.pull_request.head.ref, 'release/') != true && startsWith(github.event.pull_request.head.ref, 'hotfix-release/') != true && github.event.pull_request.head.ref != 'master'
     outputs:
       tag_name: ${{ steps.gen_tag_names.outputs.tag_name }}
       tag_name_ut: ${{ steps.gen_tag_names.outputs.tag_name_ut }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
 
@@ -40,15 +38,18 @@ jobs:
         id: gen_tag_names
         run: |
           tag_name=$(echo ${{ github.head_ref }} | tr "/" .)
-          echo "Tag Name: $tag_name"
-          echo "tag_name=$tag_name" >> $GITHUB_OUTPUT
+          echo "Tag Name: branch-$tag_name"
+          echo "tag_name=branch-$tag_name" >> $GITHUB_OUTPUT
 
           tag_name_ut="ut-$tag_name"
-          echo "UT Tag Name: $tag_name_ut"
-          echo "tag_name_ut=$tag_name_ut" >> $GITHUB_OUTPUT
+          echo "UT Tag Name: branch-$tag_name_ut"
+          echo "tag_name_ut=branch-$tag_name_ut" >> $GITHUB_OUTPUT
 
   build-transformer-image:
     name: Build Transformer Docker Image - PR
+    permissions:
+      id-token: write # to pass OIDC token to reusable workflow (build-push-docker-image.yml)
+      contents: read # to checkout repository code and call reusable workflow (actions/checkout)
     # Skip for the release pull requests as staging artifacts will be generated
     # Skip main to develop sync pull requests
     if: startsWith(github.event.pull_request.head.ref, 'release/') != true && startsWith(github.event.pull_request.head.ref, 'hotfix-release/') != true && github.event.pull_request.head.ref != 'master'
@@ -61,13 +62,17 @@ jobs:
       dockerfile: Dockerfile
       load_target: development
       push_target: production
+      create_latest_tag: false
     secrets:
       DOCKERHUB_PROD_TOKEN: ${{ secrets.DOCKERHUB_PROD_TOKEN }}
       DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
       DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
 
   build-user-transformer-image:
     name: Build User Transformer Docker Image - PR
+    permissions:
+      id-token: write # to pass OIDC token to reusable workflow (build-push-docker-image.yml)
+      contents: read # to checkout repository code and call reusable workflow (actions/checkout)
     # Skip for the release pull requests as staging artifacts will be generated
     if: startsWith(github.event.pull_request.head.ref, 'release/') != true && startsWith(github.event.pull_request.head.ref, 'hotfix-release/') != true && github.event.pull_request.head.ref != 'master'
     needs: [generate-tag-names]
@@ -79,17 +84,20 @@ jobs:
       dockerfile: Dockerfile-ut-func
       load_target: development
       push_target: production
+      create_latest_tag: false
     secrets:
       DOCKERHUB_PROD_TOKEN: ${{ secrets.DOCKERHUB_PROD_TOKEN }}
       DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
       DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
 
   run-ingestion-service-test:
     name: Run Ingestion Service Test
+    permissions:
+      contents: read # to call reusable workflow (ingestion-service-test.yml)
     needs: [build-transformer-image, generate-tag-names]
     uses: ./.github/workflows/ingestion-service-test.yml
     with:
       build_tag: rudderstack/develop-rudder-transformer:${{ needs.generate-tag-names.outputs.tag_name }}
     secrets:
-      PAT: ${{ secrets.PAT }}
       DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+      RELEASE_PRIVATE_KEY: ${{ secrets.RELEASE_PRIVATE_KEY }}