sync with open source how

.asf.yaml

@@ -39,12 +39,89 @@ github:
     - pcoet
     - olehborysevych
     - rshamunov
+    - andreydevyatkin
+    - liferoad
 
   enabled_merge_buttons:
     squash: true
     merge: true
     rebase: false
 
+  protected_branches:
+    master: {}
+    release-2.62.0: {}
+    release-2.61.0: {}
+    release-2.60.0: {}
+    release-2.59.0: {}
+    release-2.58.1: {}
+    release-2.58.0: {}
+    release-2.57.0: {}
+    release-2.56.0: {}
+    release-2.55.1: {}
+    release-2.55.0: {}
+    release-2.54.0: {}
+    release-2.53.0: {}
+    release-2.52.0: {}
+    release-2.51.0: {}
+    release-2.50.0: {}
+    release-2.49.0: {}
+    release-2.48.0: {}
+    release-2.47.0: {}
+    release-2.46.0: {}
+    release-2.45.0: {}
+    release-2.44.0: {}
+    release-2.43.0: {}
+    release-2.42.0: {}
+    release-2.41.0: {}
+    release-2.40.0: {}
+    release-2.39.0: {}
+    release-2.38.0: {}
+    release-2.37.0: {}
+    release-2.36.0: {}
+    release-2.35.0: {}
+    release-2.34.0: {}
+    release-2.33.0: {}
+    release-2.32.0: {}
+    release-2.31.0: {}
+    release-2.30.0: {}
+    release-2.29.0: {}
+    release-2.28.0: {}
+    release-2.27.0: {}
+    release-2.26.0: {}
+    release-2.25.0: {}
+    release-2.24.0: {}
+    release-2.23.0: {}
+    release-2.22.0: {}
+    release-2.21.0: {}
+    release-2.20.0: {}
+    release-2.19.0: {}
+    release-2.18.0: {}
+    release-2.17.0: {}
+    release-2.16.0: {}
+    release-2.15.0: {}
+    release-2.14.0: {}
+    release-2.13.0: {}
+    release-2.12.0: {}
+    release-2.11.0: {}
+    release-2.10.0: {}
+    release-2.8.0: {}
+    release-2.8.0: {}
+    release-2.7.0: {}
+    release-2.6.0: {}
+    release-2.5.0: {}
+    release-2.4.0: {}
+    release-2.3.0: {}
+    release-2.2.0: {}
+    release-2.1.1: {}
+    release-2.1.0: {}
+    release-0.6.0: {}
+    release-0.5.0: {}
+    release-0.4.0: {}
+    release-0.4.0-incubating: {}
+    release-0.3.0-incubating: {}
+    release-0.2.0-incubating: {}
+    release-0.1.0-incubating: {}
+
 notifications:
   commits: [email protected]
   issues: [email protected]

.github/ACTIONS.md

@@ -98,3 +98,7 @@ Phrases self-assign, close, or manage labels on an issue:
 | `.add-labels` | Add comma separated labels to the issue (e.g. `add-labels l1, 'l2 with spaces'`) |
 | `.remove-labels` | Remove comma separated labels to the issue (e.g. `remove-labels l1, 'l2 with spaces'`) |
 | `.set-labels` | Sets comma separated labels to the issue and removes any other labels (e.g. `set-labels l1, 'l2 with spaces'`) |
+
+## Security Model
+
+For information on the Beam CI security model, see https://cwiki.apache.org/confluence/display/BEAM/CI+Security+Model

.github/ISSUE_TEMPLATE/bug.yml

@@ -50,6 +50,7 @@ body:
         - "Priority: 2 (default / most bugs should be filed as P2)"
         - "Priority: 1 (data loss / total loss of function)"
         - "Priority: 0 (outage / urgent vulnerability)"
+      default: 1
     validations:
       required: true
   - type: checkboxes
@@ -63,10 +64,12 @@ body:
        - label: "Component: Go SDK"
        - label: "Component: Typescript SDK"
        - label: "Component: IO connector"
+       - label: "Component: Beam YAML"
        - label: "Component: Beam examples"
        - label: "Component: Beam playground"
        - label: "Component: Beam katas"
        - label: "Component: Website"
+       - label: "Component: Infrastructure"
        - label: "Component: Spark Runner"
        - label: "Component: Flink Runner"
        - label: "Component: Samza Runner"

.github/ISSUE_TEMPLATE/failing_test.yml

@@ -56,6 +56,7 @@ body:
         - "Priority: 2 (backlog / disabled test but we think the product is healthy)"
         - "Priority: 1 (unhealthy code / failing or flaky postcommit so we cannot be sure the product is healthy)"
         - "Priority: 0 (outage / failing precommit test impacting development)"
+      default: 1
     validations:
       required: true
   - type: checkboxes
@@ -69,10 +70,12 @@ body:
        - label: "Component: Go SDK"
        - label: "Component: Typescript SDK"
        - label: "Component: IO connector"
+       - label: "Component: Beam YAML"
        - label: "Component: Beam examples"
        - label: "Component: Beam playground"
        - label: "Component: Beam katas"
        - label: "Component: Website"
+       - label: "Component: Infrastructure"
        - label: "Component: Spark Runner"
        - label: "Component: Flink Runner"
        - label: "Component: Samza Runner"

.github/ISSUE_TEMPLATE/feature.yml

@@ -44,6 +44,7 @@ body:
       options:
         - "Priority: 3 (nice-to-have improvement)"
         - "Priority: 2 (default / most feature requests should be filed as P2)"
+      default: 1
     validations:
       required: true
   - type: checkboxes
@@ -57,10 +58,12 @@ body:
        - label: "Component: Go SDK"
        - label: "Component: Typescript SDK"
        - label: "Component: IO connector"
+       - label: "Component: Beam YAML"
        - label: "Component: Beam examples"
        - label: "Component: Beam playground"
        - label: "Component: Beam katas"
        - label: "Component: Website"
+       - label: "Component: Infrastructure"
        - label: "Component: Spark Runner"
        - label: "Component: Flink Runner"
        - label: "Component: Samza Runner"

.github/ISSUE_TEMPLATE/task.yml

@@ -45,6 +45,7 @@ body:
         - "Priority: 3 (nice-to-have improvement)"
         - "Priority: 2 (default / most normal work should be filed as P2)"
         - "Priority: 1 (urgent / mostly reserved for critical bugs)"
+      default: 1
     validations:
       required: true
   - type: checkboxes
@@ -58,10 +59,12 @@ body:
        - label: "Component: Go SDK"
        - label: "Component: Typescript SDK"
        - label: "Component: IO connector"
+       - label: "Component: Beam YAML"
        - label: "Component: Beam examples"
        - label: "Component: Beam playground"
        - label: "Component: Beam katas"
        - label: "Component: Website"
+       - label: "Component: Infrastructure"
        - label: "Component: Spark Runner"
        - label: "Component: Flink Runner"
        - label: "Component: Samza Runner"

.github/PULL_REQUEST_TEMPLATE.md

@@ -8,7 +8,7 @@ Thank you for your contribution! Follow this checklist to help us incorporate yo
  - [ ] Update `CHANGES.md` with noteworthy changes.
  - [ ] If this contribution is large, please file an Apache [Individual Contributor License Agreement](https://www.apache.org/licenses/icla.pdf).
 
-See the [Contributor Guide](https://beam.apache.org/contribute) for more tips on [how to make review process smoother](https://beam.apache.org/contribute/get-started-contributing/#make-the-reviewers-job-easier).
+See the [Contributor Guide](https://beam.apache.org/contribute) for more tips on [how to make review process smoother](https://github.com/apache/beam/blob/master/CONTRIBUTING.md#make-the-reviewers-job-easier).
 
 To check the build health, please visit [https://github.com/apache/beam/blob/master/.test-infra/BUILD_STATUS.md](https://github.com/apache/beam/blob/master/.test-infra/BUILD_STATUS.md)
 
@@ -19,4 +19,4 @@ GitHub Actions Tests Status (on master branch)
 [![Java tests](https://github.com/apache/beam/workflows/Java%20Tests/badge.svg?branch=master&event=schedule)](https://github.com/apache/beam/actions?query=workflow%3A%22Java+Tests%22+branch%3Amaster+event%3Aschedule)
 [![Go tests](https://github.com/apache/beam/workflows/Go%20tests/badge.svg?branch=master&event=schedule)](https://github.com/apache/beam/actions?query=workflow%3A%22Go+tests%22+branch%3Amaster+event%3Aschedule)
 
-See [CI.md](https://github.com/apache/beam/blob/master/CI.md) for more information about GitHub Actions CI.
+See [CI.md](https://github.com/apache/beam/blob/master/CI.md) for more information about GitHub Actions CI or the [workflows README](https://github.com/apache/beam/blob/master/.github/workflows/README.md) to see a list of phrases to trigger workflows.

.github/REVIEWERS.yml

@@ -20,39 +20,75 @@
 labels:
   - name: Go
     reviewers:
-      - damccorm
       - lostluck
       - jrmccluskey
-      - riteshghorse
     exclusionList:
       - youngoli
   - name: Python
     reviewers:
-      - AnandInguva
       - damccorm
       - jrmccluskey
       - tvalentyn
-      - pabloem
+      - liferoad
+      - shunping
     exclusionList: []
   - name: Java
     reviewers:
-      - lukecwik
+      - Abacn
       - kennknowles
       - robertwb
-      - kileys
-      - apilloud
+      - m-trieu
+      - damondouglas
     exclusionList: []
   - name: IO
     reviewers:
       - chamikaramj
       - johnjcasey
-      - pabloem
       - Abacn
       - ahmedabu98
+      - damondouglas
+      - shunping
+    exclusionList: []
+  - name: spanner
+    reviewers:
+      - nielm
+  - name: bigtable
+    reviewers:
+      - igorbernstein2
+      - mutianf
+    exclusionList: []
+  - name: healthcare
+    reviewers:
+      - svetakvsundhar
     exclusionList: []
+  - name: kafka
+    reviewers:
+      - johnjcasey
+      - fozzie15
+      - Dippatel98
+      - sjvanrossum
   - name: Build
     reviewers:
       - damccorm
       - Abacn
     exclusionList: []
-fallbackReviewers: []
+  - name: website
+    reviewers:
+      - rszper
+      - melap
+      - damccorm
+      - liferoad
+      - kennknowles
+    exclusionList: []
+fallbackReviewers:
+  - Abacn
+  - chamikaramj
+  - damccorm
+  - damondouglas
+  - johnjcasey
+  - jrmccluskey
+  - kennknowles
+  - lostluck
+  - robertwb
+  - shunping
+  - tvalentyn

.github/actions/common-rc-validation/action.yaml

@@ -36,19 +36,19 @@ runs:
       shell: bash
       run: |
           echo "---------------------Downloading Python Staging RC----------------------------"
-          wget ${PYTHON_RC_DOWNLOAD_URL}/${RELEASE_VER}/python/apache-beam-${RELEASE_VER}.zip
-          wget ${PYTHON_RC_DOWNLOAD_URL}/${RELEASE_VER}/python/apache-beam-${RELEASE_VER}.zip.sha512
-          if [[ ! -f apache-beam-$RELEASE_VER.zip ]]; then
+          wget ${PYTHON_RC_DOWNLOAD_URL}/${RELEASE_VER}/python/apache-beam-${RELEASE_VER}.tar.gz
+          wget ${PYTHON_RC_DOWNLOAD_URL}/${RELEASE_VER}/python/apache-beam-${RELEASE_VER}.tar.gz.sha512
+          if [[ ! -f apache-beam-$RELEASE_VER.tar.gz ]]; then
             { echo "Fail to download Python Staging RC files." ;exit 1; }
           fi
 
           echo "--------------------------Verifying Hashes------------------------------------"
-          sha512sum -c apache-beam-${RELEASE_VER}.zip.sha512
+          sha512sum -c apache-beam-${RELEASE_VER}.tar.gz.sha512
 
           `which pip` install --upgrade pip
           `which pip` install --upgrade setuptools
 
     - name: Installing python SDK
       shell: bash
-      run: pip install apache-beam-${RELEASE_VER}.zip[gcp]
+      run: pip install apache-beam-${RELEASE_VER}.tar.gz[gcp]
 

.github/actions/gradle-command-self-hosted-action/action.yml

@@ -24,12 +24,6 @@ inputs:
     required: false
     description: 'Gradle options'
     default: ''
-  default-arguments:
-    required: false
-    description: 'Default gradle switches' # Copied from CommonJobProperties.groovy'
-    default: |
-      --continue -Dorg.gradle.jvmargs=-Xms2g -Dorg.gradle.jvmargs=-Xmx6g \
-      -Dorg.gradle.vfs.watch=false -Pdocker-pull-licenses
   max-workers:
     required: false
     description: 'Max number of workers'
@@ -41,9 +35,12 @@ runs:
     - name: Run Gradle Command
       shell: bash
       run: |
-        # Removing settings.xml is a workaround to avoid a decryption issue
-        # of Beam's gradle-command-action plugin and github's provided
-        # maven settings.xml file
-        rm ~/.m2/settings.xml
-        ./gradlew ${{ inputs.gradle-command }} --max-workers=${{ inputs.max-workers }} ${{ inputs.arguments }} \
-        ${{ inputs.default-arguments }}
+        # This step is a workaround to avoid a decryption issue of Beam's
+        # net.linguica.gradle.maven.settings plugin and github's provided maven
+        # settings.xml file
+        if [ -f ~/.m2/settings.xml ]; then
+          rm ~/.m2/settings.xml
+        fi
+        ./gradlew ${{ inputs.gradle-command }} --max-workers=${{ inputs.max-workers }} --continue \
+         -Dorg.gradle.jvmargs=-Xms2g -Dorg.gradle.jvmargs=-Xmx6g -Dorg.gradle.vfs.watch=false -Pdocker-pull-licenses \
+        ${{ inputs.arguments }}