Merge branch 'main' into dependabot/npm_and_yarn/dependencies-0277cf7faf

Author: cristianrgreco

AGENTS.md

@@ -0,0 +1,67 @@
+# AGENTS.md
+
+## Purpose
+
+This is a working guide for contributors and coding agents in this repository.
+It captures practical rules that prevent avoidable CI and PR churn.
+
+## Development Expectations
+
+- If a public API changes, update the relevant docs in the same PR.
+- Tests should verify observable behavior changes, not only internal/config state.
+  - Example: for a security option, assert a real secure/insecure behavior difference.
+
+## Permission and Escalation
+
+- `npm install` requires escalated permissions for outbound network access to npm registries.
+- `npm test` commands should b`e run with escalation so tests can access the Docker socket.
+
+### Escalation hygiene
+
+- Use specific commands and clear justifications.
+- Prefer narrow reruns rather than broad full-suite reruns when iterating.
+
+## PR Process
+
+1. Start from `main`.
+2. Create a branch prefixed with `codex/`.
+3. Implement scoped changes only.
+4. Run required checks: `npm run format`, `npm run lint`, and targeted tests.
+5. Verify git diff only contains intended files.
+6. Commit with focused message(s).
+7. Push branch.
+8. Open PR against `main` using a human-readable title (no `feat(...)` / `fix(...)` prefixes).
+9. Add labels for both change type and semantic version impact.
+10. Ensure PR body includes:
+    - summary of changes
+    - verification commands run
+    - test results summary
+    - `Closes #<issue>`
+
+## Labels
+
+### Change type
+
+- `enhancement`
+- `bug`
+- `dependencies`
+- `documentation`
+- `maintenance`
+
+### Semver impact
+
+- `major`
+- `minor`
+- `patch`
+
+### Common mappings
+
+- backward-compatible feature: `enhancement` + `minor`
+- backward-compatible bug fix: `bug` + `patch`
+- breaking change: type label + `major`
+- docs-only change: `documentation` + usually `patch`
+- dependency update: `dependencies` + impact label based on user-facing effect
+
+## Practical Note
+
+- Recheck `package-lock.json` after `npm install` for unrelated drift and revert unrelated changes.

packages/modules/azureservicebus/Dockerfile

@@ -1,2 +1,2 @@
-FROM mcr.microsoft.com/azure-messaging/servicebus-emulator:1.1.2
+FROM mcr.microsoft.com/azure-messaging/servicebus-emulator:2.0.0
 FROM mcr.microsoft.com/mssql/server:2025-latest

packages/modules/chromadb/Dockerfile

@@ -1,2 +1,2 @@
-FROM chromadb/chroma:1.4.0
-FROM ollama/ollama:0.13.5
+FROM chromadb/chroma:1.5.0
+FROM ollama/ollama:0.16.1

packages/modules/clickhouse/Dockerfile

@@ -1 +1 @@
-FROM clickhouse/clickhouse-server:25.12-alpine
+FROM clickhouse/clickhouse-server:26.1-alpine

packages/modules/cockroachdb/Dockerfile

@@ -1 +1 @@
-FROM cockroachdb/cockroach:v25.4.2
+FROM cockroachdb/cockroach:v25.4.4

packages/modules/couchbase/Dockerfile

@@ -1,2 +1,2 @@
-FROM couchbase/server:enterprise-7.0.2
-FROM couchbase/server:community-7.0.2
+FROM couchbase/server:enterprise-8.0.0
+FROM couchbase/server:community-8.0.0

packages/modules/couchbase/src/couchbase-container.ts

@@ -301,33 +301,46 @@ export class CouchbaseContainer extends GenericContainer {
 
     body.set("hostname", container.getHost());
     body.set("mgmt", container.getMappedPort(PORTS.MGMT_PORT).toString());
-    body.set("mgmtSSL", container.getMappedPort(PORTS.MGMT_SSL_PORT).toString());
+    if (this.isEnterprise) {
+      body.set("mgmtSSL", container.getMappedPort(PORTS.MGMT_SSL_PORT).toString());
+    }
 
     if (this.enabledServices.has(CouchbaseService.KV)) {
       body.set("kv", container.getMappedPort(PORTS.KV_PORT).toString());
-      body.set("kvSSL", container.getMappedPort(PORTS.KV_SSL_PORT).toString());
       body.set("capi", container.getMappedPort(PORTS.VIEW_PORT).toString());
-      body.set("capiSSL", container.getMappedPort(PORTS.VIEW_SSL_PORT).toString());
+
+      if (this.isEnterprise) {
+        body.set("kvSSL", container.getMappedPort(PORTS.KV_SSL_PORT).toString());
+        body.set("capiSSL", container.getMappedPort(PORTS.VIEW_SSL_PORT).toString());
+      }
     }
 
     if (this.enabledServices.has(CouchbaseService.QUERY)) {
       body.set("n1ql", container.getMappedPort(PORTS.QUERY_PORT).toString());
-      body.set("n1qlSSL", container.getMappedPort(PORTS.QUERY_SSL_PORT).toString());
+      if (this.isEnterprise) {
+        body.set("n1qlSSL", container.getMappedPort(PORTS.QUERY_SSL_PORT).toString());
+      }
     }
 
     if (this.enabledServices.has(CouchbaseService.SEARCH)) {
       body.set("fts", container.getMappedPort(PORTS.SEARCH_PORT).toString());
-      body.set("ftsSSL", container.getMappedPort(PORTS.SEARCH_SSL_PORT).toString());
+      if (this.isEnterprise) {
+        body.set("ftsSSL", container.getMappedPort(PORTS.SEARCH_SSL_PORT).toString());
+      }
     }
 
     if (this.enabledServices.has(CouchbaseService.ANALYTICS)) {
       body.set("cbas", container.getMappedPort(PORTS.ANALYTICS_PORT).toString());
-      body.set("cbasSSL", container.getMappedPort(PORTS.ANALYTICS_SSL_PORT).toString());
+      if (this.isEnterprise) {
+        body.set("cbasSSL", container.getMappedPort(PORTS.ANALYTICS_SSL_PORT).toString());
+      }
     }
 
     if (this.enabledServices.has(CouchbaseService.EVENTING)) {
       body.set("eventingAdminPort", container.getMappedPort(PORTS.EVENTING_PORT).toString());
-      body.set("eventingSSL", container.getMappedPort(PORTS.EVENTING_SSL_PORT).toString());
+      if (this.isEnterprise) {
+        body.set("eventingSSL", container.getMappedPort(PORTS.EVENTING_SSL_PORT).toString());
+      }
     }
 
     const response = await this.doHttpRequest(

packages/modules/elasticsearch/Dockerfile

@@ -1 +1 @@
-FROM elasticsearch:9.2.3
+FROM elasticsearch:9.3.0

packages/modules/etcd/Dockerfile

@@ -1 +1 @@
-FROM quay.io/coreos/etcd:v3.6.7
+FROM quay.io/coreos/etcd:v3.6.8

packages/modules/gcloud/Dockerfile

@@ -1,4 +1,4 @@
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:555.0.0-emulators
-FROM fsouza/fake-gcs-server:1.53.1
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:556.0.0-emulators
+FROM fsouza/fake-gcs-server:1.54.0
 FROM ghcr.io/goccy/bigquery-emulator:0.6.6
-FROM gcr.io/cloud-spanner-emulator/emulator:1.5.48
+FROM gcr.io/cloud-spanner-emulator/emulator:1.5.49