feat(new source): Add Windows Event Log source

.github/actions/spelling/allow.txt

@@ -137,6 +137,7 @@ dsmith
 DVB
 ede
 emoji
+emojis
 emqx
 enableable
 Enot
@@ -145,7 +146,9 @@ EPC
 esbuild
 esensar
 etld
+eventcreate
 eventloop
+Evt
 Evercoss
 exactlyonce
 Explay
@@ -497,6 +500,7 @@ Telstra
 Tencent
 Texet
 Thl
+timediff
 timeframe
 timeseries
 timespan

.github/workflows/build-test-runner.yml

@@ -18,11 +18,12 @@ on:
         type: string
 
 permissions:
+  contents: read
   packages: write
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:

.github/workflows/changelog.yaml

@@ -25,7 +25,7 @@ jobs:
       contents: read
       pull-requests: none
 
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
 
     env:
       NO_CHANGELOG: ${{ contains(github.event.pull_request.labels.*.name, 'no-changelog') }}

.github/workflows/changes.yml

@@ -156,7 +156,7 @@ env:
 jobs:
   # Detects changes that are not specific to integration tests
   source:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ inputs.source }}
     outputs:
@@ -281,7 +281,7 @@ jobs:
 
   # Detects changes that are specific to integration tests
   int_tests:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ inputs.int_tests }}
     outputs:
@@ -405,7 +405,7 @@ jobs:
 
   # Detects changes that are specific to e2e tests
   e2e_tests:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ inputs.e2e_tests }}
     outputs:

.github/workflows/ci-integration-review.yml

@@ -33,8 +33,7 @@ on:
     types: [ submitted ]
 
 permissions:
-  statuses: write
-  packages: write
+  contents: read
 
 env:
   AXIOM_TOKEN: ${{ secrets.AXIOM_TOKEN }}
@@ -52,7 +51,9 @@ env:
 jobs:
   prep-pr:
     name: (PR review) Signal pending to PR
-    runs-on: ubuntu-24.04
+    permissions:
+      statuses: write
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: startsWith(github.event.review.body, '/ci-run-integration') || startsWith(github.event.review.body, '/ci-run-e2e') || contains(github.event.review.body, '/ci-run-all')
     steps:
@@ -82,6 +83,9 @@ jobs:
           status: pending
 
   build-test-runner:
+    permissions:
+      contents: read
+      packages: write
     needs: prep-pr
     uses: ./.github/workflows/build-test-runner.yml
     with:
@@ -92,7 +96,7 @@ jobs:
     needs:
       - prep-pr
       - build-test-runner
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 90
     strategy:
       fail-fast: false
@@ -132,7 +136,7 @@ jobs:
     needs:
       - prep-pr
       - build-test-runner
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     timeout-minutes: 30
     strategy:
       fail-fast: false
@@ -167,7 +171,9 @@ jobs:
 
   update-pr-status:
     name: Signal result to PR
-    runs-on: ubuntu-24.04
+    permissions:
+      statuses: write
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     needs:
       - integration-tests

.github/workflows/ci-review-trigger.yml

@@ -51,7 +51,7 @@ env:
 jobs:
   validate:
     name: Validate review
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: |
         startsWith(github.event.review.body, '/ci-run-all')

.github/workflows/cla.yml

@@ -9,13 +9,14 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
-  id-token: write # Needed to federate tokens.
-  actions: write
 
 jobs:
   CLAAssistant:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      id-token: write # Needed to federate tokens.
+      actions: write
     steps:
       - name: CLA already verified on PR
         if: github.event_name == 'merge_group'

.github/workflows/compilation-timings.yml

@@ -13,7 +13,7 @@ env:
 jobs:
   release-build-optimized:
     name: "Release Build (optimized)"
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     steps:
       - uses: colpal/actions-clean@36e6ca1abd35efe61cb60f912bd7837f67887c8a # v1.1.1
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -24,7 +24,7 @@ jobs:
 
   release-build-normal:
     name: "Release Build (normal)"
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     env:
       # We're not actually doing a debug build, we're just turning off the logic
       # in release-flags.sh so that we don't override the Cargo "release" profile
@@ -40,7 +40,7 @@ jobs:
 
   debug-build:
     name: "Debug Build"
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     steps:
       - uses: colpal/actions-clean@36e6ca1abd35efe61cb60f912bd7837f67887c8a # v1.1.1
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -51,7 +51,7 @@ jobs:
 
   debug-rebuild:
     name: "Debug Rebuild"
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     steps:
       - uses: colpal/actions-clean@36e6ca1abd35efe61cb60f912bd7837f67887c8a # v1.1.1
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -64,7 +64,7 @@ jobs:
 
   check:
     name: "Cargo Check"
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     steps:
       - uses: colpal/actions-clean@36e6ca1abd35efe61cb60f912bd7837f67887c8a # v1.1.1
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/create_preview_sites.yml

@@ -30,7 +30,7 @@ permissions:
 
 jobs:
   create_preview_site:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       # Get the artifacts with the PR number and branch name

.github/workflows/cross.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   cross-linux:
     name: Cross - ${{ matrix.target }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 45
     env:
       CARGO_INCREMENTAL: 0

.github/workflows/deny.yml

@@ -44,7 +44,7 @@ jobs:
     secrets: inherit
 
   test-deny:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 30
     if: ${{ always() && (github.event_name != 'pull_request' || needs.changes.outputs.deny == 'true') }}
     needs: [changes]

.github/workflows/environment.yml

@@ -32,7 +32,7 @@ permissions:
 
 jobs:
   publish-new-environment:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
       - name: Checkout branch

.github/workflows/gardener_issue_comment.yml

@@ -13,7 +13,7 @@ on:
 jobs:
   move-to-backlog:
     name: Move issues back to Gardener project board Triage
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ !github.event.issue.pull_request }}
     steps:

.github/workflows/gardener_open_issue.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   add-to-project:
     name: Add issue to Gardener project board
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2

.github/workflows/gardener_open_pr.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   add-contributor-to-project:
     name: Add contributor PR to Gardener project board
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
@@ -33,7 +33,7 @@ jobs:
           github-token: ${{ secrets.GH_PROJECT_PAT }}
   add-dependabot-to-project:
     name: Add dependabot PR to Gardener project board
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:

.github/workflows/gardener_remove_waiting_author.yml

@@ -13,7 +13,7 @@ on:
 jobs:
   remove_label:
     if: "contains(github.event.pull_request.labels.*.name, 'meta: awaiting author')"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/install-sh.yml

@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   test-install:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - name: Checkout branch

.github/workflows/integration-test.yml

@@ -28,7 +28,7 @@ env:
 
 jobs:
   test-integration:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 40
     if: inputs.if || github.event_name == 'workflow_dispatch'
     steps:

.github/workflows/integration.yml

@@ -18,7 +18,6 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
-  packages: write
   contents: read
 
 env:
@@ -45,6 +44,9 @@ jobs:
     secrets: inherit
 
   build-test-runner:
+    permissions:
+      contents: read
+      packages: write
     needs: changes
     if: ${{
       always() &&
@@ -62,7 +64,7 @@ jobs:
       commit_sha: ${{ github.sha }}
 
   integration-tests:
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     needs:
       - changes
       - build-test-runner
@@ -132,7 +134,7 @@ jobs:
 
 
   e2e-tests:
-    runs-on: ubuntu-24.04-8core
+    runs-on: ubuntu-latest
     needs:
       - changes
       - build-test-runner
@@ -194,7 +196,7 @@ jobs:
 
   integration-test-suite:
     name: Integration Test Suite
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     if: always()
     needs:
       - build-test-runner