Synnax v0.54.0 (#2177)

* SY-2826: Add `MustSucceed` linter (#2079)

* SY-3884: Remove `go.work` files and use local path imports instead (#2082)

* SY-3811: Upgrade Rust and Tauri dependencies (#2096)

* SY-3806: Upgrade Go dependencies (#2093)

* SY-3920: Upgrade Fiber to v3 (#2094)

* SY-3690: Refactor Integration Test Infrastructure (#2099)

* SY-3807: Upgrade Python dependencies (#2098)

* SY-3878: Support for statuses, stable, select in Arc C++ Runtime (#2051)

* SY-3810: Upgrade GitHub Actions (#2095)

* SY-3521: Enable Device-Chassis Ontology Relationships (#2033)

* SY-3908: Edit TypeScript deployment to only run on package version updates

* renamed python xpy package to x

* SY-3912: Fix Race Conditions Across Go Codebase (#2073)

* SY-3939: Add workflow for X Python and update its dependencies (#2108)

* SY-3498: Oracle Generated Code (#2091)

* updated decoders to properly decode incorrect struct tag casing

* SY-3338: Refactor Gorp to Use Primitive Key Encoding (#2015)

* SY-3512: Arc Telemetry Bypass (#2089)

* SY-3809: Upgrade to Bazel 9 and some Bazel dependencies (#2109)

* SY-3966: Fix Race Condition in Unary writer PeekResource Alignment Access (#2112)

* SY-3985: Fix outdated references to Python `sy` CLI tool (#2119)

* SY: Clean CI Build Caches (#2118)

* SY-3823: Gorp Tables (#2021)

* SY-3988: Fix data race in channel observer test (#2124)

* SY-3725: Add icons to view create modal (#2120)

* SY-3866: Add open Arc Explorer to Arc Toolbar and clean up toolbar code (#2122)

* SY-3972: Separate Search Service from Ontology (#2117)

* SY-3980: Refactor to Go driver (#2123)

* SY-3971: Core refactors for data deletion (#2121)

* SY-3818: Use Ginkgo's Built-In SpecContext (#2125)

* Revert TypeScript dependency upgrades accidentally included in SY-3971

* [integration test] Fix Device Status Check in NI Disconnect Test

* SY-3808: Upgrade TypeScript Dependencies (#2113)

* SY-3840: Add integrations property to a rack (#2129)

* SY-2318: Add delete all data feature to Console (#2126)

Add a delete all data feature to the Console.

* SY-3816: Add Go Fuzz Testing CI Workflow (#2130)

* SY-3816 [2/10]: Add Graph Utility Package (#2133)

* fixed race condition in aspen grpc transport

* SY-4001: Make sure instrumentation is passed to all services

* SY-3997: Fix Arc integration tests for Go driver (#2142)

* SY-3816: Add Oracle Migration and Marshal Plugins (#2131)

* SY-3816 [1/10]: Add Binary Codec Primitives for Oracle (#2132)

* SY-2676: Move x/binary Codecs to x/encoding Sub-Packages (#2148)

* SY-3816 [3/10]: Add Gorp Migration Framework (#2134)

* SY-4003: Add Oracle-Generated View Clients for Go, Python, and C++ (#2149)

* [x/go] - removed deprecation warnings

* SY-3816 [4/10]: Add Telem Codec (#2135)

* SY-3816 [6/10]: Add Spatial Codec (#2137)

* fixed generated view types

* added v53 oracle snapshot

* SY-3978: Add variant filtering to the Status Explorer (#2128)

* SY-3816 [1/8]: ORC Binary Encoding Package (#2155)

* SY-4007: Add empty content to login cluster list (#2153)

* SY-3816: Migration Related Gorp Refactors (#2163)

* SY-3816 [3/8]: Oracle Codec and Migration Plugins (#2157)

* SY-3816 [5/8]: Arc Generated Codecs (#2159)

* SY-3816 [4/8]: x/go Generated Codecs (#2158)

* SY-3816 [6/8]: Ontology Codecs and Raw Filter (#2160)

* SY-3816 [7/8]: Ranger Migration Update (#2161)

* SY-3981: Add press and hold to schematic valves (#2144)

* SY-3816 [8/8]: Remaining Core Service Codecs (#2162)

* updated all orc codecs to their latest version

* gofmt

* SY-3256: Removed `set.Mapped` Type and Improved Set Related Tests (#2166)

* SY-4015: Move Rack, Device, Task Migrations to Use Gorp Migration Framework (#2165)

* SY-4016: Consolidate Gorp and x/migrate Migration Systems (#2168)

* Tidy `go.mod` files

* SY-4014: Move Access Migrations and Root User Provisioning Into Services (#2169)

* SY-4018: Move Device, Rack, and Task Migrations to Versioned Subdirectories (#2170)

* SY-4019: Move Range Migrations Into Dedicated Folder (#2171)

* fixed issues with macos driver tests

* SY-3130: Add "open Arc" to Arc context menu (#2127)

* SY-3923: Remove unneeded Python packages (#2173)

* SY-4022: Fix Resource Leaks in Service Openers (#2175)

* SY-4013: Ontology and Orc Optimizations (#2164)

* SY-3855: Add PagerDuty integration (#2145)

* SY-4023: Fix task and rack migration float64 key decoding (#2176)

* SY-4020: Add PagerDuty Python types and integration test (#2174)

* SY-3252: Remove weird `Keys` and `Names` types from TypeScript client (#2167)

* SY-4026: Fix Embedded NI Field Documentation (#2181)

* SY-4009: Migration Test Cases (#2178)

* [integration tests] Update ranges favorite/unfavorite action strings

* SY-4025: Consolidate `client/py/x` and shared utilities into `x/py` (#2180)

* SY-4017: Write PagerDuty integration documentation (#2184)

* SY-4027: Use Ruff for Python Linting and Formatting (#2182)

* fixed range integration test cases

* [integration tests] +

* SY-4029: Fix dragging and dropping of OPC UA channels (#2185)

* SY-3991: Add Synnax v0.54 Release Notes (#2186)

* Fix bypass authority filtering blocking all read/write task bus publishes (#2187)

* [documentation] Updates and corrections

---------

Co-authored-by: Patrick Dotson <patrick@synnaxlabs.com>
Co-authored-by: sy-nico <nico@synnaxlabs.com>
Co-authored-by: Patrick Dotson <patrickdotson11@gmail.com>

Author: 3 people

.bazeliskrc

@@ -1 +1 @@
-USE_BAZEL_VERSION=8.5.0
+USE_BAZEL_VERSION=9.0.1

.bazelrc

@@ -3,6 +3,11 @@
 # See https://github.com/rules-proto-grpc/rules_proto_grpc/issues/390 for info
 common --enable_bzlmod=true --enable_workspace=false --noincompatible_disallow_ctx_resolve_tools  --define=protobuf_allow_msvc=true
 
+# Bazel 9 enables --incompatible_strict_action_env by default, which restricts PATH
+# to /bin:/usr/bin:/usr/local/bin. Pass through the host PATH so tools like cmake
+# (installed via Homebrew at /opt/homebrew/bin) are available in genrules.
+build --action_env=PATH
+
 # Enable platform-specific configs
 build --enable_platform_specific_config
 
@@ -19,13 +24,18 @@ build:macos --cpu=darwin_arm64
 build:macos --cxxopt=-std=c++23
 build:macos --host_cxxopt=-std=c++23
 build:macos --copt=-Werror
+build:macos --copt=-Wreorder-init-list
 # Hide symbols to prevent collisions with libraries loaded dynamically at runtime
 # (LabJack bundles an incompatible legacy gRPC version).
 build:macos --copt=-fvisibility=hidden
 build:macos --cxxopt=-fvisibility-inlines-hidden
 
 # Allow protobuf deprecation warnings without treating them as errors
 build:macos --copt=-Wno-error=deprecated-declarations
+# GoogleTest 1.17 headers trigger char8_t → char32_t conversion warning in gtest-printers.h
+# -Wno-unknown-warning-option prevents older Clang from erroring on unrecognized -W flags
+build:macos --copt=-Wno-unknown-warning-option
+build:macos --copt=-Wno-error=character-conversion
 
 # Linux
 build:linux --cxxopt=-std=c++23
@@ -38,6 +48,8 @@ build:linux --cxxopt=-fvisibility-inlines-hidden
 
 # Allow protobuf deprecation warnings without treating them as errors
 build:linux --copt=-Wno-error=deprecated-declarations
+# GoogleTest 1.17 headers trigger sign-compare in test compilation units
+build:linux --copt=-Wno-sign-compare
 
 # Allow sequence-point warnings without treating them as errors
 # (wasmtime headers use storage++ in pack expansion which triggers this)

.dockerignore

@@ -62,8 +62,6 @@ Thumbs.db
 # Config files not needed in build
 *.yaml
 *.yml
-!go.work
-!go.work.sum
 *.json
 !package.json
 *.toml
@@ -80,4 +78,4 @@ Dockerfile
 # - cesium (included)
 # - aspen (included)
 # - arc (included)
-# - go.mod, go.sum, go.work, go.work.sum (included)
+# - go.mod, go.sum (included)

.github/PULL_REQUEST_TEMPLATE/rc.md

@@ -74,8 +74,6 @@ I can successfully:
 
 - **Create Channel Modal**
 - [ ] Open a channel plot from a link.
-- [ ] Rename a channel and ensure the change synchronizes properly across:
-  - Task Configuration Dialog
 - [ ] Set an alias for a channel and ensure the change synchronizes properly across:
   - Log Visualization Toolbar
   - Schematic Visualization Toolbar
@@ -128,19 +126,6 @@ I can successfully:
   - [ ] See the user avatar and username in the top-right corner after logging in.
   - [ ] Click the user badge to open the logout menu.
 
-### Devices
-
-I can successfully:
-
-- **Resources Toolbar**
-  - [ ] See a device's state get updated.
-  - **Context Menu**
-    - [ ] Group devices.
-    - [ ] Configure an unconfigured device.
-    - [ ] Change the identifier on a configured device.
-    - [ ] Rename a device.
-    - [ ] Delete a device.
-
 ### Layout
 
 I can successfully:
@@ -170,23 +155,6 @@ I can successfully:
   - [ ] Preserve log data from a virtual channel in the buffer.
 - [ ] Open a log from its link.
 
-### Permissions & Roles
-
-I can successfully:
-
-- **Role Management**
-  - [ ] View all available roles in the Resources Toolbar.
-  - [ ] Unassign a role from a user.
-  - [ ] Cannot delete built-in roles (Owner, Engineer, Operator, Viewer).
-
-- **As an Owner:**
-  - [ ] Can register new users and assign roles.
-  - [ ] Can create, edit, and delete all resource types.
-
-- **As a Viewer:**
-  - [ ] Can view schematics, line plots, tables, logs.
-  - [ ] Cannot actuate valves on a schematic.
-
 ### Ranges
 
 I can successfully:
@@ -236,19 +204,6 @@ I can successfully:
 - [ ] Import a task from a file via the import task commands
 - [ ] Import a task from a file via drag-and-drop
 
-### Users
-
-I can successfully:
-
-- **Resources Toolbar**
-  - [ ] Unassign a role from a user.
-  - [ ] Open the "Permissions" dialog.
-  - [ ] Rename a user.
-  - [ ] Delete a user.
-  - [ ] Delete multiple users.
-- [ ] Change a user's username and log in with the new username.
-- [ ] Change a user's role and verify their permissions change accordingly.
-
 ### Version
 
 I can successfully:
@@ -319,7 +274,6 @@ I can successfully:
 I can successfully:
 
 - [ ] Enable and disable NI integration when starting the server.
-- [ ] View a chassis and it's child devices.
 - [ ] Shut down the driver without errors during embedded operation.
 - **Digital Read Task**
   - [ ] Plot live data.

.github/actions/test-python/action.yaml

@@ -30,7 +30,7 @@ inputs:
     required: false
     default: "."
   format_check:
-    description: Whether to run formatting checks (isort, black)
+    description: Whether to run formatting and linting checks (ruff)
     required: false
     default: "true"
 
@@ -52,15 +52,15 @@ runs:
       with:
         python-version-file: ${{ inputs.directory }}/pyproject.toml
 
-    - name: Check import order
+    - name: Lint
       if: inputs.format_check == 'true'
-      run: uv run isort -c .
+      run: uv run ruff check .
       shell: bash
       working-directory: ${{ inputs.directory }}
 
     - name: Check formatting
       if: inputs.format_check == 'true'
-      run: uv run black --check --diff --color .
+      run: uv run ruff format --check --diff .
       shell: bash
       working-directory: ${{ inputs.directory }}
 

.github/workflows/build.docker.yaml

@@ -0,0 +1,51 @@
+name: Build - Docker
+
+on:
+  workflow_call:
+    inputs:
+      module:
+        description:
+          Module path containing the Dockerfile and go.mod (e.g. core,
+          freighter/integration)
+        required: true
+        type: string
+      tag:
+        description: Full Docker image tag to push
+        required: true
+        type: string
+
+jobs:
+  build:
+    name: Build - Docker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract Go version
+        id: go-version
+        run:
+          echo "GO_VERSION=$(grep '^go ' ${{ inputs.module }}/go.mod | awk '{print
+          $2}')" >> $GITHUB_OUTPUT
+
+      - name: Build and Push Image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./${{ inputs.module }}/Dockerfile
+          platforms: linux/amd64
+          push: true
+          tags: ${{ inputs.tag }}
+          cache-from: type=gha,scope=synnax-docker-${{ inputs.module }}
+          cache-to: type=inline
+          build-args: GO_VERSION=${{ steps.go-version.outputs.GO_VERSION }}

.github/workflows/build.synnax.yaml

@@ -216,8 +216,6 @@ jobs:
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v6
-        with:
-          clean: false
 
       - name: Update Submodules
         run: git submodule update --init --recursive
@@ -235,7 +233,7 @@ jobs:
         run: brew install autoconf automake libtool
 
       - name: Setup Bazel
-        uses: bazel-contrib/setup-bazel@0.15.0
+        uses: bazel-contrib/setup-bazel@0.18.0
         with:
           # Use S3 cache instead of github cache.
           bazelisk-cache: false
@@ -258,7 +256,7 @@ jobs:
 
       - name: Upload Windows Debug Symbols
         if: inputs.driver && inputs.debug && matrix.os == 'windows-build-bot'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names &&
@@ -282,7 +280,7 @@ jobs:
 
       - name: Upload macOS Debug Symbols
         if: inputs.driver && inputs.debug && startsWith(matrix.os, 'macos')
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && 'synnax-driver-debug-symbols-macos'
@@ -310,7 +308,7 @@ jobs:
         if:
           inputs.driver && inputs.nilinuxrt && inputs.debug && matrix.os ==
           'ubuntu-build-bot'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names &&
@@ -323,7 +321,7 @@ jobs:
 
       - name: Upload NI Linux Real-Time Driver as Artifact
         if: inputs.driver && inputs.nilinuxrt && matrix.os == 'ubuntu-build-bot'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && 'synnax-driver-nilinuxrt' ||
@@ -363,7 +361,7 @@ jobs:
 
       - name: Upload Linux Debug Symbols
         if: inputs.driver && inputs.debug && matrix.os == 'ubuntu-build-bot'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && 'synnax-driver-debug-symbols-linux'
@@ -474,7 +472,7 @@ jobs:
 
       - name: Upload Driver as Artifact
         if: inputs.driver
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && format('synnax-driver-{0}',
@@ -530,7 +528,7 @@ jobs:
 
       - name: Upload Console Assets as Artifact
         if: inputs.console
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && format('synnax-console-assets-{0}',
@@ -554,7 +552,7 @@ jobs:
         if: inputs.core
         uses: actions/setup-go@v6
         with:
-          go-version-file: go.work
+          go-version-file: core/go.mod
           # Don't use github cache. Local cache is faster.
           cache: false
 
@@ -646,7 +644,7 @@ jobs:
 
       - name: Upload Core Binary as Artifact
         if: inputs.core
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ inputs.use_simple_artifact_names && format('synnax-core-{0}',
@@ -701,7 +699,7 @@ jobs:
 
       - name: Download Linux Driver Artifact
         if: inputs.driver
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name:
             ${{ inputs.use_simple_artifact_names && 'synnax-driver-linux' ||
@@ -723,32 +721,38 @@ jobs:
 
       - name: Download Console Assets
         if: inputs.console
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name:
             ${{ inputs.use_simple_artifact_names && 'synnax-console-assets-linux' ||
             format('synnax-console-assets-v{0}-linux', needs.setup.outputs.VERSION) }}
           path: core/pkg/console/dist/
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Docker Hub
         if: inputs.upload_to_release
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Login to Github Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
+      - name: Extract Go version
+        id: go-version
+        run:
+          echo "GO_VERSION=$(grep '^go ' core/go.mod | awk '{print $2}')" >>
+          $GITHUB_OUTPUT
+
       - name: Build and Push Docker Images
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./core/Dockerfile
@@ -777,6 +781,7 @@ jobs:
             VERSION=${{ needs.setup.outputs.VERSION }}
             GIT_COMMIT=${{ github.sha }}
             BUILD_DATE=${{ github.event.repository.updated_at }}
+            GO_VERSION=${{ steps.go-version.outputs.GO_VERSION }}
 
   build-console-tauri:
     name: Build Console App
@@ -879,7 +884,7 @@ jobs:
         run: pnpm build --no-sign
 
       - name: Upload Console App as Artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name:
             ${{ startsWith(matrix.os, 'macos') && format('synnax-console-v{0}-macos',