[pull] main from MaterializeInc:main

Cargo.toml

@@ -428,9 +428,9 @@ openssh-mux-client = "0.17.9"
 openssl = { version = "0.10.80", features = ["vendored"] }
 openssl-probe = "0.1.6"
 openssl-sys = { version = "0.9.108", features = ["vendored"] }
-opentelemetry = { version = "0.31.0", features = ["trace"] }
-opentelemetry-otlp = { version = "0.31.1", features = ["grpc-tonic"] }
-opentelemetry_sdk = { version = "0.31.0", features = ["experimental_trace_batch_span_processor_with_async_runtime", "rt-tokio"] }
+opentelemetry = { version = "0.32.0", features = ["trace"] }
+opentelemetry-otlp = { version = "0.32.0", features = ["grpc-tonic"] }
+opentelemetry_sdk = { version = "0.32.1", features = ["experimental_trace_batch_span_processor_with_async_runtime", "rt-tokio"] }
 ordered-float = { version = "5.1.0", features = ["serde"] }
 os_info = "3.11.0"
 owo-colors = "4.3.0"
@@ -548,7 +548,7 @@ tower-sessions-memory-store = "0.14.0"
 tracing = "0.1.44"
 tracing-capture = "0.1.0"
 tracing-core = "0.1.35"
-tracing-opentelemetry = "0.32.1"
+tracing-opentelemetry = "0.33.0"
 tracing-subscriber = { version = "0.3.23", features = ["env-filter", "fmt", "json", "tracing-log"] }
 # Held back: must match the `tungstenite` that `axum`'s `ws` feature pulls in
 # via `tokio-tungstenite`, else the two versions coexist in the dependency

ci/builder/Dockerfile

@@ -7,7 +7,13 @@
 # the Business Source License, use of this software will be governed
 # by the Apache License, Version 2.0.
 
-FROM node:24-trixie-slim AS node
+FROM node:26-trixie-slim AS node
+
+# Node 25 dropped corepack from the distribution, but the console pins its
+# package manager through `packageManager` in console/package.json and CI drives
+# yarn through `corepack enable`. Reinstall it here so that the stages copying
+# `/usr/local/lib/node_modules` below still find `corepack/dist/corepack.js`.
+RUN npm install -g corepack
 
 # Stage 1: Build a minimum CI Builder image that we can use for the initial
 # steps like `mkpipeline` and `Build`, as well as any tests that are self

console/package.json

@@ -75,7 +75,7 @@
     "base32-encoding": "^1.0.0",
     "buffer": "^6.0.3",
     "codemirror": "^6.0.1",
-    "copy-to-clipboard": "^3.3.3",
+    "copy-to-clipboard": "^4.0.2",
     "d3": "^7.9.0",
     "d3-graphviz": "^5.6.0",
     "d3-scale-chromatic": "^3.1.0",

console/yarn.lock

@@ -6618,7 +6618,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"copy-to-clipboard@npm:3.3.3, copy-to-clipboard@npm:^3.3.3":
+"copy-to-clipboard@npm:3.3.3":
   version: 3.3.3
   resolution: "copy-to-clipboard@npm:3.3.3"
   dependencies:
@@ -6627,6 +6627,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"copy-to-clipboard@npm:^4.0.2":
+  version: 4.0.2
+  resolution: "copy-to-clipboard@npm:4.0.2"
+  checksum: 10c0/0a007c86cc5f235653ddd98ef9901fa8d52b40bd0aeadce4ecc92d6aad16f89136a526f2ae7050421de5b02a374d803de88a40cde1298915093d1b62aeadc9e5
+  languageName: node
+  linkType: hard
+
 "core-js-compat@npm:^3.38.1":
   version: 3.38.1
   resolution: "core-js-compat@npm:3.38.1"
@@ -10932,7 +10939,7 @@ __metadata:
     buffer: "npm:^6.0.3"
     cacheable-lookup: "npm:7.0.0"
     codemirror: "npm:^6.0.1"
-    copy-to-clipboard: "npm:^3.3.3"
+    copy-to-clipboard: "npm:^4.0.2"
     core-js: "npm:^3.38.1"
     d3: "npm:^7.9.0"
     d3-graphviz: "npm:^5.6.0"

deny.toml

@@ -131,7 +131,6 @@ skip = [
     # gcp_auth → hyper-rustls → rustls-native-certs pulls newer versions
     # while native-tls still pulls older versions.
     { name = "core-foundation", version = "0.10.1" },
-    { name = "security-framework", version = "3.7.0" },
     { name = "openssl-probe", version = "0.2.1" },
     # reqsign (via iceberg-storage-opendal / opendal) pins older deps
     # than the workspace.

doc/user/content/reference/system-catalog/mz_catalog.md

@@ -40,7 +40,7 @@ Field           | Type                         | Meaning
 ----------------|------------------------------|--------
 `id`            | [`uint8`]                    | Materialize's unique, monotonically increasing ID for the event.
 `event_type`    | [`text`]                     | The type of the event: `create`, `drop`, `alter`, `grant`, `revoke`, or `comment`.
-`object_type`   | [`text`]                     | The type of the affected object: `cluster`, `cluster-replica`, `connection`, `continual-task`, `database`, `func`, `index`, `materialized-view`, `network-policy`, `role`, `schema`, `secret`, `sink`, `source`, `system`, `table`, `type`, or `view`.
+`object_type`   | [`text`]                     | The type of the affected object: `cluster`, `cluster-replica`, `connection`, `continual-task`, `database`, `func`, `index`, `materialized-view`, `metric-sink`, `network-policy`, `role`, `schema`, `secret`, `sink`, `source`, `system`, `table`, `type`, or `view`.
 `details`       | [`jsonb`]                    | Additional details about the event. The shape of the details varies based on `event_type` and `object_type`.
 `user`          | [`text`]                     | The user who triggered the event, or `NULL` if triggered by the system.
 `occurred_at`   | [`timestamp with time zone`] | The time at which the event occurred. Guaranteed to be in order of event creation. Events created in the same transaction will have identical values.