Add sonar & todos check & dependency check.

.github/workflows/dependency-check.yml

@@ -0,0 +1,61 @@
+# This workflow will check if dependencies have changed (adding new dependencies or removing existing ones)
+
+name: Dependency Check
+
+on:
+  push:
+    branches:
+      - master
+      - "new_*"
+    paths-ignore:
+      - 'docs/**'
+      - 'site/**'
+  pull_request:
+    branches:
+      - master
+      - "new_*"
+    paths-ignore:
+      - 'docs/**'
+      - 'site/**'
+  # allow manually run the action:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  MAVEN_OPTS: -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false -Dmaven.wagon.http.retryHandler.class=standard -Dmaven.wagon.http.retryHandler.count=3
+  MAVEN_ARGS: --batch-mode --no-transfer-progress
+  DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+
+jobs:
+  dependency-check:
+    strategy:
+      fail-fast: false
+      max-parallel: 15
+      matrix:
+        java: [ 17 ]
+        os: [ ubuntu-latest ]
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK ${{ matrix.java }}
+        uses: actions/setup-java@v4
+        with:
+          distribution: corretto
+          java-version: ${{ matrix.java }}
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2-
+
+      - name: Do the dependency check
+        shell: bash
+        run: mvn verify -Dmaven.test.skip=true -Dmdep.analyze.skip=true -P enable-sbom-check

.github/workflows/grafana-plugin.yml

@@ -22,7 +22,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout code
+        uses: actions/checkout@v4
 
       - name: Setup Node.js environment
         uses: actions/setup-node@v4

.github/workflows/sonar.yml

@@ -0,0 +1,65 @@
+# This workflow will build a Java project with Maven
+# For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven
+
+name: Sonar
+
+on:
+  push:
+    branches:
+      - master
+      - "new_*"
+    paths-ignore:
+      - "docs/**"
+      - 'site/**'
+  pull_request:
+    branches:
+      - master
+      - "new_*"
+    paths-ignore:
+      - "docs/**"
+      - 'site/**'
+  # allow manually run the action:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  MAVEN_OPTS: -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false -Dmaven.wagon.http.retryHandler.class=standard -Dmaven.wagon.http.retryHandler.count=3
+  MAVEN_ARGS: --batch-mode --no-transfer-progress
+  PR_NUMBER: ${{ github.event.number }}
+  DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+
+jobs:
+  sonar:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == 'apache/iotdb-extras' || github.event_name == 'push'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: corretto
+          java-version: 17
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2-
+
+      - name: SonarCloud Report
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
+        run: |
+          mvn -B -P verify sonar:sonar \
+          -Dsonar.organization=apache \
+          -Dsonar.projectKey=apache_iotdb_extras \
+          -Dsonar.host.url=https://sonarcloud.io \
+          -Dsonar.token=${{ secrets.SONARCLOUD_TOKEN }} \
+          -DskipTests -pl '!distribution' -am

.github/workflows/todos-check.yml

@@ -0,0 +1,39 @@
+name: Check TODOs and FIXMEs in Changed Files
+
+on:
+  pull_request:
+    branches:
+      - master
+      - "new_*"
+    paths-ignore:
+      - 'docs/**'
+      - 'site/**'
+  # allow manually run the action:
+  workflow_dispatch:
+
+jobs:
+  todo-check:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Check for TODOs and FIXMEs in changed files
+        run: |
+          # Fetch the target branch
+          git fetch origin $GITHUB_BASE_REF
+
+          git switch -c check_branch
+
+          # Get the diff of the changes
+          DIFF=$(git diff origin/$GITHUB_BASE_REF check_branch)
+
+
+          # Check the diff for TODOs
+          if echo "$DIFF" | grep -Eq '^\+.*(TODO|FIXME)'; then
+            echo "TODO or FIXME found in the changes. Please resolve it before merging."
+            # exit 1
+          else
+            echo "No TODOs found in changed content."
+          fi

connectors/flink-iotdb-connector/pom.xml

@@ -20,7 +20,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>flink-iotdb-connector</artifactId>
     <name>IoTDB: Connector: Apache Flink</name>

connectors/flink-sql-iotdb-connector/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>flink-sql-iotdb-connector</artifactId>
     <name>IoTDB: Connector: Apache Flink SQL</name>

connectors/flink-tsfile-connector/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>flink-tsfile-connector</artifactId>
     <name>IoTDB: Connector: Apache Flink TSFile</name>

connectors/grafana-connector/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>iotdb-grafana-connector</artifactId>
     <packaging>war</packaging>

connectors/grafana-plugin/pom.xml

@@ -20,7 +20,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>iotdb-grafana-plugin</artifactId>
     <packaging>pom</packaging>

connectors/hadoop/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>hadoop-tsfile</artifactId>
     <name>IoTDB: Connector: Apache Hadoop TSFile</name>

connectors/hive-connector/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>hive-connector</artifactId>
     <name>IoTDB: Connector: Apache Hive</name>
@@ -36,7 +36,7 @@
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>hadoop-tsfile</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>

connectors/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>iotdb-extras-parent</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>connectors</artifactId>
     <packaging>pom</packaging>

connectors/spark-iotdb-connector/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>spark-iotdb-connector</artifactId>
     <!-- NOTE: This module actually only contains the sources and the common settings

connectors/spark-iotdb-connector/scala_2.11/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>spark-iotdb-connector</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>spark-iotdb-connector_2.11</artifactId>
     <name>IoTDB: Connector: Apache Spark (Scala 2.11)</name>

connectors/spark-iotdb-connector/scala_2.12/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>spark-iotdb-connector</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>spark-iotdb-connector_2.12</artifactId>
     <name>IoTDB: Connector: Apache Spark (Scala 2.12)</name>

connectors/spark-tsfile/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>spark-tsfile</artifactId>
     <name>IoTDB: Connector: Apache Spark TSFile</name>
@@ -42,7 +42,7 @@
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>hadoop-tsfile</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>

connectors/zeppelin-interpreter/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>connectors</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>zeppelin-iotdb</artifactId>
     <name>IoTDB: Connector: Apache Zeppelin</name>

distributions/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>iotdb-extras-parent</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>iotdb-extras-distributions</artifactId>
     <packaging>pom</packaging>
@@ -33,35 +33,35 @@
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>iotdb-server</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
             <type>zip</type>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>iotdb-cli</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
             <type>zip</type>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>iotdb-confignode</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
             <type>zip</type>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>library-udf</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>spark-iotdb-connector_2.11</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>spark-iotdb-connector_2.12</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
     </dependencies>
     <build>

examples/flink-sql/pom.xml

@@ -24,7 +24,7 @@
     <parent>
         <groupId>org.apache.iotdb</groupId>
         <artifactId>examples</artifactId>
-        <version>1.3.2-SNAPSHOT</version>
+        <version>1.3.2</version>
     </parent>
     <artifactId>flink-sql-example</artifactId>
     <name>IoTDB: Example: Apache Flink SQL</name>
@@ -35,7 +35,7 @@
         <dependency>
             <groupId>org.apache.iotdb</groupId>
             <artifactId>flink-sql-iotdb-connector</artifactId>
-            <version>1.3.2-SNAPSHOT</version>
+            <version>1.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.flink</groupId>