clickhouse-native 0.8.0 → 0.10.0

data/ext/clickhouse_native/vendor/clickhouse-cpp/.github/workflows/windows_mingw.yml

@@ -15,27 +15,9 @@ on:
 
 env:
   BUILD_TYPE: Release
-  CLICKHOUSE_USER: default
-  CLICKHOUSE_PASSWORD: ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_PASSWORD_SMT_PROD }}
-
-  #
-  # CLICKHOUSE_HOST: localhost
-  # CLICKHOUSE_PORT: 9000
-  # CLICKHOUSE_USER: default
-  # CLICKHOUSE_PASSWORD:
-  # CLICKHOUSE_DB:   default
-  #
-  # CLICKHOUSE_SECURE_HOST:     github.demo.trial.altinity.cloud
-  # CLICKHOUSE_SECURE_PORT:     9440
-  # CLICKHOUSE_SECURE_USER:     demo
-  # CLICKHOUSE_SECURE_PASSWORD: demo
-  # CLICKHOUSE_SECURE_DB:       default
-  #
-  # CLICKHOUSE_SECURE2_HOST:    gh-api.clickhouse.tech
-  # CLICKHOUSE_SECURE2_PORT:    9440
-  # CLICKHOUSE_SECURE2_USER:    explorer
-  # CLICKHOUSE_SECURE2_PASSWORD:
-  # CLICKHOUSE_SECURE2_DB:      default
+
+permissions:
+  contents: read
 
 jobs:
   build:
@@ -54,7 +36,7 @@ jobs:
         shell: msys2 {0}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 100
           fetch-tags: true
@@ -73,29 +55,40 @@ jobs:
             tar
 
       - name: Configure CMake
-        run: cmake -B build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DBUILD_TESTS=ON -DCHECK_VERSION=OFF
+        run: cmake -B build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DCH_MAP_BOOL_TO_UINT8=OFF -DBUILD_TESTS=ON -DCHECK_VERSION=OFF
         # -DWITH_OPENSSL=ON was not able to make it work (some strange issues with CA paths, need debug)
         # -DCHECK_VERSION=OFF since it requires git, which can't be found from within cmake for some reason.
 
       - name: Build
         run: cmake --build build --config ${{env.BUILD_TYPE}} --target all
 
-      - name: Start tls offoader proxy
-        # that mimics non-secure clickhouse running on localhost
-        # by tunneling queries to remote tls server
-        # (needed because we can't start real clickhouse instance on windows)
+      - name: Enable WSL and Install Dependencies
+        uses: Vampire/setup-wsl@v5
+        with:
+            distribution: Ubuntu-24.04
+            additional-packages:
+              podman
+              podman-compose
+
+      - name: Start ClickHouse Server
+        shell: wsl-bash {0}
+        run: |
+          echo "Starting ClickHouse container"
+          cd $(wslpath -u "${{ github.workspace }}/ci/")
+          podman-compose up -d
+
+          echo "Waiting for ClickHouse to start..."
+          timeout 60s bash -c \
+              'until curl -s -o /dev/null -w "%{http_code}" http://localhost:8123 | grep -q "200"; do sleep 2; done'
+
+          echo "Checking ClickHouse version"
+          curl -s http://localhost:8123/?query=SELECT%20VERSION%28%29
+
+      - name: Ping ClickHouse Server from Windows
         run: |
-              wget https://github.com/filimonov/go-tlsoffloader/releases/download/v0.1.2/go-tlsoffloader_0.1.2_Windows_x86_64.tar.gz
-              tar -xvzf go-tlsoffloader_0.1.2_Windows_x86_64.tar.gz
-              ./go-tlsoffloader.exe -l localhost:9000 -b ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_HOST_SMT_PROD }}:9440 &
+            curl.exe http://localhost:8123/?query=SELECT%20VERSION%28%29
 
       - name: Test
-        env:
-          # It is impossible to start CH server in docker on Windows due to github actions limitations,
-          # so we use remote server to execute tests, some do not allow some features for anonymoust/free users:
-          # - system.query_log used by 'Client/ClientCase.Query_ID' and 'Client/ClientCase.ClientName'
-          # - system.opentelemetry_span_log is used by 'Client/ClientCase.TracingContext'
-          GTEST_FILTER: "-Client/ClientCase.Query_ID*:Client/ClientCase.TracingContext/*:Client/ClientCase.ClientName/*"
         run: ./build/ut/clickhouse-cpp-ut.exe ${GTEST_FILTER}
 
       - name: Test (simple)

data/ext/clickhouse_native/vendor/clickhouse-cpp/.github/workflows/windows_msvc.yml

@@ -15,60 +15,53 @@ on:
 
 env:
   BUILD_TYPE: Release
-  CLICKHOUSE_USER: default
-  CLICKHOUSE_PASSWORD: ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_PASSWORD_SMT_PROD }}
-  # CLICKHOUSE_HOST: localhost
-  # CLICKHOUSE_PORT: 9000
-  # CLICKHOUSE_USER: default
-  # CLICKHOUSE_PASSWORD:
-  # CLICKHOUSE_DB:   default
-  #
-  # CLICKHOUSE_SECURE_HOST:     github.demo.trial.altinity.cloud
-  # CLICKHOUSE_SECURE_PORT:     9440
-  # CLICKHOUSE_SECURE_USER:     demo
-  # CLICKHOUSE_SECURE_PASSWORD: demo
-  # CLICKHOUSE_SECURE_DB:       default
-  #
-  # CLICKHOUSE_SECURE2_HOST:    gh-api.clickhouse.tech
-  # CLICKHOUSE_SECURE2_PORT:    9440
-  # CLICKHOUSE_SECURE2_USER:    explorer
-  # CLICKHOUSE_SECURE2_PASSWORD:
-  # CLICKHOUSE_SECURE2_DB:      default
+
+permissions:
+  contents: read
 
 jobs:
   build:
     runs-on: windows-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 100
           fetch-tags: true
       - uses: ilammy/msvc-dev-cmd@v1
 
       - name: Configure CMake
-        run: cmake -B ${{github.workspace}}/build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DBUILD_TESTS=ON
+        run: cmake -B ${{github.workspace}}/build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DCH_MAP_BOOL_TO_UINT8=OFF -DBUILD_TESTS=ON
 
       - name: Build
         run: cmake --build ${{github.workspace}}/build --config ${{env.BUILD_TYPE}}
 
-      - name: Start tls offoader proxy
-        shell: bash
-        # that mimics non-secure clickhouse running on localhost
-        # by tunneling queries to remote tls server
-        # (needed because we can't start real clickhouse instance on windows)
+      - name: Enable WSL and Install Dependencies
+        uses: Vampire/setup-wsl@v5
+        with:
+            distribution: Ubuntu-24.04
+            additional-packages:
+              podman
+              podman-compose
+
+      - name: Start ClickHouse Server
+        shell: wsl-bash {0}
+        run: |
+          echo "Starting ClickHouse container"
+          cd $(wslpath -u "${{ github.workspace }}/ci/")
+          podman-compose up -d
+
+          echo "Waiting for ClickHouse to start..."
+          timeout 60s bash -c \
+              'until curl -s -o /dev/null -w "%{http_code}" http://localhost:8123 | grep -q "200"; do sleep 2; done'
+
+          echo "Checking ClickHouse version"
+          curl -s http://localhost:8123/?query=SELECT%20VERSION%28%29
+
+      - name: Ping ClickHouse Server from Windows
         run: |
-              choco install wget
-              wget https://github.com/filimonov/go-tlsoffloader/releases/download/v0.1.2/go-tlsoffloader_0.1.2_Windows_x86_64.tar.gz
-              tar -xvzf go-tlsoffloader_0.1.2_Windows_x86_64.tar.gz
-              ./go-tlsoffloader.exe -l localhost:9000 -b ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_HOST_SMT_PROD }}:9440 &
+            curl.exe http://localhost:8123/?query=SELECT%20VERSION%28%29
 
       - name: Test
-        env:
-          # It is impossible to start CH server in docker on Windows due to github actions limitations,
-          # so we use remote server to execute tests, some do not allow some features for anonymoust/free users:
-          # - system.query_log used by 'Client/ClientCase.Query_ID' and 'Client/ClientCase.ClientName'
-          # - system.opentelemetry_span_log is used by 'Client/ClientCase.TracingContext'
-          GTEST_FILTER: "-Client/ClientCase.Query_ID*:Client/ClientCase.TracingContext/*:Client/ClientCase.ClientName/*"
         working-directory: ${{github.workspace}}/build/ut
         run: Release\clickhouse-cpp-ut.exe "${{env.GTEST_FILTER}}"

data/ext/clickhouse_native/vendor/clickhouse-cpp/.gitignore

@@ -278,3 +278,9 @@ BUCKAROO_DEPS
 # Vim
 *.swp
 *.swo
+
+# clangd cache
+/.cache/clangd
+
+# Bazel
+/bazel-*

data/ext/clickhouse_native/vendor/clickhouse-cpp/AI_POLICY.md

@@ -0,0 +1,13 @@
+# ClickHouse AI Policy
+
+You can use AI for ClickHouse development. We welcome and embrace AI usage, as well as research and experiments with the frontier AI models and novel methods of AI applications for software engineering.
+
+You don't have to disclose your usage of AI. You can tell about it, share your experience, and show the methods, but it is not required. AI is a normal developer's tool, similar to an IDE, an OS, or a keyboard. We don't judge your work on the basis of the usage of AI, but we recommend taking efforts to filter out slop before sending a pull request; otherwise, it may negatively affect your reputation as an engineer.
+
+When sending generated code, you take the responsibility in the same way as for the code you have manually typed. Take efforts to read and review the code before sending - otherwise it is disrespectful to maintainers. Take efforts to understand the code base, with or without the help of AI. Low-effort pull requests that require high effort from maintainers will be closed. Do not use AI to automate your responses to maintainers.
+
+Prefer using AI for improving the code base, such as removing and simplifying code, improving the build speed, improving continuous integration tools and quality checks, reverting bad modifications, security research, and bug fixing. Keep in mind that using AI for implementing big features requires as much design consideration as without AI.
+
+When using AI, the same rules around intellectual property apply as with manually written code. Do not copy, reproduce, or include code belonging to others unless its license explicitly permits this use and all license requirements are met. You are responsible for ensuring that you have all required permissions for any submitted code, whether AI-generated or not.
+
+We will be happy to participate in research and experiments with AI models and their application methods on top of the ClickHouse code base. It could be: - benchmarks and comparisons of models, testing of models by solving identical tasks, AI reproducibility studies, performance of agentic loops, AI sandboxing, etc. ClickHouse provides an extremely comprehensive test suite to fulfill these studies, and it is one of the most actively developed open-source software in the world. If you want to share your research, you can send a letter to ai@clickhouse.com.

data/ext/clickhouse_native/vendor/clickhouse-cpp/BUILD.bazel

@@ -0,0 +1,167 @@
+load("@bazel_skylib//lib:selects.bzl", "selects")
+load("@bazel_skylib//rules:common_settings.bzl", "string_flag")
+load("@rules_cc//cc:cc_library.bzl", "cc_library")
+
+# Bazel build for clickhouse-cpp. The canonical build is CMake
+# (top-level CMakeLists.txt); this file mirrors the same library as
+# a bzlmod target so downstream Bazel projects can depend on it via
+# the Bazel Central Registry without standing up CMake.
+#
+# Differences from the CMake build that callers should be aware of:
+#   * TLS links against BoringSSL (`@boringssl`) by default; pass
+#     `--@clickhouse-cpp-client//:tls=openssl` to use the BCR OpenSSL module
+#     instead, or `--@clickhouse-cpp-client//:tls=no` to disable TLS
+#     entirely. `USE_BORINGSSL` ifdef-guards the two OpenSSL-only
+#     surfaces (`SSL_CONF_*` command API and `SSL_read_ex`) that
+#     BoringSSL doesn't provide; see clickhouse/base/sslsocket.cpp.
+#   * lz4 / zstd / abseil come from BCR modules instead of contrib/.
+#     cityhash is the exception: it is built from contrib/ because the
+#     wire protocol needs ClickHouse's frozen CityHash variant, which
+#     differs from the stock BCR module (see the :cityhash target).
+
+# Selects the TLS implementation: `--@clickhouse-cpp-client//:tls=boringssl`
+# (default), `--@clickhouse-cpp-client//:tls=openssl`, or
+# `--@clickhouse-cpp-client//:tls=no` to disable TLS entirely (matching
+# CMake's `WITH_OPENSSL=OFF` default). The two TLS libraries come from
+# BCR modules and are linked statically, keeping the build hermetic.
+string_flag(
+    name = "tls",
+    build_setting_default = "boringssl",
+    values = [
+        "boringssl",
+        "openssl",
+        "no",
+    ],
+)
+
+config_setting(
+    name = "tls_boringssl",
+    flag_values = {":tls": "boringssl"},
+)
+
+config_setting(
+    name = "tls_openssl",
+    flag_values = {":tls": "openssl"},
+)
+
+config_setting(
+    name = "tls_no",
+    flag_values = {":tls": "no"},
+)
+
+# OpenSSL on Windows pulls in Win32 system libraries (the cert store via
+# crypt32, plus user32) that BoringSSL bundles itself. Used to gate the
+# extra linkopts below.
+selects.config_setting_group(
+    name = "tls_openssl_on_windows",
+    match_all = [
+        ":tls_openssl",
+        "@platforms//os:windows",
+    ],
+)
+
+# Vendored CityHash from contrib/, NOT the BCR `@cityhash` module.
+# ClickHouse's wire protocol checksums compressed blocks with a specific
+# frozen CityHash128 variant (see clickhouse/base/compressed.cpp); the
+# stock Google CityHash 1.0.2 that BCR packages produces *different*
+# hashes, so a server rejects compressed blocks with "Checksum doesn't
+# match: corrupted data". This is the exact copy the CMake build uses,
+# guaranteeing byte-identical hashing and wire compatibility.
+cc_library(
+    name = "cityhash",
+    srcs = [
+        "contrib/cityhash/cityhash/city.cc",
+        "contrib/cityhash/cityhash/config.h",
+    ],
+    hdrs = [
+        "contrib/cityhash/cityhash/city.h",
+        "contrib/cityhash/cityhash/citycrc.h",
+    ],
+    # config.h gates __builtin_expect off with `#if WIN32 || WIN64`, but
+    # MSVC only predefines `_WIN32`/`_WIN64` — under CMake it's CMake that
+    # defines WIN32, which Bazel's MSVC toolchain doesn't. Define it here
+    # so the GCC/Clang-only builtin isn't used on MSVC.
+    copts = select({
+        "@platforms//os:windows": ["/DWIN32"],
+        "//conditions:default": [],
+    }),
+    strip_include_prefix = "contrib/cityhash/cityhash",
+)
+
+# The main clickhouse-cpp library. Downstream callers use
+# `#include <clickhouse/client.h>` and link `@clickhouse-cpp-client//:clickhouse`.
+cc_library(
+    name = "clickhouse",
+    srcs = glob(
+        [
+            "clickhouse/*.cpp",
+            "clickhouse/base/*.cpp",
+            "clickhouse/columns/*.cpp",
+            "clickhouse/types/*.cpp",
+        ],
+        # Only compiled when TLS is enabled, mirroring CMake's
+        # `IF (WITH_OPENSSL)` source-list append.
+        exclude = ["clickhouse/base/sslsocket.cpp"],
+    ) + select({
+        ":tls_no": [],
+        "//conditions:default": ["clickhouse/base/sslsocket.cpp"],
+    }),
+    hdrs = glob([
+        "clickhouse/*.h",
+        "clickhouse/base/*.h",
+        "clickhouse/columns/*.h",
+        "clickhouse/types/*.h",
+    ]),
+    defines = select({
+        # `WITH_OPENSSL` enables the TLS code paths in client.cpp /
+        # sslsocket.cpp (same macro as the CMake option). `USE_BORINGSSL`
+        # takes the BoringSSL-compatible branches in sslsocket.cpp.
+        ":tls_boringssl": [
+            "WITH_OPENSSL",
+            "USE_BORINGSSL",
+        ],
+        ":tls_openssl": ["WITH_OPENSSL"],
+        ":tls_no": [],
+    }),
+    # Winsock, required by base/socket.cpp et al. Mirrors CMake's
+    # `IF (WIN32 OR MINGW)` link block. (The BoringSSL backend already
+    # propagates ws2_32 itself; declare it explicitly so the openssl
+    # and no-TLS configurations link too.)
+    linkopts = select({
+        "@platforms//os:windows": [
+            "-DEFAULTLIB:ws2_32.lib",
+        ],
+        "//conditions:default": [],
+    }) + select({
+        # OpenSSL references the Win32 cert store and user32; declare
+        # them so downstream executables link without each consumer
+        # having to repeat it. Mirrors CMake's MSVC `Crypt32` link.
+        ":tls_openssl_on_windows": [
+            "-DEFAULTLIB:crypt32.lib",
+            "-DEFAULTLIB:user32.lib",
+        ],
+        "//conditions:default": [],
+    }),
+    # Expose headers at their workspace path so both internal
+    # (`#include "client.h"` from clickhouse/*.cpp via quote-form
+    # source-dir search) and external (`#include <clickhouse/client.h>`)
+    # include forms resolve.
+    strip_include_prefix = "/",
+    visibility = ["//visibility:public"],
+    deps = [
+        "@abseil-cpp//absl/numeric:int128",
+        ":cityhash",
+        "@lz4//:lz4",
+        "@zstd//:zstd",
+    ] + select({
+        ":tls_boringssl": [
+            "@boringssl//:crypto",
+            "@boringssl//:ssl",
+        ],
+        ":tls_openssl": [
+            "@openssl//:crypto",
+            "@openssl//:ssl",
+        ],
+        ":tls_no": [],
+    }),
+)

data/ext/clickhouse_native/vendor/clickhouse-cpp/CMakeLists.txt

@@ -1,4 +1,4 @@
-CMAKE_MINIMUM_REQUIRED (VERSION 3.5.2)
+CMAKE_MINIMUM_REQUIRED (VERSION 3.12)
 
 LIST (APPEND CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/cmake")
 
@@ -21,6 +21,7 @@ OPTION (WITH_SYSTEM_ZSTD "Use system ZSTD" OFF)
 OPTION (DEBUG_DEPENDENCIES "Print debug info about dependencies duting build" ON)
 OPTION (CHECK_VERSION "Check that version number corresponds to git tag, usefull in CI/CD to validate that new version published on GitHub has same version in sources" OFF)
 OPTION (DISABLE_CLANG_LIBC_WORKAROUND "Disable linking compiler-rt & gcc_s if using clang & libstdc++" OFF)
+OPTION (CH_MAP_BOOL_TO_UINT8 "Map ClickHouse Bool type to UInt8 instead of exposing a distinct Bool API." ON)
 
 PROJECT (CLICKHOUSE-CLIENT
     VERSION "${CLICKHOUSE_CPP_VERSION}"

data/ext/clickhouse_native/vendor/clickhouse-cpp/MODULE.bazel

@@ -0,0 +1,17 @@
+module(name = "clickhouse-cpp-client", version = "2.6.2")
+
+# Pinned to 20260107.1, the last version that declares
+# `compatibility_level = 1`, so that the module remains importable on
+# Bazel < 9.1 whose bazel_tools also depends on a level-1 abseil-cpp.
+# See PR discussion; the attribute is a no-op from Bazel 9.1.0 onwards.
+bazel_dep(name = "abseil-cpp", version = "20260107.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
+bazel_dep(name = "boringssl", version = "0.20260526.0")
+bazel_dep(name = "lz4", version = "1.10.0.bcr.1")
+bazel_dep(name = "openssl", version = "3.5.5.bcr.4")
+bazel_dep(name = "platforms", version = "1.1.0")
+bazel_dep(name = "rules_cc", version = "0.2.19")
+bazel_dep(name = "zstd", version = "1.5.7.bcr.1")
+
+# Test-only dependencies; not pulled in by consumers of the library.
+bazel_dep(name = "googletest", version = "1.17.0.bcr.2", dev_dependency = True)