databricks-sql-kernel 0.3.0__tar.gz → 1.0.0__tar.gz

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/CHANGELOG.md

@@ -14,6 +14,12 @@ cadences and may not move in lockstep with the crate.
 
 ### Fixed
 
+## [v1.0.0] - 2026-08-31
+
+### Fixed
+- Explicit async statement close finalizes telemetry when a partially consumed
+  result stream remains alive.
+
 ## [v0.3.0] - 2026-08-28
 
 ### Added

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/Cargo.lock

@@ -617,7 +617,7 @@ checksum = "4583a4551df46e2792f82ceeac45e850d2e2d5debba0b91f102385cda5b11f06"
 
 [[package]]
 name = "databricks-sql-kernel"
-version = "0.3.0"
+version = "1.0.0"
 dependencies = [
  "aes 0.9.2",
  "arrow-array",

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/Cargo.toml

@@ -14,7 +14,7 @@
 
 [package]
 name = "databricks-sql-kernel"
-version = "0.3.0"
+version = "1.0.0"
 edition = "2021"
 authors = ["Databricks"]
 license = "Apache-2.0"

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-sql-kernel
-Version: 0.3.0
+Version: 1.0.0
 Requires-Dist: pyarrow>=23.0.1,<24 ; python_full_version >= '3.10'
 Requires-Dist: pyarrow>=14,<19 ; python_full_version < '3.10'
 Summary: Python bindings for the Databricks SQL Kernel (PyO3)

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/pyo3/CHANGELOG.md

@@ -14,6 +14,12 @@ they ship on independent cadences.
 
 ### Fixed
 
+## [v1.0.0] - 2026-08-31
+
+### Fixed
+- `ExecutedAsyncStatement.close()` now finalizes async statement telemetry in
+  partial-fetch flows.
+
 ## [v0.3.0] - 2026-08-28
 
 ### Added

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/pyo3/Cargo.lock

@@ -546,7 +546,7 @@ dependencies = [
 
 [[package]]
 name = "databricks-sql-kernel"
-version = "0.3.0"
+version = "1.0.0"
 dependencies = [
  "aes 0.9.2",
  "arrow-array",
@@ -586,7 +586,7 @@ dependencies = [
 
 [[package]]
 name = "databricks-sql-kernel-pyo3"
-version = "0.3.0"
+version = "1.0.0"
 dependencies = [
  "arrow-array",
  "arrow-pyarrow",

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/pyo3/Cargo.toml

@@ -31,7 +31,7 @@
 
 [package]
 name = "databricks-sql-kernel-pyo3"
-version = "0.3.0"
+version = "1.0.0"
 edition = "2021"
 authors = ["Databricks"]
 license = "Apache-2.0"

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/pyo3/src/executed_async.rs

@@ -133,7 +133,7 @@ impl ExecutedAsyncStatement {
             return Ok(());
         };
         let runtime = inner.runtime.clone();
-        let res = run_kernel!(py, runtime, inner.exec.close());
+        let res = run_kernel!(py, runtime, KExecutedAsyncStatement::close(&mut inner.exec));
         self.inner = None;
         res.map(|_| ())
     }

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "databricks-sql-kernel"
-version = "0.3.0"
+version = "1.0.0"
 description = "Python bindings for the Databricks SQL Kernel (PyO3)"
 # Floor matches the tested CI matrix in
 # .github/workflows/pyo3-checks.yml (3.9 .. 3.14). The abi3-py39

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/src/session.rs

@@ -2424,6 +2424,55 @@ mod is_open_tests {
         );
     }
 
+    #[tokio::test]
+    async fn async_statement_close_finalizes_partial_result_telemetry() {
+        let server = MockServer::start().await;
+        mount_session_create_delete(&server, "sess-telemetry-async-partial-close").await;
+        mount_close_any_statement(&server).await;
+        mount_execute(&server, running_body("stmt-telemetry-async-partial-close")).await;
+        mount_status(
+            &server,
+            "stmt-telemetry-async-partial-close",
+            succeeded_inline_body(
+                "stmt-telemetry-async-partial-close",
+                &int64_batch("n", vec![1]),
+            ),
+        )
+        .await;
+        let exporter = CapturingTelemetryExporter::default();
+        let telemetry = TelemetryConfig {
+            enabled: true,
+            ..Default::default()
+        }
+        .with_exporter(std::sync::Arc::new(exporter.clone()));
+        let session =
+            telemetry_test_session(&server, "sess-telemetry-async-partial-close", telemetry).await;
+
+        let mut stmt = session.statement();
+        stmt.spec().sql("SELECT 1 AS n");
+        let mut async_exec = stmt.submit().await.expect("submit succeeds");
+        let mut stream = async_exec.await_result().await.expect("await succeeds");
+        assert!(stream.next_batch().await.expect("first batch").is_some());
+
+        async_exec.close().await.expect("close succeeds");
+        session.close().await.expect("close succeeds");
+
+        let async_statement_logs = exported_logs(&exporter)
+            .into_iter()
+            .filter(|log| operation_type(log) == Some("EXECUTE_STATEMENT_ASYNC"))
+            .collect::<Vec<_>>();
+        assert_eq!(
+            async_statement_logs.len(),
+            1,
+            "partial async result close should finalize telemetry once even while \
+             the result stream is still live"
+        );
+        assert_eq!(
+            async_statement_logs[0]["entry"]["sql_driver_log"]["sql_statement_id"],
+            "stmt-telemetry-async-partial-close"
+        );
+    }
+
     #[tokio::test]
     async fn async_statement_status_failure_exports_error_telemetry() {
         let server = MockServer::start().await;

{databricks_sql_kernel-0.3.0 → databricks_sql_kernel-1.0.0}/src/statement/executed_async.rs

@@ -731,6 +731,25 @@ impl ExecutedStatementHandle for ExecutedAsyncStatement {
     }
 
     async fn close(&self) -> Result<()> {
+        self.close_server_statement().await
+    }
+}
+
+impl ExecutedAsyncStatement {
+    /// Explicit close for concrete async statements.
+    ///
+    /// Once [`await_result`](Self::await_result) / [`fetch_result`](Self::fetch_result)
+    /// returns a [`ResultStream`], that stream owns success finalization so full
+    /// result consumption can include result metrics. Explicitly closing the owning
+    /// async statement is the binding-visible lifecycle boundary, though, so finalize
+    /// here as a deterministic backstop for partial-fetch callers that keep the stream
+    /// alive past session close.
+    pub async fn close(&mut self) -> Result<()> {
+        self.statement_telemetry.finalize(None);
+        self.close_server_statement().await
+    }
+
+    async fn close_server_statement(&self) -> Result<()> {
         // Idempotent on success: a prior successful close sets
         // `closed=true` and subsequent calls short-circuit.
         //
@@ -767,9 +786,7 @@ impl ExecutedStatementHandle for ExecutedAsyncStatement {
         .instrument(self.session.log_span().clone())
         .await
     }
-}
 
-impl ExecutedAsyncStatement {
     /// Produce a detached [`AsyncStatementCanceller`] that can fire a
     /// server-side cancel for this statement *without borrowing the
     /// handle*.

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/appkit/download-release.sh

@@ -1,75 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-# Downloads a release artifact from databricks/appkit, extracts it, and
-# resolves version/tag/stream metadata.
-#
-# Requires: GH_TOKEN, RUN_ID, OUTPUT_DIR
-# Writes to $GITHUB_OUTPUT: run-id, head-sha, version, tag, stream
-
-REPO="databricks/appkit"
-
-# Validate the run completed successfully and extract head SHA
-run_json=$(gh api "repos/${REPO}/actions/runs/${RUN_ID}")
-run_status=$(echo "$run_json" | jq -r '.conclusion')
-head_sha=$(echo "$run_json" | jq -r '.head_sha')
-
-if [[ ! "$head_sha" =~ ^[0-9a-f]{40}$ ]]; then
-  echo "::error::Run ${RUN_ID} returned invalid head_sha: '${head_sha}'"
-  exit 1
-fi
-
-if [[ "$run_status" != "success" ]]; then
-  echo "::error::Run ${RUN_ID} has conclusion '${run_status}', expected 'success'"
-  exit 1
-fi
-
-echo "run-id=${RUN_ID}" >> "$GITHUB_OUTPUT"
-echo "head-sha=${head_sha}" >> "$GITHUB_OUTPUT"
-
-# Find the release artifact
-artifact_json=$(gh api "repos/${REPO}/actions/runs/${RUN_ID}/artifacts" \
-  --jq '.artifacts[] | select(.name | test("^(appkit|lakebase)-release-[0-9]"))')
-
-artifact_id=$(echo "$artifact_json" | jq -r '.id' | head -1)
-artifact_name=$(echo "$artifact_json" | jq -r '.name' | head -1)
-artifact_expired=$(echo "$artifact_json" | jq -r '.expired' | head -1)
-
-if [[ -z "$artifact_id" || "$artifact_id" == "null" ]]; then
-  echo "::error::No release artifact found for run ${RUN_ID}"
-  exit 1
-fi
-
-if [[ "$artifact_expired" == "true" ]]; then
-  echo "::error::Release artifact for run ${RUN_ID} has expired, cannot download"
-  exit 1
-fi
-
-echo "Downloading artifact: ${artifact_name} (ID: ${artifact_id})"
-
-mkdir -p "${OUTPUT_DIR}"
-curl -sfL \
-  -H "Authorization: Bearer ${GH_TOKEN}" \
-  -o "${OUTPUT_DIR}/release.zip" \
-  "https://api.github.com/repos/${REPO}/actions/artifacts/${artifact_id}/zip"
-
-unzip -q "${OUTPUT_DIR}/release.zip" -d "${OUTPUT_DIR}/"
-rm "${OUTPUT_DIR}/release.zip"
-
-echo "Downloaded files:"
-ls -la "${OUTPUT_DIR}/"
-
-# Resolve version, tag, stream from downloaded artifacts
-VERSION=$(cat "${OUTPUT_DIR}/VERSION")
-if [[ "$artifact_name" == lakebase-* ]]; then
-  STREAM="lakebase"
-  TAG="lakebase-v${VERSION}"
-else
-  STREAM="appkit"
-  TAG="v${VERSION}"
-fi
-
-echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
-echo "stream=${STREAM}" >> "$GITHUB_OUTPUT"
-echo "Resolved: run=${RUN_ID} version=${VERSION} tag=${TAG} stream=${STREAM}"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/appkit/poll-release.sh

@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-# Polls for unprocessed appkit/lakebase release runs.
-# Checks both prepare-release and prepare-release-lakebase workflows,
-# downloads the meta artifact (VERSION file), and verifies the tag
-# doesn't already exist.
-#
-# Requires: GH_TOKEN (GitHub App token with read access to databricks/appkit)
-# Writes to $GITHUB_OUTPUT: run-id, version, tag, stream
-
-REPO="databricks/appkit"
-
-# Check lakebase first — appkit depends on lakebase, so lakebase must publish first
-for workflow_name in "prepare-release-lakebase" "prepare-release"; do
-  # Get latest successful completed run
-  run_json=$(gh api "repos/${REPO}/actions/workflows/${workflow_name}.yml/runs?status=success&per_page=1" \
-    --jq '.workflow_runs[0] // empty')
-
-  if [[ -z "$run_json" ]]; then
-    echo "No successful runs found for ${workflow_name}"
-    continue
-  fi
-
-  run_id=$(echo "$run_json" | jq -r '.id')
-
-  # Look for meta artifact (small, just VERSION file).
-  # Skip expired ones: the artifact 410s and that version is already released.
-  meta_artifact_id=$(gh api "repos/${REPO}/actions/runs/${run_id}/artifacts" \
-    --jq '.artifacts[] | select(.name | test("release-meta-")) | select(.expired == false) | .id' | head -1)
-
-  if [[ -z "$meta_artifact_id" ]]; then
-    echo "Warning: no live meta artifact for run ${run_id} (missing or expired), skipping ${workflow_name}" >&2
-    continue
-  fi
-
-  # Download small meta artifact to read VERSION
-  tmpdir=$(mktemp -d)
-  curl -sfL \
-    -H "Authorization: Bearer ${GH_TOKEN}" \
-    -o "${tmpdir}/meta.zip" \
-    "https://api.github.com/repos/${REPO}/actions/artifacts/${meta_artifact_id}/zip"
-  unzip -q "${tmpdir}/meta.zip" -d "${tmpdir}/extracted"
-
-  if [[ ! -f "${tmpdir}/extracted/VERSION" ]]; then
-    echo "No VERSION file in meta artifact for run ${run_id}"
-    rm -rf "$tmpdir"
-    continue
-  fi
-
-  version=$(cat "${tmpdir}/extracted/VERSION")
-  rm -rf "$tmpdir"
-
-  # Determine tag and stream
-  if [[ "$workflow_name" == "prepare-release" ]]; then
-    tag="v${version}"
-    stream="appkit"
-  else
-    tag="lakebase-v${version}"
-    stream="lakebase"
-  fi
-
-  # Check if tag already exists (already released)
-  if gh api "repos/${REPO}/git/refs/tags/${tag}" &>/dev/null; then
-    echo "Tag ${tag} already exists, skipping"
-    continue
-  fi
-
-  # Check if a newer run is in progress
-  in_progress=$(gh api "repos/${REPO}/actions/workflows/${workflow_name}.yml/runs?status=in_progress&per_page=1" \
-    --jq '.total_count')
-  if [[ "$in_progress" -gt 0 ]]; then
-    echo "A newer ${workflow_name} run is in progress, waiting"
-    continue
-  fi
-
-  echo "Found unprocessed run: ${run_id} (${stream} v${version})"
-  echo "run-id=${run_id}" >> "$GITHUB_OUTPUT"
-  echo "version=${version}" >> "$GITHUB_OUTPUT"
-  echo "tag=${tag}" >> "$GITHUB_OUTPUT"
-  echo "stream=${stream}" >> "$GITHUB_OUTPUT"
-  exit 0
-done
-
-echo "No unprocessed release runs found"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-cargo.sh

@@ -1,29 +0,0 @@
-#!/usr/bin/env bash
-# Point cargo at the internal JFrog crates index (sparse registry).
-# Expects JFROG_ACCESS_TOKEN in the environment (e.g. from jfrog-oidc-token.sh).
-# Appends CARGO_REGISTRIES_JFROG_TOKEN to $GITHUB_ENV when set.
-set -euo pipefail
-
-mkdir -p ~/.cargo
-cat > ~/.cargo/config.toml << EOF
-[source.crates-io]
-replace-with = "jfrog"
-
-[source.jfrog]
-registry = "sparse+https://databricks.jfrog.io/artifactory/api/cargo/db-cargo-remote/index/"
-
-[registries.jfrog]
-index = "sparse+https://databricks.jfrog.io/artifactory/api/cargo/db-cargo-remote/index/"
-credential-provider = ["cargo:token"]
-EOF
-
-cat > ~/.cargo/credentials.toml << EOF
-[registries.jfrog]
-token = "Bearer ${JFROG_ACCESS_TOKEN}"
-EOF
-
-if [[ -n "${GITHUB_ENV:-}" ]]; then
-  echo "CARGO_REGISTRIES_JFROG_TOKEN=Bearer ${JFROG_ACCESS_TOKEN}" >> "$GITHUB_ENV"
-fi
-
-echo "Cargo configured to use JFrog registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-coursier.sh

@@ -1,19 +0,0 @@
-#!/usr/bin/env bash
-# Point coursier based build tools at the internal JFrog registry.
-set -euo pipefail
-
-JFROG_HOST="databricks.jfrog.io"
-JFROG_REALM="Artifactory Realm"
-JFROG_USERNAME="gha-service-account"
-
-mkdir -p ~/.config/coursier
-{
-  echo "jfrog.host=${JFROG_HOST}"
-  echo "jfrog.realm=${JFROG_REALM}"
-  echo "jfrog.username=${JFROG_USERNAME}"
-  echo "jfrog.password=${JFROG_ACCESS_TOKEN}"
-} > ~/.config/coursier/credentials.properties
-
-echo "COURSIER_REPOSITORIES=https://${JFROG_HOST}/artifactory/db-maven" >> "$GITHUB_ENV"
-
-echo "Coursier configured to use JFrog registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-gradle.sh

@@ -1,65 +0,0 @@
-#!/usr/bin/env bash
-# configure-gradle.sh — Route Gradle dependency resolution entirely through
-# JFrog, so the runner never reaches the public Maven repos directly.
-#
-# Writes ~/.gradle/init.d/jfrog-mirror.gradle, an init script that clears and
-# replaces ALL three repository handlers with JFrog-only repos (db-maven +
-# db-maven-google), so the runner never reaches public Maven repos:
-#   1. beforeSettings      — pluginManagement.repositories (Gradle plugins)
-#   2. settingsEvaluated   — dependencyResolutionManagement.repositories (deps)
-#   3. allprojects          — buildscript.repositories (build plugins)
-# If a plugin/artifact is on neither db-maven nor db-maven-google, the build
-# fails loudly rather than silently falling back to the public internet.
-#
-# The source repo sets repositoriesMode = FAIL_ON_PROJECT_REPOS, so this script
-# deliberately does NOT add project-level repositories (allprojects.repositories)
-# — doing so would fail the build. Dependencies resolve through the
-# settings-level dependencyResolutionManagement repos replaced in step 2.
-#
-# Requires JFROG_ACCESS_TOKEN (set by jfrog-oidc-token.sh).
-set -euo pipefail
-
-: "${JFROG_ACCESS_TOKEN:?JFROG_ACCESS_TOKEN is required. Run jfrog-oidc-token.sh first.}"
-
-mkdir -p ~/.gradle/init.d
-cat > ~/.gradle/init.d/jfrog-mirror.gradle <<'GRADLE'
-def jfrogUser = 'gha-service-account'
-def jfrogPass = System.getenv('JFROG_ACCESS_TOKEN')
-
-// db-maven: Maven virtual repo — proxies Maven Central (+ other Maven remotes).
-// db-maven-google: remote repo proxying dl.google.com/dl/android/maven2/ —
-//   hosts androidx.*, com.android.tools.*, AGP (NOT on Maven Central).
-def addRepo = { handler, repoUrl ->
-    handler.maven {
-        url = repoUrl
-        credentials {
-            username = jfrogUser
-            password = jfrogPass
-        }
-    }
-}
-def addJfrogRepos = { handler ->
-    addRepo(handler, 'https://databricks.jfrog.io/artifactory/db-maven/')
-    addRepo(handler, 'https://databricks.jfrog.io/artifactory/db-maven-google/')
-}
-
-beforeSettings { settings ->
-    def repos = settings.pluginManagement.repositories
-    repos.clear()
-    addJfrogRepos(repos)
-}
-
-settingsEvaluated { settings ->
-    def repos = settings.dependencyResolutionManagement.repositories
-    repos.clear()
-    addJfrogRepos(repos)
-}
-
-allprojects {
-    def repos = buildscript.repositories
-    repos.clear()
-    addJfrogRepos(repos)
-}
-GRADLE
-
-echo "Gradle configured to use JFrog (db-maven + db-maven-google) registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-maven.sh

@@ -1,37 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-# Configure Maven to resolve dependencies through the JFrog mirror.
-# Writes ~/.m2/settings.xml with mirror and server credentials.
-#
-# The JFrog db-maven virtual repo proxies Maven Central for project
-# dependencies. All artifact resolution is routed through JFrog.
-#
-# Requires JFROG_ACCESS_TOKEN to be set in the environment.
-
-: "${JFROG_ACCESS_TOKEN:?JFROG_ACCESS_TOKEN is required}"
-
-mkdir -p ~/.m2
-cat > ~/.m2/settings.xml << 'SETTINGS_TEMPLATE'
-<settings>
-  <mirrors>
-    <mirror>
-      <id>jfrog-central</id>
-      <mirrorOf>*</mirrorOf>
-      <url>https://databricks.jfrog.io/artifactory/db-maven/</url>
-    </mirror>
-  </mirrors>
-  <servers>
-    <server>
-      <id>jfrog-central</id>
-      <username>gha-service-account</username>
-      <password>JFROG_TOKEN_PLACEHOLDER</password>
-    </server>
-  </servers>
-</settings>
-SETTINGS_TEMPLATE
-
-# Substitute the token (avoids exposing it in a heredoc that uses shell expansion).
-sed -i "s|JFROG_TOKEN_PLACEHOLDER|${JFROG_ACCESS_TOKEN}|" ~/.m2/settings.xml
-
-echo "Maven configured to use JFrog registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-npm.sh

@@ -1,11 +0,0 @@
-#!/usr/bin/env bash
-# Point npm at the internal JFrog npm registry.
-# Reads JFROG_ACCESS_TOKEN from the environment.
-set -euo pipefail
-
-cat > ~/.npmrc << EOF
-registry=https://databricks.jfrog.io/artifactory/api/npm/db-npm/
-//databricks.jfrog.io/artifactory/api/npm/db-npm/:_authToken=${JFROG_ACCESS_TOKEN}
-always-auth=true
-EOF
-echo "npm configured to use JFrog registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-pip.sh

@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-# Point pip at the internal JFrog PyPI registry.
-# Reads JFROG_ACCESS_TOKEN from the environment and writes PIP_INDEX_URL to $GITHUB_ENV.
-set -euo pipefail
-
-echo "PIP_INDEX_URL=https://gha-service-account:${JFROG_ACCESS_TOKEN}@databricks.jfrog.io/artifactory/api/pypi/db-pypi/simple" >> "$GITHUB_ENV"
-echo "pip configured to use JFrog registry"

databricks_sql_kernel-0.3.0/_release-scripts/.github/scripts/configure-sbt.sh

@@ -1,116 +0,0 @@
-#!/usr/bin/env bash
-# configure-sbt.sh — Configure SBT/Coursier to resolve all dependencies through JFrog.
-#
-# Requires:
-#   JFROG_ACCESS_TOKEN  — already set by jfrog-oidc-token.sh
-#   GITHUB_ENV          — GitHub Actions env file (set automatically by the runner)
-#
-# Detects repo type automatically:
-#   Delta-style:  build/sbt-config/repositories exists → overwrite with JFrog repos
-#   UC-style:     no repos file → set MAVEN_PROXY_URL for UC's build/sbt
-
-set -euo pipefail
-
-if [[ -z "${JFROG_ACCESS_TOKEN:-}" ]]; then
-  echo "::error::JFROG_ACCESS_TOKEN is not set. Run jfrog-oidc-token.sh first."
-  exit 1
-fi
-
-JFROG_MAVEN_URL="https://databricks.jfrog.io/artifactory/db-maven"
-
-# ── Repo-type detection ─────────────────────────────────────────────
-if [[ -f "build/sbt-config/repositories" ]]; then
-  echo "Detected Delta-style repo (build/sbt-config/repositories exists)"
-
-  # Overwrite SBT repository config to route all resolution through JFrog.
-  # build/sbt unconditionally sets -Dsbt.override.build.repos=true pointing
-  # to this file.
-  cat > build/sbt-config/repositories << 'REPOS'
-  [repositories]
-    local
-    local-preloaded-ivy: file:///${sbt.preloaded-${sbt.global.base-${user.home}/.sbt}/preloaded/}, [organization]/[module]/[revision]/[type]s/[artifact](-[classifier]).[ext]
-    local-preloaded: file:///${sbt.preloaded-${sbt.global.base-${user.home}/.sbt}/preloaded/}
-    jfrog-maven: https://databricks.jfrog.io/artifactory/db-maven/
-    jfrog-ivy: https://databricks.jfrog.io/artifactory/db-maven/, [organization]/[module]/[revision]/[type]s/[artifact](-[classifier]).[ext]
-REPOS
-else
-  echo "Detected UC-style repo (no build/sbt-config/repositories)"
-fi
-
-# MAVEN_PROXY_URL — UC's build/sbt reads this natively; Delta's SBT uses it
-# when auto-building UC from source (ensurePinnedUnityCatalog).
-# No trailing slash — sbt-launch-lib.bash concatenates "/org/..." directly.
-echo "MAVEN_PROXY_URL=${JFROG_MAVEN_URL}" >> "$GITHUB_ENV"
-
-# DEFAULT_ARTIFACT_REPOSITORY — fallback used by sbt-launch-lib.bash for
-# the launcher JAR download when MAVEN_PROXY_URL is unset at launcher time.
-echo "DEFAULT_ARTIFACT_REPOSITORY=${JFROG_MAVEN_URL}" >> "$GITHUB_ENV"
-
-# ── Coursier credentials ────────────────────────────────────────────
-mkdir -p ~/.config/coursier
-cat > ~/.config/coursier/credentials.properties << EOF
-jfrog.host=databricks.jfrog.io
-jfrog.realm=Artifactory Realm
-jfrog.username=gha-service-account
-jfrog.password=${JFROG_ACCESS_TOKEN}
-EOF
-
-# ── Coursier mirror — redirect Maven Central + Google mirror to JFrog ──
-cat > ~/.config/coursier/mirror.properties << 'MIRROR'
-central.from=https://repo1.maven.org/maven2
-central.to=https://databricks.jfrog.io/artifactory/db-maven/
-google.from=https://maven-central.storage-download.googleapis.com/maven2
-google.to=https://databricks.jfrog.io/artifactory/db-maven/
-MIRROR
-
-# ── SBT credentials (Ivy resolution in meta-build) ─────────────────
-mkdir -p ~/.sbt ~/.sbt/1.0
-cat > ~/.sbt/.credentials << EOF
-realm=Artifactory Realm
-host=databricks.jfrog.io
-user=gha-service-account
-password=${JFROG_ACCESS_TOKEN}
-EOF
-
-cat > ~/.sbt/1.0/global.sbt << 'SBT'
-credentials += Credentials(Path.userHome / ".sbt" / ".credentials")
-SBT
-
-# ── .netrc + .curlrc — for SBT launcher download via curl ──────────
-printf 'machine databricks.jfrog.io\n  login gha-service-account\n  password %s\n' \
-  "${JFROG_ACCESS_TOKEN}" > ~/.netrc
-chmod 600 ~/.netrc
-echo "--netrc-optional" > ~/.curlrc
-
-# ── Patch meta-build sbt-assembly ───────────────────────────────────
-# project/project/plugins.sbt may pin an old Ivy-only version (0.14.9)
-# that is unavailable through JFrog. Upgrade to match project/plugins.sbt.
-META_PLUGINS="project/project/plugins.sbt"
-if [[ -f "$META_PLUGINS" ]] && grep -q 'sbt-assembly.*"0\.' "$META_PLUGINS"; then
-  MAIN_VERSION=$(grep 'sbt-assembly' project/plugins.sbt | grep -oP '\d+\.\d+\.\d+' | head -1)
-  if [[ -n "$MAIN_VERSION" ]]; then
-    echo "Patching meta-build sbt-assembly from 0.x to ${MAIN_VERSION}"
-    sed -i "s/\"sbt-assembly\" % \"0\.[^\"]*\"/\"sbt-assembly\" % \"${MAIN_VERSION}\"/" "$META_PLUGINS"
-    grep sbt-assembly "$META_PLUGINS"
-  fi
-fi
-
-# ── Pre-seed SBT launcher JAR ──────────────────────────────────────
-# The launcher is gitignored in both delta-io/delta and unitycatalog/unitycatalog.
-# Without pre-seeding, build/sbt tries Maven Central which is blocked on
-# hardened runners.
-if [[ -f "project/build.properties" ]]; then
-  SBT_VERSION=$(grep sbt.version project/build.properties | cut -d= -f2 | tr -d ' ')
-  SBT_JAR="build/sbt-launch-${SBT_VERSION}.jar"
-  if [[ ! -f "$SBT_JAR" ]]; then
-    echo "Downloading SBT launcher ${SBT_VERSION} from JFrog..."
-    curl -fsSL -o "$SBT_JAR" \
-      -u "gha-service-account:${JFROG_ACCESS_TOKEN}" \
-      "${JFROG_MAVEN_URL}/org/scala-sbt/sbt-launch/${SBT_VERSION}/sbt-launch-${SBT_VERSION}.jar"
-    echo "SBT launcher downloaded ($(wc -c < "$SBT_JAR") bytes)"
-  else
-    echo "SBT launcher already present: $SBT_JAR"
-  fi
-fi
-
-echo "SBT and Coursier configured for JFrog"