Track changes from upstream

.github/RELEASE_CHECKLIST.md

@@ -0,0 +1,25 @@
+# FerretDB's DocumentDB Release Checklist
+
+## Preparation
+
+1. Create draft release on GitHub to see a list of merged PRs.
+2. Update CHANGELOG.md manually. It will point to versions of DocumentDB and FerretDB that are not released yet.
+3. Update `packaging/debian_files/changelog` and `packaging/rpm_files/documentdb.spec`.
+4. Send PR with changes, merge it.
+
+## Git tag
+
+1. Make a signed tag with `git tag -s --cleanup=verbatim vX.Y.Z-ferretdb-A.B.C(-p)` (like `v0.103.0-ferretdb-2.2.0-beta.1`),
+   where `X.Y.Z` is the SemVar formatted version of DocumentDB (like `0.103.0`),
+   and `A.B.C(-p)` is the compatible FerretDB version (like `2.2.0-beta.1`).
+2. Check `git status` output.
+3. Push it!
+
+## Release
+
+1. Find [Packages CI build](https://github.com/FerretDB/documentdb/actions/workflows/ferretdb_packages.yml?query=event%3Apush)
+   for the tag to release.
+2. Check Docker images.
+3. Upload `.deb` and `.rpm` packages to the draft release.
+4. Update release notes with the content of CHANGELOG.md.
+5. Publish release on GitHub.

.github/containers/Build-Ubuntu/Dockerfile

@@ -130,4 +130,4 @@ WORKDIR /home/documentdb
 
 LABEL org.opencontainers.image.source=https://github.com/microsoft/documentdb
 LABEL org.opencontainers.image.description="DocumentDB ubuntu build image"
-LABEL org.opencontainers.image.licenses=MIT
+LABEL org.opencontainers.image.licenses=MIT

.github/mergify.yml

@@ -0,0 +1,27 @@
+---
+# see https://docs.mergify.com/
+
+pull_request_rules:
+  - name: "Assign PRs"
+    conditions:
+      - "-closed"
+      - "#assignee = 0"
+    actions:
+      assign:
+        add_users: ["{{ author }}"]
+
+  - name: "Add label on conflicts"
+    conditions:
+      - "conflict"
+    actions:
+      comment:
+        message: "@{{author}} this pull request has merge conflicts."
+      label:
+        add: [conflict]
+
+  - name: "Remove label when conflicts were resolved"
+    conditions:
+      - "-conflict"
+    actions:
+      label:
+        remove: [conflict]

.github/settings.yml

@@ -0,0 +1,34 @@
+---
+# https://github.com/repository-settings/app
+
+repository:
+  allow_squash_merge: true
+  allow_merge_commit: true
+  allow_rebase_merge: false
+  allow_auto_merge: true
+  allow_update_branch: true
+  delete_branch_on_merge: true
+  enable_automated_security_fixes: true
+  enable_vulnerability_alerts: true
+
+# https://docs.github.com/en/rest/issues/labels
+labels:
+  - name: conflict
+    color: "#FF0000"
+    description: PRs that have merge conflicts
+
+  - name: deps
+    color: "#D4C5F9"
+    description: PRs that update dependencies
+
+  - name: not ready
+    color: "#000000"
+    description: Issues that are not ready to be worked on; PRs that should skip CI
+
+  - name: packages
+    color: "#9B022C"
+    description: PRs that should build packages
+
+  - name: trust
+    color: "#00FF00"
+    description: PRs that can access Actions secrets

.github/workflows/codeql.yml

@@ -54,7 +54,7 @@ jobs:
         postgresql-16-cron \
         postgresql-16-pgvector \
         postgresql-16-postgis-3 \
-        postgresql-16-rum 
+        postgresql-16-rum
         export CLEAN_SETUP=1
         export INSTALL_DEPENDENCIES_ROOT=/tmp/install_setup
         mkdir -p /tmp/install_setup
@@ -70,4 +70,4 @@ jobs:
         sudo make install
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v3

.github/workflows/ferretdb_go_tests.yml

@@ -0,0 +1,59 @@
+---
+name: Go
+on:
+  pull_request:
+    types:
+      - unlabeled # if GitHub Actions stuck, add and remove "not ready" label to force rebuild
+      - opened
+      - reopened
+      - synchronize
+  push:
+    branches:
+      - ferretdb
+    tags:
+      - "*"
+  schedule:
+    - cron: "12 0 * * *"
+
+env:
+  GOPATH: /home/runner/go
+  GOCACHE: /home/runner/go/cache
+  GOLANGCI_LINT_CACHE: /home/runner/go/cache/lint
+  GOMODCACHE: /home/runner/go/mod
+  GOPROXY: https://proxy.golang.org
+  GOTOOLCHAIN: local
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+
+    # Do not run this job in parallel for any PR change or branch push.
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+      cancel-in-progress: true
+
+    if: github.event_name != 'pull_request' || !contains(github.event.pull_request.labels.*.name, 'not ready')
+
+    steps:
+      # TODO https://github.com/FerretDB/github-actions/issues/211
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: FerretDB/github-actions/setup-go@main
+
+      - name: Run tests
+        run: |
+          cd packaging/defineversion
+          go mod tidy
+          go mod verify
+          go test ./...
+
+      - name: Check dirty
+        if: always()
+        run: |
+          git status --untracked-files --ignored
+          git status
+          git diff --exit-code