chore: sync oss 2026-06-10 (#27491) (#27492)

* chore(sync): influxdb_pro 2026-06-10

Source: 3c0552cacd668ac7762543edc9b086dea13751c7

Commits:
- `3c0552cacd` fix(catalog): write v3 snapshots flat in application order and remove the group index (influxdata/influxdb_pro#4026)
- `7136ffa4b6` chore(jemalloc): windows (mingw) doesn't allow symbol override, it treats it as an error (influxdata/influxdb_pro#4032)
- `0c6fef051f` feat: cross-querying a DB from the Processing Engine (influxdata/influxdb_pro#3192)
- `a8dcad9c57` fix(help): correct serve --object-store default from memory to file (influxdata/influxdb_pro#3743)
- `8b48d98319` feat: allow disabling authz on the node-stop endpoint (influxdata/influxdb_pro#3937)
- `6bcd1b3f6d` chore(oss-sync): multi-file plugin loader fixes (influxdata/influxdb_pro#3844, influxdata/influxdb_pro#3826, influxdata/influxdb_pro#3831) (influxdata/influxdb_pro#3988)
- `64cc41cf65` refactor(catalog): move restore staging dir to CatalogFilePath (influxdata/influxdb_pro#3968)
- `22d194e18a` fix: failed run set index writes should not complete the plan (influxdata/influxdb_pro#3980)
- `e41f8f1f4d` fix(authz): auditor role show databases (influxdata/influxdb_pro#3981)
- `caf83b1ff7` feat(catalog): add `influxdb3 inspect catalog` CLI tooling (influxdata/influxdb_pro#3894)
- `1646ee5d5c` feat: implement `influxdb3 remove node` lifecycle on v3 catalog (influxdata/influxdb_pro#3710)
- `fa0d9915a6` fix(user-auth): allow Member role to manage tokens (influxdata/influxdb_pro#3961)
- `82f44b424a` fix: table/db soft delete name collision (influxdata/influxdb_pro#3960)
- `f64947bc2a` feat(backup/restore): wire up full restore (engine→HTTP→CLI) with v3 catalog fixes + e2e DR test (influxdata/influxdb_pro#3935)
- `aa45555c93` fix(user-auth): Fallback to creds when no token provided (influxdata/influxdb_pro#3953)
- `956acfddb8` feat: remove all actions wildcard (influxdata/influxdb_pro#3943)
- `d3c0982e1a` feat(user-auth): Return updated_at and deleted_at and update types to not be wrapped in Option<> (influxdata/influxdb_pro#3942)
- `e4ed3b29bb` fix(ci): relocate per-test timeout guardrail to ent/oss workspace roots (influxdata/influxdb_pro#3923)
- `84e0fb65f1` fix(catalog): use v3 object_store types in re-export (influxdata/influxdb_pro#3933)
- `a9ce8aff76` feat(catalog): add INFO logs to catalog APIs (influxdata/influxdb_pro#3932)
- `68688353e8` refactor(catalog): hoist per-tier limit constants out of the catalog crate (influxdata/influxdb_pro#3915)
- `c186b870dd` feat: align role permissions to token permissions (influxdata/influxdb_pro#3916)
- `2d5014c495` feat: V3 catalog restoration coordination (influxdata/influxdb_pro#3825)
- `e31ace4a30` refactor(catalog): consolidate influxdb3_catalog into oss core (v3) (influxdata/influxdb_pro#3890)
- `183a953b6d` fix(py): update to 3.13.13-20260602 for latest security fixes (influxdata/influxdb_pro#3906)
- `f122713931` refactor(authz): consolidate influxdb3_authz into oss core (influxdata/influxdb_pro#3888)
- `891a98c57a` feat: trigger error behavior in PE system tables (influxdata/influxdb_pro#3882)
- `22a21a0d8a` feat(sll): Emit startup_phase on major system level events (influxdata/influxdb_pro#3883)
- `fa6a6be6bd` refactor(id): reconcile influxdb3_id; ent path-depends on oss/influxdb3_id (influxdata/influxdb_pro#3859)
- `ab7f8a6617` fix: error&help message around PE (influxdata/influxdb_pro#3881)
- `35c0f8817f` feat(sll): Emit catalog snapshot event on service level logging (influxdata/influxdb_pro#3877)
- `f1b8d2c7a7` feat(sll): Emit memory_pressure event on service level logging (influxdata/influxdb_pro#3858)
- `320aac8ca9` feat(sll): Emit parquet compaction planned and completed events on service level logging (influxdata/influxdb_pro#3853)
- `5a69539ca5` feat: implement user auth (influxdata/influxdb_pro#3781)
- `11c385885d` chore(ci): warn (not fail) on unsound advisories in oss cargo-deny (influxdata/influxdb_pro#3857)
- `7dce7a3280` feat(sll): Emit gen1_cleanup events on service level logging (influxdata/influxdb_pro#3847)
- `c450c689f7` chore(deps): bump tar from 0.4.45 to 0.4.46 in /oss (influxdata/influxdb_pro#3839)
- `4b19edd1c8` feat(sll): Emits retention_cleanup on service level logging (influxdata/influxdb_pro#3813)
- `a5e8bc2c42` fix(influxql): preserve bool field filter in WHERE when time predicate precedes it (influxdata/influxdb_pro#3804)
- `6659aea4ff` fix(processing-engine): discover pip by probing inside a venv (influxdata/influxdb_pro#3675)
- `1e666dc1c6` feat(sll): Emit snapshot checkpoint on service level logging  (influxdata/influxdb_pro#3809)
- `a03eb6a4d9` Revert "fix(influxql): write_columnar handles non-string GROUP BY keys (influxdata/influxdb_pro#3776)" (influxdata/influxdb_pro#3784)
- `df6e208fe3` fix(http): only build query trace spans when the request opts in (influxdata/influxdb_pro#3512)
- `143047ac3f` feat(jemalloc/profiling): enable heap profiling by default always on (influxdata/influxdb_pro#3638)
- `60fe7754c2` feat(sll): Emit snapshot created events on service level logging (influxdata/influxdb_pro#3788)
- `0bcd92f9d7` fix(influxql): write_columnar handles non-string GROUP BY keys (influxdata/influxdb_pro#3776)
- `a3e11b8d6c` refactor(processing_engine): id-key the running-trigger registry in OSS (influxdata/influxdb_pro#3763)
- `bb7801b28a` feat(sll): Introduce system state event changes for service level logging (influxdata/influxdb_pro#3761)
- `4d5b7b8719` feat: sync PE telemetry to OSS (influxdata/influxdb_pro#3720)
- `b6f62d550a` feat(write): report chunks/lines/bytes/throughput, add --quiet (influxdata/influxdb_pro#3731)
- `f7c9daff63` chore(deny): ignore RUSTSEC-2026-0149 (wasmtime-wasi 41.0.4) (influxdata/influxdb_pro#3738)
- `d13bb29c7c` test: deflake returns_chunks_across_parquet_and_buffered_data (influxdata/influxdb_pro#3683)
- `51a5454c47` feat(sll): source bytes_scanned for PachaTree queries (influxdata/influxdb_pro#3658)
- `b6fe42866d` fix(catalog_cache): fast-fail quorum reads on transport errors (influxdata/influxdb_pro#3590)
- `563deff35f` chore: pyo3 0.28 (influxdata/influxdb_pro#3659)
- `8f4303a955` fix(trace_exporters): surface underlying io::Error in IOError variant (influxdata/influxdb_pro#3610)
- `5655d0a2ab` feat(loadgen): tag write/query reports with target node (influxdata/influxdb_pro#3634)
- `24fd13f4d6` fix(pacha/write_lp): preserve typed parse error for HTTP 400 (influxdata/influxdb_pro#3598)
- `27e8339714` fix(iox_query): typed-null stats for absent columns (EAR influxdata/influxdb_pro#6894) (influxdata/influxdb_pro#3586)
- `0969a5af83` fix(pe/trigger): avoid trigger failures from crashing server during restarts (influxdata/influxdb_pro#3603)
- `6075c0619a` feat: increase tag id to u16 and update series key for wide tag rows (influxdata/influxdb_pro#3324)
- `3ecf2b76b3` feat(object-store): support implicit Azure Workload Identity authenti… (influxdata/influxdb_pro#3289)
- `ac3991ce13` chore: sync PE ent->oss (influxdata/influxdb_pro#3487)
- `3963225fac` fix(explorer): update Explorer UI port mapping from 80 to 8080 (influxdata/influxdb_pro#3434)
- `5f392ce957` refactor: use platform CA when downloading UDF resources (influxdata/influxdb_pro#3486)
- `18a7c1d66e` fix(py): update to python 3.13.13-20260504 for latest security fixes (influxdata/influxdb_pro#3451)
- `832278f171` feat(loadcap): add anonymized load capture for write and query workloads (influxdata/influxdb_pro#3315)
- `32913d747f` feat(loadgen): facility to write compressed payloads (influxdata/influxdb_pro#3432)
- `7d2fb9447c` chore(rust-toolchain): update to Rust 1.95.0 and fix new clippy lints (influxdata/influxdb_pro#3462)
- `e08b396730` feat(influxdb3_client): allow writing with gzip encoding; sync ent to oss (influxdata/influxdb_pro#3400)
- `c83edbf4be` feat(sll): Add partitions_scanned field for parquet (influxdata/influxdb_pro#3390)
- `1ef789949f` chore(tokio): update to version 1.52.2 (influxdata/influxdb_pro#3396)





















* chore: Remove -oss infix from versions since that's what cargo wants

---------

Co-authored-by: Adam Curtis <adam.curtis.dev@gmail.com>
Co-authored-by: Andrew Lamb <andrew@nerdnetworks.org>
Co-authored-by: Cannon Palms <cpalms@influxdata.com>
Co-authored-by: caterryan <caterryan1@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Eaton <eatondustin1@gmail.com>
Co-authored-by: Jamie Strandboge <jamie@influxdata.com>
Co-authored-by: Jeffrey Smith II <jsmith@influxdata.com>
Co-authored-by: Lili Cosic <cosiclili@gmail.com>
Co-authored-by: Marco Neumann <marco@crepererum.net>
Co-authored-by: Martin Hilton <mhilton@influxdata.com>
Co-authored-by: Paul Dix <paul@pauldix.net>
Co-authored-by: peterbarnett03 <peter.barnett03@gmail.com>
Co-authored-by: Phil Bracikowski <13472206+philjb@users.noreply.github.com>
Co-authored-by: praveen-influx <pkumar@influxdata.com>
Co-authored-by: Reid Hansen <59478953+hansenreid@users.noreply.github.com>
Co-authored-by: Reid Kaufmann <73494261+reidkaufmann@users.noreply.github.com>
Co-authored-by: Timothy Maloney <tmaloney@influxdata.com>
Co-authored-by: Trevor Hilton <thilton@influxdata.com>

Author: 20 people

.circleci/config.yml

@@ -146,10 +146,10 @@ parameters:
   # Consistent environment setup for Python Build Standalone
   PBS_DATE:
     type: string
-    default: "20260211"
+    default: "20260602"
   PBS_VERSION:
     type: string
-    default: "3.13.12"
+    default: "3.13.13"
 
 # Consistent Cargo environment configuration
 cargo_env: &cargo_env
@@ -271,6 +271,12 @@ jobs:
           command: cargo install cargo-deny --locked
       - run:
           name: cargo-deny Checks
+          # `--warn unsound` downgrades RustSec `informational = "unsound"`
+          # advisories to warnings. They flag API soundness concerns, not
+          # exploitable vulnerabilities, so we don't fail CI on them. The
+          # advisory-db maintainers themselves recommend ignoring
+          # informational=unsound reports for security checks:
+          # https://github.com/rustsec/advisory-db/issues/2572#issuecomment-3740573839
           command: cargo deny check -s --warn unsound
 
   doc:

.config/nextest.toml

@@ -0,0 +1,4 @@
+[profile.default]
+# Terminate any test still running after 10 minutes (terminate-after × period).
+# Bounds a hung or deadlocked test instead of letting it run to CI's job timeout.
+slow-timeout = { period = "60s", terminate-after = 10 }