feat(java/driver/flight-sql): implement Flight SQL session management

.asf.yaml

@@ -21,6 +21,8 @@ github:
   collaborators:
     - krlmlr
     - nbenn
+    - eitsupi
+    - Mandukhai-Alimaa
   enabled_merge_buttons:
     merge: false
     rebase: false

.env

@@ -41,7 +41,7 @@ DOTNET=10.0
 # ci/scripts/install_vcpkg.sh script. Keep in sync with apache/arrow .env.
 # When updating, also update the docs, which list the version of libpq/SQLite
 # that vcpkg (and hence our wheels) ship
-VCPKG="66c0373dc7fca549e5803087b9487edfe3aca0a1"    # 2026.01.16 Release
+VCPKG="9b965a116838c6cdcd36bca60d1b81b030c8ab8d"    # 2026.05.27 Release
 
 # These are used to tell tests where to find services for integration testing.
 # They are valid if the services are started with the compose config.

.github/dependabot.yml

@@ -86,16 +86,41 @@ updates:
   - package-ecosystem: "cargo"
     directories:
       - "/rust/"
-      - "/javascript/"
     schedule:
       interval: "weekly"
     commit-message:
       prefix: "chore(rust): "
     groups:
-      arrow-datafusion:
+      arrow:
         applies-to: version-updates
         patterns:
           - "arrow-*"
-          - "datafusion*"
+    cooldown:
+      default-days: 7
+  - package-ecosystem: "rust-toolchain"
+    directory: "/ci/rust-nightly/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore(rust): "
+    cooldown:
+      default-days: 7
+  - package-ecosystem: "cargo"
+    directories:
+      - "/javascript/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore(javascript): "
+    groups:
+      arrow:
+        applies-to: version-updates
+        patterns:
+          - "arrow-*"
+      napi:
+        applies-to: version-updates
+        patterns:
+          - "napi"
+          - "napi-*"
     cooldown:
       default-days: 7

.github/workflows/asf-allowlist-check.yml

@@ -40,7 +40,7 @@ jobs:
     name: "Analyze Actions"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
 
@@ -50,6 +50,6 @@ jobs:
 
     # Analyze workflows with Zizmor
     - name: Run zizmor 🌈
-      uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+      uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
       with:
         advanced-security: false

.github/workflows/csharp.yml

@@ -19,6 +19,8 @@ name: C#
 
 on:
   push:
+    branches-ignore:
+      - 'dependabot/**'
     paths:
       - '.github/workflows/csharp.yml'
       - 'ci/scripts/csharp_*'
@@ -43,22 +45,28 @@ defaults:
 
 jobs:
   csharp:
-    name: "C# ${{ matrix.os }} ${{ matrix.dotnet }}"
+    name: "C# ${{ matrix.os }}"
     runs-on: ${{ matrix.os }}
     if: ${{ !contains(github.event.pull_request.title, 'WIP') }}
     timeout-minutes: 15
     strategy:
       fail-fast: false
       matrix:
-        dotnet: ['8.0.x', '10.0.x']
         os: [ubuntu-latest, windows-2022, macos-15-intel, macos-latest]
     steps:
+      # The test project multi-targets net8.0 and net10.0, so both SDKs must be
+      # installed: the .NET 8 SDK cannot build net10.0, and the net8.0 tests
+      # cannot run without the .NET 8 runtime. Requesting a single version here
+      # and relying on the runner image to supply the other leaves one target
+      # framework silently dependent on the image contents.
       - name: Install C#
-        uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
-          dotnet-version: ${{ matrix.dotnet }}
+          dotnet-version: |
+            8.0.x
+            10.0.x
       - name: Checkout ADBC
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           submodules: recursive
@@ -94,13 +102,13 @@ jobs:
             lib-name: Apache.Arrow.Adbc.TestFixture.Native.dylib
     steps:
       - name: Checkout ADBC
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           submodules: recursive
           persist-credentials: false
       - name: Install .NET 10
-        uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
           # NativeAOT requires net10. Using 10.0.x selects the latest
           # available SDK; preview tags may be needed until GA.

.github/workflows/dev.yml

@@ -47,7 +47,7 @@ jobs:
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 1
           persist-credentials: false
@@ -73,25 +73,25 @@ jobs:
     name: "pre-commit"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 1
           persist-credentials: false
       - name: Get required Go version
         run: |
           (. .env && echo "GO_VERSION=${GO}") >> $GITHUB_ENV
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: "${{ env.GO_VERSION }}"
           check-latest: true
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: '3.x'
       - name: install golangci-lint
         run: |
           go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.49.0
       - name: pre-commit (cache)
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}

.github/workflows/dev_adbc.yml

@@ -25,6 +25,8 @@ on:
       - "dev/**"
       - ".github/workflows/dev_adbc.yml"
   push:
+    branches-ignore:
+      - 'dependabot/**'
     paths:
       - "dev/**"
       - ".github/workflows/dev_adbc.yml"
@@ -45,13 +47,13 @@ jobs:
     name: "pre-commit"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: Cache Conda
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/conda_pkgs_dir
           key: conda-${{ runner.os }}-${{ steps.get-date.outputs.today }}-${{ env.CACHE_NUMBER }}-${{ hashFiles('ci/**') }}