Merge branch 'master' into force_ci/support_schema_evolution

Author: jt2594838

.dockerignore

@@ -20,3 +20,5 @@
 *
 !distribution
 !docker/src/main/DockerCompose/start-1c1d.sh
+!docker/src/main/ainode-build-data/
+!docker/src/main/ainode-entrypoint.sh

.github/workflows/multi-language-client.yml

@@ -45,7 +45,7 @@ jobs:
       fail-fast: false
       max-parallel: 15
       matrix:
-        os: [ubuntu-22.04, ubuntu-24.04, windows-2022, windows-latest, macos-latest]
+        os: [ubuntu-22.04, ubuntu-24.04, windows-2022, windows-latest, windows-2025-vs2026, macos-latest]
     runs-on: ${{ matrix.os}}
 
     steps:
@@ -96,7 +96,11 @@ jobs:
         # Explicitly using "install" instead of package in order to be sure we're using libs built on this machine
         # (was causing problems on windows, but could cause problem on linux, when updating the thrift module)
         run: |
-          ./mvnw clean verify -P with-cpp -pl iotdb-client/client-cpp,example/client-cpp-example -am
+          if [[ "${{ matrix.os }}" == "windows-2025-vs2026" ]]; then
+            ./mvnw clean verify -P with-cpp -pl iotdb-client/client-cpp,example/client-cpp-example -am -Dcmake.generator="Visual Studio 18 2026"
+          else
+            ./mvnw clean verify -P with-cpp -pl iotdb-client/client-cpp,example/client-cpp-example -am
+          fi
       - name: Upload Artifact
         if: failure()
         uses: actions/upload-artifact@v4

.mvn/wrapper/maven-wrapper.properties

@@ -15,5 +15,5 @@
 # specific language governing permissions and limitations
 # under the License.
 
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.6/apache-maven-3.9.6-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
 wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar

RELEASE_NOTES.md

@@ -19,6 +19,53 @@
 
 -->
 
+# Apache IoTDB 2.0.7
+
+## Features & Improvements
+
+- Others: Remove risky RPC interfaces.
+- Others: Remove JEXL functions.
+- Others: Check naming when creating a Pipe.
+- Others: Change the default client RPC service address to 127.0.0.1.
+- Others: Modify code to make internal services bind to the value specified by `dn_internal_address`instead of the default address.
+
+## Bugs
+- Fixed an issue in the partition table automatic deletion logic: Only TTL configured at the DB level takes effect, using the maximum TTL value within the DB.
+- ...
+
+# Apache IoTDB 2.0.6
+
+## Features & Improvements
+- Data Query: Supports table model query and write-back functions.
+- Data Query: The MATCH RECOGNIZE feature for table models supports aggregate functions to capture continuous data for analysis and calculation.
+- Data Query: Added built-in scalar functions - bit manipulation functions for table models.
+- Data Query: Added pushdown-enabled EXTRACT time function for table models.
+- Others: Fixed security vulnerabilities CVE-2025-12183, CVE-2025-66566 and CVE-2025-11226.
+- ...
+## Bugs
+- Fixed the issue where executing queries with CASE WHEN throws an internal server error.
+- Fixed the issue where creating a view succeeds but querying the view fails when the tree model database name is the same as the device name in tree-to-table scenarios.
+- Fixed the issue where the automatic database creation function fails subsequently if a database is deleted after successful table model data synchronization, and the database is not restarted.
+- Fixed the issue where modifying the password of a user that failed to be created throws an internal server error.
+- Fixed the issue where an error is thrown when using the IF PERMITTED clause to modify sequence encoding and compression settings.
+- Fixed the issue where querying BLOB data types via the tree model RESTAPI interface /rest/v2/query returns garbled results.
+- Fixed the issue where incorrect exception information is displayed when checking pipe status after creating a pipe in a table model that only contains tree-to-table views.
+- Fixed the issue where the number of server connections keeps increasing when using a user without MAINTAIN permission (non-root user in table models) in a Session.
+- ...
+
+# Apache IoTDB 2.0.5
+
+## Features & Improvements
+- Data Query: Support manual creation of tree-to-table views
+- Data Query: Table model adds window functions
+- Data Query: Table model adds the aggregate function approx_most_frequent
+- Data Query: Table model JOIN function expansion, supporting LEFT & RIGHT JOIN, ASOF LEFT JOIN
+- Data Query: Table model supports row pattern recognition, enabling capture of continuous data for analysis and calculation
+- Storage Management: Table model adds multiple system tables, such as: VIEWS (table view information), MODELS (model information), etc.
+- AI Management: AINode adds two built-in models: Timer-XL and Timer-Sundial
+- AI Management: AINode supports inference functions for tree models and table models
+- ...
+
 # Apache IoTDB 2.0.4
 
 ## Features & Improvements

docker/ReadMe.md

@@ -53,6 +53,9 @@ e.g.
 ./do-docker-build.sh -t standalone -v 1.0.0
 # for ainode, start from 2.0.5
 ./do-docker-build.sh -t ainode -v 2.0.5-SNAPSHOT
+# for ainode, start from 2.0.8
+cd src/main
+./build-ainode.sh -v 2.0.8-SNAPSHOT -d /data/ainode
 ```
 Notice:
 Make directory of src/main/target and put the zip file downloading from the official download page. 
@@ -91,6 +94,23 @@ Please download `docker-compose-ainode.yml` in `docker/src/main/DockerCompose` f
 docker compose -f docker-compose-ainode.yml up -d
 ```
 
+Start from v2.0.7, run
+```shell
+docker run -d \
+  --name iotdb-ainode \
+  --network host \
+  -p 10810:10810 \
+  -p 8080:8080 \
+  -e AIN_SEED_CONFIG_NODE=127.0.0.1:10710 \
+  -e AIN_RPC_ADDRESS=127.0.0.1 \
+  -e AIN_RPC_PORT=10810 \
+  -e AIN_CLUSTER_INGRESS_ADDRESS=127.0.0.1 \
+  -e AIN_CLUSTER_INGRESS_PORT=6667 \
+  -e AIN_CLUSTER_INGRESS_USERNAME=root \
+  -e AIN_CLUSTER_INGRESS_PASSWORD=root \
+  apache/iotdb:2.0.7-SNAPSHOT-ainode
+```
+
 ## Quick start
 We provide `docker-compose-cluster-1c1d1a.yml` in `docker/src/main/DockerCompose`. Downloading this yaml file, both standalone and ainode docker first. Subsequently, you can easily obtain a IoTDB cluster, which consists of a ConfigNode, a DataNode and a AINode, in your local machine.
 

docker/src/main/DockerCompose/docker-compose-ainode.yml

@@ -40,9 +40,12 @@ services:
       - ain_cluster_ingress_username=root
       - ain_cluster_ingress_password=root
       - ain_cluster_ingress_time_zone=UTC+8
+    ports:
+      - "10810:10810"
     volumes:
       - ainode-data:/ainode/data
       - ./logs/ainode:/ainode/logs
+    restart: unless-stopped
       # - ./lib/ainode:/ainode/lib  # Uncomment for rolling upgrade
     # Note: Some environments set an extremely high container nofile limit (~2^30 = 1073741824).
     # This can make the startup step "Checking whether the ports are already occupied..." appear to hang (lsof slow).

docker/src/main/Dockerfile-1.0.0-ainode

@@ -0,0 +1,88 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+FROM python:3.11-slim-bullseye
+
+# Build argument: Version number (required)
+ARG VERSION
+
+# Fail build if VERSION is not provided
+RUN if [ -z "$VERSION" ]; then echo "ERROR: VERSION build argument is required" && exit 1; fi
+
+# Set environment variables
+ENV IOTDB_HOME=/ainode \
+    PATH=$PATH:/ainode/sbin \
+    DEBIAN_FRONTEND=noninteractive
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    unzip \
+    procps \
+    netcat-openbsd \
+    curl \
+    vim \
+    tzdata \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# Set working directory
+WORKDIR /tmp
+
+# Copy and extract the distribution package
+# Note: Build context is project root (../../.. relative to this Dockerfile)
+COPY distribution/target/apache-iotdb-${VERSION}-ainode-bin.zip /tmp/
+
+# Extract and rename directory
+RUN unzip -q apache-iotdb-${VERSION}-ainode-bin.zip \
+    && mv apache-iotdb-${VERSION}-ainode-bin /ainode \
+    && rm -f apache-iotdb-${VERSION}-ainode-bin.zip \
+    && mkdir -p /ainode/logs /ainode/data/ainode
+
+# Copy data directory from build server to image
+# The build script copies /data/ainode to docker/src/main/ainode-build-data/ before build
+# Note: The trailing slash is important - it copies contents not the directory itself
+COPY docker/src/main/ainode-build-data/ /ainode/data/ainode/
+
+
+# Set directory permissions
+RUN chmod -R 755 /ainode/sbin \
+    && chmod +x /ainode/sbin/*.sh \
+    && chmod -R 777 /ainode/data /ainode/logs
+
+# Health check configuration
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -f http://localhost:8080/health || exit 1
+
+# Expose ports
+# 10810: AINode RPC port (ain_inference_rpc_port)
+# 8080:  Health check / management port
+EXPOSE 10810 8080
+
+# Copy entrypoint script (relative to project root)
+COPY docker/src/main/ainode-entrypoint.sh /ainode/sbin/
+RUN chmod +x /ainode/sbin/ainode-entrypoint.sh
+
+# Set working directory
+WORKDIR /ainode
+
+# Use entrypoint script as startup command
+ENTRYPOINT ["/ainode/sbin/ainode-entrypoint.sh"]
+
+# Default command (can be overridden)
+CMD ["start"]