dm: add LOCK TABLES privilege note for managed MySQL sources

.github/pull_request_template.md

@@ -2,7 +2,7 @@
 
 ### First-time contributors' checklist <!--Remove this section if you're not a first-time contributor.-->
 
-- [ ] I've signed [**Contributor License Agreement**](https://cla-assistant.io/pingcap/docs-cn) that's required for repo owners to accept my contribution.
+- [ ] I've signed the [**Contributor License Agreement**](https://cla.pingcap.net/pingcap/docs), which is required for the repository owners to accept my contribution.
 
 ### What is changed, added or deleted? (Required)
 

.github/workflows/ci.yaml

@@ -7,17 +7,55 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  pull:
+  duplicated-file-names:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
         uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "16"
       - name: Verify duplicated file names
         run: ./scripts/verify-duplicated-file-name.sh
-      - name: Verify internal links
+
+  internal-links-files:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "18"
+          cache: npm
+          cache-dependency-path: package-lock.json
+      - name: Install Node dependencies
+        run: npm ci
+      - name: Verify internal links (full repo) - files
         run: ./scripts/verify-links.sh
-      - name: Verify internal link anchors
+
+  internal-links-anchors:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "18"
+          cache: npm
+          cache-dependency-path: package-lock.json
+      - name: Install Node dependencies
+        run: npm ci
+      - name: Verify internal links (full repo) - anchors
         run: ./scripts/verify-link-anchors.sh
+
+  internal-links-toc:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "18"
+          cache: npm
+          cache-dependency-path: package-lock.json
+      - name: Install Node dependencies
+        run: npm ci
+      - name: Verify internal links (full repo) - TOC membership
+        run: node ./scripts/verify-internal-links-in-toc.js

.github/workflows/dispatch.yml

@@ -6,6 +6,7 @@ on:
       - ".github/**"
     branches:
       - master
+      - release-8.5
       - release-7.2
       - release-7.1
       - release-7.0

.github/workflows/link-fail-fast.yaml

@@ -17,15 +17,11 @@ jobs:
           CHANGED_FILES=$(git diff-tree --name-only --diff-filter 'AM' -r HEAD^1 HEAD -- "*.md" | sed -z "s/\n$//;s/\n/' '/g")
           echo "all_changed_files=${CHANGED_FILES}" >> $GITHUB_OUTPUT
 
-      - name: Download Exclude Path
-        run: |
-          curl https://raw.githubusercontent.com/pingcap/docs/master/.lycheeignore -O
-
       - name: Link Checker
         if: ${{ steps.changed-files.outputs.all_changed_files }}
-        uses: lycheeverse/lychee-action@v1.6.1
+        uses: lycheeverse/lychee-action@v2.3.0
         with:
           fail: true
-          args: -E --exclude-mail -i -n -t 45 -- '${{ steps.changed-files.outputs.all_changed_files }}'
+          args: --root-dir $(pwd) -E -i -n -t 45 -- '${{ steps.changed-files.outputs.all_changed_files }}'
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/media.yml

@@ -7,7 +7,7 @@ on:
     paths:
       - media/**
 jobs:
-  run:
+  upload:
     name: Upload media files
     runs-on: ubuntu-latest
     steps:
@@ -34,3 +34,42 @@ jobs:
       #    printf "%s\n" ${{ secrets.AWS_ACCESS_KEY }} ${{ secrets.AWS_SECRET_KEY }} ${{ secrets.AWS_REGION }} "json" | aws configure
       - name: Upload
         run: cloud-assets-utils verify-and-sync -qiniu true -qiniu-bucket ${{ secrets.QINIU_BUCKET_NAME }} media -replace-first-path-to images/docs-cn -cdn-refresh https://download.pingcap.com/
+
+      - name: Install coscli
+        run: |
+          wget https://cosbrowser.cloud.tencent.com/software/coscli/coscli-linux-amd64
+          mv coscli-linux-amd64 coscli
+          chmod 755 coscli
+
+      - name: Upload to COS
+        run: |
+          ./coscli sync media/ cos://${{ secrets.TENCENTCLOUD_BUCKET_ID }}/media/images/docs-cn \
+            --init-skip \
+            --recursive \
+            --routines 16 \
+            --secret-id ${{ secrets.TENCENTCLOUD_SECRET_ID }} \
+            --secret-key ${{ secrets.TENCENTCLOUD_SECRET_KEY }} \
+            --endpoint cos.ap-beijing.myqcloud.com
+
+  cdn-refresh:
+    needs: upload
+    runs-on: ubuntu-latest
+    name: Refresh CDN Cache
+    env:
+      TENCENTCLOUD_SECRET_ID: ${{ secrets.TENCENTCLOUD_SECRET_ID }}
+      TENCENTCLOUD_SECRET_KEY: ${{ secrets.TENCENTCLOUD_SECRET_KEY }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python environment
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          architecture: 'x64'
+
+      - name: Install Tencent Cloud CLI
+        run: pipx install tccli
+
+      - name: Purge production CDN cache
+        run: tccli cdn PurgePathCache --Paths '["https://docs-download.pingcap.com/media/images/docs-cn/"]' --FlushType delete

.github/workflows/sync-doc-pr-en-to-zh.yml

@@ -0,0 +1,185 @@
+name: Sync Docs Changes from EN PR to ZH PR
+
+on:
+  workflow_dispatch:
+    inputs:
+      source_pr_url:
+        description: 'Source PR URL (English docs repository)'
+        required: true
+        type: string
+        default: ''
+      target_pr_url:
+        description: 'Target PR URL (Chinese docs repository)'
+        required: true
+        type: string
+        default: ''
+      ai_provider:
+        description: 'AI Provider to use for translation'
+        required: false
+        type: choice
+        options:
+          - deepseek
+          - gemini
+        default: 'gemini'
+
+jobs:
+  sync-docs:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout current repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          fetch-depth: 0
+
+      - name: Checkout ai-pr-translator repository
+        uses: actions/checkout@v4
+        with:
+          repository: "qiancai/ai-pr-translator"
+          ref: "main"
+          path: "ai-pr-translator"
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.9'
+
+      - name: Install dependencies
+        run: pip install -r ai-pr-translator/scripts/requirements.txt
+
+      - name: Extract PR information
+        id: extract_info
+        env:
+          SOURCE_URL: ${{ github.event.inputs.source_pr_url }}
+          TARGET_URL: ${{ github.event.inputs.target_pr_url }}
+        run: |
+          if [[ ! "$SOURCE_URL" =~ ^https://github\.com/[^/]+/[^/]+/pull/[0-9]+$ ]]; then
+            echo "❌ Invalid source PR URL format"; exit 1
+          fi
+          if [[ ! "$TARGET_URL" =~ ^https://github\.com/[^/]+/[^/]+/pull/[0-9]+$ ]]; then
+            echo "❌ Invalid target PR URL format"; exit 1
+          fi
+
+          SOURCE_OWNER=$(echo "$SOURCE_URL" | cut -d'/' -f4)
+          SOURCE_REPO=$(echo "$SOURCE_URL" | cut -d'/' -f5)
+          SOURCE_PR=$(echo "$SOURCE_URL" | cut -d'/' -f7)
+          TARGET_OWNER=$(echo "$TARGET_URL" | cut -d'/' -f4)
+          TARGET_REPO=$(echo "$TARGET_URL" | cut -d'/' -f5)
+          TARGET_PR=$(echo "$TARGET_URL" | cut -d'/' -f7)
+
+          {
+            echo "source_owner<<EOF"; echo "$SOURCE_OWNER"; echo "EOF"
+            echo "source_repo<<EOF"; echo "$SOURCE_REPO"; echo "EOF"
+            echo "source_pr<<EOF"; echo "$SOURCE_PR"; echo "EOF"
+            echo "target_owner<<EOF"; echo "$TARGET_OWNER"; echo "EOF"
+            echo "target_repo<<EOF"; echo "$TARGET_REPO"; echo "EOF"
+            echo "target_pr<<EOF"; echo "$TARGET_PR"; echo "EOF"
+          } >> $GITHUB_OUTPUT
+
+          echo "Source: ${SOURCE_OWNER}/${SOURCE_REPO}#${SOURCE_PR}"
+          echo "Target: ${TARGET_OWNER}/${TARGET_REPO}#${TARGET_PR}"
+
+      - name: Get target PR branch info
+        id: target_branch
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TARGET_OWNER: ${{ steps.extract_info.outputs.target_owner }}
+          TARGET_REPO: ${{ steps.extract_info.outputs.target_repo }}
+          TARGET_PR: ${{ steps.extract_info.outputs.target_pr }}
+        run: |
+          PR_INFO=$(curl -s -H "Authorization: token ${GH_TOKEN}" -H "Accept: application/vnd.github.v3+json" \
+            "https://api.github.com/repos/${TARGET_OWNER}/${TARGET_REPO}/pulls/${TARGET_PR}")
+          TARGET_BRANCH=$(echo "$PR_INFO" | jq -r '.head.ref')
+          HEAD_REPO=$(echo "$PR_INFO" | jq -r '.head.repo.full_name')
+          echo "target_branch=${TARGET_BRANCH}" >> $GITHUB_OUTPUT
+          echo "head_repo=${HEAD_REPO}" >> $GITHUB_OUTPUT
+          echo "Target branch: ${TARGET_BRANCH}, Head repo: ${HEAD_REPO}"
+
+      - name: Clone target repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HEAD_REPO: ${{ steps.target_branch.outputs.head_repo }}
+          TARGET_BRANCH: ${{ steps.target_branch.outputs.target_branch }}
+        run: |
+          git clone "https://x-access-token:${GITHUB_TOKEN}@github.com/${HEAD_REPO}.git" target_repo
+          cd target_repo && git checkout "$TARGET_BRANCH"
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Run sync script
+        id: sync_script
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEEPSEEK_API_TOKEN: ${{ secrets.DEEPSEEK_API_TOKEN }}
+          GEMINI_API_TOKEN: ${{ secrets.GEMINI_API_TOKEN }}
+          SOURCE_PR_URL: ${{ github.event.inputs.source_pr_url }}
+          TARGET_PR_URL: ${{ github.event.inputs.target_pr_url }}
+          AI_PROVIDER: ${{ github.event.inputs.ai_provider }}
+          TARGET_REPO_PATH: ${{ github.workspace }}/target_repo
+        run: |
+          cd ai-pr-translator/scripts
+          if python main_workflow.py; then
+            echo "sync_success=true" >> $GITHUB_OUTPUT
+            echo "✅ Sync script completed successfully"
+          else
+            echo "sync_success=false" >> $GITHUB_OUTPUT
+            echo "❌ Sync script failed"
+            exit 1
+          fi
+
+      - name: Commit and push changes
+        if: steps.sync_script.outputs.sync_success == 'true'
+        env:
+          SOURCE_PR_URL: ${{ github.event.inputs.source_pr_url }}
+          TARGET_PR_URL: ${{ github.event.inputs.target_pr_url }}
+          AI_PROVIDER: ${{ github.event.inputs.ai_provider }}
+          TARGET_BRANCH: ${{ steps.target_branch.outputs.target_branch }}
+        run: |
+          cd target_repo && git add .
+          if ! git diff --staged --quiet; then
+            printf "Auto-sync: Update Chinese docs from English PR\n\nSynced from: %s\nTarget PR: %s\nAI Provider: %s\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>" \
+              "$SOURCE_PR_URL" "$TARGET_PR_URL" "$AI_PROVIDER" | git commit -F -
+            git push origin "$TARGET_BRANCH"
+            echo "Changes pushed to $TARGET_BRANCH"
+          else
+            echo "No changes to commit"
+          fi
+
+      - name: Add success comment to target PR
+        if: steps.sync_script.outputs.sync_success == 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SOURCE_PR_URL: ${{ github.event.inputs.source_pr_url }}
+          TARGET_PR_URL: ${{ github.event.inputs.target_pr_url }}
+          TARGET_OWNER: ${{ steps.extract_info.outputs.target_owner }}
+          TARGET_REPO: ${{ steps.extract_info.outputs.target_repo }}
+          TARGET_PR: ${{ steps.extract_info.outputs.target_pr }}
+        run: |
+          BODY=$(printf '%s\n\n%s\n%s\n%s\n\n%s' "**Auto-sync completed successfully**" \
+            "**Source PR**: ${SOURCE_PR_URL}" "**Target PR**: ${TARGET_PR_URL}" \
+            "Chinese documentation has been updated based on English documentation changes." )
+          PAYLOAD=$(jq -n --arg body "$BODY" '{body: $body}')
+          curl -X POST -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "Accept: application/vnd.github.v3+json" \
+            "https://api.github.com/repos/${TARGET_OWNER}/${TARGET_REPO}/issues/${TARGET_PR}/comments" \
+            -d "$PAYLOAD"
+
+      - name: Add failure comment to target PR
+        if: steps.sync_script.outputs.sync_success == 'false'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SOURCE_PR_URL: ${{ github.event.inputs.source_pr_url }}
+          TARGET_PR_URL: ${{ github.event.inputs.target_pr_url }}
+          TARGET_OWNER: ${{ steps.extract_info.outputs.target_owner }}
+          TARGET_REPO: ${{ steps.extract_info.outputs.target_repo }}
+          TARGET_PR: ${{ steps.extract_info.outputs.target_pr }}
+        run: |
+          BODY=$(printf '%s\n\n%s\n%s\n%s\n\n%s' "**Auto-sync failed**" \
+            "**Source PR**: ${SOURCE_PR_URL}" "**Target PR**: ${TARGET_PR_URL}" \
+            "The sync process encountered an error. Please check the workflow logs for details.")
+          PAYLOAD=$(jq -n --arg body "$BODY" '{body: $body}')
+          curl -X POST -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "Accept: application/vnd.github.v3+json" \
+            "https://api.github.com/repos/${TARGET_OWNER}/${TARGET_REPO}/issues/${TARGET_PR}/comments" \
+            -d "$PAYLOAD"

.gitignore

@@ -12,5 +12,4 @@ gen
 .DS_Store
 
 /node_modules/
-package.json
 yarn.lock

.lycheeignore

@@ -0,0 +1,37 @@
+https://mvnrepository\.com/artifact/mysql/mysql-connector-java/8\.0\.28
+https://github\.com/.*/issues/?
+https://github\.com/.*/pull/?
+https://github\.com/.*/pull/[0-9]+
+https://github\.com/.*/issues/[0-9]+
+https?://\$?\{host}/dashboard.*
+http://xn--\$?\{ip}-m86ht9t5l1bhz9ayu7b:3000.*
+http://ip:2379.*
+http://grafana_ip:3000.*
+http://\$?\{remote-server-ip}:3000.*
+file:///home/runner/work/(docs|docs-cn)/(docs|docs-cn)/develop/.*
+file://.*https:/%7BnodeIP%7D:%7BnodePort%7D/dashboard
+file://.*?http:/\$%7BPD_IP%7D:\$%7BPD_PORT%7D/dashboard.*
+http://\{grafana-ip\}:3000
+http://\{pd-ip\}:2379/dashboard
+http://localhost:\d+/
+https://github\.com/\$user/(docs|docs-cn)
+https://linux\.die\.net/man.*
+https://dev\.mysql\.com/doc/.+/5.7/en/.*
+https://dev\.mysql\.com/doc/.+/8\.0/en/.*
+https://dev\.mysql\.com/doc/.+/8\.4/en/.*
+https://dev\.mysql\.com/doc/[a-z\-]+/en/.*
+https://dev\.mysql\.com/doc/relnotes/[a-z\-]+/en/.*
+https://dev\.mysql\.com/doc/dev/mysql-server/.*
+https://dev\.mysql\.com/downloads/.*
+https://bugs\.mysql\.com/bug\.php.*
+https://www\.mysql\.com/products/.*
+https://help\.openai\.com/en/articles/.*
+https://platform\.openai\.com/docs/.*
+https://openai\.com/.*
+https://jwt\.io/
+https://typeorm\.io/.*
+https://dash\.cloudflare\.com/.*
+https://centminmod\.com/mydumper\.html
+https://learn\.pingcap\.com/learner/
+https://zhuanlan\.zhihu\.com/p/
+https://developers\.redhat\.com/blog/2021/01/05/building-red-hat-enterprise-linux-9-for-the-x86-64-v2-microarchitecture-level

CONTRIBUTING.md

@@ -81,7 +81,7 @@ TiDB 文档的修改需要遵循一定的流程，具体如下。考虑到有些
 
 ### 第 0 步：签署 Contributor License Agreement
 
-首次在本仓库提 PR 时，请务必签署 [Contributor License Agreement](https://cla-assistant.io/pingcap/docs-cn) (CLA)，否则我们将无法合并你的 PR。成功签署 CLA 后，可继续进行后续操作。
+首次在本仓库提 PR 时，请务必签署 [Contributor License Agreement](https://cla.pingcap.net/pingcap/docs-cn) (CLA)，否则我们将无法合并你的 PR。成功签署 CLA 后，可继续进行后续操作。
 
 ### 第 1 步：Fork pingcap/docs-cn 仓库