chore(sync): influxdb_pro 2026-04-20 (#27365)

* chore(sync): influxdb_pro 2026-04-20

Source: df9464c7001d121794ccf5a661412c61eed94cc6

Commits:
- `7e41542e01` chore(oss): update `README` and `install_script` (influxdata/influxdb_pro#3197)
- `500b716ecb` feat(query concurrency limit): add query limit to cli and api (influxdata/influxdb_pro#2892)
- `4ffb57bc04` feat(shutdown): add named component tracking and shutdown progress logging (influxdata/influxdb_pro#3172)
- `6159903853` chore(sync): sync iox to oss/core 2026-04-15 (influxdata/influxdb_pro#3156)
- `4ca928c74e` chore: Port miri CI job to pro (`oss-miri`) (influxdata/influxdb_pro#3004)
- `f6214b1aba` chore: Port buf-lint job to influxdb_pro (influxdata/influxdb_pro#3024)
- `8326ce082c` chore: Address cargo audit failures (influxdata/influxdb_pro#3155)
- `b64029e16c` refactor(oss): use `DatabaseName` instead of `NamespaceName` (influxdata/influxdb_pro#3014)
- `df46ecc319` chore(cargo-deny): Downgrade unsound info advisories to warnings (influxdata/influxdb_pro#3115)
- `cdd4aa7865` chore(deny): ignore RUSTSEC-2026-0097 (rand 0.8.5 unsoundness) (influxdata/influxdb_pro#3113)
- `c243df955b` chore(sync): sync iox to oss/core 2026-04-10  (influxdata/influxdb_pro#3106)
- `1d6dd0be75` chore(sync): sync iox to oss/core 2026-04-07 (influxdata/influxdb_pro#3076)
- `0f479eda16` chore: Simplify core sync documentation, remove patches (influxdata/influxdb_pro#3083)
- `df34913004` fix: ignore wasmtime 41.0.4 security advisories in cargo-deny (influxdata/influxdb_pro#3089)
- `0f1a80fd4c` feat(object_store): add `put_adaptive` helper for multipart uploads (influxdata/influxdb_pro#3062)
- `73d67b2992` test: Add different test results for `parquet_file` with and without `v3` feature flag (influxdata/influxdb_pro#3079)
- `b1239395ab` fix(authz): `/api/v2/write` returns `403` instead of `401` for non-write token (influxdata/influxdb_pro#3040)
- `53ea9bc41b` test: Add different test results for `iox_query` with and without `v3` feature flag (influxdata/influxdb_pro#3061)
- `7aaced6be0` chore(influxdb3_server): map client errors to 4xx instead of 5xx (influxdata/influxdb_pro#3038)
- `b973abf5ce` fix(ci): verify python shared library loaded with expected path (influxdata/influxdb_pro#2809)
- `8a26292b71` fix: Invalid query now returns HTTP 4xx instead of 5xx (influxdata/influxdb_pro#3027)

Co-authored-by: Andrew Lamb <andrew@nerdnetworks.org>
Co-authored-by: Cannon Palms <cpalms@influxdata.com>
Co-authored-by: Chunchun Ye <14298407+appletreeisyellow@users.noreply.github.com>
Co-authored-by: Jack <56563911+jdockerty@users.noreply.github.com>
Co-authored-by: Lili Cosic <cosiclili@gmail.com>
Co-authored-by: Phil Bracikowski <13472206+philjb@users.noreply.github.com>
Co-authored-by: Trevor Hilton <thilton@influxdata.com>

* chore(ci): use --warn unsound in cargo audit

---------

Co-authored-by: Andrew Lamb <andrew@nerdnetworks.org>
Co-authored-by: Cannon Palms <cpalms@influxdata.com>
Co-authored-by: Chunchun Ye <14298407+appletreeisyellow@users.noreply.github.com>
Co-authored-by: Jack <56563911+jdockerty@users.noreply.github.com>
Co-authored-by: Lili Cosic <cosiclili@gmail.com>
Co-authored-by: Phil Bracikowski <13472206+philjb@users.noreply.github.com>

Author: 7 people

.circleci/config.yml

@@ -271,8 +271,10 @@ jobs:
           command: cargo install cargo-deny --locked
       - run:
           name: cargo-deny Checks
-          command: cargo deny check -s
-
+          # `--warn unsound` downgrades RustSec `informational = "unsound"`
+          # advisories to warnings, they flag API soundness concerns, not
+          # exploitable vulnerabilities, so we don't want them to fail CI.
+          command: cargo deny check -s --warn unsound
   doc:
     docker:
       - image: quay.io/influxdb/rust:ci
@@ -483,8 +485,22 @@ jobs:
                 # XXX: better to use 'cargo:rustc-link-arg=-Wl,-rpath,@executable_path/python/lib'
                 name: adjust LC_RPATH path for darwin
                 command: |
+                  export PBS_LIBPYTHON=$(grep '^lib_name=' /tmp/workspace/python-artifacts/<< parameters.target >>/pyo3_config_file.txt | cut -d = -f 2)
+                  test -n "$PBS_LIBPYTHON" || { echo "ERROR: empty $PBS_LIBPYTHON"; exit 1; }
                   echo "Running: /osxcross/bin/aarch64-apple-darwin22.2-install_name_tool -add_rpath '@executable_path/python/lib' '${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3'"
                   /osxcross/bin/aarch64-apple-darwin22.2-install_name_tool -add_rpath '@executable_path/python/lib' "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3"
+                  echo "Verifying python shared library dependency via otool -L (expecting @rpath/libpython…dylib)"
+                  /osxcross/bin/aarch64-apple-darwin22.2-otool -L "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3" | grep -q "@rpath/lib${PBS_LIBPYTHON}.dylib" || {
+                    echo "ERROR: expected @rpath/lib${PBS_LIBPYTHON}.dylib not found in otool output"
+                    /osxcross/bin/aarch64-apple-darwin22.2-otool -L "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3"
+                    exit 1
+                  }
+                  echo "Verifying LC_RPATH for python shared library dependency via otool -l (expecting @executable_path/python/lib"
+                  /osxcross/bin/aarch64-apple-darwin22.2-otool -l "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3" | grep -q "path @executable_path/python/lib" || {
+                    echo "ERROR: expected @executable_path/python/lib not found in otool output"
+                    /osxcross/bin/aarch64-apple-darwin22.2-otool -l "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3"
+                    exit 1
+                  }
                   # re-sign after install_name_tool since osxcross won't do it
                   echo "Running: /usr/local/bin/rcodesign sign '${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3'"
                   /usr/local/bin/rcodesign sign "${PWD}/target/<< parameters.target >>/<< parameters.profile >>/influxdb3"

.circleci/packages/influxdb3/fs/usr/share/influxdb3/influxdb3-core.conf

@@ -87,6 +87,10 @@
 # Default: 1000 (env: INFLUXDB3_QUERY_LOG_SIZE)
 #query-log-size="1000"
 
+# Maximum concurrent queries (env: INFLUXDB3_MAX_CONCURRENT_QUERIES)
+# Default: ~2^60 (effectively unlimited)
+#max-concurrent-queries="<LIMIT>"
+
 # Max parquet files allowed in a query (env: INFLUXDB3_QUERY_FILE_LIMIT)
 #query-file-limit="<LIMIT>"