Reject empty and control-character identifiers during bundle validate

[radakam]

Changes

Reject empty, blank, and control-character resource identifiers (and incomplete pipeline library paths) during bundle validate, so these configs fail at validate instead of later with API 400 / invalid-URL errors.

• Identifier checks walk typed resource fields (an explicit allowlist), separate from OpenAPI required-field warnings.
• Missing resource names that previously only warned (e.g. models, apps) now error.
• For UC parent fields (catalog_name, schema_name, ...): blank and control-character values error. Omitted parents are left to the existing OpenAPI required-field warnings, which still run only when validate has no errors.
• Incomplete pipeline file / notebook / glob entries without paths are rejected.
• Diagnostics use structural dyn.NewPath (no panic on resource keys with path metacharacters) and name the offending control character in the detail.

Why

These configs used to pass databricks bundle validate and only fail later at the API.

Before this fix (databricks bundle validate on a bundle with empty names, control-character names, and file: {}):

Name: invalid-identifiers
Target: default
Workspace:
  User: [USERNAME]
  Path: /Workspace/Users/[USERNAME]/.bundle/invalid-identifiers/default

Validation OK!

Explicit "" on non-omitempty parents (e.g. volumes) also errors. On omitempty parents (e.g. registered models), DropEmptyStrings treats "" as unset before validate.

Found by fuzz testing.

Tests

• Unit: invalid_identifiers_test.go, pipeline_libraries_test.go
• Acceptance: invalid_identifiers, required, empty_resources, dashboard/sql_warehouse required-name cases, volume_defaults, models validate

[eng-dev-ecosystem-bot]

Integration test report

Commit: c74f179

Run: 33167520926

	Env	💚​RECOVERED	🙈​SKIP	✅​pass	🙈​skip	Time
💚​	aws linux	1	1	274	1204	4:50
💚​	aws windows	1	1	276	1202	3:48
💚​	azure linux	1	1	273	1204	4:36
💚​	azure windows	1	1	275	1202	4:16
💚​	gcp linux	1	1	274	1204	4:46
💚​	gcp windows	1	1	276	1202	4:37

	Test Name	aws linux	aws windows	azure linux	azure windows	gcp linux	gcp windows
💚​	TestAccept	💚​R	💚​R	💚​R	💚​R	💚​R	💚​R
🙈​	TestAccept/ssh/connection	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S

Top 3 slowest tests (at least 2 minutes):

duration	env	testname
4:32	gcp windows	TestAccept
3:43	aws windows	TestAccept
3:27	azure windows	TestAccept

[github-actions]

Approval status: pending

/acceptance/bundle/ - needs approval

27 files changed
Suggested: @denik
Also eligible: @shreyas-goenka, @pietern, @janniklasrose, @andrewnester, @lennartkats-db, @anton-107

/bundle/ - needs approval

5 files changed
Suggested: @denik
Also eligible: @shreyas-goenka, @pietern, @janniklasrose, @andrewnester, @lennartkats-db, @anton-107

General files (require maintainer)

Files: .nextchanges/bundles/invalid-identifiers.md
Based on git history:

• @denik -- recent work in bundle/config/validate/, .nextchanges/bundles/, acceptance/bundle/validate/models/user_id/

_{Any maintainer (@andrewnester, @anton-107, @denik, @pietern, @shreyas-goenka, @simonfaltum, @renaudhartert-db, @janniklasrose, @lennartkats-db, @rugpanov, @rclarey) can approve all areas.
See OWNERS for ownership rules.}