4545
4646jobs :
4747 build :
48- runs-on : large-linux-x86
48+ runs-on : blacksmith-32vcpu-ubuntu-2404
49+ env :
50+ BUN_SHELL : ${{ inputs.shell }}
51+ VERSION : ${{ inputs.version }}
4952 steps :
5053 - name : Checkout
5154 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5457 uses : ./.github/actions/setup
5558
5659 - name : Setup Go
57- uses : actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
60+ uses : actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
5861 with :
5962 go-version-file : apps/cli-go/go.mod
6063 cache : true
@@ -71,10 +74,10 @@ jobs:
7174 sudo apt-get install -y nfpm
7275
7376name : Sync versions
74- run : pnpm exec bun apps/cli/scripts/sync-versions.ts --version ${{ inputs.version }}
77+ run : pnpm exec bun apps/cli/scripts/sync-versions.ts --version "${VERSION}"
7578
7679 - name : Build selected shell
77- run : pnpm exec bun apps/cli/scripts/build.ts --version ${{ inputs.version }} --shell ${{ inputs.shell }}
80+ run : pnpm exec bun apps/cli/scripts/build.ts --version "${VERSION}" --shell "${BUN_SHELL}"
7881
7982 - name : Verify build artifacts
8083 run : |
@@ -95,11 +98,19 @@ jobs:
9598
9699smoke-test :
97100 needs : build
101+ # macos-15-intel is the slowest smoke leg and the only one not on
102+ # Blacksmith (Blacksmith macOS is ARM-only). Skip it on prereleases
103+ # (PR smoke + develop -> beta) so beta wall-clock isn't gated by it;
104+ # stable releases on main still run the full matrix.
105+ if : ${{ !(matrix.runner == 'macos-15-intel' && inputs.prerelease) }}
98106 strategy :
99107 fail-fast : false
100108 matrix :
101- runner : [ubuntu-latest, macos-latest, macos-15-intel, windows-latest ]
109+ runner : [blacksmith-8vcpu- ubuntu-2404, blacksmith-6vcpu- macos-latest, macos-15-intel, blacksmith-8vcpu- windows-2025 ]
102110 runs-on : ${{ matrix.runner }}
111+ env :
112+ NPM_TAG : ${{ inputs.npm_tag }}
113+ VERSION : ${{ inputs.version }}
103114 steps :
104115 - name : Checkout
105116 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -128,13 +139,21 @@ jobs:
128139 run : chmod +x packages/cli-*/bin/supabase || true
129140
130141 - name : Run smoke tests
131- run : pnpm run test:smoke -- --version ${{ inputs.version }} --tag ${{ inputs.npm_tag }}
142+ # Force bash so ${VERSION}/${NPM_TAG} expand identically across the
143+ # ubuntu/macos/windows matrix — windows-latest defaults to pwsh, which
144+ # treats those as empty PowerShell variables (env vars are `$env:VAR`).
145+ shell : bash
146+ run : pnpm run test:smoke -- --version "${VERSION}" --tag "${NPM_TAG}"
132147 working-directory : apps/cli
133148
134149 publish :
135150 needs : smoke-test
136151 if : ${{ !inputs.dry_run }}
137- runs-on : ubuntu-latest
152+ runs-on : blacksmith-2vcpu-ubuntu-2404
153+ env :
154+ CHANNEL : ${{ inputs.channel }}
155+ NPM_TAG : ${{ inputs.npm_tag }}
156+ VERSION : ${{ inputs.version }}
138157 permissions :
139158 contents : write
140159 id-token : write
@@ -151,10 +170,10 @@ jobs:
151170 name : cli-build-${{ inputs.shell }}-${{ inputs.version }}
152171
153172 - name : Sync versions
154- run : pnpm exec bun apps/cli/scripts/sync-versions.ts --version ${{ inputs.version }}
173+ run : pnpm exec bun apps/cli/scripts/sync-versions.ts --version "${VERSION}"
155174
156175 - name : Publish to npm
157- run : pnpm exec bun apps/cli/scripts/publish.ts --tag ${{ inputs.npm_tag }}
176+ run : pnpm exec bun apps/cli/scripts/publish.ts --tag "${NPM_TAG}"
158177
159178 # Push the version tag to origin as soon as npm has the bytes, before any
160179 # downstream step that can fail. Without this, a failure in the GH-release
@@ -166,7 +185,7 @@ jobs:
166185 - name : Push version tag
167186 run : |
168187 set -euo pipefail
169- tag="v${{ inputs.version } }"
188+ tag="v${VERSION }"
170189 git config user.name "github-actions[bot]"
171190 git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
172191 if git ls-remote --tags origin "refs/tags/${tag}" | grep -q .; then
@@ -193,8 +212,8 @@ jobs:
193212 if : ${{ inputs.prerelease }}
194213 run : |
195214 set -euo pipefail
196- tag="v${{ inputs.version } }"
197- channel="${{ inputs.channel } }"
215+ tag="v${VERSION }"
216+ channel="${CHANNEL }"
198217 note_ref="refs/notes/semantic-release-${tag}"
199218 if git ls-remote origin "${note_ref}" | grep -q .; then
200219 echo "Channel note ${note_ref} already on origin; skipping push."
@@ -203,6 +222,17 @@ jobs:
203222 git push origin "${note_ref}"
204223 fi
205224
225+ # goreleaser used to publish both supabase_<version>_<os>_<arch>.tar.gz and
226+ # supabase_<os>_<arch>.tar.gz; setup-cli, install scripts, docs and various
227+ # third-party tools point at releases/latest/download/<unversioned>.tar.gz.
228+ # Re-publish the alias so those callers keep working. See supabase/cli#5257.
229+ - name : Create unversioned tarball aliases
230+ run : |
231+ set -euo pipefail
232+ for triple in darwin_arm64 darwin_amd64 linux_arm64 linux_amd64 windows_arm64 windows_amd64; do
233+ cp "dist/supabase_${VERSION}_${triple}.tar.gz" "dist/supabase_${triple}.tar.gz"
234+ done
235+
206236name : Create draft GitHub Release
207237 uses : softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
208238 with :
@@ -223,17 +253,28 @@ jobs:
223253 dist/supabase_${{ inputs.version }}_linux_amd64.apk
224254 dist/supabase_${{ inputs.version }}_windows_amd64.zip
225255 dist/supabase_${{ inputs.version }}_windows_arm64.zip
256+ dist/supabase_${{ inputs.version }}_windows_amd64.tar.gz
257+ dist/supabase_${{ inputs.version }}_windows_arm64.tar.gz
226258 dist/checksums.txt
259+ dist/supabase_darwin_arm64.tar.gz
260+ dist/supabase_darwin_amd64.tar.gz
261+ dist/supabase_linux_arm64.tar.gz
262+ dist/supabase_linux_amd64.tar.gz
263+ dist/supabase_windows_arm64.tar.gz
264+ dist/supabase_windows_amd64.tar.gz
227265
228266name : Publish GitHub Release (immutable)
229267 env :
230268 GH_TOKEN : ${{ github.token }}
231- run : gh release edit v${{ inputs.version }} --draft=false
269+ run : gh release edit " v${VERSION}" --draft=false
232270
233271 publish-homebrew :
234272 needs : publish
235273 if : ${{ !inputs.dry_run && inputs.publish_brew_scoop }}
236- runs-on : ubuntu-latest
274+ runs-on : blacksmith-2vcpu-ubuntu-2404
275+ env :
276+ BREW_NAME : ${{ inputs.brew_name }}
277+ VERSION : ${{ inputs.version }}
237278 steps :
238279 - name : Checkout
239280 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -265,14 +306,17 @@ jobs:
265306 git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
266307
267308name : Update Homebrew formula
268- run : pnpm exec bun apps/cli/scripts/update-homebrew.ts --version ${{ inputs.version }} --name ${{ inputs.brew_name }}
309+ run : pnpm exec bun apps/cli/scripts/update-homebrew.ts --version "${VERSION}" --name "${BREW_NAME}"
269310 env :
270311 GITHUB_TOKEN : ${{ steps.app-token.outputs.token }}
271312
272313 publish-scoop :
273314 needs : publish
274315 if : ${{ !inputs.dry_run && inputs.publish_brew_scoop }}
275- runs-on : ubuntu-latest
316+ runs-on : blacksmith-2vcpu-ubuntu-2404
317+ env :
318+ SCOOP_NAME : ${{ inputs.scoop_name }}
319+ VERSION : ${{ inputs.version }}
276320 steps :
277321 - name : Checkout
278322 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -304,6 +348,6 @@ jobs:
304348 git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
305349
306350name : Update Scoop manifest
307- run : pnpm exec bun apps/cli/scripts/update-scoop.ts --version ${{ inputs.version }} --name ${{ inputs.scoop_name }}
351+ run : pnpm exec bun apps/cli/scripts/update-scoop.ts --version "${VERSION}" --name "${SCOOP_NAME}"
308352 env :
309353 GITHUB_TOKEN : ${{ steps.app-token.outputs.token }}
0 commit comments