Skip to content

Prod deploy#5010

Open
supabase-cli-releaser[bot] wants to merge 42 commits intomainfrom
develop
Open

Prod deploy#5010
supabase-cli-releaser[bot] wants to merge 42 commits intomainfrom
develop

Conversation

@supabase-cli-releaser
Copy link
Copy Markdown
Contributor

singh-inder and others added 13 commits January 25, 2026 21:54
…pdates (#5002)

* chore(deps): bump the actions-major group across 1 directory with 2 updates

Bumps the actions-major group with 2 updates in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `github/codeql-action` from 4.34.1 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3869755...c10b806)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-major
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* feat: add workflow to create and push pkg Go module version tags (#5001)

* Initial plan

* feat: add workflow to create and push pkg version tags

Agent-Logs-Url: https://github.com/supabase/cli/sessions/78b5dd93-1c78-4cdc-b6f0-c664080934b8

Co-authored-by: sweatybridge <1639722+sweatybridge@users.noreply.github.com>

* feat: add version validation and tag existence check to tag-pkg workflow

Agent-Logs-Url: https://github.com/supabase/cli/sessions/78b5dd93-1c78-4cdc-b6f0-c664080934b8

Co-authored-by: sweatybridge <1639722+sweatybridge@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sweatybridge <1639722+sweatybridge@users.noreply.github.com>
Co-authored-by: Han Qiao <sweatybridge@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sweatybridge <1639722+sweatybridge@users.noreply.github.com>
Co-authored-by: Han Qiao <sweatybridge@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
… in the go-minor group across 1 directory (#4993)

chore(deps): bump github.com/oapi-codegen/runtime

Bumps the go-minor group with 1 update in the /pkg directory: [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime).


Updates `github.com/oapi-codegen/runtime` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.3.0...v1.3.1)

---
updated-dependencies:
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot bot and others added 15 commits April 1, 2026 00:22
#5013)

Bumps the go-minor group with 3 updates in the / directory: [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/go-playground/validator/v10](https://github.com/go-playground/validator).


Updates `github.com/andybalholm/brotli` from 1.2.0 to 1.2.1
- [Commits](andybalholm/brotli@v1.2.0...v1.2.1)

Updates `github.com/go-git/go-git/v5` from 5.17.0 to 5.17.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.17.0...v5.17.2)

Updates `github.com/go-playground/validator/v10` from 10.30.1 to 10.30.2
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.30.1...v10.30.2)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
…t` (#4873)

Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…/pkg/config/templates (#4992)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.095 to 17.6.1.102.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…dates (#5018)

Bumps the docker-minor group with 6 updates in the /pkg/config/templates directory:

| Package | From | To |
| --- | --- | --- |
| supabase/postgres-meta | `v0.96.1` | `v0.96.2` |
| supabase/studio | `2026.03.23-sha-b7847b7` | `2026.03.30-sha-12a43e5` |
| supabase/edge-runtime | `v1.73.0` | `v1.73.1` |
| supabase/realtime | `v2.78.18` | `v2.80.4` |
| supabase/storage-api | `v1.44.11` | `v1.48.10` |
| supabase/logflare | `1.34.14` | `1.36.0` |



Updates `supabase/postgres-meta` from v0.96.1 to v0.96.2

Updates `supabase/studio` from 2026.03.23-sha-b7847b7 to 2026.03.30-sha-12a43e5

Updates `supabase/edge-runtime` from v1.73.0 to v1.73.1

Updates `supabase/realtime` from v2.78.18 to v2.80.4

Updates `supabase/storage-api` from v1.44.11 to v1.48.10

Updates `supabase/logflare` from 1.34.14 to 1.36.0

---
updated-dependencies:
- dependency-name: supabase/postgres-meta
  dependency-version: v0.96.2
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/studio
  dependency-version: 2026.03.30-sha-12a43e5
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/edge-runtime
  dependency-version: v1.73.1
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/realtime
  dependency-version: v2.80.4
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.48.10
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…-major group across 1 directory (#5008)

chore(deps): bump actions/setup-go in the actions-major group

Bumps the actions-major group with 1 update: [actions/setup-go](https://github.com/actions/setup-go).


Updates `actions/setup-go` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4b73464...4a36011)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…3593) (#4791)

fix: use correct docker.sock binding when starting vector img (fixes #3127, #3512, #3593)

This fixes Docker Desktop on Linux failing to start the vector container.
The container tries to bind to the Docker Desktop socket directly, which is unsupported.
The host binding path should always be /var/run/docker.sock, which has special handling under the hood (see docker/for-mac#6545 (comment)).

Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…tes (#5025)

Bumps the go-minor group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go-minor group with 2 updates in the /pkg directory: [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

Updates `github.com/andybalholm/brotli` from 1.2.0 to 1.2.1
- [Commits](andybalholm/brotli@v1.2.0...v1.2.1)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…/pkg/config/templates (#5023)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.102 to 17.6.1.104.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
…5031)

* Add merge_group triggers to CI workflows

Agent-Logs-Url: https://github.com/supabase/cli/sessions/956fab18-300f-4c6c-8e28-57242abff9e1

Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>

* chore: update codeowners for team cli

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
Co-authored-by: avallete <andrew.valleteau@supabase.io>
…dates (#5030)

Bumps the docker-minor group with 4 updates in the /pkg/config/templates directory: supabase/edge-runtime, supabase/realtime, supabase/storage-api and supabase/logflare.


Updates `supabase/edge-runtime` from v1.73.1 to v1.73.2

Updates `supabase/realtime` from v2.80.4 to v2.80.7

Updates `supabase/storage-api` from v1.48.10 to v1.48.13

Updates `supabase/logflare` from 1.36.0 to 1.36.1

---
updated-dependencies:
- dependency-name: supabase/edge-runtime
  dependency-version: v1.73.2
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/realtime
  dependency-version: v2.80.7
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.48.13
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…ons-major group across 1 directory (#5029)

chore(deps): bump docker/login-action in the actions-major group

Bumps the actions-major group with 1 update: [docker/login-action](https://github.com/docker/login-action).


Updates `docker/login-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@b45d80f...4907a6d)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…jor group (#5021)

chore(deps): bump https-proxy-agent in the npm-major group

Bumps the npm-major group with 1 update: [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent).


Updates `https-proxy-agent` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/https-proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/https-proxy-agent@9.0.0/packages/https-proxy-agent)

---
updated-dependencies:
- dependency-name: https-proxy-agent
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
dependabot bot and others added 14 commits April 6, 2026 00:12
Bumps the go-minor group with 2 updates in the / directory: [github.com/slack-go/slack](https://github.com/slack-go/slack) and [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).


Updates `github.com/slack-go/slack` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/slack-go/slack/releases)
- [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md)
- [Commits](slack-go/slack@v0.20.0...v0.21.0)

Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: github.com/slack-go/slack
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Picks up GET /v1/organizations/{slug}/entitlements from platform#31128.
Also fixes nullable type mismatch in auth config (int -> float32)
caused by upstream spec change.
Wire SuggestUpgradeOnError into branches create and update error paths.
When the API returns 402, the CLI now fetches the org's entitlements
and displays a direct billing upgrade link.

Create uses branching_limit (Free plan gate), update uses
branching_persistent (persistent branches gate).
- Rename package-level test var to avoid collision risk
- Add dashboard URL to project-lookup-failed fallback message
- Add test for hasAccess:true edge case
When agent mode is active, run a lightweight RLS check after each
query and include an advisory in the JSON envelope if any user-schema
tables lack Row Level Security. Uses the same schema exclusion list
as lints.sql (rls_disabled_in_public).

Ref: GROWTH-712
@coveralls
Copy link
Copy Markdown

Coverage Report for CI Build 24070682304

Warning

No base build found for commit d03a45b on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 63.354%

Details

  • Patch coverage: 37 uncovered changes across 3 files (110 of 147 lines covered, 74.83%).

Uncovered Changes

File Changed Covered %
internal/start/start.go 34 6 17.65%
internal/utils/flags/db_url.go 5 0 0.0%
internal/db/query/advisory.go 36 32 88.89%

Coverage Regressions

Requires a base build to compare against. How to fix this →


Coverage Stats

Coverage Status
Relevant Lines: 14673
Covered Lines: 9296
Line Coverage: 63.35%
Coverage Strength: 6.91 hits per line

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants