Prod deploy by supabase-cli-releaser[bot] · Pull Request #4834 · supabase/cli

supabase-cli-releaser · 2026-02-10T03:05:17Z

feat: support ssl enforcement config
fix(db): set working directory for SQL relative imports
fix: handle directories and use path.Dir for unix separators
import "path"
chore: separate docker function config
chore: swap toml tag for json
chore: add jsonschema generation tool
fix: inject read only config json to studio
chore: add back toml tags
fix: bump edge-runtime to 1.70.1 (fix: bump edge-runtime to 1.70.1 #4797)
fix: set sslmode for pgdelta target
fix(docker): bump the docker-minor group across 1 directory with 5 updates (fix(docker): bump the docker-minor group across 1 directory with 5 updates #4792)
fix(docker): bump supabase/postgres from 17.6.1.075 to 17.6.1.079 in /pkg/config/templates (fix(docker): bump supabase/postgres from 17.6.1.075 to 17.6.1.079 in /pkg/config/templates #4800)
fix(docker): bump supabase/realtime from v2.74.2 to v2.74.4 in /pkg/config/templates in the docker-minor group (fix(docker): bump supabase/realtime from v2.74.2 to v2.74.4 in /pkg/config/templates in the docker-minor group #4799)
chore(deps): bump github.com/charmbracelet/bubbles from 0.21.0 to 0.21.1 in the go-minor group across 1 directory (chore(deps): bump github.com/charmbracelet/bubbles from 0.21.0 to 0.21.1 in the go-minor group across 1 directory #4801)
chore: upgrade pgdelta to prerelease
fix(docker): bump supabase/postgres from 17.6.1.079 to 17.6.1.080 in /pkg/config/templates (fix(docker): bump supabase/postgres from 17.6.1.079 to 17.6.1.080 in /pkg/config/templates #4809)
fix(docker): bump the docker-minor group in /pkg/config/templates with 4 updates (fix(docker): bump the docker-minor group in /pkg/config/templates with 4 updates #4808)
chore: update e2e tests
chore: add storage tests
chore: add gitignore file
chore: add realtime test
chore: add edge function tests
chore: add missing function
chore: run all tests
chore: glob test files
chore: remove hardcoded keys
chore: add websocat install step
chore: refactor api url
fix: prevent panic when signing keys array is empty
fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates (fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates #4813)
fix(docker): bump supabase/postgres from 17.6.1.080 to 17.6.1.081 in /pkg/config/templates (fix(docker): bump supabase/postgres from 17.6.1.080 to 17.6.1.081 in /pkg/config/templates #4814)
fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates (fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates #4816)
chore: remove unused studio config marshalling
fix: add schema qualification hints for extension type errors (fix: add schema qualification hints for extension type errors #4513)
Revert "fix: set correct valid methods env var (fix: set correct valid methods env var #4781)"
fix(docker): bump supabase/storage-api from v1.37.6 to v1.37.7 in /pkg/config/templates in the docker-minor group (fix(docker): bump supabase/storage-api from v1.37.6 to v1.37.7 in /pkg/config/templates in the docker-minor group #4819)
fix: set correct valid methods env var (fix: set correct valid methods env var #4821)
fix(docker): bump supabase/realtime from v2.75.0 to v2.75.2 in /pkg/config/templates in the docker-minor group (fix(docker): bump supabase/realtime from v2.75.0 to v2.75.2 in /pkg/config/templates in the docker-minor group #4822)
chore: unit test for backup and restore (chore: unit test for backup and restore #4824)
chore: add unit tests for network bans (chore: add unit tests for network bans #4825)
chore: add branches crud test (chore: add branches crud test #4826)
chore: unit test for ssl enforcement commands (chore: unit test for ssl enforcement commands #4827)
fix(studio): use postgres user for read write operations (fix(studio): use postgres user for read write operations #4828)
chore(deps): bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 in the actions-major group (chore(deps): bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 in the actions-major group #4807)
chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in the go-minor group across 1 directory (chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in the go-minor group across 1 directory #4823)
chore: unit tests for vanity subdomain (chore: unit tests for vanity subdomain #4829)
chore: unit tests for pg config (chore: unit tests for pg config #4830)
chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 #4831)
fix(docker): bump the docker-minor group in /pkg/config/templates with 3 updates (fix(docker): bump the docker-minor group in /pkg/config/templates with 3 updates #4832)

Co-authored-by: Han Qiao <sweatybridge@gmail.com>

…dates (#4792) Bumps the docker-minor group with 5 updates in the /pkg/config/templates directory: | Package | From | To | | --- | --- | --- | | postgrest/postgrest | `v14.3` | `v14.4` | | supabase/studio | `2026.01.27-sha-2a37755` | `2026.02.02-sha-b0b7db6` | | supabase/realtime | `v2.73.2` | `v2.74.1` | | supabase/storage-api | `v1.35.3` | `v1.36.1` | | supabase/logflare | `1.30.5` | `1.30.7` | Updates `postgrest/postgrest` from v14.3 to v14.4 Updates `supabase/studio` from 2026.01.27-sha-2a37755 to 2026.02.02-sha-b0b7db6 Updates `supabase/realtime` from v2.73.2 to v2.74.1 Updates `supabase/storage-api` from v1.35.3 to v1.36.1 Updates `supabase/logflare` from 1.30.5 to 1.30.7 --- updated-dependencies: - dependency-name: postgrest/postgrest dependency-version: v14.4 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/studio dependency-version: 2026.02.02-sha-b0b7db6 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/realtime dependency-version: v2.74.1 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/storage-api dependency-version: v1.36.1 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/logflare dependency-version: 1.30.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/pkg/config/templates (#4800) fix(docker): bump supabase/postgres in /pkg/config/templates Bumps supabase/postgres from 17.6.1.075 to 17.6.1.079. --- updated-dependencies: - dependency-name: supabase/postgres dependency-version: 17.6.1.079 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…onfig/templates in the docker-minor group (#4799) fix(docker): bump supabase/realtime Bumps the docker-minor group in /pkg/config/templates with 1 update: supabase/realtime. Updates `supabase/realtime` from v2.74.2 to v2.74.4 --- updated-dependencies: - dependency-name: supabase/realtime dependency-version: v2.74.4 dependency-type: direct:production dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.1 in the go-minor group across 1 directory (#4801) chore(deps): bump github.com/charmbracelet/bubbles Bumps the go-minor group with 1 update in the / directory: [github.com/charmbracelet/bubbles](https://github.com/charmbracelet/bubbles). Updates `github.com/charmbracelet/bubbles` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/charmbracelet/bubbles/releases) - [Commits](charmbracelet/bubbles@v0.21.0...v0.21.1) --- updated-dependencies: - dependency-name: github.com/charmbracelet/bubbles dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/pkg/config/templates (#4809) fix(docker): bump supabase/postgres in /pkg/config/templates Bumps supabase/postgres from 17.6.1.079 to 17.6.1.080. --- updated-dependencies: - dependency-name: supabase/postgres dependency-version: 17.6.1.080 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…h 4 updates (#4808) fix(docker): bump the docker-minor group Bumps the docker-minor group in /pkg/config/templates with 4 updates: supabase/studio, supabase/realtime, supabase/storage-api and supabase/logflare. Updates `supabase/studio` from 2026.02.02-sha-b0b7db6 to 2026.02.04-sha-fba1944 Updates `supabase/realtime` from v2.74.4 to v2.74.7 Updates `supabase/storage-api` from v1.36.2 to v1.37.0 Updates `supabase/logflare` from 1.30.7 to 1.30.8 --- updated-dependencies: - dependency-name: supabase/studio dependency-version: 2026.02.04-sha-fba1944 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/realtime dependency-version: v2.74.7 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/storage-api dependency-version: v1.37.0 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/logflare dependency-version: 1.30.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/pkg/config/templates (#4910) fix(docker): bump supabase/postgres in /pkg/config/templates Bumps supabase/postgres from 17.6.1.090 to 17.6.1.091. --- updated-dependencies: - dependency-name: supabase/postgres dependency-version: 17.6.1.091 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…pkg/config/templates in the docker-minor group (#4912) fix(docker): bump supabase/postgres-meta Bumps the docker-minor group in /pkg/config/templates with 1 update: supabase/postgres-meta. Updates `supabase/postgres-meta` from v0.95.2 to v0.96.0 --- updated-dependencies: - dependency-name: supabase/postgres-meta dependency-version: v0.96.0 dependency-type: direct:production dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…4916) Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.39.0 to 1.40.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.40.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

) Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.1...v1.6.3) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…tes (#4906) Bumps the go-minor group with 2 updates in the / directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [golang.org/x/net](https://github.com/golang/net). Bumps the go-minor group with 1 update in the /pkg directory: [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime). Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.17.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.16.5...v5.17.0) Updates `golang.org/x/net` from 0.50.0 to 0.51.0 - [Commits](golang/net@v0.50.0...v0.51.0) Updates `github.com/oapi-codegen/runtime` from 1.1.2 to 1.2.0 - [Release notes](https://github.com/oapi-codegen/runtime/releases) - [Commits](oapi-codegen/runtime@v1.1.2...v1.2.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/net dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/oapi-codegen/runtime dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/pkg/config/templates (#4923) fix(docker): bump supabase/postgres in /pkg/config/templates Bumps supabase/postgres from 17.6.1.091 to 17.6.1.093. --- updated-dependencies: - dependency-name: supabase/postgres dependency-version: 17.6.1.093 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…h 4 updates (#4922) fix(docker): bump the docker-minor group Bumps the docker-minor group in /pkg/config/templates with 4 updates: supabase/studio, supabase/realtime, supabase/storage-api and supabase/logflare. Updates `supabase/studio` from 2026.02.16-sha-26c615c to 2026.03.02-sha-5644bee Updates `supabase/realtime` from v2.78.5 to v2.78.6 Updates `supabase/storage-api` from v1.40.0 to v1.41.0 Updates `supabase/logflare` from 1.33.3 to 1.34.3 --- updated-dependencies: - dependency-name: supabase/studio dependency-version: 2026.03.02-sha-5644bee dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/realtime dependency-version: v2.78.6 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/storage-api dependency-version: v1.41.0 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/logflare dependency-version: 1.34.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: sync API types from infrastructure * fix: remove stale `pico` project size enum reference from API-sync update (#4925) * Initial plan * fix: remove stale pico project size enum reference Co-authored-by: avallete <8771783+avallete@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: avallete <8771783+avallete@users.noreply.github.com> --------- Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com> Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>

…he go-minor group across 1 directory (#4924) chore(deps): bump go.opentelemetry.io/otel Bumps the go-minor group with 1 update in the / directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go). Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

…h 4 updates (#4926) fix(docker): bump the docker-minor group Bumps the docker-minor group in /pkg/config/templates with 4 updates: supabase/edge-runtime, supabase/realtime, supabase/storage-api and supabase/logflare. Updates `supabase/edge-runtime` from v1.70.5 to v1.71.0 Updates `supabase/realtime` from v2.78.6 to v2.78.7 Updates `supabase/storage-api` from v1.41.0 to v1.41.3 Updates `supabase/logflare` from 1.34.3 to 1.34.5 --- updated-dependencies: - dependency-name: supabase/edge-runtime dependency-version: v1.71.0 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/realtime dependency-version: v2.78.7 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/storage-api dependency-version: v1.41.3 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/logflare dependency-version: 1.34.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

) Bumps the npm-major group with 1 update: [tar](https://github.com/isaacs/node-tar). Updates `tar` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.9...v7.5.10) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…the go-minor group across 1 directory (#4931) chore(deps): bump github.com/slack-go/slack Bumps the go-minor group with 1 update in the / directory: [github.com/slack-go/slack](https://github.com/slack-go/slack). Updates `github.com/slack-go/slack` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/slack-go/slack/releases) - [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md) - [Commits](slack-go/slack@v0.18.0...v0.19.0) --- updated-dependencies: - dependency-name: github.com/slack-go/slack dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…nning (#4872) * fix(function): support multiline import type statements in import scanning The regex pattern `.*?` does not match newlines, causing multiline `import type { X }` statements to be skipped during bind-mount file scanning. This results in type-only imports not being mounted in the Docker container, causing runtime errors like: worker boot error: Module not found "file:///.../types/MyType.ts" Changed `.*?` to `[\s\S]*?` to match any character including newlines, consistent with the `{[^{}]+}` pattern used for braced imports. This fix enables proper handling of Deno 2.x style multiline type imports: ```typescript import type { MyType, OtherType, } from './types.ts' ``` Includes test case to prevent regression. * test(function): add non-braced default type import to fixture Cover `import type Foo from '...'` pattern in the multiline import type test. This form also routes through the `[\s\S]*?` branch and was previously untested. * fix(function): use (?:type\s+)? for multiline import type matching Narrow the regex fix for multiline import type statements per PR review feedback. Instead of widening .*? to [\s\S]*? (which affects all import patterns), add (?:type\s+)? to consume the type keyword so braced imports route into the {[^{}]+} branch that already handles newlines. --------- Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

…dates (#4935) Bumps the docker-minor group with 5 updates in the /pkg/config/templates directory: | Package | From | To | | --- | --- | --- | | supabase/postgres-meta | `v0.96.0` | `v0.96.1` | | supabase/studio | `2026.03.02-sha-5644bee` | `2026.03.04-sha-0043607` | | supabase/realtime | `v2.78.7` | `v2.78.10` | | supabase/storage-api | `v1.41.3` | `v1.41.8` | | supabase/logflare | `1.34.5` | `1.34.7` | Updates `supabase/postgres-meta` from v0.96.0 to v0.96.1 Updates `supabase/studio` from 2026.03.02-sha-5644bee to 2026.03.04-sha-0043607 Updates `supabase/realtime` from v2.78.7 to v2.78.10 Updates `supabase/storage-api` from v1.41.3 to v1.41.8 Updates `supabase/logflare` from 1.34.5 to 1.34.7 --- updated-dependencies: - dependency-name: supabase/postgres-meta dependency-version: v0.96.1 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/studio dependency-version: 2026.03.04-sha-0043607 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/realtime dependency-version: v2.78.10 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/storage-api dependency-version: v1.41.8 dependency-type: direct:production dependency-group: docker-minor - dependency-name: supabase/logflare dependency-version: 1.34.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

…/pkg/config/templates (#4938) fix(docker): bump supabase/postgres in /pkg/config/templates Bumps supabase/postgres from 17.6.1.093 to 17.6.1.095. --- updated-dependencies: - dependency-name: supabase/postgres dependency-version: 17.6.1.095 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…tes (#4939) Bumps the go-minor group with 2 updates in the / directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go-minor group with 1 update in the /pkg directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.41.0...v1.42.0) Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.1...v1.79.2) Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.1...v1.79.2) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: google.golang.org/grpc dependency-version: 1.79.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor - dependency-name: google.golang.org/grpc dependency-version: 1.79.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…-minor group across 1 directory (#4942) chore(deps): bump golang.org/x/oauth2 Bumps the go-minor group with 1 update in the / directory: [golang.org/x/oauth2](https://github.com/golang/oauth2). Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0 - [Commits](golang/oauth2@v0.35.0...v0.36.0) --- updated-dependencies: - dependency-name: golang.org/x/oauth2 dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

…4944) Bumps the npm-major group with 1 update: [tar](https://github.com/isaacs/node-tar). Updates `tar` from 7.5.10 to 7.5.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.10...v7.5.11) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>

* feat: adding hybrid jwt verification Allows verify new JWTs as well legacy * stamp: detect algorithm before verify JWT It helps to reduce latency for Legacy token verifications, since it avoid unnecessary requests. * feat: passing down JWKs as internal env - It reduces functions bootime, since there's no need to fetch JWK on fly * stamp: using URL object instead of string concatenation * stamp: codegen --------- Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

The Link job requires SUPABASE_ACCESS_TOKEN and SUPABASE_PROJECT_ID secrets which are unavailable to fork PRs. Without this guard, the job always fails on external contributions, creating a misleading red CI status that distracts both contributors and reviewers. The if condition checks github.event.pull_request.head.repo.fork and skips the job entirely for fork PRs, showing it as 'skipped' instead of 'failed'. On pushes to develop and PRs from branches within the main repo, the job continues to run normally. Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

docs: add privilege migration note for db dump Co-authored-by: Kalleby Santos <105971119+kallebysantos@users.noreply.github.com>

…te (#4948) Bumps the go-minor group with 1 update in the / directory: [github.com/tidwall/jsonc](https://github.com/tidwall/jsonc). Bumps the go-minor group with 1 update in the /pkg directory: [github.com/tidwall/jsonc](https://github.com/tidwall/jsonc). Updates `github.com/tidwall/jsonc` from 0.3.2 to 0.3.3 - [Commits](tidwall/jsonc@v0.3.2...v0.3.3) Updates `github.com/tidwall/jsonc` from 0.3.2 to 0.3.3 - [Commits](tidwall/jsonc@v0.3.2...v0.3.3) --- updated-dependencies: - dependency-name: github.com/tidwall/jsonc dependency-version: 0.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor - dependency-name: github.com/tidwall/jsonc dependency-version: 0.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….0 (#4945) Bumps [github.com/charmbracelet/glamour](https://github.com/charmbracelet/glamour) from 0.10.0 to 1.0.0. - [Release notes](https://github.com/charmbracelet/glamour/releases) - [Commits](charmbracelet/glamour@v0.10.0...v1.0.0) --- updated-dependencies: - dependency-name: github.com/charmbracelet/glamour dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…pdates (#4934) Bumps the actions-major group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `7` | `8` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6` | `7` | Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v6...v7) Updates `actions/download-artifact` from 7 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v7...v8) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v3...v4) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v6...v7) Updates `goreleaser/goreleaser-action` from 6 to 7 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major - dependency-name: goreleaser/goreleaser-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

…tes (#4952) Bumps the go-minor group with 3 updates in the / directory: [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter), [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/net](https://github.com/golang/net). Bumps the go-minor group with 1 update in the /pkg directory: [golang.org/x/mod](https://github.com/golang/mod). Updates `github.com/olekukonko/tablewriter` from 1.1.3 to 1.1.4 - [Release notes](https://github.com/olekukonko/tablewriter/releases) - [Commits](olekukonko/tablewriter@v1.1.3...v1.1.4) Updates `golang.org/x/mod` from 0.33.0 to 0.34.0 - [Commits](golang/mod@v0.33.0...v0.34.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.51.0...v0.52.0) Updates `golang.org/x/term` from 0.40.0 to 0.41.0 - [Commits](golang/term@v0.40.0...v0.41.0) Updates `golang.org/x/mod` from 0.33.0 to 0.34.0 - [Commits](golang/mod@v0.33.0...v0.34.0) --- updated-dependencies: - dependency-name: github.com/olekukonko/tablewriter dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor - dependency-name: golang.org/x/mod dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/net dependency-version: 0.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/term dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/mod dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

sweatybridgeand others added 30 commits January 9, 2026 03:01

feat: support ssl enforcement config
b5abdaf

fix(db): set working directory for SQL relative imports
00698f5

fix: handle directories and use path.Dir for unix separators
3364bd2
Co-authored-by: Han Qiao <sweatybridge@gmail.com>

import "path"
0ecc36e

chore: separate docker function config
1715b85

chore: swap toml tag for json
af0173c

chore: add jsonschema generation tool
61a1387

fix: inject read only config json to studio
f084b6d

chore: add back toml tags
744f079

fix: bump edge-runtime to 1.70.1 (#4797)
7395389

fix: set sslmode for pgdelta target
3b638d3

chore: upgrade pgdelta to prerelease
df1203c

fix: set sslmode for pgdelta target (#4798)
0b62325

chore: update e2e tests
e21ac03

chore: add storage tests
c269b3c

chore: add gitignore file
4ef7770

chore: add realtime test
3724a46

chore: add edge function tests
ba26dce

chore: add missing function
1460d92

chore: run all tests
f5e04aa

chore: glob test files
781003b

chore: remove hardcoded keys
8e3e27b

chore: add websocat install step
3d3e51c

chore: refactor api url
d6ae34e

dependabotBotand others added 28 commits February 28, 2026 00:12

feat: pass pgrst config to studio container (#4920)
fa5bc6c
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

fix: save profile to global path (#4697)
b4918f3
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>

chore: sync API types from infrastructure (#4943)
f73cfdc
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>

fix: add privilege migration note for db dump (#4885)
3db642a
docs: add privilege migration note for db dump Co-authored-by: Kalleby Santos <105971119+kallebysantos@users.noreply.github.com>

avallete approved these changes Mar 13, 2026
View reviewed changes

github-actionsBot merged commit 5025dd2 into mainMar 13, 2026
11 checks passed

Navigation Menu

Uh oh!

Prod deploy - #4834

Prod deploy#4834
github-actions[bot] merged 124 commits into
mainfrom
develop

supabase-cli-releaserBot commented Feb 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

Uh oh!

Conversation

supabase-cli-releaserBot commented Feb 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants