Skip to content

Prod deploy - #5162

Merged
github-actions[bot] merged 10 commits into
mainfrom
develop
May 4, 2026
Merged

Prod deploy#5162
github-actions[bot] merged 10 commits into
mainfrom
develop

Conversation

@supabase-cli-releaser

Copy link
Copy Markdown
Contributor

avalleteand others added 10 commits April 27, 2026 12:23
…tive sync (#5128)
* fix(windows): json unmarshal errors in telemetry and pg-delta declarative sync
Three Windows-only failures, all surfacing as JSON parse errors:
1. telemetry: any field-level unmarshal error (e.g. session_last_active
stored as a number) now recreates state instead of propagating, since
identity fields aren't worth surfacing an error for.
2. pg-delta declarative sync: containerRef now normalises Windows path
separators with filepath.ToSlash so paths like
supabase\.temp\pgdelta\catalog-baseline.json resolve correctly inside
the Linux edge-runtime container.
3. pg-delta export/diff: parse callers (DeclarativeExportPgDeltaRef,
ExportCatalogPgDelta, pgcache.exportCatalog) now surface stderr when
stdout is empty, instead of failing later with "unexpected end of
JSON input". DiffPgDeltaRef intentionally still accepts empty stdout
as a legitimate "no schema changes" result.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* chore: only run test on windows and fix lint
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* refactor: encode auth external url explicitly
* chore(deps): upgrade pg-delta to alpha.17 (#5110)
Closes: #5094
* chore(deps): bump the actions-major group across 1 directory with 4 updates (#5108)
Bumps the actions-major group with 4 updates in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [t1m0thyj/unlock-keyring](https://github.com/t1m0thyj/unlock-keyring), [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) and [actions/setup-node](https://github.com/actions/setup-node).
Updates `dependabot/fetch-metadata` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@ffa630c...25dd0e3)
Updates `t1m0thyj/unlock-keyring` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/t1m0thyj/unlock-keyring/releases)
- [Commits](t1m0thyj/unlock-keyring@728cc71...cbcf205)
Updates `goreleaser/goreleaser-action` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@ec59f47...e24998b)
Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: t1m0thyj/unlock-keyring
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
* fix(docker): bump the docker-minor group across 1 directory with 6 updates (#5079)
* fix(docker): bump the docker-minor group across 1 directory with 6 updates
Bumps the docker-minor group with 6 updates in the /pkg/config/templates directory:
| Package | From | To |
| --- | --- | --- |
| postgrest/postgrest | `v14.8` | `v14.9` |
| supabase/studio | `2026.04.08-sha-205cbe7` | `2026.04.13-sha-e95f1cc` |
| supabase/edge-runtime | `v1.73.3` | `v1.73.5` |
| supabase/realtime | `v2.82.0` | `v2.83.1` |
| supabase/storage-api | `v1.48.28` | `v1.51.0` |
| supabase/logflare | `1.37.1` | `1.38.2` |
Updates `postgrest/postgrest` from v14.8 to v14.9
Updates `supabase/studio` from 2026.04.08-sha-205cbe7 to 2026.04.13-sha-e95f1cc
Updates `supabase/edge-runtime` from v1.73.3 to v1.73.5
Updates `supabase/realtime` from v2.82.0 to v2.83.1
Updates `supabase/storage-api` from v1.48.28 to v1.51.0
Updates `supabase/logflare` from 1.37.1 to 1.38.2
---
updated-dependencies:
- dependency-name: postgrest/postgrest
dependency-version: v14.9
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/studio
dependency-version: 2026.04.13-sha-e95f1cc
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/edge-runtime
dependency-version: v1.73.5
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/realtime
dependency-version: v2.83.1
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/storage-api
dependency-version: v1.51.0
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/logflare
dependency-version: 1.38.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Downgrade postgrest version from 14.9 to 14.8
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
* chore(workflows): enable install scripts for supabase package in Yarn (#5111)
chore(workflows): enable install scripts for supabase package in Yarn Berry setup
This change sets the YARN_ENABLE_SCRIPTS environment variable to true during the installation of the supabase package, allowing its postinstall script to run as required by Yarn Berry 4.14+. This adjustment ensures the necessary binary is fetched correctly.
* feat: --diff-engine flag on db pull
* fix(docker): bump the docker-minor group in /pkg/config/templates with 6 updates (#5113)
fix(docker): bump the docker-minor group
Bumps the docker-minor group in /pkg/config/templates with 6 updates:
| Package | From | To |
| --- | --- | --- |
| postgrest/postgrest | `v14.8` | `v14.10` |
| supabase/studio | `2026.04.13-sha-e95f1cc` | `2026.04.20-sha-b721a2d` |
| supabase/edge-runtime | `v1.73.5` | `v1.73.13` |
| supabase/realtime | `v2.83.1` | `v2.86.3` |
| supabase/storage-api | `v1.51.0` | `v1.54.1` |
| supabase/logflare | `1.38.2` | `1.39.1` |
Updates `postgrest/postgrest` from v14.8 to v14.10
Updates `supabase/studio` from 2026.04.13-sha-e95f1cc to 2026.04.20-sha-b721a2d
Updates `supabase/edge-runtime` from v1.73.5 to v1.73.13
Updates `supabase/realtime` from v2.83.1 to v2.86.3
Updates `supabase/storage-api` from v1.51.0 to v1.54.1
Updates `supabase/logflare` from 1.38.2 to 1.39.1
---
updated-dependencies:
- dependency-name: postgrest/postgrest
dependency-version: v14.10
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/studio
dependency-version: 2026.04.20-sha-b721a2d
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/edge-runtime
dependency-version: v1.73.13
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/realtime
dependency-version: v2.86.3
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/storage-api
dependency-version: v1.54.1
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/logflare
dependency-version: 1.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
* feat: exposing new api keys to functions (#4946)
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
* chore: upgrade pg-delta to alpha.20 in multiple templates
* fix: remove version comparison check for storage image updates (#5118)
fix: honor pinned storage version offline
Remove the version comparison that only pinned storage when the local
version was newer than the default. This prevented `supabase start` from
using an already-downloaded image offline, since Docker would still try
to pull the default newer image.
Fixes CLI-1393.
Co-authored-by: Claude <noreply@anthropic.com>
* fix: improve error handling and output formatting in pg-delta apply process (#5120)
- Updated the `runDeclarativeSync` function to avoid wrapping SQL output with `utils.Bold`, preventing excessive whitespace in multi-line SQL.
- Changed the result accumulation in `migra.ts` from string concatenation to an array for better performance and clarity.
- Enhanced the `ApplyResult` struct to include `ValidationErrors` and `Diagnostics`, allowing for more detailed error reporting.
- Modified the `formatApplyFailure` function to include validation errors and diagnostics in the output, improving user feedback on apply failures.
- Added tests for validation error handling in `apply_test.go` to ensure robustness against various error scenarios.
* fix(start): guard db_logs vector transform against null regex capture (#5126)
The `db_logs` transform aborts with `expected string, got null` in
`upcase!()` when `parse_regex` matches an event message but the
`level` named group resolves to null. The fallback branch only
covers regex failure (`err != null || parsed == null`), leaving a
third path where the match succeeds but the capture is null. That
path overwrites the would-be fallback with null and crashes on
upcase.
Observed under routine local dev load (Next.js dev server issuing
service-role Postgres queries): 3,000+ aborted transforms in two
minutes, cascading into Vector retry storms and Logflare
`ErlSysMon` message-queue backpressure.
Extend the fallback condition to also fire when `parsed.level` is
null, and guard the assignment in the match branch, so
`error_severity` always has a non-null string before `upcase!`.
Co-authored-by: rebasecase <rebasecase@localhost>
* Update Dockerfile for Studio image 2026-04-27
* chore: resync develop with main (#5123)
Prod deploy (#5109)
* fix(pg-delta): declarative-sync-no-declarative-dir-set (#5078)
* feat(declarative): add tests for skipping config updates when PgDelta is enabled
- These tests verify that the configuration remains unchanged when PgDelta is enabled, ensuring the declarative directory is the source of truth.
- Updated the WriteDeclarativeSchemas function to reflect the new behavior regarding PgDelta configuration.
* fix(declarative): DSL change due to upgrade
* feat(auth): add support for configuring passkeys and webauthn (#5077)
* fix: atomic parser (#5064)
* fix
* test
---------
* fix(pg-delta): declarative apply error results (#5082)
* fix(pg-delta): declarative apply error results
Improve readability report for decalrative appy errors wrapping
* chore: upgrade pg-delta to alpha 13
* feat(telemetry): attach org/project groups to all CLI events
Only ~19% of CLI events had PostHog group properties ($group_0, $group_1)
because groups were only set during `supabase link`. Commands using
--project-ref without linking sent events invisible to group analytics.
Add EnsureProjectGroupsCached which resolves and caches project metadata
(including org ID) in linked-project.json when a project ref is available.
The cache is checked before every cli_command_executed event, so the API
call only happens once per unique project ref.
Closes GROWTH-761
* fix: address code review feedback
- Guard against log.Fatalln crash: check auth token before calling
GetSupabase(), and move the API call to cmd/root.go where it belongs
- Don't overwrite existing linked-project.json cache — supabase link
is the authoritative source, we only fill the gap when no cache exists
- Fire GroupIdentify for org and project after caching, matching the
link flow so PostHog has group metadata
- Restructure so telemetry package has no API dependencies (pure
caching + PostHog calls), making tests reliable without gock/mocks
* fix: adds etl to managed schema (#5090)
* chore: sync API types from infrastructure (#5093)
* chore(deps): bump the actions-major group across 1 directory with 5 updates (#5088)
Bumps the actions-major group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.0.0` | `3.1.1` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.1.0` | `8.1.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.35.1` | `4.35.2` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.0.0` | `7.1.0` |
Updates `actions/create-github-app-token` from 3.0.0 to 3.1.1
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@f8d387b...1b10c78)
Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c0f553f...5f6978f)
Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)
Updates `github/codeql-action` from 4.35.1 to 4.35.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@c10b806...95e58e9)
Updates `docker/build-push-action` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@d08e5c3...bcafcac)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-major
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-major
- dependency-name: github/codeql-action
dependency-version: 4.35.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-major
- dependency-name: docker/build-push-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
...
* fix: functions download (#5096)
* fix
* test
---------
* feat(db): strengthen RLS advisory message for stronger agent compliance
* chore(deps): upgrade pg-delta to alpha.17 (#5110)
Closes: #5094
* chore(deps): bump the actions-major group across 1 directory with 4 updates (#5108)
Bumps the actions-major group with 4 updates in the / directory: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [t1m0thyj/unlock-keyring](https://github.com/t1m0thyj/unlock-keyring), [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) and [actions/setup-node](https://github.com/actions/setup-node).
Updates `dependabot/fetch-metadata` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@ffa630c...25dd0e3)
Updates `t1m0thyj/unlock-keyring` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/t1m0thyj/unlock-keyring/releases)
- [Commits](t1m0thyj/unlock-keyring@728cc71...cbcf205)
Updates `goreleaser/goreleaser-action` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@ec59f47...e24998b)
Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: t1m0thyj/unlock-keyring
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: goreleaser/goreleaser-action
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-major
...
* fix(docker): bump the docker-minor group across 1 directory with 6 updates (#5079)
* fix(docker): bump the docker-minor group across 1 directory with 6 updates
Bumps the docker-minor group with 6 updates in the /pkg/config/templates directory:
| Package | From | To |
| --- | --- | --- |
| postgrest/postgrest | `v14.8` | `v14.9` |
| supabase/studio | `2026.04.08-sha-205cbe7` | `2026.04.13-sha-e95f1cc` |
| supabase/edge-runtime | `v1.73.3` | `v1.73.5` |
| supabase/realtime | `v2.82.0` | `v2.83.1` |
| supabase/storage-api | `v1.48.28` | `v1.51.0` |
| supabase/logflare | `1.37.1` | `1.38.2` |
Updates `postgrest/postgrest` from v14.8 to v14.9
Updates `supabase/studio` from 2026.04.08-sha-205cbe7 to 2026.04.13-sha-e95f1cc
Updates `supabase/edge-runtime` from v1.73.3 to v1.73.5
Updates `supabase/realtime` from v2.82.0 to v2.83.1
Updates `supabase/storage-api` from v1.48.28 to v1.51.0
Updates `supabase/logflare` from 1.37.1 to 1.38.2
---
updated-dependencies:
- dependency-name: postgrest/postgrest
dependency-version: v14.9
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/studio
dependency-version: 2026.04.13-sha-e95f1cc
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/edge-runtime
dependency-version: v1.73.5
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/realtime
dependency-version: v2.83.1
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/storage-api
dependency-version: v1.51.0
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/logflare
dependency-version: 1.38.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-minor
...
* Downgrade postgrest version from 14.9 to 14.8
---------
* chore(workflows): enable install scripts for supabase package in Yarn (#5111)
chore(workflows): enable install scripts for supabase package in Yarn Berry setup
This change sets the YARN_ENABLE_SCRIPTS environment variable to true during the installation of the supabase package, allowing its postinstall script to run as required by Yarn Berry 4.14+. This adjustment ensures the necessary binary is fetched correctly.
* feat: --diff-engine flag on db pull
* fix(docker): bump the docker-minor group in /pkg/config/templates with 6 updates (#5113)
fix(docker): bump the docker-minor group
Bumps the docker-minor group in /pkg/config/templates with 6 updates:
| Package | From | To |
| --- | --- | --- |
| postgrest/postgrest | `v14.8` | `v14.10` |
| supabase/studio | `2026.04.13-sha-e95f1cc` | `2026.04.20-sha-b721a2d` |
| supabase/edge-runtime | `v1.73.5` | `v1.73.13` |
| supabase/realtime | `v2.83.1` | `v2.86.3` |
| supabase/storage-api | `v1.51.0` | `v1.54.1` |
| supabase/logflare | `1.38.2` | `1.39.1` |
Updates `postgrest/postgrest` from v14.8 to v14.10
Updates `supabase/studio` from 2026.04.13-sha-e95f1cc to 2026.04.20-sha-b721a2d
Updates `supabase/edge-runtime` from v1.73.5 to v1.73.13
Updates `supabase/realtime` from v2.83.1 to v2.86.3
Updates `supabase/storage-api` from v1.51.0 to v1.54.1
Updates `supabase/logflare` from 1.38.2 to 1.39.1
---
updated-dependencies:
- dependency-name: postgrest/postgrest
dependency-version: v14.10
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/studio
dependency-version: 2026.04.20-sha-b721a2d
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/edge-runtime
dependency-version: v1.73.13
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/realtime
dependency-version: v2.86.3
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/storage-api
dependency-version: v1.54.1
dependency-type: direct:production
dependency-group: docker-minor
- dependency-name: supabase/logflare
dependency-version: 1.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: docker-minor
...
* feat: exposing new api keys to functions (#4946)
* chore: upgrade pg-delta to alpha.20 in multiple templates
* fix: remove version comparison check for storage image updates (#5118)
fix: honor pinned storage version offline
Remove the version comparison that only pinned storage when the local
version was newer than the default. This prevented `supabase start` from
using an already-downloaded image offline, since Docker would still try
to pull the default newer image.
Fixes CLI-1393.
* fix: improve error handling and output formatting in pg-delta apply process (#5120)
- Updated the `runDeclarativeSync` function to avoid wrapping SQL output with `utils.Bold`, preventing excessive whitespace in multi-line SQL.
- Changed the result accumulation in `migra.ts` from string concatenation to an array for better performance and clarity.
- Enhanced the `ApplyResult` struct to include `ValidationErrors` and `Diagnostics`, allowing for more detailed error reporting.
- Modified the `formatApplyFailure` function to include validation errors and diagnostics in the output, improving user feedback on apply failures.
- Added tests for validation error handling in `apply_test.go` to ensure robustness against various error scenarios.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
Co-authored-by: fadymak <dev@fadymak.com>
Co-authored-by: Vaibhav <117663341+7ttp@users.noreply.github.com>
Co-authored-by: Sean Oliver <882952+seanoliver@users.noreply.github.com>
Co-authored-by: Han Qiao <sweatybridge@gmail.com>
Co-authored-by: Julien Goux <hi@jgoux.dev>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mert YEREKAPAN <mertyerekapan@gmail.com>
Co-authored-by: Mert YEREKAPAN <33198490+myerekapan@users.noreply.github.com>
Co-authored-by: Kalleby Santos <105971119+kallebysantos@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
* Revert "Update Dockerfile for Studio image 2026-04-27" (#5132)
* Revert "Revert "Update Dockerfile for Studio image 2026-04-27"" (#5134)
Revert "Revert "Update Dockerfile for Studio image 2026-04-27" (#5132)"
This reverts commit 9251eaf.
* fix(windows): json unmarshal errors in telemetry and pg-delta declarative sync (#5128)
* fix(windows): json unmarshal errors in telemetry and pg-delta declarative sync
Three Windows-only failures, all surfacing as JSON parse errors:
1. telemetry: any field-level unmarshal error (e.g. session_last_active
stored as a number) now recreates state instead of propagating, since
identity fields aren't worth surfacing an error for.
2. pg-delta declarative sync: containerRef now normalises Windows path
separators with filepath.ToSlash so paths like
supabase\.temp\pgdelta\catalog-baseline.json resolve correctly inside
the Linux edge-runtime container.
3. pg-delta export/diff: parse callers (DeclarativeExportPgDeltaRef,
ExportCatalogPgDelta, pgcache.exportCatalog) now surface stderr when
stdout is empty, instead of failing later with "unexpected end of
JSON input". DiffPgDeltaRef intentionally still accepts empty stdout
as a legitimate "no schema changes" result.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* chore: only run test on windows and fix lint
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kalleby Santos <105971119+kallebysantos@users.noreply.github.com>
Co-authored-by: avallete <andrew.valleteau@supabase.io>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: It's Me! <192345912+rebasecase@users.noreply.github.com>
Co-authored-by: rebasecase <rebasecase@localhost>
Co-authored-by: Joshen Lim <joshenlimek@gmail.com>
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
Co-authored-by: fadymak <dev@fadymak.com>
Co-authored-by: Vaibhav <117663341+7ttp@users.noreply.github.com>
Co-authored-by: Sean Oliver <882952+seanoliver@users.noreply.github.com>
Co-authored-by: Han Qiao <sweatybridge@gmail.com>
Co-authored-by: Mert YEREKAPAN <mertyerekapan@gmail.com>
Co-authored-by: Mert YEREKAPAN <33198490+myerekapan@users.noreply.github.com>
* fix(functions): set nofile ulimit for Edge Runtime container
The Edge Runtime container was started with Docker's default nofile
ulimit (1024 soft), causing "Too many open files" errors for projects
with 200+ Edge Functions running long dev sessions.
Set nofile ulimit to 65536 (soft and hard) to allow sufficient file
descriptors for Deno isolates handling many concurrent functions.
Fixes#5151
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
* chore: add comment internal/functions/serve/serve.go
* chore: fix comment indent
---------
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…4947)
feat: add SUPABASE_SERVICES_HOSTNAME env var for local service host
Allows the CLI to communicate with where supabase services are
listening when it differs from where the docker engine API is listening.
The concrete use case was running the CLI inside a dev container with
the host Docker socket bind-mounted. In that context 127.0.0.1 is the
container's own loopback, not the Docker host. Set
SUPABASE_SERVICES_HOSTNAME=host.docker.internal to reach sibling
containers via Docker Desktop's host gateway without proxying the Docker
socket.
---
AI assistance: Claude Sonnet 4.6 in Pi Agent
- Used to find root cause, propose fix options, draft code/test/docs.
- I ran supabase start inside the dev container, confirmed all services
healthy, reviewed/edited all code changes/text.
Co-authored-by: Joel Martin <joelmartin@supabase.io>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
* feat: emit Claude Code plugin hint from CLI
Adds a claude-code-hint tag to stderr when running inside Claude Code
(CLAUDECODE env var set). Claude Code strips the tag before it reaches
the model and shows a one-time prompt to install the Supabase plugin.
Emits on every invocation via Execute() for maximum coverage, and again
after login success so users in a setup flow are reached too.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* feat: emit Claude Code plugin hint from CLI
Adds a claude-code-hint tag to stderr when running inside Claude Code
(CLAUDECODE env var set). Claude Code strips the tag before it reaches
the model and shows a one-time prompt to install the Supabase plugin.
Emits on every invocation via Execute() for maximum coverage, and again
after login success so users in a setup flow are reached too.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* refactor: centralize Claude Code detection via IsClaudeCode()
Extracts IsClaudeCode() from the existing IsAgent() check in agent.go
and reuses it in SuggestClaudePlugin(). This ensures both places check
the same env vars (CLAUDECODE and CLAUDE_CODE) consistently.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
feat(pg-delta): enhance pg-delta version handling and script interpolation
- Updated the configuration to read the pg-delta npm version from the `.temp/pgdelta-version` file, defaulting to "1.0.0-alpha.22" if the file is missing or empty.
- Implemented the `InterpolatePgDeltaScript` function to replace version placeholders in embedded TypeScript scripts with the effective pg-delta npm version.
- Modified various functions to utilize the new script interpolation method for executing pg-delta related scripts, ensuring consistent version usage across the application.
- Added tests to verify the correct behavior of the new version handling and interpolation logic.
This change improves the management of pg-delta versions and enhances the flexibility of script execution.
* chore: sync API types from infrastructure
* test: update backups list fixture for generated backup id field
Agent-Logs-Url: https://github.com/supabase/cli/sessions/a34a51f7-1b9c-41a1-84fe-b53e27501b5c
Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>
* ci: increase golangci-lint timeout to 5m
Agent-Logs-Url: https://github.com/supabase/cli/sessions/6319edb6-e630-4c28-bbf2-671e5dac868c
Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>
---------
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: avallete <8771783+avallete@users.noreply.github.com>
@supabase-cli-releaser
supabase-cli-releaserBot requested a review from a team as a code ownerMay 4, 2026 14:15
@supabase-cli-releasersupabase-cli-releaserBot added the do not merge Approve to apply; do not merge. label May 4, 2026
@coveralls

Copy link
Copy Markdown

Coverage Report for CI Build 25324096998

Warning

No base build found for commit fac4104 on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 63.721%

Details

  • Patch coverage: 42 uncovered changes across 8 files (118 of 160 lines covered, 73.75%).

Uncovered Changes

FileChangedCovered%
internal/db/diff/pgdelta.go1516.67%
internal/db/pgcache/cache.go700.0%
cmd/db_schema_declarative.go600.0%
internal/login/login.go6233.33%
internal/start/start.go908695.56%
cmd/root.go300.0%
internal/pgdelta/apply.go200.0%
internal/utils/misc.go11981.82%

Coverage Regressions

Requires a base build to compare against. How to fix this →


Coverage Stats

Coverage Status
Relevant Lines:15662
Covered Lines:9980
Line Coverage:63.72%
Coverage Strength:7.02 hits per line

💛 - Coveralls

@github-actions
github-actionsBot merged commit 893c284 into mainMay 4, 2026
36 of 37 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do not mergeApprove to apply; do not merge.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants

@coveralls@avallete@jgoux@joshenlim@wucm667@kanaka@Rodriguespn@7ttp