Skip to content

Comments

Prod deploy#4834

Open
supabase-cli-releaser[bot] wants to merge 87 commits intomainfrom
develop
Open

Prod deploy#4834
supabase-cli-releaser[bot] wants to merge 87 commits intomainfrom
develop

Conversation

@supabase-cli-releaser
Copy link
Contributor

sweatybridge and others added 30 commits January 9, 2026 03:01
Co-authored-by: Han Qiao <sweatybridge@gmail.com>
…dates (#4792)

Bumps the docker-minor group with 5 updates in the /pkg/config/templates directory:

| Package | From | To |
| --- | --- | --- |
| postgrest/postgrest | `v14.3` | `v14.4` |
| supabase/studio | `2026.01.27-sha-2a37755` | `2026.02.02-sha-b0b7db6` |
| supabase/realtime | `v2.73.2` | `v2.74.1` |
| supabase/storage-api | `v1.35.3` | `v1.36.1` |
| supabase/logflare | `1.30.5` | `1.30.7` |



Updates `postgrest/postgrest` from v14.3 to v14.4

Updates `supabase/studio` from 2026.01.27-sha-2a37755 to 2026.02.02-sha-b0b7db6

Updates `supabase/realtime` from v2.73.2 to v2.74.1

Updates `supabase/storage-api` from v1.35.3 to v1.36.1

Updates `supabase/logflare` from 1.30.5 to 1.30.7

---
updated-dependencies:
- dependency-name: postgrest/postgrest
  dependency-version: v14.4
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/studio
  dependency-version: 2026.02.02-sha-b0b7db6
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/realtime
  dependency-version: v2.74.1
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.36.1
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.30.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…/pkg/config/templates (#4800)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.075 to 17.6.1.079.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.079
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…onfig/templates in the docker-minor group (#4799)

fix(docker): bump supabase/realtime

Bumps the docker-minor group in /pkg/config/templates with 1 update: supabase/realtime.


Updates `supabase/realtime` from v2.74.2 to v2.74.4

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.74.4
  dependency-type: direct:production
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1.1 in the go-minor group across 1 directory (#4801)

chore(deps): bump github.com/charmbracelet/bubbles

Bumps the go-minor group with 1 update in the / directory: [github.com/charmbracelet/bubbles](https://github.com/charmbracelet/bubbles).


Updates `github.com/charmbracelet/bubbles` from 0.21.0 to 0.21.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v0.21.0...v0.21.1)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbles
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…/pkg/config/templates (#4809)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.079 to 17.6.1.080.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.080
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…h 4 updates (#4808)

fix(docker): bump the docker-minor group

Bumps the docker-minor group in /pkg/config/templates with 4 updates: supabase/studio, supabase/realtime, supabase/storage-api and supabase/logflare.


Updates `supabase/studio` from 2026.02.02-sha-b0b7db6 to 2026.02.04-sha-fba1944

Updates `supabase/realtime` from v2.74.4 to v2.74.7

Updates `supabase/storage-api` from v1.36.2 to v1.37.0

Updates `supabase/logflare` from 1.30.7 to 1.30.8

---
updated-dependencies:
- dependency-name: supabase/studio
  dependency-version: 2026.02.04-sha-fba1944
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/realtime
  dependency-version: v2.74.7
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.37.0
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.30.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sweatybridge and others added 10 commits February 10, 2026 17:34
* chore: unit tests for snippets command

* chore: download snippet test
…onfig/templates in the docker-minor group (#4844)

fix(docker): bump supabase/realtime

Bumps the docker-minor group in /pkg/config/templates with 1 update: supabase/realtime.


Updates `supabase/realtime` from v2.76.0 to v2.76.1

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.76.1
  dependency-type: direct:production
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…/pkg/config/templates (#4849)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.081 to 17.6.1.082.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.082
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…h 2 updates (#4848)

fix(docker): bump the docker-minor group

Bumps the docker-minor group in /pkg/config/templates with 2 updates: supabase/realtime and supabase/logflare.


Updates `supabase/realtime` from v2.76.1 to v2.76.4

Updates `supabase/logflare` from 1.30.8 to 1.31.0

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.76.4
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…/pkg/config/templates (#4853)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.082 to 17.6.1.084.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.084
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@coderabbitai
Copy link

coderabbitai bot commented Feb 13, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands and usage tips.

dependabot bot and others added 19 commits February 13, 2026 00:19
…h 2 updates (#4852)

fix(docker): bump the docker-minor group

Bumps the docker-minor group in /pkg/config/templates with 2 updates: supabase/realtime and supabase/logflare.


Updates `supabase/realtime` from v2.76.4 to v2.76.5

Updates `supabase/logflare` from 1.31.0 to 1.31.2

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.76.5
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…tes (#4854)

Bumps the go-minor group with 3 updates in the / directory: [golang.org/x/mod](https://github.com/golang/mod), [golang.org/x/net](https://github.com/golang/net) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).
Bumps the go-minor group with 2 updates in the /pkg directory: [golang.org/x/mod](https://github.com/golang/mod) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `golang.org/x/net` from 0.49.0 to 0.50.0
- [Commits](golang/net@v0.49.0...v0.50.0)

Updates `golang.org/x/term` from 0.39.0 to 0.40.0
- [Commits](golang/term@v0.39.0...v0.40.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.0)

Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.0)

Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.0)

Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/net
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/term
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the npm-major group with 1 update: [tar](https://github.com/isaacs/node-tar).


Updates `tar` from 7.5.7 to 7.5.9
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.7...v7.5.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…dates (#4865)

Bumps the docker-minor group with 3 updates in the /pkg/config/templates directory: postgrest/postgrest, supabase/studio and supabase/storage-api.


Updates `postgrest/postgrest` from v14.4 to v14.5

Updates `supabase/studio` from 2026.02.09-sha-18cc6f8 to 2026.02.16-sha-26c615c

Updates `supabase/storage-api` from v1.37.7 to v1.37.8

---
updated-dependencies:
- dependency-name: postgrest/postgrest
  dependency-version: v14.5
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/studio
  dependency-version: 2026.02.16-sha-26c615c
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.37.8
  dependency-type: direct:production
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
….0 (#4856)

* chore(deps): bump github.com/charmbracelet/bubbles from 0.21.1 to 1.0.0

Bumps [github.com/charmbracelet/bubbles](https://github.com/charmbracelet/bubbles) from 0.21.1 to 1.0.0.
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v0.21.1...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbles
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: fix gosec on non-touched code (#4868)

* fix(ci): only fail lint on issues in changed code

Add only-new-issues: true to golangci-lint action so pre-existing gosec
warnings in untouched files don't fail PR checks. New code is still fully
checked by all rules including G101, G115, G117, G704, and G705.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrew Valleteau <avallete@users.noreply.github.com>
…4874)

fix(auth): pass GOTRUE_JWT_VALID_METHODS env var for GoTrue compatibility
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
…dates (#4870)

Bumps the docker-minor group with 3 updates in the /pkg/config/templates directory: supabase/realtime, supabase/storage-api and supabase/logflare.


Updates `supabase/realtime` from v2.76.5 to v2.76.6

Updates `supabase/storage-api` from v1.37.8 to v1.37.9

Updates `supabase/logflare` from 1.31.2 to 1.32.2

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.76.6
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.37.9
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/logflare
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: supabase-cli-releaser[bot] <246109035+supabase-cli-releaser[bot]@users.noreply.github.com>
…/pkg/config/templates (#4881)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.084 to 17.6.1.087.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.087
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…h 2 updates (#4880)

fix(docker): bump the docker-minor group

Bumps the docker-minor group in /pkg/config/templates with 2 updates: supabase/realtime and supabase/storage-api.


Updates `supabase/realtime` from v2.76.7 to v2.77.0

Updates `supabase/storage-api` from v1.37.11 to v1.38.0

---
updated-dependencies:
- dependency-name: supabase/realtime
  dependency-version: v2.77.0
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/storage-api
  dependency-version: v1.38.0
  dependency-type: direct:production
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…fig/templates in the docker-minor group (#4882)

fix(docker): bump supabase/logflare

Bumps the docker-minor group in /pkg/config/templates with 1 update: supabase/logflare.


Updates `supabase/logflare` from 1.32.3 to 1.32.5

---
updated-dependencies:
- dependency-name: supabase/logflare
  dependency-version: 1.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
….0 (#4876)

Bumps [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) from 1.16.8 to 1.17.0.
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.16.8...v1.17.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
….0 in /pkg (#4877)

chore(deps): bump github.com/ethereum/go-ethereum in /pkg

Bumps [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) from 1.16.8 to 1.17.0.
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.16.8...v1.17.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix(pull): attempt to fix unkown authority error for db pull

* fix(pull): allow to disable CA verify opt-in via env variable

* fix: mute gosec on explicit  skip
## Summary

Mitigates workflow failures caused by `400` responses from network restrictions endpoints when projects are not entitled to manage restrictions and local config has `db.network_restrictions.enabled = false` or not set.

The fix ensures we only read/update network restrictions when local config explicitly enables the feature, while preserving strict failure behavior when it is enabled.
…/pkg/config/templates (#4889)

fix(docker): bump supabase/postgres in /pkg/config/templates

Bumps supabase/postgres from 17.6.1.087 to 17.6.1.088.

---
updated-dependencies:
- dependency-name: supabase/postgres
  dependency-version: 17.6.1.088
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…h 2 updates (#4888)

fix(docker): bump the docker-minor group

Bumps the docker-minor group in /pkg/config/templates with 2 updates: supabase/edge-runtime and supabase/realtime.


Updates `supabase/edge-runtime` from v1.70.3 to v1.70.5

Updates `supabase/realtime` from v2.77.0 to v2.78.0

---
updated-dependencies:
- dependency-name: supabase/edge-runtime
  dependency-version: v1.70.5
  dependency-type: direct:production
  dependency-group: docker-minor
- dependency-name: supabase/realtime
  dependency-version: v2.78.0
  dependency-type: direct:production
  dependency-group: docker-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants