Etienne Stalmans and Ali Waseem
c9cc6cd835
chore: cleanup gh actions ( #46454 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/ )
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack )
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com >
2026-05-28 17:31:04 +02:00
Gildas Garcia
77004016f4
fix: cannot resize table editor columns on safari ( #43450 )
...
## Problem
On Safari, it's impossible to resize a column.
## Solution
This is actually a bug in `react-data-grid` that has been fixed in more
recent versions but we can't use them.
Patch the package
## How to test
- Open the any table in the _Table editor_
- Resize a column
2026-03-06 08:01:22 +01:00
dependabot[bot]
6cc89a2d44
chore(deps): bump pnpm/action-setup from 4.1.0 to 4.2.0 ( #39740 )
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/a7487c7e89a18df4991f7f222e4898a00d66ddda...41ff72655975bd51cab0327fa583b6e92b6d3061 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-12 12:28:32 -05:00
Charis
3973cc3e5c
chore: update github workflows ( #39237 )
2025-10-20 09:36:45 -04:00
blacksmith-sh[bot]
96f99014d8
.github/workflows: Migrate workflows to Blacksmith runners ( #38549 )
...
Migrate workflows to Blacksmith
Co-authored-by: blacksmith-sh[bot] <157653362+blacksmith-sh[bot]@users.noreply.github.com>
2025-09-09 18:27:43 +08:00
Stephen Morgan
431be5682b
fix: review actions ( #34648 )
...
* fix: possible command injection in docs-lint
* fix: explicit permissions for github actions
2025-04-02 16:41:14 +13:00
Beng Eu
c2547eec4f
fix: hide pnpm update message, it's confusing since the pnpm version is locked; update to pnpm 9.15.4 ( #33232 )
2025-02-06 14:57:01 +08:00
Ivan Vasilov
dd572efb0d
chore: Switch repo to use pnpm ( #29928 )
...
* Fix some missing and duplicate dependencies.
* Fix the types for jest in ai-commands package.
* Replace all npm commands with pnpm. Add pnpm files and workspace links.
* Fix rimraf to work with pnpm.
* Refactor the github actions to work with pnpm.
* Delete package-lock.json.
* Fix the tailwind configs to not include node_modules.
* Fix random files.
* Add preinstall scripts to all packages.
* Fix the Dockerfile to work with pnpm.
* Update the DEVELOPERS documentation.
2024-12-20 13:07:20 +01:00
Charis
4fbcd61e95
feat: new command menu pt 1 ( #23699 )
...
Introduces the first (very small) slice of the new command menu as a `ui-pattern`.
This slice just handles state for available commands. It isn't hooked up to anything yet.
2024-06-04 14:32:13 -04:00
