Etienne Stalmans and Ali Waseem
c9cc6cd835
chore: cleanup gh actions ( #46454 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/ )
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack )
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com >
2026-05-28 17:31:04 +02:00
Gildas Garcia
77004016f4
fix: cannot resize table editor columns on safari ( #43450 )
...
## Problem
On Safari, it's impossible to resize a column.
## Solution
This is actually a bug in `react-data-grid` that has been fixed in more
recent versions but we can't use them.
Patch the package
## How to test
- Open the any table in the _Table editor_
- Resize a column
2026-03-06 08:01:22 +01:00
Ivan Vasilov
b7bac67075
fix: Use head_commit_sha in authorize-vercel-deploys.yml action ( #41795 )
...
* Use head commit sha in the authorize-vercel-deploys.yml.
* Add comments.
2026-01-08 16:33:14 +01:00
Ivan Vasilov
d59711effd
fix: Fix the trigger workflow name for the approve-vercel-deploys action ( #41791 )
...
Fix the wrong name of the GH workflow.
2026-01-08 14:27:30 +01:00
Ivan Vasilov
6f24342b55
fix: Change the authorize-vercel-builds to be triggered by another action ( #41789 )
...
Refactor the authorize-vercel-builds to run triggered by another action in order to access secrets.
2026-01-08 14:15:38 +01:00
Ivan Vasilov
cdadd74c9b
feat: Add GH workflow for authorizing Vercel deploys ( #41717 )
...
* Add a script and call it from a GH action.
* Minor updates.
* Minor fixes.
2026-01-08 12:11:05 +01:00
