Etienne Stalmans and Ali Waseem
c9cc6cd835
chore: cleanup gh actions ( #46454 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/ )
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack )
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com >
2026-05-28 17:31:04 +02:00
Charis
aa9a10e65d
fix(docs): sync troubleshooting upstream workflow ( #42463 )
...
GITHUB_TOKEN is no longer allowed to create PRs, so use the generated
app token instead.
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Improved authentication for automated sync workflows by switching to
an app-generated token, enhancing reliability of automated
documentation/troubleshooting syncs.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-05 10:20:44 +11:00
dependabot[bot]
6cc89a2d44
chore(deps): bump pnpm/action-setup from 4.1.0 to 4.2.0 ( #39740 )
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/a7487c7e89a18df4991f7f222e4898a00d66ddda...41ff72655975bd51cab0327fa583b6e92b6d3061 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-12 12:28:32 -05:00
d7f856965a
[bot] Sync from supabase/troubleshooting ( #40147 )
...
* Sync from supabase/troubleshooting
* fix(troubleshooting metdata): invalid toml in titles
* format(troubleshooting)
* lint(troubleshooting): apply mdx lint fixes
---------
Co-authored-by: github-docs-bot <github-docs-bot@supabase.com >
Co-authored-by: Charis Lam <26616127+charislam@users.noreply.github.com >
2025-11-04 18:25:12 +00:00
Charis
99cb35e0f4
ci(docs): add workflow to sync new guides from supabase/troubleshooting ( #40091 )
2025-11-04 17:50:53 +00:00
