Etienne Stalmans
22388ee557
fix: create pr need contents-write ( #46579 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Bug fix - CI
## What is the current behavior?
action fails:
https://github.com/supabase/supabase/actions/runs/26818877603/job/79068294605
2026-06-02 12:29:39 +00:00
Etienne Stalmans and Ali Waseem
c9cc6cd835
chore: cleanup gh actions ( #46454 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/ )
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack )
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com >
2026-05-28 17:31:04 +02:00
Katerina Skroumpelou
d5c8f2cd3f
chore: @supabase/ssr version management ( #44705 )
...
* Add `@supabase/ssr` to catalog
* Use `catalog:` version of `@supabase/ssr` across repo
* Add workflow to update `@supabase/ssr`
* Switch runners for package and docs updates to `ubuntu-latest` (free,
lighter)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Centralized `@supabase/ssr` versioning across the workspace via the
package catalog.
* Updated CI workflow runners to a more consistent execution
environment.
* Added an automated workflow to streamline updating the `@supabase/ssr`
package and refreshing dependency lockfiles.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-04-15 13:55:19 +03:00
Katerina Skroumpelou
75e1bbb4a6
ci: add release notes on update js libs pr ( #44241 )
...
Include release notes in the automated PR that updates supabase-js
across the repo.
* Looks at what version is installed
* It includes all changelogs between installed version and
to-be-installed version
2026-03-27 15:07:43 +02:00
Etienne Stalmans
92bdbb2f57
chore: explicit permissions on actions ( #43526 )
...
enforces minimal set of permissions, the same as other actions in the
repo
2026-03-10 14:47:26 +01:00
Katerina Skroumpelou
8c367d0c86
ci: use github app generated token ( #41767 )
...
* ci: use github app generated token
* ci: pin action to commit sha
2026-01-07 13:27:04 +00:00
dependabot[bot]
6cc89a2d44
chore(deps): bump pnpm/action-setup from 4.1.0 to 4.2.0 ( #39740 )
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/a7487c7e89a18df4991f7f222e4898a00d66ddda...41ff72655975bd51cab0327fa583b6e92b6d3061 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-12 12:28:32 -05:00
Katerina Skroumpelou
416df4afa4
chore: respect catalog version for postgrest-js ( #39837 )
2025-10-24 11:58:56 +03:00
Charis
3973cc3e5c
chore: update github workflows ( #39237 )
2025-10-20 09:36:45 -04:00
Katerina Skroumpelou and Charis Lam
b7f1616e3c
chore: update docs from js monorepo ( #39200 )
...
* chore: update docs from js monorepo
* chore: remove sparse-checkout for workflow to work
* chore: update workflow with no-frozen-lockfile
* chore(js libs docs update): regenerate typespec snapshot on update
* fix(typespec): fix missing types in transformed typespec
---------
Co-authored-by: Charis Lam <26616127+charislam@users.noreply.github.com >
2025-10-03 12:02:53 +03:00
Katerina Skroumpelou
f0ac5fb116
chore: add js libs auto-update workflow ( #39037 )
...
* chore: add js libs auto-update workflow
* chore: exclude js libs from minimum age
2025-10-01 12:24:30 +00:00
Etienne Stalmans
