Commit Graph
54 Commits
Author SHA1 Message Date
Ivan Vasilov 621a8e1f34 chore: Bump vulnerable dependencies (#41562)
* Bump nodemailer.

* Bump @vitejs/plugin-rsc.

* Bump mdast-util-to-hast.

* Deduplicate shiki.

* Deduplicate @tanstack/react-query.
2025-12-24 08:31:59 +01:00
072883bcec feat: assistant evals (#41311)
* chore: bump `supabase` CLI

* chore: stricter message types in `generate-v4.ts`

* feat: tutorial eval

https://www.braintrust.dev/docs/evaluation

* feat: project ID for eval

* refactor: `generateAssistantResponse` out of `handlePost`

* refactor: generateAssistantResponse to lib/ai

* feat: factuality eval with assistant response

* chore: upgrade braintrust to v1.0.1

* chore: silence tsconfig warning

* feat: assertion scorer

* fix: aggregate tools across all steps

* refactor: strict tool names, remove need for `as const`

* refactor: generic tool name type in assertions

* feat: transfer mocks from `feature/braintrust`

* feat: LLM criteria assertion

* feat: braintrust evals workflow

* fix: BRAINTRUST_PROJECT_ID

* feat: `sql_similar` assertion

* fix: `OPENAI_API_KEY` in workflow env

* feat: split AssertionScorer into separate scorers

* feat: remove tutorial eval

* feat: 20 minute CI timeout

* feat: category in test case metadata

* feat: score with gpt-5

* refactor: dataset to own file, colocate scorers

* feat: "gpt-5.2-2025-12-11" for llm as a judge

* feat: SQL syntax scorer with `libpg-query`

* feat: `evals:setup` and `evals:run` scripts

* feat: `evals:setup` in CI

* feat: human readable scorer names

* chore: rename to "SQL Validity"

* feat: add 2 "sql_generation" test cases

* feat: update requiredTools in test cases

* chore: ignore Cursor MCP config

* feat: "Conciseness" score

* feat: "Completeness" scorer

* fix: generate-v4 test mocks

* feat: serialize "steps" for scorer inputs

* updated node mem options for typecheck

* updated runner

* remove ram update as actions handle this

* feat: read `BRAINTRUST_PROJECT_ID` from secrets

* feat: score helpfulness, remove old scorers

* feat: separate `evals:run` and `evals:upload` scripts

* feat: passthrough entire classifier result

* feat: use live `search_docs` impl, store docs result in metadata

* feat: reduce classifier options

* feat: filter workflow by `run-evals` PR label or `master` branch

* chore: cleanup stubbed mock tools

* fix: checkout actual branch with `ref:`

* fix: capture search_docs results from all content parts

* feat: simplify sql syntax score calculation

* feat: use AI SDK's UI message validator

* docs: justification for relative `extends`

* fix: cleanup leftover validatedMessages

* doc: note mock token isn't secret for snyk

* fix: mock ui message to pass validation

* feat: revert ignoring Cursor MCP config

Using `.git/info/exclude` instead until we have an opinion on this

* feat: add "tsconfig" as shared-data devDependency, revert relative path in tsconfig

* refactor: tool call parsing into function

* Update apps/studio/evals/assistant.eval.ts

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* refactor: organize mock schemas and tool factories

---------

Co-authored-by: Ali Waseem <waseema393@gmail.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-12-22 23:45:48 -05:00
0e2c31bf60 feat: Stripe Sync Engine integration (#41317)
* add initial installation flow of stripe sync engine

* update docs link

* Add supabase_vault extension dep

* Add stripe logo to sync engine integration

* Move overview content to bottom of integration pages

* Add sync state to stripe sync page

* only check sync state if stripe integration is installed

* Use proper stripe-sync package and setup flows

* Improve sync engine installation ux

* Remove unused hardcoded dep

* Add alpha status to stripe sync engine integration

* fix typo

* run format

* fix types

* Rename the stripe-sync path to remove the 'integration". The path needs to have BASE_PATH to work on prod.

* Design tidy up (#41337)

UI tidy up

* update to latest sync engine package

* Add stripe key verification

* Remove noop try/catch

* Add integration isntallation telelemtry

* Add basic settings page

* Address coderabbit comments

* remove unused dep

* Remove state setting on render

* s/description/comment

* Cleanup settings screen UI

* Improve settings screen design

* update schema test snapshot

* Use latest stripe-sync-engine package

* Update repo url to new official location

* revert marketing change

* Update stripe sync engine package

* Add link to table from overview page

* Add feature flag and improve telemetry

* Fix missing useMemo dep

* add uninstall telemetry note

---------

Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
Co-authored-by: Saxon Fletcher <saxonafletcher@gmail.com>
2025-12-20 00:42:10 +00:00
Ivan Vasilov 5399ce2df4 chore: Bump next to the latest version (#41301)
Bump next version to the latest.
2025-12-12 09:42:20 +01:00
Ali Waseem 93d5ea6100 chore: bump next js (#41286)
* bump next js

* added next skip dep due to issues with reat
2025-12-11 15:55:13 -07:00
Ivan Vasilov 8110c060f8 chore: Bump vulnerable dependencies (#41184)
* Bump nodemailer.

* Bump body-parser.

* Bump node-forge.

* Remove unused dep remark-html.

* Bump some deps for mdast-util-to-hast.

* Bump glob.

* Bump valibot.

* Bump @modelcontextprotocol/sdk and dedupe @supabase/mcp-utils.

* Bump @vitejs/plugin-rsc.

* Bump contentlayer2.

* Revert "Bump contentlayer2."

This reverts commit cb53f32a6a.

* Remove react-docgen since it's unused.
2025-12-09 19:07:32 +01:00
d30f85b495 feat: update @supabase/*-js libraries to v2.87.0 (#41160)
* feat: update @supabase/*-js libraries to v2.87.0

* fix: do not import internal constants from supabase-js

---------

Co-authored-by: supabase-releaser[bot] <223506987+supabase-releaser[bot]@users.noreply.github.com>
Co-authored-by: Katerina Skroumpelou <sk.katherine@gmail.com>
Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-12-09 14:01:30 +02:00
Ali WaseemandCharis 22cfd2be14 feat: Run E2E tests aganist Platform Pt.1 (#41032)
* added packages for creating projects

* updated scripts

* remove ami version

* cleaned up common

* updated tests

* refactored helpers

* updated env

* updated config

* updated to reference env

* updated global setup

* updated type logic and scripts

* added mocking of hcaptcha

* added log statements

* updated local env

* update env file

* updated env vars

* updated logging

* updated to remove check

* updated print and project names

* updated helpers

* updated url

* updated setup

* updated storage helpers to account for listing files

* updated setup and tests

* updated timeout only for setup

* updated helper to account for different api response

* added ignores for tests

* updated lock file

* updated database spec to add exact

* updated timeouts

* removed check for table grid footer

* updated test runner

* updated is_platform

* updated playwright config

* updated worker settings

* removed dotenvx

* updated README

* updated to remove comment

* Update e2e/studio/scripts/common/retriedFetch.ts

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>

---------

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2025-12-05 10:50:16 -07:00
Ivan Vasilov 91eec58295 chore: Bump next versions to fix a vulnerability (#41030)
* Remove duplicate @next/env.

* Bump the version for pnpm.

* Bump Nextjs versions to the non-vulnerable ones.
2025-12-03 22:57:10 +01:00
Ivan VasilovandAlaister Young e4925a944c chore: Bump studio nextjs to v16 (#40792)
* Bump Nextjs to v16.

* Fix studio issues.

* move docs graphiql css import to layout

* update sentry

* add missing docs package and fix imports

* only update studio

* ignore next-env.d.ts

* update bundle analyzer

* middleware to proxy

* update lockfile

* remove --turbopack dev flag as it's the default

* Import only types from the monaco editor.

---------

Co-authored-by: Alaister Young <a@alaisteryoung.com>
2025-12-03 14:33:55 +01:00
Ivan Vasilov 38ecb59c44 chore: Bump vulnerable deps (#40675)
* Bump @nuxt/devtools.

* Bump tar.

* Bump js-yaml.

* Bump ai.

* Bump js-yaml@3.

* Deduplicate nitropack.

* Deduplicate @aws libs.
2025-11-27 16:50:17 +00:00
Katerina Skroumpelou ba50252b5a feat: update @supabase/*-js libraries to v2.86.0 (#40867) 2025-11-27 16:23:42 +02:00
7e04065e5f feat: update @supabase/*-js libraries to v2.83.0 (#40577)
Co-authored-by: supabase-releaser[bot] <223506987+supabase-releaser[bot]@users.noreply.github.com>
Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-11-19 10:47:44 +08:00
kemal.earthandIvan Vasilov af98191cc0 fix(design-system): chart rendering (#40306)
* chore: exploring possible breaking charts

* chore: still exploring why chart container content wont load

* chore: clean up and pin recharts to catalog

* chore: remove comments from comment preview file

* chore: remove react override

* Remove React 19.2 as a dependency.

---------

Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-11-11 12:57:11 +00:00
f7bb247fb0 feat: update @supabase/*-js libraries to v2.78.0 (#40012)
Co-authored-by: supabase-releaser[bot] <223506987+supabase-releaser[bot]@users.noreply.github.com>
Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-10-30 16:02:30 +00:00
Ivan Vasilov e8d2738acf chore: Bump vulnerable dependencies (#39909)
* Bump @playwright/test to fix a playwright vuln.

* Deduplicate msw.

* Deduplicate yaml.

* Deduplicate tsx.

* Add vitest to the catalog and bump it.

* Deduplicate vitest extra packages.

* Bump and deduplicate vite to v7.

* Bump prismjs.
2025-10-29 18:07:32 +01:00
Katerina Skroumpelou 416df4afa4 chore: respect catalog version for postgrest-js (#39837) 2025-10-24 11:58:56 +03:00
github-actions[bot]andsupabase-releaser[bot] a8c6f773e8 feat: update @supabase/*-js libraries to v2.75.1 (#39619)
Co-authored-by: supabase-releaser[bot] <223506987+supabase-releaser[bot]@users.noreply.github.com>
2025-10-17 18:25:40 +03:00
Ivan Vasilov 433e5788a9 fix: Add temp API keys to selfhosted (#39356)
* Deduplicate @babel/core.

* Remove explicit dependency of import-in-the-middle (it's imported in sentry deps).

* Add an API route for api-keys/temporary.

* Refresh the token if on self-hosted.

* Readd import-in-the-middle.

* Bump supabase to 2.50.3 which contains fixes for storage upload.
2025-10-09 09:27:13 +02:00
799f6c4139 feat: update @supabase/*-js libraries to v2.74.0 (#39326)
* feat: update @supabase/*-js libraries to v2.74.0

* Use catalog supabase/supabase-js in all apps/packages.

* Bump supabase/ssr to 0.7.0.

* Fix edge cases for the infinite query hook.

* Remove extra packages, they're covered under the next rule.

---------

Co-authored-by: mandarini <6603745+mandarini@users.noreply.github.com>
Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-10-08 11:46:19 +03:00
Ivan Vasilov 191a291c2d feat: Preliminary work for shadcn add @supabase/...block... (#39322)
* Build the current registry.

* Export the blocks as JSON and import them into registry.json.

* Move the registry.json into public/r.

* Fix a prettier error.

* Clean up extra files in vue blocks.

* Bump shadcn.

* Readd shadcn to vue blocks.

* Fix the shadcn types.

* Remove extra package exclusions.
2025-10-07 20:32:24 +02:00
Katerina Skroumpelou 4d94fbc268 chore: minimumReleaseAgeExclude for all supabase js libs (#39325) 2025-10-07 11:53:35 +00:00
Ivan Vasilov 98a3f0e340 chore: Bump vulnerable dependencies (#39002)
* Bump axios.

* Bump sharp in cms to avoid vuln dep tar-fs.

* Bump vite.

* Dedupe es-abstract.

* Revert the minimumReleaseAge.
2025-10-06 17:56:00 +02:00
Ivan Vasilov a3597cd59d feat: pnpm i will only run postbuild scripts for approved dependencies (#39018)
* Move the overrides to pnpm-workspace.yml.

* Only allow building for supabase CLI. All other deps will ignore their postbuild scripts.

* Run approve-builds and approve only supabase CLI.
2025-10-03 12:37:12 +02:00
Katerina Skroumpelou f0ac5fb116 chore: add js libs auto-update workflow (#39037)
* chore: add js libs auto-update workflow

* chore: exclude js libs from minimum age
2025-10-01 12:24:30 +00:00
99499164dc Docs/UI library vue nuxt clients (#38279)
* docs: add vue client to ui-library

* docs: add missing vue client to llms.txt

* docs: add nuxt client to ui-library

* docs: wrong env variable names

* docs: fix dependencies

* docs: update client-nuxtjs.json

* Reinstall the deps so that the pnpm-lock.yaml has less changes.

* Add blocks/vue package.

* Remove the vue blocks from ui-library.

* Copy the vue blocks into ui-library.

* Clean up unneeded files.

* Regenerate the pnpm-lock file from master.

* Fix prettier errors.

* docs: update shadcn-vue cli

* docs: reusable server client

* Small things

* docs: improvments after CR

---------

Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
Co-authored-by: Terry Sutton <saltcod@gmail.com>
2025-09-26 12:48:47 +00:00
Greg Richardson 9820707d71 feat: local mcp server (#38797)
* feat: local mcp server

* feat(local-mcp): implement migrations

* fix: remove unsupported mcp args

* feat(local-mcp): tests

* fix(local-mcp): packages to adhere to minimumReleaseAge

* fix(mcp): import path for createSupabaseApiPlatform

* fix(local-mcp): move tests out of pages/api dir

* refactor: self-hosted execute sql logic

* fix: deps
2025-09-23 12:00:08 -06:00
Ivan VasilovandRaúl Barroso 051d31ef07 chore: Bump Typescript to 5.9 (#38945)
* Move typescript version definition to pnpm-workspace.

* Bump typescript to 5.9.

* Minor fixes to satisfy the compiler.

---------

Co-authored-by: Raúl Barroso <code@raulb.dev>
2025-09-23 16:50:54 +02:00
Ivan Vasilov dc5ab444df feat: Add typechecking as a required check for the merge queue (#38939)
* Disable typesafe builds on prod for studio.

* Add typecheck github action to the merge queue checks.

* Add typescript dependency to packages to stabilize their versions.

* Add tailwindcss to the catalog.
2025-09-23 11:34:56 +02:00
Saxon Fletcher d276aca6cb Chore/ai flow model (#38805)
* update onboarding

* update model and fix part issue

* lock

* remove unused filter

* fix tests

* fix again

* update package

* fix merge issue
2025-09-23 12:46:20 +10:00
Joshen Lim 664696eeab Chore/attempt to address ts build issue (#38846)
* Attempt to address Type instantiation is excessively deep and possibly infinite build error

* Attempt to address Type instantiation is excessively deep and possibly infinite build issue

* Nit
2025-09-22 11:27:25 +07:00
Charis a46c31f551 chore: set min release age for pnpm (#38787)
* chore: bump pnpm version to 10.16.1

* chore: set min release age for pnpm

* chore: bump pnpm to 10.16.1 in dockerfile
2025-09-17 10:34:33 -04:00
Katerina Skroumpelou c67d1ef2ee feat: bump auth-js to v2.72.0-rc.11 (#38593) 2025-09-11 09:07:42 +01:00
Ivan VasilovandAlaister Young f6d9eee3aa chore: Bump vulnerable dependencies (#38352)
* Bump nextjs.

* Override tmp dependency.

* Dedupe es-abstract.

---------

Co-authored-by: Alaister Young <a@alaisteryoung.com>
2025-09-10 20:36:47 +08:00
Ivan Vasilov 37c4726145 chore: Bump vulnerable deps (#37244)
* Bump brace-expansion.

* Bump next to non-vuln version.

* Remove old version of @vercel/flags.

* Try to bump prismjs again.

* Bump fastify.

* Dedupe graphql.

* Bump form-data.
2025-07-25 09:11:26 +02:00
Cemal Kılıç d9cfc6b0a8 feat: bump auth-js version to 2.71.1-rc.1 (#37245) 2025-07-17 13:49:09 +02:00
Stojan DimitrovskiandIvan Vasilov d6b4ab1a60 feat: bump auth-js to v2.71.0-rc.7 (#36978)
* feat: bump auth-js to v2.71.0-rc.7

* Use the version specified in the catalog.

* bump to rc.8

---------

Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-07-14 09:05:05 +02:00
Ivan Vasilov 7322007083 chore: Bump nodejs to v22 (#34730)
* Bump the @types/node to 22.

* Bump the version in nvmrc.

* Bump the node version in package.json.
2025-06-17 11:08:46 +02:00
Ivan Vasilov 64d3d1fb7f chore: Bump vulnerable dependencies (#36272)
* Bump vite version.

* Rename and bump the vercel/flags dependency.

* Bump all versions of esbuild to one.

* Bump image-size.

* Bump fastify.

* Bump prismjs.
2025-06-11 10:24:40 +02:00
Stojan Dimitrovski b65b6c6073 fix: bump auth-js to 2.71.0-rc.4 (#36229)
fix: bump auth-js to 2.70.0-rc.4
2025-06-09 12:15:19 +02:00
Ivan Vasilov 7e9076e3ad chore: Bump the rest of the apps to Nextjs 15 (#35475)
* Bump nextjs in the ui-library.

* Bump the nextjs in design-system.

* Bump nextjs to v15 in www.

* Bump the next version in the pnpm catalog.

* Switch all apps to using the catalog version of next.

* Fix ui-lib and design-system to build with next 15.

* Fix some prettier errors.

* Bump the next-eslint package.

* Fix a lint issue about a component starting with underscore.

* Use the catalog version of next in cms app.

* Disable turbo for dev command in www. Remove obsolete experimental flags.

* Return some of the experimental flags.
2025-06-05 12:41:28 +02:00
Cemal Kılıç 450803a2a8 feat: bump auth-js to 2.71.0-rc.2 (#36170)
* feat: experimental testing for split auth storage

* fix: rm config changes
2025-06-04 15:34:04 +02:00
55c3fdb49a E2E Testing Setup Consolidation (#35080)
* add new e2e folder

* add local supabase and confitional storage

* fix e2e selfhosted

* update actions

* add correct e2e folder

* fix e2e actions

* fix action project ids

* fix permissions

* fix script

* fix playwright install

* playwright root

* pnpm i

* fix api rul

* add env docs

* update run script

* only install deps for e2e

* use same dep

* only install deps for tests

* upd lockfile

* use official vercel integration

* use vercel cli

* remove old folder

* fix script

* rm filter

* rename e2e studio package

* fix install browsers

* add polling for vercel build

* use vercel-preview-url package

* undo actions

* rename ci env to ci

* chore:add rls check and make playwright test less flakey (#35348)

* update ci action

* fix paths

* fix browser install

* run ci against staging

* try caching builds

* fix envs

* fix env check

* fix sign in

* fix sign in url

* fix envs and url

* fix caching

* fix race condition in sign in page

* fix race condition in sign in page

* add check to see if being redirected

* fix caching, check IS_PLATFORM var

* log is_platform

* try vercel build

* fix vercel project id

* fix path

* add temp vercel.json file

* fix paths

* undo project id stuff

* rm cwd

* fix path

* fix paths again

* fix path

* fix base url

* try different fix

* fix config base url

* fix base studio url issues

* retain video on fails

* Update e2e/studio/README.md

Co-authored-by: Copple <10214025+kiwicopple@users.noreply.github.com>

* Update e2e/studio/README.md

Co-authored-by: Copple <10214025+kiwicopple@users.noreply.github.com>

* fix env file naming

* undo caching

* rm old tests folder

* fix readme scripts

* rm vercel deploy for now, just run build locally

* fix url

* fix build script

* fix is_platform

* fix stuck studio start

* fix env vars

* retain network and logs on fail for better debugging

* add apiurl env

* back to vercel

* disable catpcha

* fix test

* update environment configuration to remove default URLs for CI and streamline API base URL handling

* fix typeerr

* fix urls in home.spec

* fix urls in logs.spec

* fix urls in sqleditor spec

* fix table editor spec

* add tourl util

* use staging api in ci

* re add base url env var

* fix url in projects page

* fix url in sql editor spec

* fix sign in not waiting for cookies omfg

* fix env var name

* fix sql-editor test

* simplify table removal

* add opt out telemetry step

* fix logs tests

* fix table editor spec

* remove flaky steps from table editor tests

* use vercel deployment events instead of build

* add studio check

* fix condition

* debug event

* rm if

* trigger deploy

* undo ac

* make opt out button step optional, some envs dont hav eit

* use testid for sql run button

* use id instaed of timestamp in logs tests

* empty

* rm retries

* up glbal timeout

* chore: fix failing sql-editor playwright test (#35767)

* chore: fix failing sql-editor playwright test

* chore: minor fixes

* Chore/update playwright config (#35826)

chore: update playwright config

* rm supabase project from e2e tests

* refactor and simplify environments

* fix sql editor test

* fix ci env vars

* fix

* fix on windows

* update readme

* add playwright install script to readme

* rm turbopack trace flag

* npm to pnpm for scripts

* delete ivan lines

---------

Co-authored-by: Michael Ong <minghao_3728@hotmail.com>
Co-authored-by: Copple <10214025+kiwicopple@users.noreply.github.com>
2025-06-03 17:37:39 +02:00
2b419c70a1 chore: add usercentrics for consent management (#35384)
* chore: add usercentrics for consent management

* client component to make next.js happy

* address feedback

* move consent state to common

* fix import

* ensure page events are sent correctly

* add feature flag provider to ui library site

* fix ui lib 500 error

* skip in test env

---------

Co-authored-by: Joshen Lim <joshenlimek@gmail.com>
Co-authored-by: Jordi Enric <jordi.err@gmail.com>
2025-05-05 13:18:48 +08:00
Ivan Vasilov eadff19571 chore: Bump React to 18.3+ (#35029)
* Bump react and react-dom to 18.3+.

* Add tailwind to ui package to silence a peer dep warning.
2025-04-15 17:07:53 +02:00
Terry SuttonandIvan Vasilov 1c8d2b89ab Bump nextjs (#34338)
* Bump Next

* Save the lockfile.

* Bump nextjs to 14.2.26.

---------

Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-03-25 15:48:19 +00:00
Kang Ming 3fb3cf319c feat: bump auth-js to RC 2.69.0 (#34329) 2025-03-24 18:14:05 +08:00
Stojan Dimitrovski 64b7775e2e feat: bump auth-js to RC 2.68.0 (#32999) 2025-01-23 14:26:05 +01:00
4278bd4ec1 fix: bump auth-js version to v2.67.3 (#31217)
* fix: bump auth-js version to v2.67.3

* chore: add supabase/auth and supabase/dashboard as codeowners

* Revert "chore: add supabase/auth and supabase/dashboard as codeowners"

This reverts commit 57fc5776ba.

* bump supabase-js version

* import user type from single gotrue

* fix auth-js version in studio

* remove auth-js dep in studio

* fix ts

* use catalog versions

* fix ts

* Bump realtime-js version to avoid having 2 versions.

* Add @supabase/realtime-js to the pnpm catalog.

* upgrade realtime-js

---------

Co-authored-by: Alaister Young <a@alaisteryoung.com>
Co-authored-by: Ivan Vasilov <vasilov.ivan@gmail.com>
2025-01-17 14:54:21 +08:00
Ivan Vasilov ab3a3b3c76 chore: Move playwright tests to tests/local-studio-tests (#21488)
* Move the playwright package to tests folder.

* Update the workspace list.

* Change the name of the playwright tests to local studio tests.
2025-01-09 12:36:32 +01:00