From d35e3b837e29877ccc668decc4fe49cda9219dc3 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 19 Jun 2026 09:48:52 +0000 Subject: [PATCH 1/2] fix(cli-go): pin realtime back to v2.108.0 Realtime v2.109.0 (supabase/realtime#1954, "least-privilege realtime user") adds a new migration, 20260606120000_setup_supabase_realtime_admin, that does not exist in v2.108.0. When the CLI runs realtime once to apply migrations during local schema init (initSchema15 -> `realtime eval ... ensure_all_started(:realtime)`), that migration's ALTER ROLE / GRANT statements fail against the local supabase/postgres image, so the container exits 1 and `supabase start` fails. The docker-minor bump (#5625) to v2.109.1 turned the Start CI job red on every run since. Pin realtime back to the last known-good v2.108.0 until the new migration is compatible with the CLI's local stack. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01RLY7KJJ6So673p6ung8yFV --- apps/cli-go/pkg/config/templates/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/cli-go/pkg/config/templates/Dockerfile b/apps/cli-go/pkg/config/templates/Dockerfile index 9738c7abf3..3a2566b901 100644 --- a/apps/cli-go/pkg/config/templates/Dockerfile +++ b/apps/cli-go/pkg/config/templates/Dockerfile @@ -11,7 +11,7 @@ FROM supabase/edge-runtime:v1.74.1 AS edgeruntime FROM timberio/vector:0.53.0-alpine AS vector FROM supabase/supavisor:2.9.7 AS supavisor FROM supabase/gotrue:v2.190.0 AS gotrue -FROM supabase/realtime:v2.109.1 AS realtime +FROM supabase/realtime:v2.108.0 AS realtime FROM supabase/storage-api:v1.60.21 AS storage FROM supabase/logflare:1.45.0 AS logflare # Append to JobImages when adding new dependencies below From 2b1340aa4c4365fb92eb9fa5422e5ff4939e7b16 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 19 Jun 2026 10:07:39 +0000 Subject: [PATCH 2/2] fix(cli-go): pin logflare to 1.44.3 and hold back broken bumps The realtime pin let `supabase start` progress past schema init, exposing a second regression from the same docker-minor bump (#5625): the CI registry (ghcr) has no mirror for supabase/logflare:1.45.0, so pulling it fails with "manifest unknown". Pin logflare back to the last mirrored tag 1.44.3. Also add Dependabot ignore rules so the docker-minor group does not immediately re-propose the same broken versions: - supabase/realtime >= 2.109.0 (incompatible migration vs local Postgres) - supabase/logflare >= 1.45.0 (not mirrored to ghcr) Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01RLY7KJJ6So673p6ung8yFV --- .github/dependabot.yml | 11 +++++++++++ apps/cli-go/pkg/config/templates/Dockerfile | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7aa08a043b..d77125e690 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -65,6 +65,17 @@ updates: - dependency-name: "axllent/mailpit" - dependency-name: "darthsim/imgproxy" - dependency-name: "timberio/vector" + # Held back: v2.109.0+ adds a setup_supabase_realtime_admin migration + # that fails against the CLI's local Postgres and breaks `supabase start`. + # Remove once the CLI's local stack is compatible with the new migration. + - dependency-name: "supabase/realtime" + versions: + - ">= 2.109.0" + # Held back: 1.45.0 is not mirrored to the ghcr registry CI pulls from + # ("manifest unknown"). Remove once a mirrored tag is available. + - dependency-name: "supabase/logflare" + versions: + - ">= 1.45.0" cooldown: default-days: 7 exclude: diff --git a/apps/cli-go/pkg/config/templates/Dockerfile b/apps/cli-go/pkg/config/templates/Dockerfile index 3a2566b901..c808592a61 100644 --- a/apps/cli-go/pkg/config/templates/Dockerfile +++ b/apps/cli-go/pkg/config/templates/Dockerfile @@ -13,7 +13,7 @@ FROM supabase/supavisor:2.9.7 AS supavisor FROM supabase/gotrue:v2.190.0 AS gotrue FROM supabase/realtime:v2.108.0 AS realtime FROM supabase/storage-api:v1.60.21 AS storage -FROM supabase/logflare:1.45.0 AS logflare +FROM supabase/logflare:1.44.3 AS logflare # Append to JobImages when adding new dependencies below FROM supabase/pgadmin-schema-diff:cli-0.0.5 AS differ FROM supabase/migra:3.0.1663481299 AS migra