From 47944e1936108091195472ab4417c2c4addaa3c1 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 10:18:04 +0000 Subject: [PATCH 1/2] docs(release): propose user-facing notes for v2.112.0 --- release-notes/v2.112.0.md | 43 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 release-notes/v2.112.0.md diff --git a/release-notes/v2.112.0.md b/release-notes/v2.112.0.md new file mode 100644 index 0000000000..ff8ae3f21e --- /dev/null +++ b/release-notes/v2.112.0.md @@ -0,0 +1,43 @@ +## Supabase CLI v2.112.0 — 2026-08-07 + +This release improves local development stability with enhanced service lifecycle management, fixes migration and deployment edge cases, and continues the TypeScript migration. + +### Highlights +- **Service lifecycle improved** — Lazy startup and better health detection reduce startup issues. (#6072) +- **Migrations run in version order** — Fixes unpredictable behavior when multiple migrations exist. (#6038) +- **`supabase start` is more stable** — Migration failures no longer cause container hangs. (#6093) +- **Windows Edge Functions bundling works** — Permission errors that blocked deployments are fixed. (#6109) + +### New features +- **Hardened lazy service lifecycle** — New startup mode improves reliability and health detection. (#6072) + +### Improvements +- **Service health states are clearer** — Unhealthy services are marked terminal instead of ambiguous. (#6080) +- **Secrets container supports SELinux** — Better integration on SELinux-enabled systems. (#6000) +- **Container workdir mounting is more robust** — Continues if workdir can't be mounted. (#6048) +- **Declarative config supports relative paths** — Use paths relative to your project root. (#6066) + +### Bug fixes +- **Profile loading fails fast with clear errors** — Malformed `--profile` config is reported immediately. (#6095) +- **Machine-readable output format is fixed** — `-o toml/yaml/json` now matches Go CLI output. (#6002) +- **Binary download cache is concurrent-safe** — Parallel CLI instances no longer corrupt the cache. (#6003) +- **Path resolution is bounded to your project** — Symlinks can't escape your project directory. (#5956) +- **Docker volumes persist across restarts** — Containers no longer recreate volumes unnecessarily. (#6037) +- **Kong reloads after `supabase db reset`** — Auth configuration stays synchronized. (#6017) +- **Auth email templates are preserved** — Kong templates survive CLI updates. (#6065) +- **SSO provider schemas are synchronized** — OIDC and SAML definitions match API expectations. (#6058) +- **Edge Functions deployment is unblocked** — Rollup integration issues are resolved. (#6057) +- **Various fixes from July audit** — Parity improvements and edge case handling. (#5978) + +### Deprecations +- **`db diff --use-pg-schema` is deprecated** — Plan to remove from your workflows. (#6060) +- **`db pull --experimental` is deprecated** — Use standard `db pull` instead. (#6028) + +### TypeScript port progress +- **Now served by the TypeScript shell:** `db start` container bootstrap, `db test`, and bootstrap's `db push` step. Behavior matches the Go CLI. (#6022, #6063, #6021) + +--- + +Plus 11 internal improvements and dependency updates. + +**Full changelog:** https://github.com/supabase/cli/compare/v2.111.0...v2.112.0 From 1267c3596acb3a3149c88479b364016f95a2f7ee Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 7 Aug 2026 15:24:30 +0000 Subject: [PATCH 2/2] docs(release): correct v2.112.0 notes after review Verified every bullet against the actual v2.111.0..v2.112.0 tree diff (the range came from a rebased develop rollup, so commit subjects alone were misleading) and applied the Codex review feedback: - Drop #6072 and #6080: packages/next-only, not in the stable shell - Drop #6003 and #6057: the stable CLI does not exercise the stack binary cache; #6057's "rollup" was the develop->main rollup PR, not the Rollup bundler - Add breaking-change section for NPM_AUTH_TOKEN no longer being forwarded by functions deploy (#6005, ships in this tag) - Note the one-time stop/start needed for already-stuck stacks (#6093) - Scope #5956 to functions download path traversal - Point db pull --experimental users at --declarative (#6028) - Fix #6065 and #6066 descriptions to match the shipped changes - Recount the internal tail (33 uncited commits in the compare range) Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_018h8krKpNet85649nqtj95b --- release-notes/v2.112.0.md | 46 ++++++++++++++++++--------------------- 1 file changed, 21 insertions(+), 25 deletions(-) diff --git a/release-notes/v2.112.0.md b/release-notes/v2.112.0.md index ff8ae3f21e..a1d2b74239 100644 --- a/release-notes/v2.112.0.md +++ b/release-notes/v2.112.0.md @@ -1,43 +1,39 @@ ## Supabase CLI v2.112.0 — 2026-08-07 -This release improves local development stability with enhanced service lifecycle management, fixes migration and deployment edge cases, and continues the TypeScript migration. +This release fixes migration ordering, stops `supabase start` from hanging when analytics migrations fail, and unblocks Edge Functions deploys on Windows. There is one breaking change for private npm registry users. -### Highlights -- **Service lifecycle improved** — Lazy startup and better health detection reduce startup issues. (#6072) -- **Migrations run in version order** — Fixes unpredictable behavior when multiple migrations exist. (#6038) -- **`supabase start` is more stable** — Migration failures no longer cause container hangs. (#6093) -- **Windows Edge Functions bundling works** — Permission errors that blocked deployments are fixed. (#6109) +### ⚠️ Breaking changes +- **`functions deploy` no longer forwards `NPM_AUTH_TOKEN` into Docker bundling** — this restores Go CLI behavior. If you deploy against a private npm registry with an `.npmrc` that expands `${NPM_AUTH_TOKEN}`, Docker-based bundling will fail to authenticate after upgrading. Inline the token in `.npmrc`, or deploy with `supabase functions deploy --use-api`. (#6005) -### New features -- **Hardened lazy service lifecycle** — New startup mode improves reliability and health detection. (#6072) +### Highlights +- **Migrations run in version order** — `db push` and `migration up` no longer report an already-applied migration as missing when one version is a string prefix of another (for example `1` vs `10`, or `20260420` vs `20260420010000`). (#6038) +- **`supabase start` no longer hangs when analytics migrations fail** — the analytics container now exits and retries instead of booting against an unmigrated database. If your stack is already stuck, run `supabase stop && supabase start` once after upgrading; the fix only takes effect when the container is recreated. (#6093) +- **Edge Functions deploys work on Windows again** — bundling no longer fails with permission errors. (#6109) ### Improvements -- **Service health states are clearer** — Unhealthy services are marked terminal instead of ambiguous. (#6080) -- **Secrets container supports SELinux** — Better integration on SELinux-enabled systems. (#6000) -- **Container workdir mounting is more robust** — Continues if workdir can't be mounted. (#6048) -- **Declarative config supports relative paths** — Use paths relative to your project root. (#6066) +- `supabase start` works on SELinux-enforcing hosts (for example Fedora with rootless Podman) — CLI-generated secret files are relabeled so containers can read them. (#6000) +- `functions serve` and Docker-based deploys continue when the working directory can't be mounted. (#6048) ### Bug fixes -- **Profile loading fails fast with clear errors** — Malformed `--profile` config is reported immediately. (#6095) -- **Machine-readable output format is fixed** — `-o toml/yaml/json` now matches Go CLI output. (#6002) -- **Binary download cache is concurrent-safe** — Parallel CLI instances no longer corrupt the cache. (#6003) -- **Path resolution is bounded to your project** — Symlinks can't escape your project directory. (#5956) -- **Docker volumes persist across restarts** — Containers no longer recreate volumes unnecessarily. (#6037) -- **Kong reloads after `supabase db reset`** — Auth configuration stays synchronized. (#6017) -- **Auth email templates are preserved** — Kong templates survive CLI updates. (#6065) -- **SSO provider schemas are synchronized** — OIDC and SAML definitions match API expectations. (#6058) -- **Edge Functions deployment is unblocked** — Rollup integration issues are resolved. (#6057) -- **Various fixes from July audit** — Parity improvements and edge case handling. (#5978) +- Malformed `--profile` config fails fast with a clear error instead of being silently ignored. (#6095) +- `-o toml/yaml/json` machine-readable output matches the Go CLI again. (#6002) +- `functions download` can no longer write files outside `supabase/functions` via path traversal in downloaded entry paths. (#5956) +- `supabase start` reuses existing volumes instead of failing when they already exist, notably on Podman. (#6037) +- Kong reloads after `supabase db reset`, so auth requests no longer fail with 502 when container IPs rotate. (#6017) +- Custom auth email templates no longer revert to defaults after `db reset`, `functions serve` reloads, or `branch switch`. (#6065) +- SSO provider schemas are synchronized — OIDC and SAML definitions match API expectations. (#6058) +- `db schema declarative generate` prints your configured declarative directory as written in config instead of an absolute path. (#6066) +- Small parity fixes from the July audit — `db dump`, `db query` formatting, credentials handling, and other edge cases now match the Go CLI. (#5978) ### Deprecations -- **`db diff --use-pg-schema` is deprecated** — Plan to remove from your workflows. (#6060) -- **`db pull --experimental` is deprecated** — Use standard `db pull` instead. (#6028) +- **`db diff --use-pg-schema` is deprecated** — plan to remove it from your workflows. (#6060) +- **`db pull --experimental` is deprecated** — use `db pull --declarative` for per-object schema files instead. (#6028) ### TypeScript port progress - **Now served by the TypeScript shell:** `db start` container bootstrap, `db test`, and bootstrap's `db push` step. Behavior matches the Go CLI. (#6022, #6063, #6021) --- -Plus 11 internal improvements and dependency updates. +Plus 33 internal improvements and dependency updates. **Full changelog:** https://github.com/supabase/cli/compare/v2.111.0...v2.112.0