fix(auth): verify canary works

mandarini · mandarini · commit 6f8b2b4a64cd · 2026-01-29T14:13:19.000+02:00
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -4,7 +4,7 @@ name: Publish releases
 
 on:
   push:
-    branches: [master]
+    branches: [ci/fix-canary]
     paths-ignore:
       - '*.md'
       - 'docs/**'
@@ -20,244 +20,18 @@ env:
   NODE_VERSION: '20'
 
 jobs:
-  release-stable: # stable releases can only be manually triggered
-    if: ${{ github.event_name == 'workflow_dispatch' }}
-    runs-on: ubuntu-latest
-    outputs:
-      released_version: ${{ steps.extract-version.outputs.version }}
-    permissions:
-      contents: read
-      id-token: write
-
-    steps:
-      - name: Generate token
-        id: app-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf
-        with:
-          app-id: ${{ secrets.APP_ID }}
-          private-key: ${{ secrets.PRIVATE_KEY }}
-      - name: Check if actor is member of admin or sdk team
-        id: team-check
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            const org = 'supabase'
-            const { actor } = context
-
-            async function isTeamMember(team_slug) {
-              try {
-                const res = await github.rest.teams.getMembershipForUserInOrg({
-                  org,
-                  team_slug,
-                  username: actor,
-                })
-                return res && res.status === 200
-              } catch (_) {
-                return false
-              }
-            }
-            const isAdmin = await isTeamMember('admin')
-            const isSdk = await isTeamMember('sdk')
-            const isMember = isAdmin || isSdk
-            core.setOutput('is_team_member', isMember ? 'true' : 'false')
-
-      - name: Fail if not authorized
-        if: ${{ steps.team-check.outputs.is_team_member != 'true' }}
-        run: |
-          echo "You must be a member of @supabase/admin or @supabase/sdk."
-          exit 1
-
-      - name: Checkout code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          registry-url: 'https://registry.npmjs.org'
-
-      # Ensure npm 11.5.1 or later is installed for trusted publishing support
-      - name: Update npm
-        run: npm install -g npm@latest
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Configure git
-        run: |
-          git config --global user.name "supabase-releaser[bot]"
-          git config --global user.email "supabase-releaser[bot]@users.noreply.github.com"
-
-      - name: Validate input
-        run: |
-          VS="${{ github.event.inputs.version_specifier }}"
-          echo "Validating: $VS"
-
-          if [[ "$VS" =~ ^(patch|minor|major|prepatch|preminor|premajor|prerelease)$ ]]; then
-            echo "✔ bump keyword"
-          elif [[ "$VS" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]]; then
-            echo "✔ explicit version"
-          else
-            echo "❌ Invalid version_specifier: '$VS'"
-            echo "   Use: patch|minor|major|pre*, or v1.2.3"
-            exit 1
-          fi
-
-      - name: Release stable version
-        env:
-          NPM_CONFIG_PROVENANCE: true
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          RELEASE_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-        shell: bash
-        run: npm run release-stable -- --versionSpecifier "${{ github.event.inputs.version_specifier }}"
-
-      - name: Extract released version
-        id: extract-version
-        shell: bash
-        run: |
-          set -euo pipefail
-          VERSION=$(cat .release-version)
-          if [[ -z "$VERSION" ]]; then
-            exit 1
-          fi
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-
-      - name: Summary
-        if: ${{ success() }}
-        run: |
-          echo "## ✅ Stable Release" >> $GITHUB_STEP_SUMMARY
-          echo "- **Version specifier:** \`${{ github.event.inputs.version_specifier }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "- **Source commit:** HEAD of the checked-out branch" >> $GITHUB_STEP_SUMMARY
-          echo "- **Dist-tag:** \`latest\`" >> $GITHUB_STEP_SUMMARY
-
-  docs-after-stable-release:
-    name: Generate Documentation
-    needs: release-stable
-    if: ${{ github.event_name == 'workflow_dispatch' && needs.release-stable.result == 'success' }}
-    uses: ./.github/workflows/docs.yml
-    permissions:
-      actions: read
-      contents: write
-
-  trigger-update-js-libs:
-    name: Trigger Update JS Libs
-    runs-on: ubuntu-latest
-    needs: release-stable
-    if: ${{ github.event_name == 'workflow_dispatch' && needs.release-stable.result == 'success' }}
-    steps:
-      - name: Generate token
-        id: app-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf
-        with:
-          app-id: ${{ secrets.APP_ID }}
-          private-key: ${{ secrets.PRIVATE_KEY }}
-          owner: supabase
-          repositories: supabase, supabase-js
-      - name: Trigger supabase/supabase update-js-libs workflow
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            await github.rest.actions.createWorkflowDispatch({
-              owner: 'supabase',
-              repo: 'supabase',
-              workflow_id: 'update-js-libs.yml',
-              ref: 'master',
-              inputs: {
-                version: '${{ needs.release-stable.outputs.released_version }}',
-                source: 'supabase-js-stable-release'
-              }
-            });
-
-  trigger-supabase-docs-update:
-    name: Trigger Supabase Docs Update
-    runs-on: ubuntu-latest
-    needs: [release-stable, docs-after-stable-release]
-    if: ${{ github.event_name == 'workflow_dispatch' && needs.release-stable.result == 'success' && needs.docs-after-stable-release.result == 'success' }}
-    steps:
-      - name: Generate token
-        id: app-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf
-        with:
-          app-id: ${{ secrets.APP_ID }}
-          private-key: ${{ secrets.PRIVATE_KEY }}
-          owner: supabase
-          repositories: supabase, supabase-js
-
-      - name: Trigger supabase/supabase docs workflow
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ steps.app-token.outputs.token }}
-          script: |
-            await github.rest.actions.createWorkflowDispatch({
-              owner: 'supabase',
-              repo: 'supabase',
-              workflow_id: 'docs-js-libs-update.yml',
-              ref: 'master',
-              inputs: {
-                version: '${{ needs.release-stable.outputs.released_version }}',
-                source: 'supabase-js-stable-release'
-              }
-            });
-
-  # preview jobs
-  ci-core:
-    if: ${{ github.event_name == 'push' }}
-    name: Core Packages CI
-    uses: ./.github/workflows/ci-core.yml
-    permissions:
-      actions: read
-      contents: read
-
-  ci-supabase-js:
-    if: ${{ github.event_name == 'push' }}
-    name: Supabase-JS Integration CI
-    uses: ./.github/workflows/ci-supabase-js.yml
-    permissions:
-      actions: read
-      contents: read
-
-  # ==========================================
-  # COVERALLS FINISH (aggregates coverage from all packages)
-  # ==========================================
-
-  coveralls-finish:
-    name: Coveralls Finished
-    runs-on: ubuntu-latest
-    needs: [ci-core, ci-supabase-js]
-    if: github.event_name == 'push'
-    steps:
-      - name: Coveralls Finished
-        uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          parallel-finished: true
-          carryforward: 'auth-js,functions-js,postgrest-js,realtime-js,storage-js,supabase-js'
-          fail-on-error: false
-        continue-on-error: true
-
   # ==========================================
   # CANARY RELEASE (only on master, after all CI passes)
   # ==========================================
 
   release-canary:
     name: Release Canary
     runs-on: ubuntu-latest
-    needs: [ci-core, ci-supabase-js]
     permissions:
       contents: read
       id-token: write
     # Only run on master branch pushes, and only if all CI jobs succeeded
-    if: |
-      github.ref == 'refs/heads/master' &&
-      github.event_name == 'push' &&
-      needs.ci-core.result == 'success' &&
-      needs.ci-supabase-js.result == 'success'
+
     steps:
       - name: Generate token
         id: app-token
@@ -298,34 +72,3 @@ jobs:
           NPM_CONFIG_PROVENANCE: true
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           RELEASE_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
-
-  notify-stable-failure:
-    name: Notify Slack for Stable failure
-    needs: release-stable
-    if: ${{ always() && github.event_name == 'workflow_dispatch' && needs.release-stable.result == 'failure' }}
-    uses: ./.github/workflows/slack-notify.yml
-    secrets: inherit
-    with:
-      title: 'Stable Release'
-      status: 'failure'
-
-  notify-stable-success:
-    name: Notify Slack for Stable success
-    needs: release-stable
-    if: ${{ github.event_name == 'workflow_dispatch' && needs.release-stable.result == 'success' }}
-    uses: ./.github/workflows/slack-notify.yml
-    secrets: inherit
-    with:
-      title: 'Stable Release'
-      status: 'success'
-      version: ${{ needs.release-stable.outputs.released_version }}
-
-  notify-canary-failure:
-    name: Notify Slack for Canary failure
-    needs: release-canary
-    if: ${{ always() && github.event_name == 'push' && needs.release-canary.result == 'failure' }}
-    uses: ./.github/workflows/slack-notify.yml
-    secrets: inherit
-    with:
-      title: 'Canary Release'
-      status: 'failure'
diff --git a/packages/core/auth-js/README.md b/packages/core/auth-js/README.md
@@ -35,10 +35,6 @@
 - **Node.js 20 or later** (Node.js 18 support dropped as of October 31, 2025)
 - For browser support, all modern browsers are supported
 
-> ⚠️ **Node.js 18 Deprecation Notice**
->
-> Node.js 18 reached end-of-life on April 30, 2025. As announced in [our deprecation notice](https://github.com/orgs/supabase/discussions/37217), support for Node.js 18 was dropped on October 31, 2025.
-
 ## Quick start
 
 Install
