Bump @supabase/supabase-js from 2.105.4 to 2.106.1 - #7
Merged
BigSimmo merged 4 commits intoMay 27, 2026
Conversation
Bumps [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) from 2.105.4 to 2.106.1. - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.106.1/packages/core/supabase-js) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.106.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
BigSimmo
added a commit
that referenced
this pull request
Jul 8, 2026
Committed migration 20260708120000 (NOT applied to live — operator apply per docs/supabase-migration-reconciliation.md), schema.sql reconciled, drift manifest regenerated (13s scratch replay, clean). - R1/R2: complete_ingestion_job + fail_or_retry_ingestion_job take an optional p_worker_id lease fence. A worker reclaimed by a stale takeover now matches 0 rows and returns ok:false lease_lost instead of clobbering the reclaimer's newer state (indexed->failed, completed->pending). Backward compatible (p_worker_id defaults null); the worker passes workerId and treats lease_lost as a stop, keeping the isMissingSchemaError fallback for pre-apply. This is the defense-in-depth complement to the lease heartbeat already in this PR. - R7: fail_or_retry downgrades an attempt-exhausted retry to terminal 'failed' instead of a permanently-unclaimable 'pending' that pins its batch forever. - R9: refresh_import_batch_status locks the import_batches row before counting, serializing concurrent last-job refreshes (lost-update that stuck batches as 'processing'). - R23: cleanup_abandoned re-asserts the open-job guard immediately before the destructive deletes (it previously lived only in the candidate CTE, before the seven count statements). HELD (evidence in PR): R17 open-jobs unique index (collides with drift backlog #7, ingestion_jobs index reshape); R24e stage-FK removal (collides with drift backlog #8, which plans the opposite — live has 253 orphan rows that would fail VALIDATE); deep-memory delete-scoping (would crash — document_sections unique(document_id,section_index)). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This was referenced Jul 8, 2026
Merged
BigSimmo
added a commit
that referenced
this pull request
Jul 8, 2026
…on) (#380) * fix(ingestion): R1/R2 lease fences + R7/R9/R23 RPC hardening (migration) Committed migration 20260708120000 (NOT applied to live — operator apply per docs/supabase-migration-reconciliation.md), schema.sql reconciled, drift manifest regenerated (13s scratch replay, clean). - R1/R2: complete_ingestion_job + fail_or_retry_ingestion_job take an optional p_worker_id lease fence. A worker reclaimed by a stale takeover now matches 0 rows and returns ok:false lease_lost instead of clobbering the reclaimer's newer state (indexed->failed, completed->pending). Backward compatible (p_worker_id defaults null); the worker passes workerId and treats lease_lost as a stop, keeping the isMissingSchemaError fallback for pre-apply. This is the defense-in-depth complement to the lease heartbeat already in this PR. - R7: fail_or_retry downgrades an attempt-exhausted retry to terminal 'failed' instead of a permanently-unclaimable 'pending' that pins its batch forever. - R9: refresh_import_batch_status locks the import_batches row before counting, serializing concurrent last-job refreshes (lost-update that stuck batches as 'processing'). - R23: cleanup_abandoned re-asserts the open-job guard immediately before the destructive deletes (it previously lived only in the candidate CTE, before the seven count statements). HELD (evidence in PR): R17 open-jobs unique index (collides with drift backlog #7, ingestion_jobs index reshape); R24e stage-FK removal (collides with drift backlog #8, which plans the opposite — live has 253 orphan rows that would fail VALIDATE); deep-memory delete-scoping (would crash — document_sections unique(document_id,section_index)). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(ingestion): rename hardening migration to 20260708130000 (version collision) 20260708120000 was already taken by 20260708120000_rag_query_misses_retention.sql on main; two migrations sharing a version fail the schema_migrations pkey on replay/apply. Content unchanged; schema.sql + drift manifest unaffected (manifest keys on schema.sql sha, not migration versions). --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
8 tasks
cursor Bot
pushed a commit
that referenced
this pull request
Jul 24, 2026
Format local-presence files for Prettier, bump postcss past the <=8.5.17 advisory so dependency-scope audit can pass, and align nav, appModeHomeHref, universal-search, prefetch, sitemap, and reachability on /tools per PT-11. Archive #7; keep /?mode=tools as a mode alias.
9 tasks
9 tasks
BigSimmo
added a commit
that referenced
this pull request
Jul 25, 2026
BigSimmo
added a commit
that referenced
this pull request
Jul 25, 2026
cursor Bot
pushed a commit
that referenced
this pull request
Jul 25, 2026
* Add local/dev presence checks for HMAC and probe secrets. Introduce check:local-presence (optional --fill) for safety-identifier, query-hash, and deep-probe gaps without printing values, warn from production-readiness, and record #54 local progress plus #7 blocked on the Tools canonical entry decision. Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com> * Fix parseEnvFile typing for local-presence tests. Annotate the env map as Record<string, string> so TypeScript accepts key access in the focused unit tests. Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com> * Fix CI gaps and canonicalize Tools at /tools (#7). Format local-presence files for Prettier, bump postcss past the <=8.5.17 advisory so dependency-scope audit can pass, and align nav, appModeHomeHref, universal-search, prefetch, sitemap, and reachability on /tools per PT-11. Archive #7; keep /?mode=tools as a mode alias. * Remove stale PR_POLICY_BODY leftover and record review. Stop Sync PR policy from overwriting PR descriptions with unrelated search-performance text, and append the local review ledger outcome for this branch. * docs: record PR 1178 review ledger for local-presence tip * fix(ci): register local presence check * docs: record PR 1178 maintenance * fix(docs): resolve codebase-index composer placement merge Co-authored-by: Cursor <cursoragent@cursor.com> * fix(test): expect canonical /tools href in favourites rail gate Co-authored-by: Cursor <cursoragent@cursor.com> * fix(ci): do not block audit on script-only package.json edits Keep blocking npm audit for package-lock/.npmrc only. Update phone Tools mode-menu smoke to expect canonical /tools navigation (PT-11). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(local-presence): strip stale short env assignments on fill Avoid duplicate KEY=value lines when regenerating below-minLength secrets. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(ui): keep Sources sheet autofocus against focus=1 reclaim Extend Sheet open-focus retries and skip composer focus=1 hydration while a modal dialog is open. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps @supabase/supabase-js from 2.105.4 to 2.106.1.
Release notes
Sourced from @supabase/supabase-js's releases.
... (truncated)
Changelog
Sourced from @supabase/supabase-js's changelog.
Commits
3f9628afix(misc): hide dynamic import from hermesc (#2381)1761a62chore(release): version 2.106.0 changelogs (#2379)1c48755chore(deps): cleanups and updates (#2371)9dfba1cchore(repo): migrate to pnpm (#2368)6731c4afix(release): mark@supabase/tracingprivate and snapshot it for JSR (#2370)2fe1801feat(supabase): W3C/OpenTelemetry trace context propagation (#2163)fae6772chore(repo): update to nx 22 (#2353)c6f7a38chore(release): version 2.105.4 changelogs (#2342)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)