Prod deploy

.github/CODEOWNERS

@@ -1 +1 @@
-* @supabase/cli
+* @supabase/dev-workflows

.github/workflows/ci.yml

@@ -18,13 +18,16 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+      # Required by: internal/utils/credentials/keyring_test.go
+      - uses: t1m0thyj/unlock-keyring@v1
       - run: |
-          go run gotest.tools/gotestsum -- ./... -race -v -count=1 \
-          -coverpkg ./cmd/...,./internal/... -coverprofile=coverage.out
+          go run gotest.tools/gotestsum -- -race -v -count=1 -coverprofile=coverage.out \
+          `go list ./... | grep -Ev 'cmd|docs|examples|pkg/api|tools'`
 
-      - uses: shogo82148/actions-goveralls@v1
+      - uses: coverallsapp/github-action@v2
         with:
-          path-to-profile: coverage.out
+          file: coverage.out
+          format: golang
 
   lint:
     name: Lint

.github/workflows/deploy-check.yml

@@ -0,0 +1,20 @@
+name: Check Deploy
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - reopened
+      - synchronize
+      - edited
+    branches:
+      - main
+
+jobs:
+  check:
+    if: github.head_ref != 'develop'
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          echo "Pull requests to main branch are only allowed from develop branch."
+          exit 1

.github/workflows/mirror-image.yml

@@ -26,7 +26,7 @@ jobs:
           TAG=${{ inputs.image }}
           echo "image=${TAG##*/}" >> $GITHUB_OUTPUT
       - name: configure aws credentials
-        uses: aws-actions/[email protected].2
+        uses: aws-actions/[email protected].3
         with:
           role-to-assume: ${{ secrets.PROD_AWS_ROLE }}
           aws-region: us-east-1

.github/workflows/mirror.yml

@@ -17,10 +17,6 @@ on:
   pull_request_review:
     types:
       - submitted
-    paths:
-      - ".github/workflows/mirror.yml"
-      - "internal/utils/misc.go"
-      - "tools/listdep/**"
   workflow_dispatch:
 
 jobs:

.github/workflows/release.yml

@@ -40,17 +40,10 @@ jobs:
     name: Publish NPM
     needs:
       - settings
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "16.x"
-          registry-url: "https://registry.npmjs.org"
-      - run: npm dist-tag add "supabase@${RELEASE_TAG#v}" latest
-        env:
-          RELEASE_TAG: ${{ needs.settings.outputs.release_tag }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+    uses: ./.github/workflows/tag-npm.yml
+    with:
+      release: ${{ needs.settings.outputs.release_tag }}
+    secrets: inherit
 
   compose:
     name: Bump self-hosted versions

.github/workflows/tag-npm.yml

@@ -0,0 +1,29 @@
+name: Tag NPM
+
+on:
+  workflow_call:
+    inputs:
+      release:
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      release:
+        description: "v1.0.0"
+        required: true
+        type: string
+
+jobs:
+  tag:
+    name: Move latest tag
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "16.x"
+          registry-url: "https://registry.npmjs.org"
+      - run: npm dist-tag add "supabase@${RELEASE_TAG#v}" latest
+        env:
+          RELEASE_TAG: ${{ inputs.release }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.golangci.yml

@@ -20,4 +20,4 @@ linters-settings:
   stylecheck:
     checks: ["all", "-ST1003"]
   dupl:
-    threshold: 200
+    threshold: 250

README.md

@@ -1,6 +1,7 @@
 # Supabase CLI (v1)
 
-[![Coverage Status](https://coveralls.io/repos/github/supabase/cli/badge.svg?branch=main)](https://coveralls.io/github/supabase/cli?branch=main)
+[![Coverage Status](https://coveralls.io/repos/github/supabase/cli/badge.svg?branch=main)](https://coveralls.io/github/supabase/cli?branch=main) [![Bitbucket Pipelines](https://img.shields.io/bitbucket/pipelines/supabase-cli/setup-cli/master?style=flat-square&label=Bitbucket%20Canary)](https://bitbucket.org/supabase-cli/setup-cli/pipelines) [![Gitlab Pipeline Status](https://img.shields.io/gitlab/pipeline-status/sweatybridge%2Fsetup-cli?label=Gitlab%20Canary)
+](https://gitlab.com/sweatybridge/setup-cli/-/pipelines)
 
 [Supabase](https://supabase.io) is an open source Firebase alternative. We're building the features of Firebase using enterprise-grade open source tools.
 
@@ -129,7 +130,7 @@ For Bun versions below v1.0.17, you must add `supabase` as a [trusted dependency
   Add a symlink to the binary in `$PATH` for easier access:
 
   ```sh
-  ln -s "$(go env GOPATH)/cli" /usr/bin/supabase
+  ln -s "$(go env GOPATH)/bin/cli" /usr/bin/supabase
   ```
 
   This works on other non-standard Linux distros.