storage/.github/workflows/ci.yml at 91bd99e0f7cc9061ceb06fed51e2ad02f40d0bbf · supabase/storage · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
name: CI

on:
  pull_request:
  push:
    branches:
      - master
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  lint_build:
    name: Lint & Build
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v6
      - uses: actions/cache@v5
        with:
          path: ~/.npm
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-
      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: "24"
      - name: Install dependencies
        run: npm ci
      - name: Lint
        run: npm run lint
      - name: Build
        run: npm run build

  test_postgres:
    name: Test / Postgres
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    env: &test_env
      ANON_KEY: ${{ secrets.ANON_KEY }}
      SERVICE_KEY: ${{ secrets.SERVICE_KEY }}
      TENANT_ID: ${{ secrets.TENANT_ID }}
      REGION: ${{ secrets.REGION }}
      GLOBAL_S3_BUCKET: ${{ secrets.GLOBAL_S3_BUCKET }}
      PGRST_JWT_SECRET: ${{ secrets.PGRST_JWT_SECRET }}
      AUTHENTICATED_KEY: ${{ secrets.AUTHENTICATED_KEY }}
      DATABASE_URL: postgresql://postgres:postgres@127.0.0.1/postgres
      FILE_SIZE_LIMIT: "52428800"
      STORAGE_BACKEND: s3
      MULTITENANT_DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5433/postgres
      ADMIN_API_KEYS: apikey
      ENABLE_IMAGE_TRANSFORMATION: true
      IMGPROXY_URL: http://127.0.0.1:50020
      AWS_ACCESS_KEY_ID: supa-storage
      AWS_SECRET_ACCESS_KEY: secret1234
      AWS_DEFAULT_REGION: ap-southeast-1
      GLOBAL_S3_ENDPOINT: http://127.0.0.1:9000
      GLOBAL_S3_PROTOCOL: http
      GLOBAL_S3_FORCE_PATH_STYLE: true
      DB_INSTALL_ROLES: true
      PG_QUEUE_ENABLE: false
      MULTI_TENANT: false
      S3_PROTOCOL_ACCESS_KEY_ID: ${{ secrets.TENANT_ID }}
      S3_PROTOCOL_ACCESS_KEY_SECRET: ${{ secrets.SERVICE_KEY }}
      VECTOR_S3_BUCKETS: supa-test-local-dev
      VECTOR_ENABLED: true
      ICEBERG_ENABLED: true
    steps:
      - uses: actions/checkout@v6
      - uses: actions/cache@v5
        with:
          path: ~/.npm
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-
      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: "24"
      - name: Install dependencies
        run: npm ci
      - name: Tests pass
        run: |
          mkdir -p data && chmod -R 777 data && \
          npm run test:coverage
      - name: Upload coverage results to Coveralls
        uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          fail-on-error: false
        continue-on-error: true
      - name: Verify migration idempotency
        run: |
          pg_dump "$DATABASE_URL" \
            --exclude-table-data=storage.migrations \
            --restrict-key=test \
            > before.sql

          npm run migration:test-idempotency

          pg_dump "$DATABASE_URL" \
            --exclude-table-data=storage.migrations \
            --restrict-key=test \
            > after.sql

          diff before.sql after.sql || (echo 'Schema mismatch!'; exit 1)

  test_oriole:
    name: Test / OrioleDB
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    env: *test_env
    steps:
      - uses: actions/checkout@v6
      - uses: actions/cache@v5
        with:
          path: ~/.npm
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-
      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: "24"
      - name: Install dependencies
        run: npm ci
      - name: Tests pass with OrioleDB
        run: |
          mkdir -p data && chmod -R 777 data && \
          npm run test:oriole
      - name: Verify OrioleDB migration idempotency
        run: |
          pg_dump "$DATABASE_URL" \
            --exclude-table-data=storage.migrations \
            --restrict-key=test \
            > before-oriole.sql

          npm run migration:test-idempotency

          pg_dump "$DATABASE_URL" \
            --exclude-table-data=storage.migrations \
            --restrict-key=test \
            > after-oriole.sql

          diff before-oriole.sql after-oriole.sql || (echo 'Oriole schema mismatch!'; exit 1)