Skip to content

fix(docker): bump the docker-minor group across 1 directory with 5 updates #5924

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 2 commits into
base: develop
Choose a base branch
from
+10 −10
Open

fix(docker): bump the docker-minor group across 1 directory with 5 updates #5924

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
878fb8f
fix(docker): bump the docker-minor group across 1 directory with 5 up…
dependabot[bot] Jul 22, 2026
d4d559f
chore(stack): sync service version manifest
github-actions[bot] Jul 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions apps/cli-go/pkg/config/templates/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,15 +5,15 @@ FROM library/kong:2.8.1 AS kong
FROM axllent/mailpit:v1.30.2 AS mailpit
FROM postgrest/postgrest:v14.15 AS postgrest
FROM supabase/postgres-meta:v0.96.6 AS pgmeta
FROM supabase/studio:2026.07.13-sha-b5ada96 AS studio
FROM supabase/studio:2026.07.20-sha-74a0848 AS studio

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Mirror Studio before pinning this tag

The same GHCR-only Start path also pulls Studio, but the current GHCR Studio package does not have 2026.07.20-sha-74a0848 even though this Docker Hub tag exists. Since the registry override disables the normal Docker Hub fallback, PR/develop CI and users running with SUPABASE_INTERNAL_IMAGE_REGISTRY=ghcr.io will fail when supabase start tries to pull Studio; mirror this tag before pinning it or keep the previous mirrored tag.

Useful? React with 👍 / 👎.

FROM darthsim/imgproxy:v3.8.0 AS imgproxy
FROM supabase/edge-runtime:v1.74.2 AS edgeruntime
FROM timberio/vector:0.53.0-alpine AS vector
FROM supabase/supavisor:2.9.7 AS supavisor
FROM supabase/gotrue:v2.193.0 AS gotrue
FROM supabase/realtime:v2.113.4 AS realtime
FROM supabase/storage-api:v1.66.4 AS storage
FROM supabase/logflare:1.47.1 AS logflare
FROM supabase/gotrue:v2.193.1 AS gotrue
FROM supabase/realtime:v2.118.0 AS realtime
FROM supabase/storage-api:v1.67.13 AS storage

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Mirror Storage before pinning this tag

The GHCR-only Start job pulls storage as ghcr.io/supabase/storage-api:v1.67.13, but the current GHCR storage-api package is not published at that tag. With SUPABASE_INTERNAL_IMAGE_REGISTRY=ghcr.io, GetRegistryImageUrls returns only that candidate, so the CI start smoke test and GHCR-overridden local starts fail at image pull; mirror v1.67.13 before pinning it here or keep a mirrored storage tag.

Useful? React with 👍 / 👎.

FROM supabase/logflare:1.47.2 AS logflare
Comment on lines +13 to +16

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Sync stack defaults with these image bumps

When these Dockerfile service tags are bumped, the TypeScript stack defaults need to be regenerated as well: packages/stack/scripts/sync-versions-from-dockerfile.ts reads this manifest and rewrites packages/stack/src/versions.ts, but that file still pins the old auth/realtime/storage/studio/analytics versions. As a result the TS local stack paths that use DEFAULT_VERSIONS keep running and reporting the previous images even though this change updates the Dockerfile manifest; please run the sync script and include the generated packages/stack/src/versions.ts changes.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Mirror Logflare before pinning this tag

With this bump, the Start job in .github/workflows/cli-go-ci.yml runs ./main start with SUPABASE_INTERNAL_IMAGE_REGISTRY=ghcr.io, and GetRegistryImageUrls uses only that single overridden candidate. I checked the current GHCR package versions and ghcr.io/supabase/logflare:1.47.2 is not published there yet, so PR/develop CI and any users with the GHCR registry override will fail pulling the analytics image; keep the previous tag or mirror 1.47.2 before pinning it here.

Useful? React with 👍 / 👎.

# Append to JobImages when adding new dependencies below
FROM supabase/pgadmin-schema-diff:cli-0.0.5 AS differ
FROM supabase/migra:3.0.1663481299 AS migra
Expand Down
10 changes: 5 additions & 5 deletions packages/stack/src/versions.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,15 +48,15 @@ export interface VersionManifest {
export const DEFAULT_VERSIONS: VersionManifest = {
postgres: "17.6.1.143",
postgrest: "14.15",
auth: "2.193.0",
auth: "2.193.1",
"edge-runtime": "1.74.2",
realtime: "2.113.4",
storage: "1.66.4",
realtime: "2.118.0",
storage: "1.67.13",
imgproxy: "v3.8.0",
mailpit: "v1.30.2",
pgmeta: "0.96.6",
studio: "2026.07.13-sha-b5ada96",
analytics: "1.47.1",
studio: "2026.07.20-sha-74a0848",
analytics: "1.47.2",
vector: "0.53.0-alpine",
pooler: "2.9.7",
} as const;
Expand Down
Loading