Skip to content

chore(deps): bump tar and supabase - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f414919c7a
Open

chore(deps): bump tar and supabase#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f414919c7a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Removes tar. It's no longer used after updating ancestor dependency supabase. These dependencies need to be updated together.

Removes tar

Updates supabase from 2.98.2 to 2.109.1

Release notes

Sourced from supabase's releases.

v2.109.1

Supabase CLI v2.109.1 — 2026-07-07

This patch release includes bug fixes for database and sync operations, improvements to error messaging, and corrections to flag handling.

Bug fixes

  • db pull no longer hangs in non-interactive mode — fixed hang when using db pull without interactive prompts. (#5725)
  • CSV flag parsing for sso and postgres-config — flags now correctly split multiple values. (#5764)
  • Function deploy path resolution — fixed path handling in function deployments. (#5755)
  • db diff respects schema order — schema_paths order is now maintained in diff output. (#5706)
  • db unban-ip validation — project ref resolution now works correctly. (#5769)
  • Declarative sync hanging — fixed hang when edge-runtime container exits. (#5714)
  • Query command output formatting — fixed output formatting issues. (#5763)
  • Eszip bundling errors — improved error handling. (#5747)

Improvements

  • Error messages guide flag placement — the CLI suggests correct subcommand placement when flags are misplaced. (#5751)
  • Shell completion customization--no-descriptions flag suppresses descriptions in shell completions. (#5771)
  • Non-TypeScript type generationgen types now works for JavaScript and other languages. (#5622)
  • Custom image registry supportgen types respects the SUPABASE_INTERNAL_IMAGE_REGISTRY env var. (#5786)
  • Status command power-user flags — hidden --exclude and --ignore-health-check flags for advanced usage. (#5770)

TypeScript port progress

  • db pull — ported to use PostgreSQL's native pg_dump for faster, more reliable snapshots. Behavior matches the Go CLI. (#5725)

Plus internal improvements including service version alignment and experimental feature gating enhancements, plus dependency and Docker image updates.

Full changelog: supabase/cli@v2.109.0...v2.109.1

v2.109.1-beta.22

2.109.1-beta.22 (2026-07-07)

Bug Fixes

  • docker: bump supabase/postgres from 17.6.1.142 to 17.6.1.143 in /apps/cli-go/pkg/config/templates (#5807) (6d4c198)
  • docker: bump the docker-minor group in /apps/cli-go/pkg/config/templates with 3 updates (#5806) (1cbf45a)

v2.109.1-beta.21

2.109.1-beta.21 (2026-07-07)

Bug Fixes

  • deps: bump github.com/posthog/posthog-go from 1.16.2 to 1.17.2 in /apps/cli-go in the go-minor group across 1 directory (#5805) (60c2d17)

... (truncated)

Commits
  • 2b8eeea fix(deps): bump the npm-major group with 8 updates (#5808)
  • 1439680 fix(cli): honor SUPABASE_INTERNAL_IMAGE_REGISTRY in gen types (#5786)
  • 28b17f6 fix(cli): add hidden --exclude and --ignore-health-check flags to status (#5770)
  • f28efed fix(cli): run --experimental gate before storage's mutex check (#5768)
  • 4efa0df fix(cli): add --no-descriptions flag to completion subcommands (#5771)
  • c62b558 fix(cli): resolve network-bans project ref before validating --db-unban-ip (#...
  • 28cc844 fix(cli): wire --experimental gate into 7 ungated native leaves (#5766)
  • 31d6fb9 fix(cli): generate non-TypeScript types from project refs (#5622)
  • 5a0e4a9 fix(deps): bump the npm-major group with 3 updates (#5782)
  • 9bb97be fix(db): respect schema_paths order in diff (#5706)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [supabase](https://github.com/supabase/cli/tree/HEAD/apps/cli). These dependencies need to be updated together.


Removes `tar`

Updates `supabase` from 2.98.2 to 2.109.1
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/apps/cli/docs/release-process.md)
- [Commits](https://github.com/supabase/cli/commits/v2.109.1/apps/cli)

---
updated-dependencies:
- dependency-name: tar
  dependency-version:
  dependency-type: indirect
- dependency-name: supabase
  dependency-version: 2.109.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 27, 2026

Copy link
Copy Markdown

Deploying securecloudx with  Cloudflare Pages  Cloudflare Pages

Latest commit: 2dddf42
Status: ✅  Deploy successful!
Preview URL: https://0adf3335.securecloudx.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mult.securecloudx.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants