From c42cafc766cdccb3837a50605fc37fb90326dcfc Mon Sep 17 00:00:00 2001 From: steve-chavez Date: Thu, 12 Mar 2026 18:08:41 -0500 Subject: [PATCH] chore: upgrade to supautils 3.2.0 This includes the new [enhanced hints](https://github.com/supabase/supautils/?tab=readme-ov-file#enhanced-hints) feature of supautils, enabled for only the API roles. --- ansible/files/postgresql_config/supautils.conf.j2 | 1 + ansible/vars.yml | 6 +++--- nix/ext/supautils.nix | 4 ++-- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/ansible/files/postgresql_config/supautils.conf.j2 b/ansible/files/postgresql_config/supautils.conf.j2 index e23ab99bda..984090544f 100644 --- a/ansible/files/postgresql_config/supautils.conf.j2 +++ b/ansible/files/postgresql_config/supautils.conf.j2 @@ -13,3 +13,4 @@ supautils.privileged_role = 'supabase_privileged_role' supautils.privileged_role_allowed_configs = 'auto_explain.*, deadlock_timeout, log_lock_waits, log_min_duration_statement, log_min_messages, log_parameter_max_length, log_replication_commands, log_statement, log_temp_files, pg_net.batch_size, pg_net.ttl, pg_stat_statements.*, pgaudit.log, pgaudit.log_catalog, pgaudit.log_client, pgaudit.log_level, pgaudit.log_relation, pgaudit.log_rows, pgaudit.log_statement, pgaudit.log_statement_once, pgaudit.role, pgrst.*, plan_filter.*, safeupdate.enabled, session_replication_role, track_functions, track_io_timing, wal_compression' supautils.reserved_memberships = 'pg_read_server_files, pg_write_server_files, pg_execute_server_program, supabase_admin, supabase_auth_admin, supabase_storage_admin, supabase_read_only_user, supabase_realtime_admin, supabase_replication_admin, supabase_etl_admin, dashboard_user, pgbouncer, authenticator' supautils.reserved_roles = 'supabase_admin, supabase_auth_admin, supabase_storage_admin, supabase_read_only_user, supabase_realtime_admin, supabase_replication_admin, supabase_etl_admin, dashboard_user, pgbouncer, service_role*, authenticator*, authenticated*, anon*' +supautils.hint_roles = 'anon, authenticated, service_role' diff --git a/ansible/vars.yml b/ansible/vars.yml index ae5ecfb33b..e6a3407f81 100644 --- a/ansible/vars.yml +++ b/ansible/vars.yml @@ -10,9 +10,9 @@ postgres_major: # Full version strings for each major version postgres_release: - postgresorioledb-17: "17.6.0.053-orioledb" - postgres17: "17.6.1.096" - postgres15: "15.14.1.096" + postgresorioledb-17: "17.6.0.054-orioledb" + postgres17: "17.6.1.097" + postgres15: "15.14.1.097" # Non Postgres Extensions pgbouncer_release: 1.25.1 diff --git a/nix/ext/supautils.nix b/nix/ext/supautils.nix index b2574a05cc..2c4e4ef44a 100644 --- a/nix/ext/supautils.nix +++ b/nix/ext/supautils.nix @@ -8,7 +8,7 @@ stdenv.mkDerivation rec { pname = "supautils"; name = pname; - version = "3.0.1"; + version = "3.2.0"; buildInputs = [ postgresql ]; @@ -16,7 +16,7 @@ stdenv.mkDerivation rec { owner = "supabase"; repo = pname; rev = "refs/tags/v${version}"; - hash = "sha256-j0iASDzmcZRLbHaS9ZNRWwzii7mcC+8wYHM0/mOLkbs="; + hash = "sha256-meG64dZ4wmoNyOZUx/G3SK4zSyQjXXX6a1B5rJK9wvw="; }; installPhase = ''