Skip to content

fix(release): pin Deno and bound JSR publish to survive stranded-task hangs#2439

Merged
mandarini merged 1 commit into
masterfrom
ci/fix-jsr
Jun 11, 2026
Merged

fix(release): pin Deno and bound JSR publish to survive stranded-task hangs#2439
mandarini merged 1 commit into
masterfrom
ci/fix-jsr

Conversation

@mandarini

@mandarini mandarini commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

JSR's publish queue can leave tasks stranded in processing for 30+ min (jsr-io/jsr#1448), and the Deno CLI polls /publish_status without a timeout, wedging the workflow to GH Actions' 6h ceiling and blocking the partial-failure Slack notification that would normally surface this.

  • Pin Deno to v2.8.2 via denoland/setup-deno across the four release jobs, removing the implicit dl.deno.land/release-latest.txt lookup the jsr npm wrapper does on every CI run.
  • Call deno publish directly in publish-to-jsr.ts so the pinned binary runs instead of whatever the wrapper fetches.
  • Spawn it via spawnSync with a 10-min timeout + SIGKILL. The existing try/catch already routes failures into the partial-failure notification wired in release-canary.ts, so a stranded publish surfaces cleanly instead of holding the workflow open.

Refs: jsr-io/jsr#1448, jsr-io/jsr#1449
@mandarini mandarini requested review from a team as code owners June 11, 2026 10:57
@mandarini mandarini self-assigned this Jun 11, 2026
@pkg-pr-new

pkg-pr-new Bot commented Jun 11, 2026

Copy link
Copy Markdown

Open in StackBlitz

@supabase/auth-js

npm i https://pkg.pr.new/@supabase/auth-js@2439

@supabase/functions-js

npm i https://pkg.pr.new/@supabase/functions-js@2439

@supabase/postgrest-js

npm i https://pkg.pr.new/@supabase/postgrest-js@2439

@supabase/realtime-js

npm i https://pkg.pr.new/@supabase/realtime-js@2439

@supabase/storage-js

npm i https://pkg.pr.new/@supabase/storage-js@2439

@supabase/supabase-js

npm i https://pkg.pr.new/@supabase/supabase-js@2439

commit: d797a65
@mandarini mandarini merged commit 725a355 into master Jun 11, 2026
43 checks passed
@mandarini mandarini deleted the ci/fix-jsr branch June 11, 2026 11:26
@supabase-supabase-autofixer supabase-supabase-autofixer Bot mentioned this pull request Jun 15, 2026
Merged
@supabase-libs-pr-manager supabase-libs-pr-manager Bot mentioned this pull request Jun 15, 2026
Merged
@supabase-supabase-autofixer supabase-supabase-autofixer Bot mentioned this pull request Jun 15, 2026
Merged
mandarini pushed a commit to supabase/supabase that referenced this pull request Jun 16, 2026
@supabase-supabase-autofixer @supabase-workflow-trigger
feat: update @supabase/*-js libraries to v2.108.2 (#46927)
f761c66 
This PR updates @supabase/*-js libraries to version 2.108.2.

**Source**: supabase-js-stable-release

**Changes**:
- Updated @supabase/supabase-js to 2.108.2
- Updated @supabase/auth-js to 2.108.2
- Updated @supabase/realtime-js to 2.108.2
- Updated @supabase/postgest-js to 2.108.2
- Refreshed pnpm-lock.yaml

---

## Release Notes

## v2.108.2

## 2.108.2 (2026-06-15)

### 🩹 Fixes

- **auth:** preserve valid session on refresh failure and cooldown
repeat failures
([#2436](supabase/supabase-js#2436))
- **realtime:** clarify httpSend() 404 error and server migration note
([#2444](supabase/supabase-js#2444))
- **release:** pin Deno and bound JSR publish to survive stranded-task
hangs ([#2439](supabase/supabase-js#2439))
- **release:** restore JSR publish flags and enable for beta
([#2440](supabase/supabase-js#2440))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
## v2.108.1

## 2.108.1 (2026-06-09)

### 🩹 Fixes

- **ci:** forward DOGFOOD_APP_CLIENT_ID to dogfood workflow
([#2434](supabase/supabase-js#2434))
- **postgrest:** then typing
([#2349](supabase/supabase-js#2349))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
matlin pushed a commit to supabase/supabase that referenced this pull request Jun 22, 2026
@supabase-supabase-autofixer @supabase-workflow-trigger @matlin
feat: update @supabase/*-js libraries to v2.108.2 (#46927)
1f8336b 
This PR updates @supabase/*-js libraries to version 2.108.2.

**Source**: supabase-js-stable-release

**Changes**:
- Updated @supabase/supabase-js to 2.108.2
- Updated @supabase/auth-js to 2.108.2
- Updated @supabase/realtime-js to 2.108.2
- Updated @supabase/postgest-js to 2.108.2
- Refreshed pnpm-lock.yaml

---

## Release Notes

## v2.108.2

## 2.108.2 (2026-06-15)

### 🩹 Fixes

- **auth:** preserve valid session on refresh failure and cooldown
repeat failures
([#2436](supabase/supabase-js#2436))
- **realtime:** clarify httpSend() 404 error and server migration note
([#2444](supabase/supabase-js#2444))
- **release:** pin Deno and bound JSR publish to survive stranded-task
hangs ([#2439](supabase/supabase-js#2439))
- **release:** restore JSR publish flags and enable for beta
([#2440](supabase/supabase-js#2440))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
## v2.108.1

## 2.108.1 (2026-06-09)

### 🩹 Fixes

- **ci:** forward DOGFOOD_APP_CLIENT_ID to dogfood workflow
([#2434](supabase/supabase-js#2434))
- **postgrest:** then typing
([#2349](supabase/supabase-js#2349))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
This was referenced Jun 30, 2026
Open
Merged
mandarini pushed a commit to supabase/ssr that referenced this pull request Jun 30, 2026
@supabase-libs-pr-manager @supabase-workflow-trigger
chore: update @supabase/supabase-js to v2.110.0 (#253)
fdbd36b 
This PR updates `@supabase/supabase-js` to v2.110.0.

**Source**: supabase-js-stable-release

---

## Release Notes

## v2.110.0

## 2.110.0 (2026-06-30)

### 🚀 Features

- **repo:** drop Node.js 20 support
([#2482](supabase/supabase-js#2482))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
## v2.109.0

## 2.109.0 (2026-06-30)

### 🚀 Features

- **auth:** add custom_claims_allowlist to custom providers admin API
([#2473](supabase/supabase-js#2473))
- **realtime:** add postgres_changes filter builder, new operators and
select ([#2463](supabase/supabase-js#2463))
- **storage:** expose purgeCache for buckets and single objects
([#2429](supabase/supabase-js#2429))

### 🩹 Fixes

- **functions:** honor a caller's Content-Type override regardless of
casing ([#2455](supabase/supabase-js#2455))
- **realtime:** pin @supabase/phoenix and browser test CDN deps
([#2457](supabase/supabase-js#2457))
- **realtime:** add replication connection system message option
([#2470](supabase/supabase-js#2470))
- **storage:** keep sortBy defaults when list() is given a partial
sortBy ([#2454](supabase/supabase-js#2454))

### ❤️ Thank You

- Anubhav Anand @i-anubhav-anand
- Cemal Kılıç @cemalkilic
- Claude Opus 4.8 (1M context)
- Filipe Cabaço @filipecabaco
- Katerina Skroumpelou @mandarini
- Lenny
- Rodrigo Mansueli @mansueli
## v2.108.2

## 2.108.2 (2026-06-15)

### 🩹 Fixes

- **auth:** preserve valid session on refresh failure and cooldown
repeat failures
([#2436](supabase/supabase-js#2436))
- **realtime:** clarify httpSend() 404 error and server migration note
([#2444](supabase/supabase-js#2444))
- **release:** pin Deno and bound JSR publish to survive stranded-task
hangs ([#2439](supabase/supabase-js#2439))
- **release:** restore JSR publish flags and enable for beta
([#2440](supabase/supabase-js#2440))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
## v2.108.1

## 2.108.1 (2026-06-09)

### 🩹 Fixes

- **ci:** forward DOGFOOD_APP_CLIENT_ID to dogfood workflow
([#2434](supabase/supabase-js#2434))
- **postgrest:** then typing
([#2349](supabase/supabase-js#2349))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants

@mandarini @spydon