• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

supabase / cli / 27288532705
65%

Build:
DEFAULT BRANCH: develop
Ran 10 Jun 2026 04:00PM UTC
Jobs 1
Files 224
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

10 Jun 2026 03:50PM UTC coverage: 64.66% (+0.02%) from 64.636%
27288532705

push

github

web-flow
feat(api): flip auto_expose_new_tables default to false (#5524)

Implements the May 30, 2026 flip of the `[api].auto_expose_new_tables`
implicit default from `true` to `false`, aligning local behavior with
the new cloud default of revoking Data API privileges on newly-created
entities in the public schema.

## Summary

The `auto_expose_new_tables` flag is a tri-state configuration that
controls whether new tables, views, sequences, and functions created in
the `public` schema are automatically reachable through Data API roles
(`anon`, `authenticated`, `service_role`). This change flips the
implicit default behavior:

- **Unset (default)**: Now revokes default Data API GRANTs (new
behavior, matching cloud)
- **Explicit `true`**: Preserves legacy auto-expose behavior but emits a
deprecation warning; field removed on 2026-10-30
- **Explicit `false`**: Revokes GRANTs explicitly (same as unset)

## Key Changes

**Go CLI (`apps/cli-go/`)**:
- Updated `ApplyApiPrivileges()` logic to revoke by default when the
flag is unset or false
- Added deprecation warning in config validation when
`auto_expose_new_tables = true`
- Created `helper.MockApiPrivilegesRevoke()` test utility to reduce
duplication across test suites
- Updated all affected tests in `start_test.go`, `reset_test.go`, and
`diff_test.go` to expect privilege revocation
- Updated config comments and template to reflect the new default
behavior

**TypeScript CLI (`apps/cli/`)**:
- Implemented `resolveAutoExposeNewTables()` function to handle
tri-state flag resolution
- Updated `startCommand` to emit deprecation warning when flag is
explicitly `true`
- Changed default from `true` to `false` in stack configuration
- Added unit tests for flag resolution logic

**Documentation & Schema**:
- Updated config template comments in both Go and TypeScript CLIs
- Updated JSON schema documentation to reflect the new default and
deprecation timeline
- Updated TypeScript config schema with accurate descriptions

## I... (continued)

10517 of 16265 relevant lines covered (64.66%)

7.15 hits per line

Coverage Regressions

Lines Coverage ∆ File
14
55.34
0.16% internal/db/declarative/declarative.go
1
81.23
0.0% internal/db/start/start.go
Jobs
ID Job ID Ran Files Coverage
1 27288532705.1 10 Jun 2026 04:00PM UTC 224
64.66
GitHub Action Run
Source Files on build 27288532705
  • Tree
  • List 224
  • Changed 2
  • Source Changed 0
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #27288532705
  • 5b12151e on github
  • Prev Build on gh-readonly-queue/develop/pr-5533-6a822461579e327477c39f0d7e4c9712bddb439c (#27285429193)
  • Next Build on develop (#27331514578)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc