feat(supabase): add canonical CORS headers export for edge functions #1054
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Preview release | |
| permissions: | |
| pull-requests: write | |
| on: | |
| pull_request: | |
| types: [opened, synchronize] | |
| paths: | |
| - 'packages/core/**' | |
| - 'package.json' | |
| - 'package-lock.json' | |
| - 'nx.json' | |
| - 'tsconfig.base.json' | |
| - 'scripts/**' | |
| - '.github/workflows/preview-release.yml' | |
| - '.github/workflows/integration-tests.yml' | |
| - '!packages/core/**/*.md' | |
| - '!packages/core/**/docs/**' | |
| - '!packages/core/**/.prettierrc' | |
| - '!packages/core/**/*ignore' | |
| jobs: | |
| preview: | |
| if: github.repository == 'supabase/supabase-js' | |
| runs-on: ubuntu-latest | |
| outputs: | |
| commit_hash: ${{ steps.commit.outputs.sha }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| filter: tree:0 | |
| fetch-depth: 0 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0 | |
| with: | |
| node-version: '20' | |
| cache: 'npm' | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Set up Nx SHAs | |
| uses: nrwl/nx-set-shas@3e9ad7370203c1e93d109be57f3b72eb0eb511b1 # v4.4.0 | |
| - name: Build all packages | |
| run: npx nx run-many --target=build --all | |
| - name: Publish preview packages | |
| run: | | |
| npx pkg-pr-new@latest publish --compact \ | |
| ./packages/core/auth-js \ | |
| ./packages/core/functions-js \ | |
| ./packages/core/postgrest-js \ | |
| ./packages/core/realtime-js \ | |
| ./packages/core/storage-js \ | |
| ./packages/core/supabase-js | |
| - name: Get commit hash | |
| id: commit | |
| run: | | |
| # Use PR head SHA, not merge commit SHA | |
| # pkg.pr.new publishes based on actual repo commits, not GitHub's temporary merge commits | |
| COMMIT_SHA="${{ github.event.pull_request.head.sha }}" | |
| echo "sha=$COMMIT_SHA" >> $GITHUB_OUTPUT | |
| echo "📍 PR Head commit: $COMMIT_SHA" | |
| echo "📍 Current HEAD (merge commit): $(git rev-parse HEAD)" | |
| echo "📍 These are different - we use PR head for pkg.pr.new URLs" | |
| integration-tests: | |
| name: Run Integration Tests | |
| needs: preview | |
| uses: ./.github/workflows/integration-tests.yml | |
| with: | |
| commit_hash: ${{ needs.preview.outputs.commit_hash }} |