From 26e0da8d79c930ceb65724d69663e1a3458b45d5 Mon Sep 17 00:00:00 2001
From: Guilherme Souza <guilherme@supabase.io>
Date: Wed, 7 May 2025 10:42:21 -0300
Subject: [PATCH 1/4] use reusable ci

---
 .github/workflows/ci.yml | 97 +++-------------------------------------
 1 file changed, 7 insertions(+), 90 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1c3e558e..c8ef3ec0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,93 +17,10 @@ permissions:
   id-token: write
 
 jobs:
-  test:
-    name: Test / OS ${{ matrix.os }} / Python ${{ matrix.python-version }}
-    strategy:
-      matrix:
-        os: [ubuntu-latest]
-        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
-    runs-on: ${{ matrix.os }}
-    steps:
-      - name: Clone Repository
-        uses: actions/checkout@v4
-
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python-version }}
-
-      - name: Set up Poetry
-        run: pipx install poetry==1.8.5 --python python${{ matrix.python-version }}
-
-      - name: Run Tests
-        run: poetry run tests
-
-      - name: Upload coverage to Coveralls
-        uses: coverallsapp/github-action@v2
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          flag-name: run-${{ join(matrix.*, '-') }}
-          parallel: true
-
-  finish_tests:
-    needs: test
-    name: Upload tests coveralls results
-    if: ${{ always() }}
-    runs-on: ubuntu-latest
-    steps:
-      - name: Coveralls Finished
-        uses: coverallsapp/github-action@v2
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          parallel-finished: true
-          carryforward: "run-ubuntu-latest-3.9,run-ubuntu-latest-3.10,run-ubuntu-latest-3.11,run-ubuntu-latest-3.12,run-ubuntu-latest-3.13"
-
-  release-please:
-    needs: test
-    if: ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' && github.repository_owner == 'supabase' }}
-    runs-on: ubuntu-latest
-    name: "Bump version and create changelog"
-    permissions:
-      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
-      contents: write # needed for github actions bot to write to repo
-      pull-requests: write
-    steps:
-      - uses: googleapis/release-please-action@v4
-        id: release
-        with:
-          target-branch: ${{ github.ref_name }}
-  publish:
-    needs: release-please
-    if: ${{ startsWith(github.event.head_commit.message, 'chore(main)') && github.ref == 'refs/heads/main' && github.event_name == 'push' && github.repository_owner == 'supabase' }}
-    runs-on: ubuntu-latest
-    name: "Publish to PyPi"
-    environment:
-      name: pypi
-      url: https://pypi.org/p/supabase
-    permissions:
-      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
-      contents: write # needed for github actions bot to write to repo
-    steps:
-      - name: Set up Python 3.11
-        uses: actions/setup-python@v5
-        with:
-          python-version: 3.11
-
-      - name: Clone Repository
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.ref }}
-          fetch-depth: 0
-
-      - name: Set up Poetry
-        run: pipx install poetry==1.8.5 --python python3.11
-
-      - name: Install dependencies
-        run: poetry install
-
-      - name: Build package dist directory
-        run: poetry build
-
-      - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+  ci:
+    uses: supabase/actions/.github/workflows/python-ci.yml@guilherme/python-ci
+    with:
+      enable-publish: true
+      package-name: 'supabase'
+    secrets:
+      COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}

From d89e8a775d4aa39bab01ebe98695581b371e093e Mon Sep 17 00:00:00 2001
From: Guilherme Souza <guilherme@supabase.io>
Date: Wed, 7 May 2025 15:40:49 -0300
Subject: [PATCH 2/4] allow content write

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c8ef3ec0..758ea946 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: read
+  contents: write
   id-token: write
 
 jobs:

From a52621e31eca5e18a2af495d45b29c230ceacbcb Mon Sep 17 00:00:00 2001
From: Guilherme Souza <guilherme@supabase.io>
Date: Wed, 7 May 2025 15:41:52 -0300
Subject: [PATCH 3/4] allow pull-requests: write

---
 .github/workflows/ci.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 758ea946..73c820f8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,10 +12,6 @@ on:
   pull_request:
   workflow_dispatch:
 
-permissions:
-  contents: write
-  id-token: write
-
 jobs:
   ci:
     uses: supabase/actions/.github/workflows/python-ci.yml@guilherme/python-ci

From 8d45586df613fbde35881643aa779b35c198a8fa Mon Sep 17 00:00:00 2001
From: Guilherme Souza <guilherme@supabase.io>
Date: Thu, 8 May 2025 05:22:47 -0300
Subject: [PATCH 4/4] point to main branch

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 73c820f8..d93ae643 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ on:
 
 jobs:
   ci:
-    uses: supabase/actions/.github/workflows/python-ci.yml@guilherme/python-ci
+    uses: supabase/actions/.github/workflows/python-ci.yml@main
     with:
       enable-publish: true
       package-name: 'supabase'