[dependabot]

Bumps the actions group with 1 update: supabase/setup-cli.

Updates supabase/setup-cli from 1 to 3

Release notes

Sourced from supabase/setup-cli's releases.

v3.0.0

Summary

• Install the Supabase CLI from the npm package instead of GitHub releases.
• Support latest, beta, and fixed npm package versions.
• Remove the github-token input; npm is now the source of truth for CLI resolution and install.
• Preserve caller npm configuration by running npm from the workspace while keeping the action-owned install isolated.
• Improve musl/Alpine runtime handling for existing node and npm binaries.

Validation

• CI and E2E passed on main before tagging.
• All open pull requests were cleared before release.

v3 is the moving major-version alias for this release.

v2.1.2

Allow Supabase CLI v2.108.0 and newer to use its built-in image registry fallback by default. Older CLI versions retain the GHCR default, and explicit registry selections remain unchanged.

v2.1.1

Fix Alpine/Linux musl containers that do not already include the C++ runtime libraries required by Bun and the Supabase CLI shim.

• Install missing libstdc++ and libgcc before running oven-sh/setup-bun in Alpine/musl containers.
• Keep non-Linux and non-musl runners as no-ops.
• Fail with a clear setup message when a musl container cannot install the required packages.

Validation: https://github.com/jgoux/setup-cli-testing/actions/runs/26172791463

v2.1.0

Fix setup-cli on Linux musl/Alpine containers.

• Authenticate the latest Supabase CLI release lookup with the optional github-token input.
• Use Bun musl builds on Linux musl containers.
• Download Supabase CLI .apk assets for Linux musl and CLI versions v2.99.0+.

v2.0.1

Fix latest Supabase CLI archive resolution for v2.99.0+.

v2.0.0

This major release refreshes the action internals, CI coverage, and release pipeline while keeping usage straightforward with uses: supabase/setup-cli@v2.

Highlights

• Switched the action implementation to a composite action flow and modernized runtime/dependency setup.
• Improved CLI version resolution: when version is omitted, the action now detects it from root lockfiles (bun.lock, pnpm-lock.yaml, package-lock.json) and falls back to latest.
• Expanded validation with dedicated CI + E2E workflows and updated docs/examples around @v2.
• Hardened repository automation and supply-chain posture (pinned actions, Dependabot workflow/policy updates, licensed workflow fixes).
• Migrated away from old bundled distribution/test setup to a cleaner Bun-based project structure.

Maintenance updates

... (truncated)

Commits

• 45a513f fix: allow registry fallback in supported CLI versions (#453)
• aa3515e chore(deps): bump ruby/setup-ruby from 1.319.0 to 1.321.0 in the actions-mino...
• c44671e chore(deps): bump ruby/setup-ruby from 1.317.0 to 1.319.0 in the actions-mino...
• 6ffe784 chore(deps): bump ruby/setup-ruby from 1.316.0 to 1.317.0 in the actions-mino...
• fddb742 chore(deps-dev): bump the bun-minor-patch group with 3 updates (#446)
• 46f7f98 chore(deps-dev): bump the bun-minor-patch group across 1 directory with 3 upd...
• 00444ee chore(deps): bump ruby/setup-ruby from 1.308.0 to 1.316.0 in the actions-mino...
• 4c16bf7 Honor workspace npm config for CLI installs (#443)
• 23ef4b0 Install Supabase CLI from npm (#442)
• 3c2f5e2 fix: install Alpine runtime dependencies (#433)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions