Skip to content

fix(release): pin Deno and bound JSR publish to survive stranded-task hangs#2439

Merged
mandarini merged 1 commit into
masterfrom
ci/fix-jsr
Jun 11, 2026
Merged

fix(release): pin Deno and bound JSR publish to survive stranded-task hangs#2439
mandarini merged 1 commit into
masterfrom
ci/fix-jsr

Conversation

@mandarini

Copy link
Copy Markdown
Contributor

JSR's publish queue can leave tasks stranded in processing for 30+ min (jsr-io/jsr#1448), and the Deno CLI polls /publish_status without a timeout, wedging the workflow to GH Actions' 6h ceiling and blocking the partial-failure Slack notification that would normally surface this.

  • Pin Deno to v2.8.2 via denoland/setup-deno across the four release jobs, removing the implicit dl.deno.land/release-latest.txt lookup the jsr npm wrapper does on every CI run.
  • Call deno publish directly in publish-to-jsr.ts so the pinned binary runs instead of whatever the wrapper fetches.
  • Spawn it via spawnSync with a 10-min timeout + SIGKILL. The existing try/catch already routes failures into the partial-failure notification wired in release-canary.ts, so a stranded publish surfaces cleanly instead of holding the workflow open.

Refs: jsr-io/jsr#1448, jsr-io/jsr#1449

@mandarini mandarini requested review from a team as code owners June 11, 2026 10:57
@mandarini mandarini self-assigned this Jun 11, 2026
@pkg-pr-new

pkg-pr-new Bot commented Jun 11, 2026

Copy link
Copy Markdown

Open in StackBlitz

@supabase/auth-js

npm i https://pkg.pr.new/@supabase/auth-js@2439

@supabase/functions-js

npm i https://pkg.pr.new/@supabase/functions-js@2439

@supabase/postgrest-js

npm i https://pkg.pr.new/@supabase/postgrest-js@2439

@supabase/realtime-js

npm i https://pkg.pr.new/@supabase/realtime-js@2439

@supabase/storage-js

npm i https://pkg.pr.new/@supabase/storage-js@2439

@supabase/supabase-js

npm i https://pkg.pr.new/@supabase/supabase-js@2439

commit: d797a65

@mandarini mandarini merged commit 725a355 into master Jun 11, 2026
43 checks passed
@mandarini mandarini deleted the ci/fix-jsr branch June 11, 2026 11:26
mandarini pushed a commit to supabase/supabase that referenced this pull request Jun 16, 2026
This PR updates @supabase/*-js libraries to version 2.108.2.

**Source**: supabase-js-stable-release

**Changes**:
- Updated @supabase/supabase-js to 2.108.2
- Updated @supabase/auth-js to 2.108.2
- Updated @supabase/realtime-js to 2.108.2
- Updated @supabase/postgest-js to 2.108.2
- Refreshed pnpm-lock.yaml

---

## Release Notes

## v2.108.2

## 2.108.2 (2026-06-15)

### 🩹 Fixes

- **auth:** preserve valid session on refresh failure and cooldown
repeat failures
([#2436](supabase/supabase-js#2436))
- **realtime:** clarify httpSend() 404 error and server migration note
([#2444](supabase/supabase-js#2444))
- **release:** pin Deno and bound JSR publish to survive stranded-task
hangs ([#2439](supabase/supabase-js#2439))
- **release:** restore JSR publish flags and enable for beta
([#2440](supabase/supabase-js#2440))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
## v2.108.1

## 2.108.1 (2026-06-09)

### 🩹 Fixes

- **ci:** forward DOGFOOD_APP_CLIENT_ID to dogfood workflow
([#2434](supabase/supabase-js#2434))
- **postgrest:** then typing
([#2349](supabase/supabase-js#2349))

### ❤️ Thank You

- Katerina Skroumpelou @mandarini
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants