fix(ci): report the approval waiver in every promote outcome (#1084) #626
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Supabase DB Migrations | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - "backend/**" | |
| - "oddish/**" | |
| - ".github/workflows/supabase-db-migrations.yml" | |
| workflow_dispatch: | |
| concurrency: | |
| group: supabase-db-migrations-production | |
| cancel-in-progress: false | |
| jobs: | |
| migrate: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| permissions: | |
| contents: read | |
| packages: read | |
| # Python 3.13, uv, and a warm uv cache live in the base image — | |
| # refreshed weekly by .github/workflows/ci-base-image.yml. | |
| container: | |
| image: ghcr.io/abundant-ai/oddish-ci-base:latest | |
| credentials: | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| env: | |
| ODDISH_DATABASE_URL: ${{ secrets.ODDISH_DATABASE_URL }} | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v5 | |
| - name: Validate production Supabase URL is configured | |
| run: | | |
| if [ -z "${ODDISH_DATABASE_URL}" ]; then | |
| echo "Missing GitHub secret: ODDISH_DATABASE_URL" >&2 | |
| exit 1 | |
| fi | |
| # UV_PROJECT_ENVIRONMENT points uv at the per-project .venv that was | |
| # pre-built into the base image; `uv sync --frozen` then only needs | |
| # to patch the editable install paths against the CI checkout. | |
| - name: Sync oddish dependencies | |
| working-directory: oddish | |
| env: | |
| UV_PROJECT_ENVIRONMENT: /opt/venvs/oddish | |
| run: uv sync --frozen --extra server | |
| - name: Run oddish migrations | |
| working-directory: oddish | |
| env: | |
| UV_PROJECT_ENVIRONMENT: /opt/venvs/oddish | |
| run: uv run alembic upgrade head | |
| - name: Sync backend dependencies | |
| working-directory: backend | |
| env: | |
| UV_PROJECT_ENVIRONMENT: /opt/venvs/backend | |
| run: uv sync --frozen | |
| - name: Run backend migrations | |
| working-directory: backend | |
| env: | |
| UV_PROJECT_ENVIRONMENT: /opt/venvs/backend | |
| run: uv run alembic upgrade head | |
| - name: Summarize migration run | |
| if: ${{ always() }} | |
| run: | | |
| { | |
| echo "## Supabase DB migrations" | |
| echo | |
| echo "- Database: production Supabase via \`ODDISH_DATABASE_URL\`" | |
| echo "- Core migrations: \`oddish/alembic\`" | |
| echo "- Cloud migrations: \`backend/alembic\`" | |
| echo "- Trigger: \`${{ github.event_name }}\`" | |
| echo "- Commit: \`${{ github.sha }}\`" | |
| } >> "$GITHUB_STEP_SUMMARY" |