test(cli): remove Docker manifest alignment check (#5488)

Removes the unit test that compared the TypeScript services image matrix
with the Go Dockerfile manifest.

That assertion caused Docker-only Dependabot PRs to fail CI whenever
Dependabot updated the Dockerfile but not the TypeScript mirror. Keeping
the check out of the unit suite lets those automated dependency bumps
merge when CI is otherwise green.

Also broadens the CLI e2e parity normalizer so two-component Docker tags
like `v14.13` are treated as volatile version output, matching the
existing behavior for three-component tags. This prevents Go/TypeScript
parity from failing solely because Dependabot bumped a Docker image tag.

Finally narrows `LOCAL_SERVICE_IMAGES` to module scope now that tests no
longer import it.

Author: jgoux

apps/cli/src/shared/services/services.shared.ts

@@ -26,7 +26,7 @@ interface ServiceImageSpec {
 // We keep this compiled into the TS CLI because the published package does not
 // ship the Go source tree at runtime, but the user-visible `services` output
 // still needs to match the bundled image manifest.
-export const LOCAL_SERVICE_IMAGES = [
+const LOCAL_SERVICE_IMAGES = [
   { image: "supabase/postgres:17.6.1.132", remoteService: "postgres" },
   { image: "supabase/gotrue:v2.189.0", remoteService: "auth" },
   { image: "postgrest/postgrest:v14.12", remoteService: "postgrest" },

apps/cli/src/shared/services/services.shared.unit.test.ts

@@ -1,10 +1,8 @@
 import { describe, expect, test } from "vitest";
 import { Effect, Redacted } from "effect";
 import { FetchHttpClient } from "effect/unstable/http";
-import { readFileSync } from "node:fs";
 import {
   fetchLinkedServiceVersions,
-  LOCAL_SERVICE_IMAGES,
   listLocalServiceVersions,
   renderServicesTable,
   renderServicesWarning,
@@ -18,56 +16,7 @@ const PROJECT_REF = "abcdefghijklmnopqrst";
 const runLinkedFetch = (input: Parameters<typeof fetchLinkedServiceVersions>[0]) =>
   Effect.runPromise(fetchLinkedServiceVersions(input).pipe(Effect.provide(FetchHttpClient.layer)));
 
-function parseDockerfileServiceImages() {
-  const dockerfile = readFileSync(
-    new URL("../../../../cli-go/pkg/config/templates/Dockerfile", import.meta.url),
-    "utf8",
-  );
-
-  const imagesByAlias = new Map<string, { name: string; version: string }>();
-
-  for (const line of dockerfile.split(/\r?\n/)) {
-    const match = /^FROM\s+([^:]+):(\S+)\s+AS\s+(\S+)$/.exec(line.trim());
-    if (match === null) {
-      continue;
-    }
-
-    const [, imageName, version, alias] = match;
-    if (imageName === undefined || version === undefined || alias === undefined) {
-      throw new Error("Dockerfile service image parse failed");
-    }
-    imagesByAlias.set(alias, { name: imageName, version });
-  }
-
-  return [
-    imagesByAlias.get("pg"),
-    imagesByAlias.get("gotrue"),
-    imagesByAlias.get("postgrest"),
-    imagesByAlias.get("realtime"),
-    imagesByAlias.get("storage"),
-    imagesByAlias.get("edgeruntime"),
-    imagesByAlias.get("studio"),
-    imagesByAlias.get("pgmeta"),
-    imagesByAlias.get("logflare"),
-    imagesByAlias.get("supavisor"),
-  ].map((image) => {
-    if (image === undefined) {
-      throw new Error("Dockerfile service image alias missing");
-    }
-    return image;
-  });
-}
-
 describe("services shared", () => {
-  test("keeps the local image matrix aligned with the bundled Dockerfile manifest", () => {
-    expect(parseDockerfileServiceImages()).toEqual(
-      LOCAL_SERVICE_IMAGES.map((service) => {
-        const [name, version] = service.image.split(":");
-        return { name, version };
-      }),
-    );
-  });
-
   test("returns postgres only when no service-role key is available", async () => {
     const server = Bun.serve({
       port: 0,

packages/cli-test-helpers/src/normalize.ts

@@ -40,10 +40,10 @@ export function normalize(output: string): string {
       // 1. Strip ANSI escape codes (color, bold, reset, etc.) — \u001b is ESC
       // eslint-disable-next-line no-control-regex
       .replace(/\u001b\[[0-9;]*[a-zA-Z]/g, "")
-      // 2. Semantic version strings (e.g. 1.187.0, v2.0.0-rc.1).
+      // 2. Semantic version strings (e.g. 1.187.0, v2.0.0-rc.1, v14.13).
       //    Lookbehind prevents matching mid-IP-address (e.g. 0.0.1 inside 127.0.0.1).
       //    Lookahead prevents matching where more dotted-number segments follow.
-      .replace(/(?<![.\d])\bv?\d+\.\d+\.\d+(?:-[\w.]+)?\b(?!\.)/g, "<VERSION>")
+      .replace(/(?<![.\d])\bv?\d+\.\d+(?:\.\d+)?(?:-[\w.]+)?\b(?!\.)/g, "<VERSION>")
       // 3. ISO-8601 timestamps (2026-04-15T10:46:15Z or with milliseconds)
       .replace(/\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z/g, "<TIMESTAMP>")
       // 4. Display timestamps (2026-04-15 10:46:15 — space-separated, no T)

packages/cli-test-helpers/src/normalize.unit.test.ts

@@ -11,6 +11,7 @@ describe("normalize", () => {
   it("normalizes semantic version strings", () => {
     expect(normalize("supabase 1.187.0")).toBe("supabase <VERSION>");
     expect(normalize("v2.0.0")).toBe("<VERSION>");
+    expect(normalize("postgrest/postgrest:v14.13")).toBe("postgrest/postgrest:<VERSION>");
     expect(normalize("Version: 0.1.0-rc.1")).toBe("Version: <VERSION>");
   });