docs: note latest release rate limit

.github/workflows/e2e.yml

@@ -47,8 +47,6 @@ jobs:
         exclude:
           - version: 1.178.2
             pg_major: 17
-          - version: latest
-            pg_major: 14
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:

README.md

@@ -31,6 +31,11 @@ If `version` is omitted, the action checks the repository root for `bun.lock`,
 `pnpm-lock.yaml`, or `package-lock.json` and uses the declared `supabase`
 version. If no supported lockfile is present, it falls back to `latest`.
 
+When the action resolves `latest`, it queries the GitHub releases API. In CI,
+pass `github-token: ${{ github.token }}` to avoid unauthenticated API rate
+limits. Pinning `version` to a specific Supabase CLI release avoids that lookup
+entirely.
+
 A specific version of the `supabase` CLI can be installed:
 
 ```yaml

src/main.test.ts

@@ -12,7 +12,6 @@ const defaultEntrypoint = fileURLToPath(new URL("./main.ts", import.meta.url));
 const CLI_CONFIG_REGISTRY = "SUPABASE_INTERNAL_IMAGE_REGISTRY";
 const GITHUB_RELEASES_API = "https://api.github.com/repos/supabase/cli/releases/latest";
 const GITHUB_TOKEN_ENV = "SUPABASE_CLI_GITHUB_TOKEN";
-const originalCliConfigRegistry = process.env[CLI_CONFIG_REGISTRY];
 const originalWorkspace = process.env.GITHUB_WORKSPACE;
 const originalGithubToken = process.env[GITHUB_TOKEN_ENV];
 const tempDirs = new Set<string>();
@@ -26,11 +25,6 @@ afterEach(() => {
   } else {
     process.env[GITHUB_TOKEN_ENV] = originalGithubToken;
   }
-  if (originalCliConfigRegistry === undefined) {
-    delete process.env[CLI_CONFIG_REGISTRY];
-  } else {
-    process.env[CLI_CONFIG_REGISTRY] = originalCliConfigRegistry;
-  }
 
   for (const dir of tempDirs) {
     rmSync(dir, { force: true, recursive: true });
@@ -522,75 +516,6 @@ test("explicit version overrides detected root lockfiles", async () => {
   expect(spies.setFailed).not.toHaveBeenCalled();
 });
 
-test("keeps the GHCR registry pin through Supabase CLI v2.107.x", async () => {
-  const cliDir = createFakeCli("supabase 2.107.9");
-  const spies = createActionSpies("2.107.9", cliDir, "/download/v2.107.9/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(spies.exportVariable).toHaveBeenCalledWith(CLI_CONFIG_REGISTRY, "ghcr.io");
-  expect(spies.setFailed).not.toHaveBeenCalled();
-});
-
-test("keeps the GHCR registry pin starting with Supabase CLI v1.28.0", async () => {
-  const cliDir = createFakeCli("supabase 1.28.0");
-  const spies = createActionSpies("1.28.0", cliDir, "/download/v1.28.0/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(spies.exportVariable).toHaveBeenCalledWith(CLI_CONFIG_REGISTRY, "ghcr.io");
-  expect(spies.setFailed).not.toHaveBeenCalled();
-});
-
-test("uses the CLI built-in registry fallback starting with Supabase CLI v2.108.0", async () => {
-  const cliDir = createFakeCli("supabase 2.108.0");
-  const spies = createActionSpies("2.108.0", cliDir, "/download/v2.108.0/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(spies.exportVariable).not.toHaveBeenCalled();
-  expect(spies.setFailed).not.toHaveBeenCalled();
-});
-
-test("preserves an explicitly configured internal image registry", async () => {
-  process.env[CLI_CONFIG_REGISTRY] = "registry.example.test";
-  const cliDir = createFakeCli("supabase 2.108.0");
-  const spies = createActionSpies("2.108.0", cliDir, "/download/v2.108.0/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(process.env[CLI_CONFIG_REGISTRY]).toBe("registry.example.test");
-  expect(spies.exportVariable).not.toHaveBeenCalled();
-});
-
-test("preserves a whitespace-only internal image registry", async () => {
-  process.env[CLI_CONFIG_REGISTRY] = "  ";
-  const cliDir = createFakeCli("supabase 2.108.0");
-  const spies = createActionSpies("2.108.0", cliDir, "/download/v2.108.0/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(process.env[CLI_CONFIG_REGISTRY]).toBe("  ");
-  expect(spies.exportVariable).not.toHaveBeenCalled();
-});
-
-test("uses the installed version to select the registry for latest", async () => {
-  mockLatestRelease("v2.108.0");
-  const cliDir = createFakeCli("supabase 2.108.0");
-  const spies = createActionSpies("latest", cliDir, "/download/v2.108.0/supabase_");
-  const { run } = await getMainModule();
-
-  await run();
-
-  expect(spies.exportVariable).not.toHaveBeenCalled();
-  expect(spies.setFailed).not.toHaveBeenCalled();
-});
-
 test("fails when the installed CLI does not report a version", async () => {
   process.env.GITHUB_WORKSPACE = createWorkspace({
     "package-lock.json": createPackageLock("2.46.0"),

src/main.ts

@@ -7,7 +7,6 @@ import { fileURLToPath } from "node:url";
 
 export const CLI_CONFIG_REGISTRY = "SUPABASE_INTERNAL_IMAGE_REGISTRY";
 const REGISTRY_VERSION = "1.28.0";
-const DEFAULT_REGISTRY_FALLBACK_VERSION = "2.108.0";
 const VERSIONED_ARCHIVE_VERSION = "2.99.0";
 const DEFAULT_VERSION = "latest";
 const GITHUB_RELEASES_API = "https://api.github.com/repos/supabase/cli/releases/latest";
@@ -329,19 +328,7 @@ export async function run(): Promise<void> {
     core.setOutput("version", installedVersion);
     core.addPath(cliPath);
 
-    if (process.env[CLI_CONFIG_REGISTRY]) {
+    if (version.toLowerCase() === "latest" || semver.order(version, REGISTRY_VERSION) >= 0) {
-      return;
-    }
-
-    const installedVersionNumber = extractConcreteVersion(installedVersion);
-    if (!installedVersionNumber) {
-      throw new Error("Could not determine installed Supabase CLI version");
-    }
-
-    if (
-      semver.order(installedVersionNumber, REGISTRY_VERSION) >= 0 &&
-      semver.order(installedVersionNumber, DEFAULT_REGISTRY_FALLBACK_VERSION) === -1
-    ) {
       core.exportVariable(CLI_CONFIG_REGISTRY, "ghcr.io");
     }
   } catch (error) {