ci: weekly SDK compliance sync via supabase/sdk reusable workflow

[spydon]

Adds a weekly workflow that keeps this repo's sdk-compliance.yaml in sync with new capability IDs from the canonical spec at https://github.com/supabase/sdk.

It's a thin caller for the reusable workflow added in supabase/sdk#65, mirroring the existing validate-capabilities.yml pattern. On a weekly cron it checks out the canonical spec, inserts any missing feature IDs as not_implemented next to their area.group. siblings, and opens a PR here for triage.

• Runs Mondays 06:00 UTC (and on manual dispatch).
• Uses this repo's own GitHub App credentials (app-id APP_ID / PRIVATE_KEY) to open the PR, so no cross-repo permissions are needed.
• Only adds new IDs as not_implemented; real status and symbols are triaged by a maintainer.

Depends on supabase/sdk#65 merging first (the @main reference resolves once it lands).

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 776eca6d-5494-484b-945c-0b196dd34299

📥 Commits

Reviewing files that changed from the base of the PR and between 968cec3 and a9b6ff8.

📒 Files selected for processing (1)

• .github/workflows/sync-compliance.yml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/workflows/sync-compliance.yml

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Added an automated weekly process to keep SDK compliance information synchronized.
  • Added support for manually triggering the synchronization when needed.

Walkthrough

Adds a GitHub Actions workflow named “Sync SDK Compliance Matrix.” It runs weekly on Mondays at 06:00 UTC or through manual dispatch, grants contents and pull request write permissions, and invokes a pinned reusable SDK compliance workflow while forwarding the required application secrets.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

Adds an automated GitHub Actions workflow to keep this repository’s sdk-compliance.yaml synchronized with newly introduced capability IDs from the canonical spec in supabase/sdk, by delegating to the reusable workflow introduced in supabase/sdk#65.

Changes:

• Adds a new scheduled + manually-dispatchable workflow to sync SDK compliance IDs weekly.
• Configures the job to call supabase/sdk’s reusable sync-sdk-compliance.yml workflow.
• Passes GitHub App credentials (from repo secrets) to allow the workflow to open PRs for triage.

[coveralls]

Coverage Report for CI Build 29841381594

Warning

Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes.
Quick fix: rebase this PR. Learn more →

Coverage decreased (-0.1%) to 83.593%

Details

• Coverage decreased (-0.1%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• 217 coverage regressions across 8 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

217 previously-covered lines in 8 files lost coverage.

File	Lines Losing Coverage	Coverage
Sources/RealtimeV2/WebSocket/URLSessionWebSocket.swift	88	63.35%
Sources/Supabase/SupabaseClient.swift	48	76.87%
Sources/RealtimeV2/RealtimeClientV2.swift	33	87.01%
Sources/Auth/Internal/Keychain.swift	21	25.55%
Sources/RealtimeV2/Types.swift	20	48.94%
Sources/Functions/Types.swift	3	95.65%
Sources/Auth/Internal/URLOpener.swift	2	60.0%
Sources/Helpers/HTTP/RetryRequestInterceptor.swift	2	96.43%

---

Coverage Stats

Relevant Lines:	9740
Covered Lines:	8142
Line Coverage:	83.59%
Coverage Strength:	1102442.47 hits per line

---

💛 - Coveralls

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[github-actions]

⚠️ Capability matrix drift detected

The following capabilities are marked implemented in the matrix but could not be found in swift:

• auth.mfa.enroll → expected symbol: AuthMFA.enrollWebAuthnFactor
• auth.mfa.verify → expected symbol: AuthMFA.verifyWebAuthnFactor
• auth.passkey.register_passkey → expected symbol: AuthClient.registerPasskey
• auth.passkey.register_passkey → expected symbol: AuthClient.getPasskeyRegistrationOptions
• auth.passkey.register_passkey → expected symbol: AuthClient.verifyPasskeyRegistration
• auth.passkey.sign_in_with_passkey → expected symbol: AuthClient.signInWithPasskey
• auth.passkey.sign_in_with_passkey → expected symbol: AuthClient.getPasskeyAuthenticationOptions
• auth.passkey.sign_in_with_passkey → expected symbol: AuthClient.verifyPasskeyAuthentication
• realtime.subscriptions.broadcast → expected symbol: BroadcastJoinConfig.encode

The following capabilities are marked implemented in swift but have no registered symbols to verify:

• client.authentication_integration.third_party_auth (no symbols list — cannot confirm implementation exists)
• client.authentication_integration.cross_client_token_sync (no symbols list — cannot confirm implementation exists)
• client.authentication_integration.oauth_flow_type (no symbols list — cannot confirm implementation exists)
• client.authentication_integration.session_url_detection (no symbols list — cannot confirm implementation exists)
• client.session_management.custom_storage (no symbols list — cannot confirm implementation exists)
• client.session_management.persist_session (no symbols list — cannot confirm implementation exists)
• client.request_configuration.global_headers (no symbols list — cannot confirm implementation exists)
• client.observability.trace_propagation (no symbols list — cannot confirm implementation exists)
• database.query.from_table (no symbols list — cannot confirm implementation exists)
• database.query.select (no symbols list — cannot confirm implementation exists)
• database.query.schema_selection (no symbols list — cannot confirm implementation exists)
• database.query.rpc (no symbols list — cannot confirm implementation exists)
• database.mutate.insert (no symbols list — cannot confirm implementation exists)
• database.mutate.update (no symbols list — cannot confirm implementation exists)
• database.mutate.upsert (no symbols list — cannot confirm implementation exists)
• database.mutate.delete (no symbols list — cannot confirm implementation exists)
• database.mutate.select_after_mutation (no symbols list — cannot confirm implementation exists)
• database.using_filters.eq (no symbols list — cannot confirm implementation exists)
• database.using_filters.neq (no symbols list — cannot confirm implementation exists)
• database.using_filters.gt (no symbols list — cannot confirm implementation exists)
• database.using_filters.gte (no symbols list — cannot confirm implementation exists)
• database.using_filters.lt (no symbols list — cannot confirm implementation exists)
• database.using_filters.lte (no symbols list — cannot confirm implementation exists)
• database.using_filters.like (no symbols list — cannot confirm implementation exists)
• database.using_filters.ilike (no symbols list — cannot confirm implementation exists)
• database.using_filters.is (no symbols list — cannot confirm implementation exists)
• database.using_filters.in (no symbols list — cannot confirm implementation exists)
• database.using_filters.contains (no symbols list — cannot confirm implementation exists)
• database.using_filters.contained_by (no symbols list — cannot confirm implementation exists)
• database.using_filters.range_gt (no symbols list — cannot confirm implementation exists)
• database.using_filters.range_gte (no symbols list — cannot confirm implementation exists)
• database.using_filters.range_lt (no symbols list — cannot confirm implementation exists)
• database.using_filters.range_lte (no symbols list — cannot confirm implementation exists)
• database.using_filters.range_adjacent (no symbols list — cannot confirm implementation exists)
• database.using_filters.overlaps (no symbols list — cannot confirm implementation exists)
• database.using_filters.text_search (no symbols list — cannot confirm implementation exists)
• database.using_filters.match (no symbols list — cannot confirm implementation exists)
• database.using_filters.not (no symbols list — cannot confirm implementation exists)
• database.using_filters.or (no symbols list — cannot confirm implementation exists)
• database.using_filters.raw (no symbols list — cannot confirm implementation exists)
• database.using_filters.regex (no symbols list — cannot confirm implementation exists)
• database.using_filters.regex_icase (no symbols list — cannot confirm implementation exists)
• database.using_filters.is_distinct (no symbols list — cannot confirm implementation exists)
• database.using_filters.like_all (no symbols list — cannot confirm implementation exists)
• database.using_filters.like_any (no symbols list — cannot confirm implementation exists)
• database.using_filters.ilike_all (no symbols list — cannot confirm implementation exists)
• database.using_filters.ilike_any (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.order (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.limit (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.range (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.single_row (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.strip_nulls (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.format_csv (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.format_geojson (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.max_affected_rows (no symbols list — cannot confirm implementation exists)
• database.using_modifiers.request_cancellation (no symbols list — cannot confirm implementation exists)
• database.configuration.auto_retry (no symbols list — cannot confirm implementation exists)
• functions.invocation.invoke (no symbols list — cannot confirm implementation exists)
• functions.invocation.set_auth_token (no symbols list — cannot confirm implementation exists)
• functions.invocation.method_override (no symbols list — cannot confirm implementation exists)
• functions.invocation.streaming_response (no symbols list — cannot confirm implementation exists)
• functions.invocation.request_cancellation (no symbols list — cannot confirm implementation exists)
• realtime.client.connect (no symbols list — cannot confirm implementation exists)
• realtime.client.disconnect (no symbols list — cannot confirm implementation exists)
• realtime.client.get_channels (no symbols list — cannot confirm implementation exists)
• realtime.client.remove_channel (no symbols list — cannot confirm implementation exists)
• realtime.client.remove_all_channels (no symbols list — cannot confirm implementation exists)
• realtime.client.connection_state (no symbols list — cannot confirm implementation exists)
• realtime.client.listen_heartbeats (no symbols list — cannot confirm implementation exists)
• realtime.client.set_auth_token (no symbols list — cannot confirm implementation exists)
• realtime.client.channel (no symbols list — cannot confirm implementation exists)
• realtime.channel.subscribe (no symbols list — cannot confirm implementation exists)
• realtime.channel.unsubscribe (no symbols list — cannot confirm implementation exists)
• realtime.channel.send (no symbols list — cannot confirm implementation exists)
• realtime.channel.broadcast_http (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.postgres_changes (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.subscribe_presence (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.private_channel (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.broadcast_self (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.broadcast_ack (no symbols list — cannot confirm implementation exists)
• realtime.subscriptions.broadcast_replay (no symbols list — cannot confirm implementation exists)
• realtime.presence.track (no symbols list — cannot confirm implementation exists)
• realtime.presence.untrack (no symbols list — cannot confirm implementation exists)
• realtime.presence.presence_key (no symbols list — cannot confirm implementation exists)
• realtime.configuration.custom_websocket_transport (no symbols list — cannot confirm implementation exists)
• realtime.configuration.reconnect_backoff (no symbols list — cannot confirm implementation exists)
• realtime.configuration.heartbeat_interval (no symbols list — cannot confirm implementation exists)
• realtime.configuration.access_token_callback (no symbols list — cannot confirm implementation exists)
• realtime.configuration.deferred_disconnect (no symbols list — cannot confirm implementation exists)
• realtime.configuration.custom_logger (no symbols list — cannot confirm implementation exists)
• realtime.configuration.binary_protocol (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.get_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.list_file_buckets (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.update_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.delete_file_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.empty_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.access_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.upload (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.download (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.move (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.copy (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.remove (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.create_signed_url (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.create_signed_urls (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.create_signed_upload_url (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.upload_with_signed_url (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.update_file (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.file_exists (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.file_info (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.list_files_paginated (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.copy_cross_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.move_cross_bucket (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.upload_with_metadata (no symbols list — cannot confirm implementation exists)
• storage.file_buckets.url_cache_nonce (no symbols list — cannot confirm implementation exists)

These may have been renamed, removed, or never registered. Please update the capability matrix.
See: https://github.com/supabase/sdk/blob/main/docs/capability-matrix.md

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

.github/workflows/sync-compliance.yml:13

• PR description says the reusable workflow reference will be @main once supabase/sdk#65 lands, but this workflow is pinned to a specific commit SHA. Please clarify intent: either update the PR description to match the pin, or switch this uses: ref to @main/a tagged release if you want automatic updates.

    uses: supabase/sdk/.github/workflows/sync-sdk-compliance.yml@faba359a57d270bbbf68fd6b583db0604ddce8af

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.