$ the-wire · showcase
CI AI review pipeline matures with parallel passes and judge
By RepoJournal · Filed · About Supabase
The supabase CLI's AI review pipeline now runs Claude and Codex in parallel with a dedicated adjudicator, removing the size cap and fixing a v1.12 regression that hung the workflow.
The supabase/cli repo refined its AI review pipeline [1][2]: `claude-review` and `codex-review` now run in parallel, with a new `adjudicate` job reconciling findings. The size limit is gone. A follow-up [3][4] downgrades `codex-action` from v1.12 to v1.11 after v1.12 caused the `codex-review` step to hang until the 45-minute job timeout on a ~130k-token diff. The adjudicator now runs on >=1 review. slim-services tightened image identity: slim images now match digest-pinned docker.io pins, generated from the pin at build time instead of baking in distroless `65532` [5], with fail-closed behavior when the identity path probe is neither 0 nor 1 [6]. Two postgres fixes ensure `--from-backup` works: chowning the hidden schema.sql [7] and hiding it as root [8]. pg-toolbelt converted ASCII pipeline diagrams to Mermaid, validating all 11 blocks, and fixed stale claims [9]. The mcp server regenerated its management API types from the OpenAPI spec [10].
Action items
- → If you use the AI review pipeline, ensure codex-action is pinned to v1.11 to avoid the v1.12 hang supabase/cli [plan]
- → Review slim images for identity changes; they now match digest-pinned docker.io pins and fail closed on probe errors supabase/slim-services [monitor]
References
- [1] ci(repo): parallel AI review passes with a Codex adjudicator, no size cap ↗ supabase/cli
- [2] ci(repo): parallel AI review passes with a Codex adjudicator, no size cap (#6365) ↗ supabase/cli
- [3] ci(repo): fix codex-action v1.12 hang (downgrade to v1.11), adjudicate on >=1 review (#6380) ↗ supabase/cli
- [4] ci(repo): fix codex-action v1.12 hang (downgrade to v1.11), adjudicate on >=1 review ↗ supabase/cli
- [5] fix(images): match slim identity to digest-pinned docker.io pins ↗ supabase/slim-services
- [6] fix(images): fail closed when the identity path probe is not 0 or 1 ↗ supabase/slim-services
- [7] fix(postgres): chown hidden schema.sql so drop-to can unlink it ↗ supabase/slim-services
- [8] fix(postgres): hide schema.sql as root and exec --version as argv[1] ↗ supabase/slim-services
- [9] docs(pg-delta): convert diagrams to Mermaid and fix stale/incorrect claims ↗ supabase/pg-toolbelt
- [10] chore: regenerate management API types ↗ supabase/mcp