fix: set default_txn_read_only on supabase_read_only_user

Author: soedirgo

ansible/vars.yml

@@ -9,9 +9,9 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.5.1.003-orioledb"
-  postgres17: "17.4.1.060"
-  postgres15: "15.8.1.117"
+  postgresorioledb-17: "17.5.1.004-orioledb"
+  postgres17: "17.4.1.061"
+  postgres15: "15.8.1.118"
 
 # Non Postgres Extensions
 pgbouncer_release: "1.19.0"

migrations/db/migrations/20250710151649_supabase_read_only_user_default_transaction_read_only.sql

@@ -0,0 +1,4 @@
+-- migrate:up
+alter role supabase_read_only_user set default_transaction_read_only = on;
+
+-- migrate:down

nix/tests/expected/roles.out

@@ -86,7 +86,7 @@ order by rolname;
  supabase_admin             | {"search_path=\"$user\", public, auth, extensions",log_statement=none}
  supabase_auth_admin        | {search_path=auth,idle_in_transaction_session_timeout=60000,log_statement=none}
  supabase_functions_admin   | 
- supabase_read_only_user    | 
+ supabase_read_only_user    | {default_transaction_read_only=on}
  supabase_replication_admin | 
  supabase_storage_admin     | {search_path=storage,log_statement=none}
 (29 rows)