fix:

new minor version introduces --restrict-key which we will set
with arbitrary value ONLY IN TESTING context
No one should EVER use the schemas in our repo for restoration
of production databases!

Author: samrose

migrations/schema-15.sql

@@ -2,7 +2,7 @@
 -- PostgreSQL database dump
 --
 
-\restrict wWgHHMzQQcpvhWUMpemmi73YWdLM275u3ztj1caKcgLrT0IBN7ueb4BiLBSxtJt
+\restrict SupabaseTestDumpKey123
 
 -- Dumped from database version 15.14
 -- Dumped by pg_dump version 15.14
@@ -999,5 +999,5 @@ CREATE EVENT TRIGGER pgrst_drop_watch ON sql_drop
 -- PostgreSQL database dump complete
 --
 
-\unrestrict wWgHHMzQQcpvhWUMpemmi73YWdLM275u3ztj1caKcgLrT0IBN7ueb4BiLBSxtJt
+\unrestrict SupabaseTestDumpKey123
 

migrations/schema-17.sql

@@ -2,7 +2,7 @@
 -- PostgreSQL database dump
 --
 
-\restrict wJhXZ3zzSxdOnzT40iWgcbF8W1OVaekHNId1sH6S7U0SApyR73uF8dYaLqibgGY
+\restrict SupabaseTestDumpKey123
 
 -- Dumped from database version 17.6
 -- Dumped by pg_dump version 17.6
@@ -1000,5 +1000,5 @@ CREATE EVENT TRIGGER pgrst_drop_watch ON sql_drop
 -- PostgreSQL database dump complete
 --
 
-\unrestrict wJhXZ3zzSxdOnzT40iWgcbF8W1OVaekHNId1sH6S7U0SApyR73uF8dYaLqibgGY
+\unrestrict SupabaseTestDumpKey123
 

nix/tools/dbmate-tool.sh.in

@@ -177,7 +177,21 @@ perform_dump() {
     while [ $attempt -le $max_attempts ]; do
         echo "Attempting pg_dump (attempt $attempt/$max_attempts)"
 
-        if "${PSQLBIN}/pg_dump" -h localhost -p "$PORTNO" -U "$PGSQL_SUPERUSER" -d postgres --schema-only --no-owner --no-privileges > "./db/schema.sql"; then
+        # Build the dump command
+        local dump_cmd="${PSQLBIN}/pg_dump -h localhost -p $PORTNO -U $PGSQL_SUPERUSER -d postgres --schema-only --no-owner --no-privileges"
+        
+        # Only use --restrict-key for standard PostgreSQL 15 and 17 versions
+        # OrioleDB doesn't support this flag yet
+        if [ "$PSQL_VERSION" = "15" ] || [ "$PSQL_VERSION" = "17" ]; then
+            # Use a fixed restrict key for reproducible test dumps
+            # This is safe in testing contexts but should not be used in production
+            dump_cmd="$dump_cmd --restrict-key=SupabaseTestDumpKey123"
+            echo "Using --restrict-key for reproducible dumps (PostgreSQL $PSQL_VERSION)"
+        else
+            echo "Skipping --restrict-key (version: $PSQL_VERSION)"
+        fi
+        
+        if $dump_cmd > "./db/schema.sql"; then
             return 0
         fi
 
@@ -257,7 +271,6 @@ EOSQL
 
     echo "CURRENT_SYSTEM: $CURRENT_SYSTEM"
     if [ -f "./db/schema.sql" ]; then
-        trim_schema
         cp "./db/schema.sql" "./migrations/schema-$PSQL_VERSION.sql"
         echo "Schema file moved to ./migrations/schema-$PSQL_VERSION.sql"
         echo "PSQLBIN is $PSQLBIN"