What supabase/supabase shipped
Written by FoxPlug from the repository's own releases; not affiliated with Supabase. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/supabase/supabase; Supabase did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of November 2, 2026
What shipped
- Self-hosted Supabase v0.8.4 shipped with security fixes for Storage and Functions. Release
- Self-hosted compose file updated to Studio 2026.11.02 and Envoy v1.39.6. Pull request #53017
- Studio now lets you review a pending network restrictions change that was never applied. Pull request #52984
- Studio no longer loses column comment text when a comment contains the sensitivity marker. Pull request #53051
- Fixed the secret API keys query cache entry so creating a secret key no longer shows a failed to load error. Pull request #53075
- Grant-gated query factories now pass caller options so invalidation refetches correctly. Pull request #53088
- Read replica eligibility in Studio now uses the API collation warning instead of a local check. Pull request #53049
- Single api-key reads got a reveal refinement as part of the grants rollout. Pull request #52965
- The connect sheet and project connection popover are now gated on api-keys grants. Pull request #52964
- Home dashboard 7-day and 24-hour service health charts no longer fail after daylight saving time ends. Pull request #53027
Why it matters
This week touched both the hosted Studio and self-hosted deployments: self-hosted users get a release with security fixes and updated component images, while Studio fixes cover API key loading, network restriction reviews and service health chart windows around daylight saving time. The grants rollout for API keys continued across more Studio surfaces, and several small UI and docs fixes landed alongside it.
Changelog entry
- Released self-hosted Supabase v0.8.4 with security fixes for Storage and Functions. Release
- Updated self-hosted compose to Studio 2026.11.02 and Envoy v1.39.6. Pull request #53017
- Studio shows pending network restrictions changes for review. Pull request #52984
- Fixed column comment data loss from the sensitivity marker. Pull request #53051
- Fixed the secret API keys query cache entry. Pull request #53075
- Grant-gated query factories now pass caller options. Pull request #53088
- Read replica eligibility now uses the API collation warning. Pull request #53049
- Fixed service health windows across daylight saving time transitions. Pull request #53027
- Added reveal refinement for single api-key reads. Pull request #52965
- Gated the connect sheet and project connection popover on api-keys grants. Pull request #52964
- Added the InstantDB migration page to the sitemap and docs. Pull request #53074
- Added floating surface shadow utilities for popovers, menus, selects and chart tooltips. Pull request #53009
Self-hosted v0.8.4 is out with security fixes for Storage and Functions. Studio also fixed secret API key loading, network restriction review and 7-day health charts after DST.
This week's updates: self-hosted Supabase v0.8.4 is available with security fixes for Storage and Functions, and the self-hosted compose file now points at Studio 2026.11.02 and Envoy v1.39.6. In Studio, you can review a pending network restrictions change, secret API keys load without errors, column comments containing the sensitivity marker are no longer lost, and the home dashboard's health charts stay within the API limit after daylight saving time ends. The API keys grants rollout also moved forward with gating on the connect sheet and project connection popover.
Week of October 26, 2026
What shipped
- The Assistant chat system prompt now builds its tool guidance from the contracts available to the request, so it no longer names a tool the request does not have. Pull request #52422
- Self-hosted Assistant tools now come from the registry and the allowlist is derived from it, including the fallback tools. Pull request #52468
- Shared API Report now uses minute buckets for short ranges instead of collapsing the last 60 minutes into hourly points. Pull request #52145
- A shared top nav menu in ui-patterns now backs the kb and docs bars with one megamenu and one set of bar buttons. Pull request #52501
- Popover, Select and DropdownMenu content is now clamped to the viewport height. Pull request #49233
- Encrypted FDW server options are now passed through format as %L in getCreateFDWSql. Pull request #52540
- The storage policy footer now stays fixed and visible while reviewing a policy. Pull request #52531
- A navigation race condition that caused ghost redirects on the unmounted SignInPartner view is fixed. Pull request #46594
- Storage docs now cover self-serve URL signing key rotation from the dashboard. Pull request #52522
- The small compute add-on is no longer listed as required in the HIPAA docs. Pull request #52553
Why it matters
This week tightens the Assistant so its prompt and tools come from what the request actually has, and fixes report granularity for short ranges plus several Studio UI and SQL bugs. The docs get new storage key rotation guidance and drop an outdated HIPAA requirement, which changes what self-hosters and HIPAA users need to check.
Changelog entry
- Assistant chat prompt builds tool guidance from available contracts Pull request #52422
- Self-hosted Assistant tools moved to contracts with a derived allowlist Pull request #52468
- Short report ranges use minute buckets Pull request #52145
- Shared top nav menu added to ui-patterns for docs and kb Pull request #52501
- Dropdown content clamped to viewport height Pull request #49233
- FDW server options passed through format as %L Pull request #52540
- Storage policy footer stays visible Pull request #52531
- Fixed ghost redirects on unmounted SignInPartner Pull request #46594
- Docs for rotating storage URL signing keys Pull request #52522
- Removed small compute requirement from HIPAA docs Pull request #52553
- Removed logs.all deprecation banner Pull request #52491
- Fixed grammar in organization not found message Pull request #52276
Assistant tools now come from the registry, short report ranges use minute buckets, and popovers clamp to the viewport. Also: a shared top nav for docs and kb, fixed storage policy footer, FDW option formatting, and docs on rotating storage URL signing keys.
This week the Assistant tools moved to the contracts registry and the chat prompt now builds its tool guidance from what each request has. Short report ranges in Shared API Report now use minute buckets. Popover, Select and DropdownMenu content clamps to viewport height, the storage policy footer stays visible, and encrypted FDW server options pass through format as %L. Docs add self-serve storage URL signing key rotation and drop the small compute requirement from HIPAA.
Week of October 19, 2026
What shipped
- Studio unit tests were trimmed of redundant cases, cutting CI test time from about 14 minutes to about 3 minutes. Pull request #52215
- Cmd+K in the dashboard can now search for database tables, making it possible to find table resources without knowing where they live in the dashboard. Pull request #52205
- Supavisor logs in the Unified Logs interface now have a custom log detail fetcher and logs overview, bringing them closer to the old logs UI. Pull request #52142
- Studio gained a contract type for tools served by the remote MCP server, with
list_extensionsas the first tool migrated. Pull request #52175 - Five more remote MCP tools, including
list_tables,list_edge_functions,list_branches,get_advisorsandquery_logs, were migrated to the new contract type. Pull request #52226 - The docs site added a table of contents disclosure for the mobile breakpoint. Pull request #51651
- Cmd+K results are now sorted by relevance score instead of returning unrelated items first. Pull request #52211
- Cmd+K fuzzy matching was tightened so searches no longer surface items that only match scattered characters. Pull request #52207
- In Cmd+K, pressing backspace while the search input is empty now returns to the first-level navigation. Pull request #52206
- 58 broken anchor links across 53 guide pages were retargeted to the sections that cover the referenced topics. Pull request #52181
Why it matters
This week the dashboard got noticeably faster to use: Cmd+K can find database tables and ranks results by relevance, and Studio test runs dropped from about 14 minutes to about 3 minutes in CI. On the docs side, anchor checking was added to the E2E link checks and a large batch of broken anchors was fixed, while new guidance warns against subscribing to Postgres Changes from servers and clarifies how Postgres should call Edge Functions with the secret key.
Changelog entry
- Removed redundant Studio unit tests, reducing CI test time from about 14 minutes to about 3 minutes. Pull request #52215
- Cmd+K can now search for database tables. Pull request #52205
- Cmd+K results are now sorted by relevance score. Pull request #52211
- Tightened Cmd+K fuzzy matching to reduce irrelevant results. Pull request #52207
- Hitting backspace in Cmd+K with an empty search input returns to the first level. Pull request #52206
- Added a custom log detail fetcher and logs overview for Supavisor in Unified Logs. Pull request #52142
- Added remote tool contracts in Studio, starting with
list_extensions. Pull request #52175 - Migrated
list_tables,list_edge_functions,list_branches,get_advisorsandquery_logsto remote tool contracts. Pull request #52226 - Added a table of contents disclosure for mobile in the docs. Pull request #51651
- Fixed 58 broken anchor links across 53 docs guide pages. Pull request #52181
- Docs E2E link checks now verify anchors, not just that a link resolves to a page. Pull request #52174
- Docs now warn against subscribing to Postgres Changes from servers and point to httpSend or REST for server-side sends. Pull request #51466
This week: Studio unit tests went from about 14 minutes to about 3 minutes in CI. Cmd+K now searches database tables, sorts results by relevance, and returns to the first level on backspace. Docs got 58 broken anchors fixed and a mobile table of contents.
What shipped this week: redundant Studio unit tests were removed, cutting CI test time from about 14 minutes to about 3 minutes. Cmd+K in the dashboard can now search for database tables, sorts results by relevance score, returns to the first level when you hit backspace on an empty search, and no longer shows duplicate results for project integrations. Supavisor logs got a custom log detail fetcher and overview in the Unified Logs interface. Remote MCP tools now have Studio-side contracts, starting with list_extensions and followed by five more tools. In the docs, 58 broken anchor links across 53 guide pages were fixed, anchor checking was added to the E2E link checks, a mobile table of contents was added, and new guidance warns against subscribing to Postgres Changes from servers.
Week of October 12, 2026
What shipped
- Shipped self-hosted Supabase v0.8.3, which includes security fixes for Storage and Realtime. Release
- Updated the self-hosted component list to 0.8.3, including newer Studio and gotrue images. Pull request #51839
- Added a feature page for Supabase Middleware, listed under Edge Functions at General Availability. Pull request #51840
- Published the Supabase Middleware launch post covering how the pipeline works and where it runs. Pull request #51786
- Migrated
execute_sql,deploy_edge_function,rename_chatandload_knowledgeassistant tools to the contract and server factory pattern. Pull request #51803 - Added an unsaved changes guard to the pipeline wizard so closing, header links and page exits ask before discarding. Pull request #51823
- The pipeline wizard now validates publication and initial-sync settings before Review and refreshes publication metadata on Continue. Pull request #51821
- The pipeline wizard now validates destination connection fields for all four destinations before continuing. Pull request #51818
- Fixed log pagination so it keeps full cursor precision instead of truncating to milliseconds, preventing skipped entries with near-identical times. Pull request #51597
- Edge function files in the code view are now sorted by name and the entrypoint is selected by default. Pull request #51796
Why it matters
This week brings a self-hosted release with security fixes for Storage and Realtime, plus a new Middleware launch with its own feature page and blog post. The studio pipeline wizard gained connection and data validation along with an unsaved changes guard, and log pagination no longer misses entries recorded at nearly the same time. Smaller fixes cover edge function file ordering, persisted chart intervals and restore time handling.
Changelog entry
- Self-hosted Supabase v0.8.3: security fixes for Storage and Realtime. Release
- Self-hosted components updated to 0.8.3 with newer Studio and gotrue images. Pull request #51839
- Added the Supabase Middleware feature page under Edge Functions. Pull request #51840
- Added the Supabase Middleware launch blog post. Pull request #51786
- Migrated
execute_sql,deploy_edge_function,rename_chatandload_knowledgeto tool contracts. Pull request #51803 - Pipeline wizard now confirms before discarding unsaved changes on navigation and exit. Pull request #51823
- Pipeline wizard validates publication and initial-sync settings before Review. Pull request #51821
- Pipeline wizard validates destination connection fields for all four destinations. Pull request #51818
- Pipeline creation wizard composed as a full-page four-step flow that keeps values across navigation. Pull request #51776
- Log pagination preserves full cursor precision to avoid skipping entries. Pull request #51597
- Edge function files sorted by name with the entrypoint selected by default. Pull request #51796
- Project home chart interval now remembered per project. Pull request #51833
Self-hosted v0.8.3 is out with Storage and Realtime security fixes. This week also shipped Supabase Middleware with a feature page and launch post, validation and an unsaved changes guard in the pipeline wizard, and a fix so log pagination stops skipping entries.
This week's updates include self-hosted Supabase v0.8.3 with security fixes for Storage and Realtime, along with refreshed Studio and gotrue images in the self-hosted component list. Supabase Middleware now has a feature page and a launch blog post. The pipeline wizard gained connection and data validation plus a guard that asks before discarding unsaved changes. Log pagination now keeps full cursor precision so entries with the same or near-identical timestamps are no longer skipped, edge function files are sorted by name with the entrypoint selected by default, and the project home chart interval is remembered per project.
Week of October 5, 2026
What shipped
- Platform Webhooks in Studio now call the real Management API endpoints instead of mocked data. Pull request #51352
- Organization admins can revoke an approved OAuth app from the OAuth apps menu in org settings. Pull request #50980
- Organization admins can view the grant list for an approved OAuth app using scoped tokens. Pull request #50979
- An authorized apps table was added to organization settings. Pull request #50529
- Clicking an archived file in Storage opens a preview pane showing its former location, archive date, retained versions, and restore or permanent delete actions. Pull request #49679
- The Storage file preview panel now includes version history along with a polished header and buttons. Pull request #49208
- The branch management page shows an empty state that surfaces GitHub connection setup when no preview branches exist yet. Pull request #51393
- The database extensions enable dialog no longer offers a schema selector. Pull request #51440
- The enable-extension dialog copy was clarified for fixed-schema requirements, with layout fixes for narrow screens. Pull request #51463
- A pipeline creation wizard preview foundation was registered in Feature Previews while the existing creation sheet remains default. Pull request #51425
Why it matters
This week Studio gained real backend wiring and clearer controls in a few long-standing areas: Platform Webhooks moved off mocked data onto the Management API, and organization admins can now see grants and revoke approved OAuth apps with scoped tokens. Storage archived files became easier to inspect and restore with a dedicated preview pane and version history, and the branch management page now makes GitHub connection setup visible when preview branches have not been created. A set of Studio dialog and table fixes also removes confusing or broken interactions, such as the database extensions schema selector and the Auth users detail panel close button.
Changelog entry
- Platform Webhooks UI now calls the real Management API endpoints for organization and project webhooks. Pull request #51352
- Organization admins can revoke approved OAuth apps from a menu in org settings. Pull request #50980
- Organization admins can view the grant list for an approved OAuth app using scoped tokens. Pull request #50979
- Added an authorized apps table to organization settings. Pull request #50529
- Archived Storage files open a preview pane with former location, archive date, retained versions, and restore or permanent delete actions. Pull request #49679
- Storage file preview panel now includes version history. Pull request #49208
- Branch management page shows an empty state that surfaces GitHub connection setup. Pull request #51393
- Removed the schema selector from the database extensions enable dialog. Pull request #51440
- Clarified enable-extension dialog copy and fixed footer and horizontal scrolling on narrow screens. Pull request #51463
- Fixed the close buttons on the Auth users and queue message detail panels so they respond to clicks. Pull request #51455
- Enabling SMS MFA on branch projects no longer shows a charge confirmation dialog. Pull request #51459
- Registered a pipeline creation wizard preview behind a Feature Preview flag. Pull request #51425
This week: Platform Webhooks now run on the real Management API, org admins can revoke approved OAuth apps and view their grants, archived Storage files get a preview pane with version history, branch management surfaces GitHub connection setup, and database extensions no longer
This week in Supabase: Studio's Platform Webhooks UI now calls the real Management API instead of mocked data. Organization admins can revoke an approved OAuth app and view the grant list for apps using scoped tokens from org settings. Storage archived files now open a preview pane showing where the file used to live, when it was archived, its retained versions, and actions to restore or permanently delete it. The file preview panel also gained version history. The branch management page shows an empty state that makes GitHub connection setup more obvious when no preview branches exist yet. The database extensions enable dialog no longer asks for a schema, and the enable-extension dialog copy was clarified with layout fixes for narrow screens. Other Studio fixes include the Auth users deta
Week of September 28, 2026
What shipped
- Blog post published announcing Turso joins Supabase. Pull request #51183
- New Compute product landing page with information on ephemeral sandboxes and always-on HTTP services, plus private-alpha waitlist form. Pull request #50899
- Studio now shows a compute waitlist notice when a project is not enrolled, replacing generic errors. Pull request #51224
- Blog post published covering Supabase Select updates including SQL access to project logs, health checks, database connection monitoring, and notebooks. Pull request #51189
- Blog post published about agent-ready local development, declarative database schemas, Supabase Compute, and customizable MCP servers. Pull request #51188
- Blog post published introducing Multigres, OrioleDB, and dbarena with their approaches to Postgres scaling and availability. Pull request #51190
- Documentation added for experimental supabase stack commands and native runtime under local development guides. Pull request #50391
- New go page added at /go/multigres-early-access to request access to Multigres private alpha. Pull request #51162
- Project Settings > API now warns when authenticator role overrides exposed schemas configuration with a reset button. Pull request #50982
- Studio now supports themed pipeline destination logos with light and dark variants through a shared brand-icon registry. Pull request #51073
Why it matters
Supabase Compute is now publicly available with a dedicated landing page and waitlist system, while Select 2026 recap content covers major updates to logging, health monitoring, and agent development. The acquisition of Turso marks a significant expansion, and improvements to local development tooling with experimental stack commands help developers build faster.
Changelog entry
- New Compute product landing page with ephemeral sandboxes and always-on HTTP services Pull request #50899
- Studio displays compute waitlist notice for non-enrolled projects Pull request #51224
- Experimental supabase stack commands documented for running parallel local projects Pull request #50391
- New /go/multigres-early-access page for Multigres private alpha access requests Pull request #51162
- Project Settings API warns when authenticator role overrides exposed schemas Pull request #50982
- Pipeline destination logos now support themed light and dark variants Pull request #51073
- ClickHouse, Snowflake, and DuckLake moved to public alpha Pull request #51195
- QueryEditor and Logs Explorer now support scrolling beyond last line Pull request #51082
- OrioleDB UI conditionally shows Public Alpha or Public Beta based on AMI version Pull request #51162
- DuckLake destination setup form clarified with explicit configuration method choices Pull request #51013
Compute landing page shipped with ephemeral sandboxes and always-on HTTP services. Turso joins Supabase. Experimental stack commands now documented for parallel local projects.
This week marks the arrival of our Compute product landing page featuring ephemeral sandboxes and always-on HTTP services for production workloads. Alongside this, we're announcing that Turso joins Supabase, expanding our platform capabilities. Our Supabase Select 2026 recap covers major updates across build, operate, and scale—including SQL access to project logs, improved health monitoring, and new agent-ready local development features with experimental stack commands.
Week of September 21, 2026
What shipped
- Storage list endpoint migrated from v1 offset pagination to v2 cursor pagination, improving performance on large buckets and fixing case-sensitive folder listing. Pull request #50730
- Unified Logs now supports multi-select with click, shift, and keyboard range selection for easier log management. Pull request #50689
- Project overview map now supports dragging to view instances outside the initial viewport on smaller screens. Pull request #50904
- Fixed foreign server deletion to only remove the selected server instead of dropping all servers sharing the same wrapper. Pull request #50785
- Project homepage now shows recent notebooks when Explorer feature preview is enabled. Pull request #50825
- Observability metrics now support partial loading, displaying available metrics even when some fail to gather. Pull request #50867
- Account audit logs UI redesigned to match Unified Logs for better readability and consistency. Pull request #50799
- Documentation reorganized with a new standalone style guide to consolidate scattered style guidance. Pull request #50742
- Realtime documentation clarified regarding permissions, migrations, and common permission-related errors. Pull request #50735
- Design system now includes unified segmented controls component. Pull request #50738
Why it matters
This week brings improvements across storage performance, logging workflows, and documentation organization. Key updates like storage's cursor pagination and unified logs multi-select make common operations more efficient. The documentation restructuring and clarifications for Realtime reduce friction for new contributors and users.
Changelog entry
- Storage API: Migrated from list v1 (offset) to list v2 (cursor) pagination for improved performance on large buckets Pull request #50730
- Unified Logs: Added multi-select support via click, shift-click, and keyboard range selection Pull request #50689
- Studio: Top section map on project overview now supports dragging for better navigation on smaller viewports Pull request #50904
- Studio: Fixed foreign server deletion to only remove selected server and its tables, not all servers sharing the wrapper Pull request #50785
- Studio: Project homepage now displays four most recent notebooks when Explorer is enabled Pull request #50825
- Observability: Metrics now support partial loading with individual error reporting per metric Pull request #50867
- Studio: Account audit logs redesigned to follow Unified Logs UX for improved readability Pull request #50799
- Docs: Added standalone style guide to consolidate distributed style guidance across repositories Pull request #50742
- Docs: Clarified Realtime permissions, migrations, and common permission-related errors Pull request #50735
- Design System: New segmented controls component for unified control display Pull request #50738
Storage pagination now uses cursors for better large-bucket performance. Unified Logs supports multi-select. Maps are draggable. Foreign servers delete cleanly. Recent notebooks appear on project homepage.
This week's updates focus on performance and usability across the platform. Storage's v2 endpoint now uses cursor pagination instead of offset pagination, handling large buckets more efficiently. Unified Logs gains multi-select capabilities with click, shift, and keyboard range support. The project overview map is now draggable for better visibility on smaller screens. Foreign server deletion is fixed to only remove selected servers. Documentation gets reorganized with a new style guide, and Realtime permissions are clarified based on support patterns. Design system gains segmented controls.
Week of September 14, 2026
What shipped
- High Compliance projects can now opt in to Assistant data access, removing the forced disabled restriction that prevented HIPAA organizations from using the Assistant. Pull request #50548
- Storage explorer now supports deep-linking to specific folders and files with URL parameters for direct navigation. Pull request #50413
- Explorer chat now detects SQL queries and presents a secondary action to run them directly. Pull request #50560
- Pipeline actions and status updates are now reliable with proper backend coordination for resets and restarts. Pull request #50085
- Query explorer now includes download and export actions in the results footer. Pull request #50563
- Nano compute pricing on paid plans now correctly displays in the restore to new project dialog, matching actual billing rates. Pull request #50546
- Resource exhaustion banner now names affected resources and links directly to their relevant metrics and documentation. Pull request #50276
- Double-clicking items in Explorer nav now persists their tabs as permanent. Pull request #50558
- Functions documentation now clarifies the difference between root.env and supabase/functions/.env files based on reader feedback. Pull request #50422
- Pipelines documentation now includes Snowflake materialization examples. Pull request #50571
Why it matters
This week focused on improving developer experience in the studio and documentation. High Compliance projects regain Assistant access, storage explorer gains deep-linking for better navigation, and pipeline reliability improves with proper backend coordination. Documentation updates address recurring questions about functions and add missing examples for Pipelines.
Changelog entry
- High Compliance projects can opt into Assistant data access Pull request #50548
- Storage explorer supports deep-linking to folders and files Pull request #50413
- Explorer chat detects SQL queries and presents run action Pull request #50560
- Pipeline actions and status updates are now reliable Pull request #50085
- Query results can be downloaded and exported Pull request #50563
- Nano compute pricing displays correctly on paid plans Pull request #50546
- Resource exhaustion banner links to relevant metrics Pull request #50276
- Double-click Explorer items to persist their tabs Pull request #50558
- Functions documentation clarifies.env file usage Pull request #50422
- Pipelines documentation includes Snowflake examples Pull request #50571
Storage explorer now supports deep-linking to folders and files. High Compliance projects can opt into Assistant data access. Pipelines are more reliable with proper backend coordination. Explore the latest in Studio and docs.
This week we shipped several quality-of-life improvements across Studio and documentation. Storage explorer now supports deep-linking to specific folders and files, making navigation easier. High Compliance projects can now opt into Assistant data access, previously restricted. Pipeline actions are more reliable with improved backend coordination. Functions documentation now clarifies the difference between.env files based on developer feedback. Plus improvements to query export, compute pricing displays, and resource exhaustion alerts.