Supabase Changelog

Changelog Product Developers Solutions Pricing Docs Blog 106.1K Sign in Start your project Open main menu Changelog New updates and product improvements RSS Copy as Markdown Developer Update - July 2026 Jul 9, 2026 self-hosted realtime GraphQL integrations wrappers multigres Here's everything that happened with Supabase in the last month: OpenCode integrates with Supabase # OpenCode connects your agent to your Supabase database, Edge Functions, and logs. It configures the MCP setup for you. Read the blog → TanStack DB syncs with Supabase # @supabase-labs/tanstack-db syncs TanStack DB collections with your Supabase tables over PostgREST and Realtime. It's available in alpha. Watch the demo → Wrappers adds a MongoDB foreign data wrapper # Wrappers v0.6.2 lets you query and join MongoDB collections directly from Postgres. It also fixes OpenAPI FDW pagination. Read the docs → Multigres supports LISTEN/NOTIFY across pooled connections # Multigres keeps Postgres LISTEN/NOTIFY working even when connections are pooled away from clients. Read the blog → Realtime Broadcast supports binary payloads # Realtime Broadcast now sends and receives binary payloads in addition to JSON. Binary payloads cut encoding overhead for cases like sensor telemetry and live screenshot streaming. The Dart, Kotlin, and Python clients don't support binary payloads yet, and older SDK versions silently drop them. Update your client before you rely on it. Read the docs → Quick Product Announcements # Postgres log_connections now defaults to off for new projects on all tiers as of July 9, and existing Free and Pro projects are being migrated to the new default. [ GitHub Discussion ] pg_graphql v1.6.2 ships with GraphQL schema introspection off by default, so enable it per schema if you use GraphiQL or codegen tools. [ GitHub Discussion ] Audit Log Drains are available, so you can stream your project's audit logs to an external destination. [ Docs ] Connect copies every environment variable @supabase/server needs in a single click. [ Demo ] Self-hosted Docker defaults changed: API_EXTERNAL_URL now includes the /auth/v1 prefix, and the default image moves to Postgres 17. [ GitHub Discussion ] Meet the Supabase team # Supabase Live: Building high quality Supabase apps using TRAE. July 22 at 7 pm PT. [ Register ] Supabase x Claude Community Meetup in Dublin. [ Register ] Hangout with the Supabase team during Casual Wednesdays on Discord at 10:00 am PT. [ Join ] Made with Supabase # Shapeships: A multiplayer browser game using simultaneous-turn mechanics, built on an authoritative Supabase backend. [ Website ] Blind OS: An autonomous outreach and client-management system that finds leads, qualifies them, and follows up on payments. [ Website ] rlsautotest: Generates pgTAP tests and seed data from your Supabase RLS policies to prove, per table and identity, who can read or write which rows. [ GitHub ] [ PyPI ] Heym: An open-source visual AI workflow automation platform with a native Supabase node for querying and mutating tables through PostgREST. [ GitHub ] Community Highlights # A practical security checklist for non-technical builders, with Row Level Security flagged as the single most important fix. [ Read ] A transparent cost breakdown for a personal life-management system built with Claude Code and Supabase, plus an honest look at the security tradeoffs of self-hosting your own data. [ Read ] A widely-shared guide to vibecoding with Claude Code positions Supabase as the default data layer and login system in its standard setup flow. [ Read ] This discussion was created from the release Developer Update - July 2026 . log_connections is to be turned off by default for new projects and existing Free/Pro projects Jun 22, 2026 We are changing the default value of the Postgres log_connections setting from on to off for new projects, and will be migrating all Free and Pro projects to the new default configuration. This reduces log volume and noise, and aligns with industry-standard defaults (RDS, GCP Cloud SQL also default to off). We will be exposing this configuration to all users via dashboard and API for better log management, with log_connnections and log_disconnections now available via the Update postgres config API route and will take effect from 9 July onwards. Who's affected # New projects (all tiers) created after 9 July will have log_connections=off by default. Existing Teams + Enterprise customers (including HIPAA add-on customers) - Configuration is unchanged Existing Free / Pro customers - log_connections will be turned off from 9 July. This configuration can be re-enabled below How to re-enable # You can re-enable log_connections via the dashboard under Database > Settings. It can also be re-enabled programmatically via the Management API via the Update postgres config API route . Changes will only take effect from 9 July onwards. Learn more about PostgreSQL logging settings in our logging documentation . Self-hosted Supabase: API_EXTERNAL_URL to include /auth/v1 Jun 18, 2026 auth self-hosted What's Changing? # The week of July 6, 2026, the default self-hosted Supabase configuration for API_EXTERNAL_URL will change to include the /auth/v1 path prefix: API_EXTERNAL_URL will default to http://localhost:8000/auth/v1 (previously http://localhost:8000 ) GOTRUE_JWT_ISSUER in docker-compose.yml will change to ${API_EXTERNAL_URL} (the actual URL will stay unchanged) OAuth redirect configuration placeholders in docker-compose.yml will become ${API_EXTERNAL_URL}/callback The API gateway routes for SAML SSO move from /sso/saml/* to /auth/v1/sso/saml/* , so SAML ACS and metadata endpoints become …/auth/v1/sso/saml/acs and …/auth/v1/sso/saml/metadata This aligns self-hosted Supabase with the platform behavior, and the CLI . Why? # Consistency across deployments. API_EXTERNAL_URL behaves identically on platform, self-hosted, and CLI. Custom OAuth providers work out of the box. GoTrue builds custom-provider callback URLs as API_EXTERNAL_URL + /callback . With the prefix now in the base URL, that resolves to …/auth/v1/callback and matches the existing API gateway route. SAML aligns with the /auth/v1 convention used by every other auth endpoint, rather than living at a bare /sso/saml/* path. The docs become accurate. The guidance that "your callback URL is built from API_EXTERNAL_URL " is now literally true, instead of relying on the /auth/v1 prefix being manually prepended in the compose file. Am I Affected? # You are affected if you run self-hosted Supabase from the ./docker directory and pull updates from master , and any of the following apply: You've overridden API_EXTERNAL_URL in your .env (e.g. https://my-domain.com ) - you'll need to change it to https://my-domain.com/auth/v1 . You maintain a customized docker-compose.yml with OAuth providers - the redirect URIs change from ${API_EXTERNAL_URL}/auth/v1/callback to ${API_EXTERNAL_URL}/callback to avoid a doubled /auth/v1 prefix. You use SAML SSO - your IdP points at the old /sso/saml/* endpoints and must be updated to /auth/v1/sso/saml/* . This is the main breaking case. You are not affected if you: Use the Supabase platform Have OAuth providers registered with Google/GitHub/etc. - the final callback URL is unchanged ( …/auth/v1/callback ), so no re-registration in the provider's developer console is needed Don't use SAML SSO and pull the new docker-compose.yml and .env.example together without local changes - the defaults stay consistent What Should I Do? # If you pull the updated docker-compose.yml and .env.example together with no customizations, no action is required unless you use SAML SSO. If you've customized API_EXTERNAL_URL : Append /auth/v1 to your value (e.g. https://my-domain.com → https://my-domain.com/auth/v1 ) If your override file sets OAuth redirect URIs, change them from ${API_EXTERNAL_URL}/auth/v1/callback to ${API_EXTERNAL_URL}/callback Restart the stack If you use SAML SSO: Pull the updated docker-compose.yml (or update your Kong and Envoy routes to /auth/v1/sso/saml/acs and /auth/v1/sso/saml/metadata ) Restart the stack Re-fetch your service provider metadata from {API_EXTERNAL_URL}/auth/v1/sso/saml/metadata and update your IdP (ACS URL, SP entity ID) with the new endpoints See the self-hosted SAML SSO guide If you'd rather defer: keep your existing API_EXTERNAL_URL without the /auth/v1 suffix and retain your current OAuth/SAML configuration. This is a default change, not a removal - but we recommend aligning soon, since custom OAuth providers won't work without it. Rollout # Date Change 2026-06-18 This changelog published 2026-07-06...10 Updated self-hosting OAuth and SAML SSO docs published 2026-07-06...10 Default change ships in the next self-hosted Supabase release 2026 2026 Realtime Broadcast now supports binary payloads Jun 11 realtime Developer Update - June 2026 Jun 6 docs cli auth multigres Changes to Email Template Customisation on Free Tier Jun 3 Passkeys for Supabase Auth (Beta) May 28 Feature Preview: Temporary token-based database access May 25 database Breaking change in pg_graphql 1.6.0 — GraphQL introspection disabled by default May 25 extensions breaking-change postgres Self-hosted Supabase: making Analytics and Vector opt-in May 18 self-hosted analytics Self-hosted Supabase: switching Studio from supabase_admin to postgres (breaking change) May 18 self-hosted database breaking-change Self-hosted Supabase: upgrading from PG 15 to 17 (breaking change) May 18 self-hosted database breaking-change Deprecation Notice: Support for Postgres 14 ending on 1st July 2026 May 12 Deprecation Notice: Dropping Support for Node.js 20 May 8 supabase-js Developer Update - May 2026 May 7 security dashboard edge functions postgREST auth database breaking-change wrappers branching sdk postgres Breaking Change: OAuth token endpoint will return HTTP 200 instead of 201 May 1 integrations breaking-change Breaking Change: Tables not exposed to Data and GraphQL API automatically Apr 28 database GraphQL breaking-change Feature Preview: RLS Tester Apr 24 dashboard Automatic PostgREST retries for transient errors Apr 20 supabase-py supabase-js supabase-flutter supabase-swift Upcoming: Tax Collection on Supabase Invoices Apr 17 billing [Public Alpha] Declarative Schema Management with pg-delta Apr 16 cli Developer Update - April 2026 Apr 9 docs dashboard branching multigres Edge Functions rate limits on recursive/nested Edge Functions calls Mar 11 edge functions Developer Update - March 2026 Mar 5 docs edge functions storage analytics multigres Breaking Change: Removing access to OpenAPI spec via the anon key Feb 17 postgREST breaking-change Developer Update - February 2026 Feb 5 security edge functions ai Queue table Inserts, edits and deletes on the table editor Feb 4 dashboard Breaking Change: pg_graphql no longer enabled automatically (within approx 3 weeks from today) Jan 26 breaking-change SQL snippets can now be saved in local Studio Jan 21 cli self-hosted Developer Update - January 2026 Jan 8 docs security dashboard supabase-py ai 2025 2025 Data API upgrade to PostgREST v14 Dec 11 postgREST Developer Update - December 2025 Dec 10 edge functions auth ai analytics infra etl [Public Alpha] Manage Vector Buckets from the dashboard Nov 26 ai Dashboard Updates (101125 - 251125) Nov 24 dashboard Notify users about security-sensitive actions on their accounts Nov 11 security auth [Public Alpha] Manage Analytics Buckets from the dashboard Nov 4 dashboard storage analytics Dashboard Updates (201025 - 031125) Nov 3 dashboard Enhanced Type Inference for Embedded Functions (Computed Relationships) Oct 22 supabase-js Dashboard Updates (061025 - 201025) Oct 21 dashboard Supabase Remote MCP server Oct 10 mcp Potential breaking change in pgmq from 1.4.4 to 1.5.1 and temporary halt on upgrade for existing projects Oct 8 postgres Dashboard Updates (220925 - 061025) Oct 6 dashboard Supabase JS Client Libs: Migration to Monorepo Oct 2 supabase-js Dashboard Updates (080925 - 220925) Sep 24 dashboard Changes to Custom JWT and Signing Keys issue resolution Sep 17 postgREST Dashboard Updates (180825 - 010925) Sep 1 dashboard Personal Access Tokens: Expiration & Usage Tracking Aug 27 security 3x cheaper egress for cache hits Aug 22 storage billing OAuth 2.1 Server Capabilities for Supabase Auth Aug 19 auth All regions now run Deno 2.1 compatible release Aug 15 edge functions Change in `realtime-js` affecting Node.js < 22 Aug 12 realtime persist-in-search Deprecation Notice: Dropping support for python's gotrue and supafunc Aug 8 supabase-py Dashboard Navigation Updates: Project Settings Aug 4 dashboard supabase v17.4.1.062 was withdrawn Jul 23 supabase-js Unified Logs Jul 17 dashboard Deprecation Notice: Dropping Support for Node.js 18 Jul 16 supabase-js Realtime Settings Jul 11 realtime Update to Edge Functions Regional Invocations Jul 3 edge functions Deno 2.1 Preview - Hosted Environment Jul 1 edge functions Forthcoming Postgres 17 Release Notes May 22 infra Feature Preview: Tabs for Table and SQL Editor May 13 dashboard Developer Update - April 2025 May 7 security dashboard mcp Dashboard Updates [210425 - 050525] May 6 dashboard Project scoped roles now available in Team plans Apr 21 security Dashboard Updates [070425 - 210425] Apr 21 dashboard Developer Update - March 2025 Apr 8 dashboard mcp postgres Dashboard Updates [240225 - 070425] Apr 7 dashboard Supabase Management API `GET` Logs Restrictions Apr 1 infra Upcoming Change: Improved Experimental Routing for Read Replica Load Balancers Mar 27 infra Dedicated Pooler with PgBouncer Mar 25 infra Restricting Access on Auth, Storage, and Realtime Schemas on April 21, 2025 Mar 18 auth storage realtime Developer Update - February 2025 Mar 7 dashboard edge functions ai billing postgres Deno 2.1 Preview **local only** Mar 7 edge functions Greatly increased Third-Party Auth MAU quota for Free and Paid Plans Mar 3 billing Dashboard Updates [10/02/25 - 24/02/25] Feb 25 dashboard Deploy and update Edge Functions using the Management API Feb 20 edge functions Feature Preview: Inline Editor Feb 19 dashboard Upcoming breaking change to Dashboard Navigation Feb 18 dashboard breaking-change Deploy Edge Functions from CLI without needing Docker + import files outside of supabase directory Feb 14 cli edge functions Dashboard Updates [27/01/25 - 10/02/25] Feb 11 dashboard Developer Update - January 2025 Feb 7 dashboard auth ai analytics Deprecation of Fly.io Postgres Managed by Supabase on April 11, 2025 Feb 7 infra Dashboard Updates [13/01/25 - 27/01/25] Jan 28 dashboard Relaxing Database Size limit on Free Plan - 0.5 GB Database Size per project Jan 27 billing Developer Update - December 2024 Jan 23 security dashboard ai Enhanced Type Inference for JSON Fields in supabase-js Jan 20 supabase-js Add static files to Edge Functions Jan 15 edge functions Supabase Connection Pooler Deprecating Session Mode on Port 6543 on February 28, 2025 Jan 13 infra Dashboard Updates [30/12/24 - 13/01/25] Jan 13 dashboard Credit Balance Top Up Jan 13 billing Type validation for query filter values in supabase-js Jan 9 supabase-js Use a custom NPM registry for Edge Function dependencies Jan 7 edge functions 2024 2024 Dashboard Updates [09/12/24 - 23/12/24] Dec 24 dashboard Dashboard Updates [18/11/24 - 09/12/24] Dec 10 dashboard Slack V1 OAuth Provider Deprecated in favour of Slack (OIDC) Dec 2 auth Removal of app.settings.jwt_secret from the database Nov 22 security Dashboard Updates [04/11/24 - 18/11/24] Nov 18 dashboard `supabase-js` release candidate `2.46.2-rc.3` incoming types inferences for PostgREST fixes and feedbacks Nov 6 postgREST supabase-js Write Edge Functions in pure JavaScript instead of using TypeScript Nov 5 edge functions Use `deno.json` configuration file in Edge Functions Nov 5 edge functions Dashboard Updates [21/10/24 - 04/11/24] Nov 4 dashboard auth Import NPM packages from private registries in Edge Functions Oct 30 edge functions Dashboard Updates [07/10/24 - 21/10/24] Oct 21 dashboard Developer Update - September 2024 Oct 10 dashboard edge functions Improved docs information architecture Oct 9 docs Dashboard Updates [23/09/24 - 07/10/24] Oct 7 dashboard XHTML responses are only allowed with a Custom Domain enabled Oct 2 infra Supabase Platform Access Control: Project Permissions Breaking Changes on October 15, 2024 Sep 24 security breaking-change Dashboard Weekly Updates [16/09/24 - 23/09/24] Sep 23 dashboard Projects on XL and larger compute add-ons can now create up to 5 Read Replicas. Sep 22 infra Supabase Auth: Changes to default email provider Sep 18 auth Developer Update - August 2024 Sep 16 postgREST auth realtime supabase-py ai wrappers analytics Supabase Auth: Asymmetric Keys support in 2025 Sep 13 auth Upcoming changes to Supabase API Keys Sep 12 breaking-change persist-in-search Dashboard Weekly Updates [02/09/24 - 09/09/24] Sep 12 dashboard Edge Functions are now Deno 1.45 compatible Sep 10 edge functions Dashboard Weekly Updates [26/08/24 - 02/09/24] Sep 2 dashboard Dashboard Weekly Updates [26/08/24 - 30/08/24] Aug 30 dashboard Moving to hourly usage-based billing for databases, based on disk consumption Aug 23 billing Threshold for transitioning projects to physical backups lowered to 15GB Aug 19 infra Developer Updates - July 2024 Aug 9 billing infra postgres Let's Encrypt cross-signed chain will no longer be used for Custom Domains after September 9, 2024 Aug 9 breaking-change infra Improved invoices and more timely usage data Aug 8 billing Moving to hourly usage-based billing for IPv4, Custom Domain and Point-in-time recovery Aug 7 billing Moving to hourly billing for Storage Size Aug 2 billing Wrappers Wasm FDW is on Public Alpha Jul 30 wrappers Developer Updates - June 2024 Jul 24 docs dashboard edge functions billing analytics DigiCert no longer being used as the CA for Supabase HTTP APIs Jul 22 security breaking-change Edge Functions: Deploy More Functions at No Extra Cost Jul 18 billing Supabase Platform Access Control: Organization Permissions Breaking Changes on July 26, 2024 Jul 15 breaking-change Dashboard Weekly Updates [08/07/24 - 15/07/24] Jul 15 dashboard Postgres 13 Deprecation Notice Jul 12 postgres Dashboard Weekly Updates [01/07/24 - 08/07/24] Jul 9 dashboard Dashboard Weekly Updates [17/06/24 - 24/06/24] Jun 24 dashboard Paused Free Plan projects are restorable for 90 days Jun 24 infra Edge Functions are now Deno 1.43 compatible Jun 18 edge functions Developer Updates - May 2024 Jun 18 dashboard edge functions auth realtime ai Dashboard Weekly Updates [03/06/24 - 10/06/24] Jun 11 dashboard @supabase/ssr updates and roadmap towards v1.0.0 Jun 5 auth Log Drains Private Alpha May 22 analytics Updated deployment instructions for supabase-grafana monitoring application May 17 analytics Dashboard Weekly Updates [06/05/24 - 13/05/24] May 15 dashboard Developer Updates - April 2024 May 8 security auth storage ai infra JSR modules are supported in Edge Functions & Edge Runtime May 7 edge functions Dashboard Weekly Updates [22/04/24 - 29/04/24] Apr 30 dashboard Dashboard Weekly Updates [15/04/24 - 22/04/24] Apr 22 security dashboard auth storage wrappers Platform Updates: March 2024 Apr 6 infra Realtime Broadcast and Presence Authorization Apr 4 realtime Increased Supavisor Client Connection Limits Across Paid Plans Apr 4 infra Dashboard Weekly Updates [18/03/24 - 25/03/24] Mar 26 dashboard Migration to v2 platform architecture Mar 20 infra Dashboard Weekly Updates [04/03/24 - 11/03/24] Mar 12 dashboard Platform Updates: February 2024 Mar 6 postgREST ai infra Dashboard Weekly Updates [26/02/24 - 04/03/24] Mar 4 dashboard Dashboard Weekly Updates [19/02/24 - 26/02/24] Feb 26 dashboard Paid organizations can now launch projects on bigger compute immediately Feb 20 billing infra Dashboard Weekly Updates [12/02/24 - 19/02/24] Feb 19 dashboard Dashboard Weekly Updates [05/02/24 - 12/02/24] Feb 13 dashboard Platform Updates: January 2024 Feb 6 dashboard edge functions storage infra Dashboard Weekly Updates [22/01/24 - 29/01/24] Jan 30 dashboard Dashboard Weekly Updates [15/01/24 - 22/01/24] Jan 22 dashboard Supavisor starts enforcing Network Restrictions Jan 17 infra IPv4 addon for projects available Jan 17 infra Dashboard Weekly Updates [08/01/24 - 15/01/24] Jan 15 dashboard Supavisor 1.1.6 Jan 11 infra Platform Updates December 2023 Jan 11 infra Supavisor 1.1.5 Jan 10 infra Dashboard Weekly Updates [01/01/24 - 01/08/24] Jan 8 dashboard Supavisor v1.1.2 - allow_list and client_heartbeat_interval Jan 5 infra Threshold for transitioning projects to physical backups lowered to 40GB Jan 3 infra 2023 2023 Dashboard Weekly Updates [11th Dec - 18th Dec] Dec 18 dashboard Supavisor 1.0 Dec 13 infra Improved usage insights and transparency Dec 5 billing Dashboard Weekly Updates [27th - 4th Dec] Dec 5 dashboard Directly updating rows in the `cron.job` table is no longer allowed Nov 29 database breaking-change Dashboard Weekly Updates [20th Nov - 27th Nov] Nov 27 enhancement dashboard LinkedIn OAuth Provider deprecated in favour of LinkedIn (OIDC) Provider Nov 24 auth breaking-change Edge Functions secrets should now get updated upon resetting DB password or JWT secret Nov 15 edge functions Improved Realtime reliability when migrations fail for a project Nov 9 realtime Column Encryption is SQL-only now Nov 9 dashboard Connections to Postgres directly from an edge function are secured with SSL Nov 9 enhancement edge functions Platform updates: October 2023 Nov 6 security dashboard auth storage ai Large databases now use daily physical backups Nov 2 infra Postgres 12 Deprecation Notice Oct 14 postgres Platform update September 2023 Oct 6 edge functions auth realtime ai wrappers infra PGBouncer and IPv4 Deprecation Sep 29 infra Platform updates: August 2023 Sep 8 security dashboard ai billing infra Moving to Org-based billing Aug 31 billing Platform updates June 2023 Jul 7 cli auth storage realtime billing postgres Platform updates: May 2023 Jun 9 security dashboard edge functions auth storage ai postgres Platform updates: April 2023 May 10 dashboard edge functions auth storage GraphQL analytics postgres Platform Update February 2023 Mar 9 dashboard cli edge functions database supabase-js postgres Platform update January 2023 Feb 8 docs auth storage supabase-py ai postgres 2022 2022 Platform Updates November 2022 Dec 8 auth auth-helpers Platform updates: October 2022 Nov 2 edge functions auth storage database supabase-js supabase-flutter postgres Platform Update September 2022 Oct 7 security edge functions auth postgres Security Patch Notice Oct 4 security 2021 2021 Platform updates: 30 Nov 2021 Nov 30 postgREST auth storage realtime postgres October Beta 2021 Nov 8 dashboard postgREST auth self-hosted supabase-js September Beta 2021 Oct 4 auth database supabase-js postgres August Beta 2021 Sep 13 dashboard auth realtime supabase-flutter infra July Beta 2021 Aug 12 dashboard postgREST auth storage supabase-flutter postgres June Beta 2021 Jul 4 auth storage database postgres April Beta 2021 May 5 dashboard storage wrappers Build in a weekend, scale to millions Start your project Request a demo Footer We protect your data. More on Security SOC2 Type 2 Certified HIPAA Compliant ISO 27001 Certified Twitter GitHub Discord Youtube TikTok Instagram Get product updates and news from Supabase. Subscribe Product Pricing Database Auth Functions Realtime Storage Vector Cron Feature Catalog Launch Week Solutions AI Builders No Code Beginners Developers Postgres Devs Vibe Coders Hackathon Contestants Startups Agencies Enterprise Innovation Teams Hosted Postgres B2B SaaS FinServ Healthcare Agents Switch from Firebase Switch from Neon Resources Blog Support System Status Become a Partner Integrations Brand Assets Security & Compliance DPA SOC2 HIPAA Developers Documentation Supabase UI Changelog RSS Community Events & Webinars SupaSquad Contributing Open Source DevTo Company Company Careers General Availability Legal Hub Privacy Policy Privacy Settings Acceptable Use Policy Humans.txt Lawyers.txt Security.txt Contact Us © Supabase Inc