Who contributed to Supabase on May 7, 2026?

3 developers shipped this update, including djhi, jordienr, and edgurgel.

What were the notable Supabase updates?

chore: migrate from `next-mdx-remote` to `next-mdx-remote-client`, chore: Bump vulnerable dependencies (#45634), and 15.14.1.116.

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SUPABASE CUTS REACT 18 LOOSE, MOVES TO PRODUCTION-READY STACK

By RepoJournal · Filed 06:03 UTC on May 7, 2026 · About Supabase

3 people shipped this

djhi @djhi 1 cited

jordienr @jordienr 1 cited

edgurgel @edgurgel 1 cited

The platform ditched an archived MDX library and bumped vulnerable dependencies to unblock React 19 adoption across the entire dashboard.

Supabase migrated from the unmaintained `next-mdx-remote` to `next-mdx-remote-client` [1], a maintained fork that clears the path to React 19. The move hits both `apps/www` and supporting infrastructure, solving a critical blocker for modernizing the tech stack. In parallel, the team bumped core SDK dependencies across the workspace [2], tightening security posture and reducing build conflicts—standard hygiene that compounds over time. On the database side, Postgres 15.14.1.116 and 17.6.1.116 shipped with x86 variants [3][4][5], alongside new OrioleDB editions [6][7]. The dashboard picked up a timezone picker in the user dropdown [8], letting teams debug logs in their app's deployment region without touching OS settings—a quality-of-life win for cross-region ops. Realtime 2.92.2 landed a graceful shutdown fix [9] that prevents CDC RLS processes from hanging on connection errors [10], stopping cascading supervisor restarts. Smaller touch: contact email addresses moved from .io to .com [11] for legal, security, and abuse channels.

Action items

→ Verify React 19 compatibility in your integration tests before upgrading next-mdx-remote supabase/supabase [plan]
→ Deploy Realtime 2.92.2 to production to fix CDC RLS hang conditions supabase/realtime [immediate]
→ Update your contact form endpoints if you've hard-coded supabase.io legal addresses supabase/supabase [plan]

References

[1] chore: migrate from `next-mdx-remote` to `next-mdx-remote-client` ↗ supabase/supabase
[2] chore: Bump vulnerable dependencies (#45634) supabase/supabase
[3] 15.14.1.116 ↗ supabase/postgres
[4] 17.6.1.116 ↗ supabase/postgres
[5] 15.14.1.116-x86 ↗ supabase/postgres
[6] 17.6.0.073-orioledb ↗ supabase/postgres
[7] 17.6.0.073-orioledb-x86 ↗ supabase/postgres
[8] feat(studio): add timezone picker to user dropdown ↗ supabase/supabase
[9] v2.92.2 ↗ supabase/realtime
[10] fix: gracefully stop on connect error for cdc rls processes ↗ supabase/realtime
[11] Update www contact us page email addresses from io to com domain (#45616) supabase/supabase

Quick answers

What shipped in Supabase on May 7, 2026?: The platform ditched an archived MDX library and bumped vulnerable dependencies to unblock React 19 adoption across the entire dashboard. In total, 48 commits, 46 pull requests, and 8 releases landed.
Who contributed to Supabase on May 7, 2026?: 3 developers shipped this update, including djhi, jordienr, and edgurgel.
What were the notable Supabase updates?: chore: migrate from `next-mdx-remote` to `next-mdx-remote-client`, chore: Bump vulnerable dependencies (#45634), and 15.14.1.116.

POSTGRES 17.6.1.156 SHIPS WITH ORIOLEDB VARIANT, CLI PORTS NATIVE TYPESCRIPT START COMMAND

Supabase shipped five Postgres releases overnight across three build variants while the CLI ditched its Go binary proxy for native TypeScript in the local dev stack.

javascript 22 shipped 1-min read

@supabase 1 day ago

DOCS CONTENT API NOW PLUGGABLE, RLS LEAK PATCHED IN STUDIO

The MCP server can point at alternative GraphQL endpoints for docs testing, while a critical fix stops Studio from leaking RLS-protected values during cell loads.

javascript 80 shipped 2-min read

@supabase 2 days ago

CLICKHOUSE SCHEMA CORRUPTION FIX LANDS ACROSS ETL STACK

Supabase shipped a critical fix that prevents ClickHouse from destroying newer columns during CDC replay restarts, then propagated the same safety logic across Pulumi and Terraform tooling.

javascript 95 shipped 1-min read

@supabase 3 days ago

PIPELINES HITS PUBLIC ALPHA, REALTIME SQUASHES RACE CONDITION

Supabase Pipelines moves out of private alpha with full schema change support, while the realtime stack hardens against clustering edge cases.

javascript 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.