RepoJournal
Supabase @supabase
124 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-13
stories 62
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

REALTIME PATCHES CVE, STUDIO CONSOLIDATES LOGIN FLOWS

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

iambriccardo dnywh
2 people shipped this
iambriccardo @iambriccardo 1 cited dnywh @dnywh 1 cited

Supabase Realtime shipped a security update addressing published CVE vulnerabilities in Decimal and Postgrex dependencies, while the Studio team unified CLI authentication onto a shared interstitial pattern.

The Realtime team [1] moved fast on dependency updates to close the CVE exposure, bundled into v2.94.0 [4] which also ships improved error tagging for metric pusher failures. This follows the pattern of the last 48 hours: small, focused security and observability wins stacking across the platform. On the frontend, Studio's CLI login route [2] now uses the shared connect interstitial layout instead of the legacy API auth pattern—a cleanup that mirrors the organisation invite refactoring work completed earlier this week [5]. The ETL pipeline tightened numeric type handling [3] to respect Postgres storage limits while preserving special values like `money` arrays, solving a class of silent data corruption bugs on BigQuery and ClickHouse syncs. Across all desks, the pattern is consistent: less UI debt, tighter type safety, faster security responses.

$ ls supabase/reviews/ # the step-back reads

the week in review Studio moves to Nitro, CLI stack goes flag-gated the month in review Supabase ships CLI v2, Postgres middleware, and safety rails across Studio
Topics: JavaScript Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on May 13, 2026?
Supabase Realtime shipped a security update addressing published CVE vulnerabilities in Decimal and Postgrex dependencies, while the Studio team unified CLI authentication onto a shared interstitial pattern. In total, 31 commits, 28 pull requests, and 3 releases landed.
Who contributed to Supabase on May 13, 2026?
2 developers shipped this update, including iambriccardo and dnywh.
What were the notable Supabase updates?
fix: update `Decimal` and `Postgrex` due to published CVE (#1862), feat(studio): move CLI login to connect interstitial (#45814), and fix(types): Improve handling of data types.
♥

$ log @supabase --recent

Turbopack build cache disabled, eval results refreshed 4 shipped CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh 70 shipped MCP v0.13.0 gates destructive SQL, CLI stops deleting vector buckets 113 shipped Replicator health probes land, Studio pipeline overview rebuilt 135 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.