RepoJournal
Supabase @supabase
124 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-14
stories 73
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

SUPABASE PATCHES SEARCH AND SECURITY GAPS ACROSS PLATFORM

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

iambriccardo jgoux edgurgel
3 people shipped this
iambriccardo @iambriccardo 1 cited jgoux @jgoux 1 cited edgurgel @edgurgel 1 cited

Quote escaping fix closes critical search vulnerabilities while ETL and Realtime ship performance improvements that ripple across the stack.

The main event: a quote escaping patch [1] resolves two separate search regressions in the dashboard, paired with a fix ensuring the integrations marketplace actually searches the right database [2]. On the infrastructure side, Postgres tightened role privilege handling on PG 15 to prevent non-superusers from dropping critical system roles [3], addressing a gap that PG 16 closed natively. Realtime shipped v2.94.1 [7] with a 2.3x replication poller optimization [6] that cuts memory garbage and response latency—meaningful for any app pushing high-frequency updates. ETL improved replica identity handling [4] to ensure identity masks align with what PostgreSQL actually streams, fixing edge cases in initial copy operations. CLI v2.99.0-beta.7 now runs compiled-next e2e tests against the actual binary users run [5], catching Bun blockers before release. Web tier also consolidated its Collapsible component to shadcn and bumped vulnerable dependencies across nitropack, mermaid, and hono.

Action items

References

  1. [1] fix: escape quotes (#45848) supabase/supabase ↗
  2. [2] fix: search on the partners/integrations page was still using misc db (#45866) supabase/supabase ↗
  3. [3] fix: prevent non-superuser roles from dropping supabase_privileged_role (#2150) ↗ supabase/postgres
  4. [4] ref(core): Improve replica identity handling ↗ supabase/etl
  5. [5] fix(cli): support compiled next cli e2e runtime ↗ supabase/cli
  6. [6] fix: optimise replication poller ↗ supabase/realtime
  7. [7] v2.94.1 ↗ supabase/realtime

$ ls supabase/reviews/ # the step-back reads

the week in review Studio moves to Nitro, CLI stack goes flag-gated the month in review Supabase ships CLI v2, Postgres middleware, and safety rails across Studio
Topics: JavaScript Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on May 14, 2026?
Quote escaping fix closes critical search vulnerabilities while ETL and Realtime ship performance improvements that ripple across the stack. In total, 36 commits, 35 pull requests, and 2 releases landed.
Who contributed to Supabase on May 14, 2026?
3 developers shipped this update, including iambriccardo, jgoux, and edgurgel.
What were the notable Supabase updates?
fix: escape quotes (#45848), fix: search on the partners/integrations page was still using misc db (#45866), and fix: prevent non-superuser roles from dropping supabase_privileged_role (#2150).
♥

$ log @supabase --recent

Turbopack build cache disabled, eval results refreshed 4 shipped CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh 70 shipped MCP v0.13.0 gates destructive SQL, CLI stops deleting vector buckets 113 shipped Replicator health probes land, Studio pipeline overview rebuilt 135 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.