What were the notable Supabase updates?

feat(cli): port branches commands to native TypeScript (#5374), feat(cli): port orgs commands to native TypeScript (#5379), and feat(cli): port sso commands to native TypeScript (#5375).

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SUPABASE CLI GOES ALL-IN ON TYPESCRIPT - GO BINARY PORTS ACCELERATE

By RepoJournal · Filed 06:03 UTC on May 29, 2026 · About Supabase

Supabase shipped native TypeScript replacements for branches, orgs, and SSO commands overnight, killing the Go subprocess fork-exec tax and completing five major CLI modernization batches in parallel.

The CLI team shipped three massive ports simultaneously: all eight branches subcommands [1], six SSO handlers [3], and the orgs list/create pair [2] are now native Effect implementations with byte-for-byte Go parity on output formatting, exit codes, and telemetry. This isn't incremental - it's the fifth wave of CLI-1289, the systematic Go-to-TypeScript migration that eliminates subprocess overhead and builds shared infrastructure (HTTP error mappers, JSON/YAML/TOML encoders, Glamour tables) once instead of twice. Hidden subcommands now use native Command.withHidden [4], cleaning up the local annotation path entirely. On the JS side, supabase-js 2.106.3-canary.2 hardens PostgREST error handling [5]: the SDK now catches non-JSON bodies on 2xx responses (proxies, CDNs, truncated streams return success status with junk data), wraps them in structured errors instead of crashing mid-parse [6], and recognizes ?error= OAuth redirects in the implicit grant gate [7]. The main studio repo continues polish: DataGrid borders are fixed consistently across all surfaces [8], alert titles now render correctly in confirmation dialogs [9], organization shortcuts landed for keyboard navigation inside Settings [10], and SQL observability logging got SafeLogSqlFragment hardening [11]. One more thing: ephemeral CI environments stop firing identity spam [12] now that the stitch gate checks !isCI.

Action items

→ Update supabase-js to 2.106.3-canary.2 if you depend on PostgREST - non-JSON response handling is now defensive supabase/supabase-js [plan]
→ Upgrade CLI to latest if you use branches, orgs, or SSO commands - TypeScript ports are production-ready supabase/cli [plan]
→ Monitor canary releases - the SDK auth JWT fix [ref:9] is still hardening before stable release supabase/supabase-js [monitor]

References

[1] feat(cli): port branches commands to native TypeScript (#5374) supabase/cli
[2] feat(cli): port orgs commands to native TypeScript (#5379) supabase/cli
[3] feat(cli): port sso commands to native TypeScript (#5375) supabase/cli
[4] chore(cli): replace legacy hidden subcommands (#5378) supabase/cli
[5] v2.106.3-canary.2 ↗ supabase/supabase-js
[6] fix(postgrest): return a structured error for non-JSON body on successful responses (#2398) supabase/supabase-js
[7] fix(auth): recognize ?error= redirects in implicit grant gate (#2407) supabase/supabase-js
[8] fix(studio): remove default DataGrid borders across studio surfaces (#46448) supabase/supabase
[9] fix: show titles (#46447) supabase/supabase
[10] feat(studio): add organization shortcuts (#46356) supabase/supabase
[11] feat(logs): brand Observability/EdgeFunctions SQL with SafeLogSqlFragment (#8) (#46466) supabase/supabase
[12] fix(cli): skip identity stitch in CI to stop ephemeral-env identify spam (#5366) supabase/cli
[13] fix(auth): return AuthInvalidJwtError from getClaims for expired JWT (#2395) supabase/supabase-js

Quick answers

What shipped in Supabase on May 29, 2026?: Supabase shipped native TypeScript replacements for branches, orgs, and SSO commands overnight, killing the Go subprocess fork-exec tax and completing five major CLI modernization batches in parallel. In total, 34 commits, 38 pull requests, and 9 releases landed.
What were the notable Supabase updates?: feat(cli): port branches commands to native TypeScript (#5374), feat(cli): port orgs commands to native TypeScript (#5379), and feat(cli): port sso commands to native TypeScript (#5375).

POSTGRES 17.6.1.156 SHIPS WITH ORIOLEDB VARIANT, CLI PORTS NATIVE TYPESCRIPT START COMMAND

Supabase shipped five Postgres releases overnight across three build variants while the CLI ditched its Go binary proxy for native TypeScript in the local dev stack.

javascript 22 shipped 1-min read

@supabase 1 day ago

DOCS CONTENT API NOW PLUGGABLE, RLS LEAK PATCHED IN STUDIO

The MCP server can point at alternative GraphQL endpoints for docs testing, while a critical fix stops Studio from leaking RLS-protected values during cell loads.

javascript 80 shipped 2-min read

@supabase 2 days ago

CLICKHOUSE SCHEMA CORRUPTION FIX LANDS ACROSS ETL STACK

Supabase shipped a critical fix that prevents ClickHouse from destroying newer columns during CDC replay restarts, then propagated the same safety logic across Pulumi and Terraform tooling.

javascript 95 shipped 1-min read

@supabase 3 days ago

PIPELINES HITS PUBLIC ALPHA, REALTIME SQUASHES RACE CONDITION

Supabase Pipelines moves out of private alpha with full schema change support, while the realtime stack hardens against clustering edge cases.

javascript 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.