RepoJournal
Supabase @supabase
151 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-29
stories 81
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SUPABASE CLI GOES ALL-IN ON TYPESCRIPT - GO BINARY PORTS ACCELERATE

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

Supabase shipped native TypeScript replacements for branches, orgs, and SSO commands overnight, killing the Go subprocess fork-exec tax and completing five major CLI modernization batches in parallel.

The CLI team shipped three massive ports simultaneously: all eight branches subcommands [1], six SSO handlers [3], and the orgs list/create pair [2] are now native Effect implementations with byte-for-byte Go parity on output formatting, exit codes, and telemetry. This isn't incremental - it's the fifth wave of CLI-1289, the systematic Go-to-TypeScript migration that eliminates subprocess overhead and builds shared infrastructure (HTTP error mappers, JSON/YAML/TOML encoders, Glamour tables) once instead of twice. Hidden subcommands now use native Command.withHidden [4], cleaning up the local annotation path entirely. On the JS side, supabase-js 2.106.3-canary.2 hardens PostgREST error handling [5]: the SDK now catches non-JSON bodies on 2xx responses (proxies, CDNs, truncated streams return success status with junk data), wraps them in structured errors instead of crashing mid-parse [6], and recognizes ?error= OAuth redirects in the implicit grant gate [7]. The main studio repo continues polish: DataGrid borders are fixed consistently across all surfaces [8], alert titles now render correctly in confirmation dialogs [9], organization shortcuts landed for keyboard navigation inside Settings [10], and SQL observability logging got SafeLogSqlFragment hardening [11]. One more thing: ephemeral CI environments stop firing identity spam [12] now that the stitch gate checks !isCI.

Action items

References

  1. [1] feat(cli): port branches commands to native TypeScript (#5374) ↗ supabase/cli
  2. [2] feat(cli): port orgs commands to native TypeScript (#5379) ↗ supabase/cli
  3. [3] feat(cli): port sso commands to native TypeScript (#5375) ↗ supabase/cli
  4. [4] chore(cli): replace legacy hidden subcommands (#5378) ↗ supabase/cli
  5. [5] v2.106.3-canary.2 ↗ supabase/supabase-js
  6. [6] fix(postgrest): return a structured error for non-JSON body on successful responses (#2398) ↗ supabase/supabase-js
  7. [7] fix(auth): recognize ?error= redirects in implicit grant gate (#2407) ↗ supabase/supabase-js
  8. [8] fix(studio): remove default DataGrid borders across studio surfaces (#46448) ↗ supabase/supabase
  9. [9] fix: show titles (#46447) ↗ supabase/supabase
  10. [10] feat(studio): add organization shortcuts (#46356) ↗ supabase/supabase
  11. [11] feat(logs): brand Observability/EdgeFunctions SQL with SafeLogSqlFragment (#8) (#46466) ↗ supabase/supabase
  12. [12] fix(cli): skip identity stitch in CI to stop ephemeral-env identify spam (#5366) ↗ supabase/cli
  13. [13] fix(auth): return AuthInvalidJwtError from getClaims for expired JWT (#2395) ↗ supabase/supabase-js

$ ls supabase/reviews/ # the step-back reads

the week in review CLI 2.120.0 adds persisted logs and OTel traces the month in review MCP v0.12.0 groups advisor lints, adds cost elicitation
Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on May 29, 2026?
Supabase shipped native TypeScript replacements for branches, orgs, and SSO commands overnight, killing the Go subprocess fork-exec tax and completing five major CLI modernization batches in parallel. In total, 34 commits, 38 pull requests, and 9 releases landed.
What were the notable Supabase updates?
feat(cli): port branches commands to native TypeScript (#5374), feat(cli): port orgs commands to native TypeScript (#5379), and feat(cli): port sso commands to native TypeScript (#5375).
♥

$ log @supabase --recent

Self-hosted stack bumps realtime and storage, Studio remembers your chart range 72 shipped Realtime 2.144.0 patches a decimal CVE; realtime-csharp adds paged storage listing 151 shipped MCP server 0.14.0 adds health advisors, Supabase CLI routes every Management API call through the typed client 123 shipped Scoped OAuth reconsent in Studio, MCP drops double cost prompts 139 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.