RepoJournal
Supabase @supabase
124 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-30
stories 66
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

SUPABASE HARDENS AI STORAGE GUIDANCE, CLI SHEDS LAST GO BINARIES

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

7ttp Coly010
2 people shipped this
7ttp @7ttp 1 cited Coly010 @Coly010 1 cited

The Assistant now blocks dangerous RLS patterns on public buckets while the CLI completes its TypeScript migration, eliminating the final Go proxy layer.

Supabase shipped a critical update to its AI Assistant that teaches it to recognize and block overly permissive RLS policies on storage buckets [1]. Public buckets with broad read access can accidentally expose sensitive data like profile pictures or private files; the new evals catch this before deployment and guide users toward restrictive patterns. This closes a gap where developers could unknowingly grant world-readable access to bucket contents. Meanwhile, the analytics SQL safety series crossed the finish line [2], with every analytics query now flowing through branded SafeLogSqlFragment inputs. On the CLI front, three major command families completed their TypeScript port: network-bans [3], vanity-subdomains [5], and snippets [6], eliminating the last Go proxy handlers that powered Phase 0 operations. Version 2.102.0 [4] also restored shell completion in legacy environments and silenced CI identity spam. The CLI is now native TypeScript end-to-end.

Action items

References

  1. [1] feat(ai): judge tool inputs, add storage guidance and permissive RLS evals (#46168) ↗ supabase/supabase
  2. [2] feat(logs): brand remaining analytics SQL callers with SafeLogSqlFragment (#46476) ↗ supabase/supabase
  3. [3] feat(cli): migrate network bans (#5382) ↗ supabase/cli
  4. [4] v2.102.0 ↗ supabase/cli
  5. [5] feat(cli): migrate vanity-subdomains ↗ supabase/cli
  6. [6] feat(cli): port snippets commands to native TypeScript ↗ supabase/cli

$ ls supabase/reviews/ # the step-back reads

the week in review Studio moves to Nitro, CLI stack goes flag-gated the month in review Supabase ships CLI v2, Postgres middleware, and safety rails across Studio
Topics: JavaScript Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on May 30, 2026?
The Assistant now blocks dangerous RLS patterns on public buckets while the CLI completes its TypeScript migration, eliminating the final Go proxy layer. In total, 29 commits, 31 pull requests, and 6 releases landed.
Who contributed to Supabase on May 30, 2026?
2 developers shipped this update, including 7ttp and Coly010.
What were the notable Supabase updates?
feat(ai): judge tool inputs, add storage guidance and permissive RLS evals (#46168), feat(logs): brand remaining analytics SQL callers with SafeLogSqlFragment (#46476), and feat(cli): migrate network bans (#5382).
♥

$ log @supabase --recent

Turbopack build cache disabled, eval results refreshed 4 shipped CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh 70 shipped MCP v0.13.0 gates destructive SQL, CLI stops deleting vector buckets 113 shipped Replicator health probes land, Studio pipeline overview rebuilt 135 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.