Who contributed to Supabase on June 8, 2026?

3 developers shipped this update, including aantti, ChloeGarciaMillerand, and jordienr.

What were the notable Supabase updates?

fix: run security check from pull request branch (#1028), fix: auto-detect ipv6 from metadata db hostname (#1027), and test: fix race in tenant metrics aggregation tests (#1026).

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SUPAVISOR HARDENS SECURITY CHECKS, MCP SERVERS SHIP FIXES, POSTGRES VERSIONING SURGE

By RepoJournal · Filed 22:42 UTC on June 8, 2026 · About Supabase

3 people shipped this

aantti @aantti 1 cited

ChloeGarciaMillerand @ChloeGarciaMillerand 1 cited

jordienr @jordienr 1 cited

Supavisor moved security scanning to PR branches and fixed critical IPv6 detection, while three MCP packages shipped coordinated updates after a repository transfer.

Supavisor landed a critical security workflow fix that stops pushing dependencies to GitHub for non-main branches, cutting noise from false-positive CVE alerts [1]. In the same system, IPv6-only database hosts now work out of the box without manual configuration [2], matching tenant DB behavior. The connection pooler also eliminated a race condition in tenant metrics tests [3], tightening test reliability across the stack.

MCP completed a coordinated release across three packages [4] [5] [6], fixing edge function test typos and updating repository URLs after the supabase/mcp transfer. All three packages shipped simultaneously with identical repository fixes.

Postgres released five new build variants [7] [8] [9] [10] [11] spanning versions 15 and 17 with pgcron support across architectures. Studio shipped feature work enabling production branch resyncs [12], improved self-hosted storage testing with hash validation [13], and fixed a critical bug where sidebar filters in unified logs weren't actually filtering [15]. A new Create Index form refactor aligns database tooling with Studio patterns [14].

Action items

→ Deploy Supavisor with IPv6 fix if running IPv6-only infrastructure supabase/supavisor [plan]
→ Update MCP server dependencies to v0.8.2+ for test reliability supabase/mcp [plan]
→ Test production branch resync in non-prod Studio instances first supabase/supabase [monitor]

References

[1] fix: run security check from pull request branch (#1028) supabase/supavisor
[2] fix: auto-detect ipv6 from metadata db hostname (#1027) supabase/supavisor
[3] test: fix race in tenant metrics aggregation tests (#1026) supabase/supavisor
[4] mcp-server-supabase: v0.8.2 ↗ supabase/mcp
[5] mcp-server-postgrest: v0.1.1 ↗ supabase/mcp
[6] mcp-utils: v0.5.1 ↗ supabase/mcp
[7] 17.6.0.089-orioledb-pgcron-6-x86 ↗ supabase/postgres
[8] 17.6.1.132-pgcron-6-x86 ↗ supabase/postgres
[9] 15.14.1.132-pgcron-6-x86 ↗ supabase/postgres
[10] 15.14.1.132-pgcron-2 ↗ supabase/postgres
[11] 17.6.1.132-pgcron-2 ↗ supabase/postgres
[12] feat: allow to resync production branches (#46723) supabase/supabase
[13] chore(self-hosted): add test for tus ↗ supabase/supabase
[14] chore: create index form ↗ supabase/supabase
[15] fix(unified-logs): apply sidebar facet filters on click ↗ supabase/supabase

Quick answers

What shipped in Supabase on June 8, 2026?: Supavisor moved security scanning to PR branches and fixed critical IPv6 detection, while three MCP packages shipped coordinated updates after a repository transfer. In total, 46 commits, 46 pull requests, and 13 releases landed.
Who contributed to Supabase on June 8, 2026?: 3 developers shipped this update, including aantti, ChloeGarciaMillerand, and jordienr.
What were the notable Supabase updates?: fix: run security check from pull request branch (#1028), fix: auto-detect ipv6 from metadata db hostname (#1027), and test: fix race in tenant metrics aggregation tests (#1026).

POSTGRES 17.6.1.156 SHIPS WITH ORIOLEDB VARIANT, CLI PORTS NATIVE TYPESCRIPT START COMMAND

Supabase shipped five Postgres releases overnight across three build variants while the CLI ditched its Go binary proxy for native TypeScript in the local dev stack.

javascript 22 shipped 1-min read

@supabase 1 day ago

DOCS CONTENT API NOW PLUGGABLE, RLS LEAK PATCHED IN STUDIO

The MCP server can point at alternative GraphQL endpoints for docs testing, while a critical fix stops Studio from leaking RLS-protected values during cell loads.

javascript 80 shipped 2-min read

@supabase 2 days ago

CLICKHOUSE SCHEMA CORRUPTION FIX LANDS ACROSS ETL STACK

Supabase shipped a critical fix that prevents ClickHouse from destroying newer columns during CDC replay restarts, then propagated the same safety logic across Pulumi and Terraform tooling.

javascript 95 shipped 1-min read

@supabase 3 days ago

PIPELINES HITS PUBLIC ALPHA, REALTIME SQUASHES RACE CONDITION

Supabase Pipelines moves out of private alpha with full schema change support, while the realtime stack hardens against clustering edge cases.

javascript 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.