Who contributed to Supabase on July 10, 2026?

1 developer shipped this update, including farazdagi.

What were the notable Supabase updates?

fix(realtime): patch channel join payloads with access token before flushing (#1553), feat(gotrue): add channel parameter to mfa.challenge() (#1547), and docs(auth): document getOAuthSignInUrl for URL-without-launch, mark oauth parity implemented (#1548).

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

FLUTTER REALTIME FIX STOPS SILENT RLS FAILURES, TYPESCRIPT 7 CUTS TYPECHECK TIME 66%

By RepoJournal · Filed 06:57 UTC on July 10, 2026 · About Supabase

1 person shipped this

farazdagi @farazdagi 1 cited

Supabase Flutter just patched a critical realtime bug where async access tokens never made it into join payloads, leaving RLS unable to evaluate permissions on incoming subscriptions.

The fix [1] buffers the phx_join until the token resolves, then patches it into the payload before flush - a one-line change with major implications for React Native and Expo apps relying on async storage. On the supabase-js side, v2.110.2 [7] landed with a fix for session state leaking on signout failures [8], so auth state doesn't ghost your next sign-in. The Flutter SDK also closed parity gaps: `mfa.challenge()` now accepts a `channel` parameter [2] for phone-based MFA (SMS/WhatsApp), matching supabase-js, and OAuth signin is now fully documented with the URL-without-launch path [3]. Over in the monorepo, TypeScript 7 [5] shipped with the native Go compiler, cutting full turbo typecheck from 56s to 19s locally - a 66% win that pays off on every type-check cycle. Sentry error reporting on the TanStack build [4] was a silent no-op because `Sentry.init` never ran; that's fixed. ETL streaming to Snowflake now uses deferred durability [6] with proper channel lifecycle handling and replay filtering, so your pipelines survive restarts cleanly.

Action items

→ Upgrade supabase-flutter to patch async token handling in realtime subscriptions supabase/supabase-flutter [immediate]
→ Upgrade supabase-js to 2.110.2 to fix signout state leakage supabase/supabase-js [plan]
→ Plan TypeScript 7 upgrade - turbo typecheck is 3x faster with native compiler supabase/supabase [plan]
→ Review Snowflake ETL streaming durability model if you run pipelines supabase/etl [monitor]

References

[1] fix(realtime): patch channel join payloads with access token before flushing (#1553) supabase/supabase-flutter
[2] feat(gotrue): add channel parameter to mfa.challenge() (#1547) supabase/supabase-flutter
[3] docs(auth): document getOAuthSignInUrl for URL-without-launch, mark oauth parity implemented (#1548) supabase/supabase-flutter
[4] fix(studio): initialize Sentry on the TanStack build (captures were silent no-ops) (#47666) supabase/supabase
[5] chore(deps): upgrade to TypeScript 7 (native compiler) (#47757) supabase/supabase
[6] fix(destinations): streaming uses deferred durability in Snowflake ↗ supabase/etl
[7] v2.110.2 ↗ supabase/supabase-js
[8] chore(release): version 2.110.2 changelogs (#2506) supabase/supabase-js

Quick answers

What shipped in Supabase on July 10, 2026?: Supabase Flutter just patched a critical realtime bug where async access tokens never made it into join payloads, leaving RLS unable to evaluate permissions on incoming subscriptions. In total, 46 commits, 46 pull requests, and 2 releases landed.
Who contributed to Supabase on July 10, 2026?: 1 developer shipped this update, including farazdagi.
What were the notable Supabase updates?: fix(realtime): patch channel join payloads with access token before flushing (#1553), feat(gotrue): add channel parameter to mfa.challenge() (#1547), and docs(auth): document getOAuthSignInUrl for URL-without-launch, mark oauth parity implemented (#1548).

STUDIO SELF-IMPORT BUG FIXED, REALTIME SHIPS FANOUT METRICS

Supabase shipped a critical fix for TanStack Studio's local dev environment while Realtime v2.120.0 lands broadcast telemetry and cluster scaling improvements.

javascript 13 shipped 1-min read

@supabase 3 days ago

POSTGRES 17.6.1.156 SHIPS WITH ORIOLEDB VARIANT, CLI PORTS NATIVE TYPESCRIPT START COMMAND

Supabase shipped five Postgres releases overnight across three build variants while the CLI ditched its Go binary proxy for native TypeScript in the local dev stack.

javascript 22 shipped 1-min read

@supabase 4 days ago

DOCS CONTENT API NOW PLUGGABLE, RLS LEAK PATCHED IN STUDIO

The MCP server can point at alternative GraphQL endpoints for docs testing, while a critical fix stops Studio from leaking RLS-protected values during cell loads.

javascript 80 shipped 2-min read

@supabase 5 days ago

CLICKHOUSE SCHEMA CORRUPTION FIX LANDS ACROSS ETL STACK

Supabase shipped a critical fix that prevents ClickHouse from destroying newer columns during CDC replay restarts, then propagated the same safety logic across Pulumi and Terraform tooling.

javascript 95 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.