Who contributed to Supabase on July 11, 2026?

8 developers shipped this update, including Colum Ferry, dependabot, AndroidPoet, Nik Richers, Alaister Young, Ali Waseem, Ivan Vasilov, and joshenlim.

What were the notable Supabase updates?

fix(cli): match Go path.Match character-class negation in legacy seed globbing (#5856), fix(cli): exempt global choice flags from telemetry redaction (Go isEnumFlag parity) (#5855), and fix(cli): suppress vendored effect CLI's stdout help-dump and duplicate error on parse failures (CLI-1901) (#5844).

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

CLI GLOB PARSER FIXED, SWIFT REALTIME AND STORAGE GET STABILITY PATCHES

By RepoJournal · Filed 06:57 UTC on July 11, 2026 · About Supabase

8 people shipped this

Colum Ferry @Coly010 3 cited

AndroidPoet @AndroidPoet 2 cited

Ali Waseem @awaseem 1 cited

joshenlim @joshenlim 1 cited

dependabot @dependabot

Nik Richers @nrichers

Alaister Young @alaister

Ivan Vasilov @ivasilov

Supabase CLI shipped a breaking glob-matching fix that aligns legacy seed patterns with Go's path.Match behavior, while Swift clients gain critical resilience improvements for realtime subscriptions and storage operations.

The CLI's character-class negation bug [1] was causing `[!a].sql` patterns to behave differently in the legacy TypeScript port than in the Go implementation - a mismatch that could silently include or exclude seed files during migrations. This ships alongside two other CLI fixes: global choice flags now report their actual values in telemetry [2] instead of being redacted, and the vendored effect CLI no longer double-prints errors on parse failures [3]. On the Swift side, realtime channels now properly reset their state when receiving a `phx_error` frame [4], fixing a critical bug where dead channels would stay marked as `.subscribed` and observers would hang indefinitely waiting for events. Storage got its own fix [5]: leading slashes in object paths are now stripped before building request URLs, eliminating the double-slash bug that broke operations like `download(path: "/a.png")`. Studio added comprehensive MSW tests for the project creation flow [6], surfacing and fixing an empty-region submit bug in the process. All three repos also picked up dependency bumps and Sentry instrumentation hardening [7] to improve production visibility.

Action items

→ Deploy CLI 1.x immediately if using db.seed glob patterns or db reset with glob filtering supabase/cli [immediate]
→ Update supabase-swift to latest if relying on realtime subscriptions or storage downloads with paths supabase/supabase-swift [plan]
→ Review seed migration patterns for any `[!...]` character classes after upgrading CLI supabase/cli [plan]
→ Monitor Sentry for API errors now being captured upstream in Studio supabase/supabase [monitor]

References

[1] fix(cli): match Go path.Match character-class negation in legacy seed globbing (#5856) supabase/cli
[2] fix(cli): exempt global choice flags from telemetry redaction (Go isEnumFlag parity) (#5855) supabase/cli
[3] fix(cli): suppress vendored effect CLI's stdout help-dump and duplicate error on parse failures (CLI-1901) (#5844) supabase/cli
[4] fix(realtime): reset channel state on phx_error ↗ supabase/supabase-swift
[5] fix(storage): strip leading slash from object paths ↗ supabase/supabase-swift
[6] test(studio): add MSW tests for project creation flow (#47790) supabase/supabase
[7] Add sentry capture exception to apiWrapper ↗ supabase/supabase

Quick answers

What shipped in Supabase on July 11, 2026?: Supabase CLI shipped a breaking glob-matching fix that aligns legacy seed patterns with Go's path.Match behavior, while Swift clients gain critical resilience improvements for realtime subscriptions and storage operations. In total, 34 commits, 37 pull requests, and 4 releases landed.
Who contributed to Supabase on July 11, 2026?: 8 developers shipped this update, including Colum Ferry, dependabot, AndroidPoet, Nik Richers, Alaister Young, Ali Waseem, Ivan Vasilov, and joshenlim.
What were the notable Supabase updates?: fix(cli): match Go path.Match character-class negation in legacy seed globbing (#5856), fix(cli): exempt global choice flags from telemetry redaction (Go isEnumFlag parity) (#5855), and fix(cli): suppress vendored effect CLI's stdout help-dump and duplicate error on parse failures (CLI-1901) (#5844).

STUDIO SELF-IMPORT BUG FIXED, REALTIME SHIPS FANOUT METRICS

Supabase shipped a critical fix for TanStack Studio's local dev environment while Realtime v2.120.0 lands broadcast telemetry and cluster scaling improvements.

javascript 13 shipped 1-min read

@supabase 3 days ago

POSTGRES 17.6.1.156 SHIPS WITH ORIOLEDB VARIANT, CLI PORTS NATIVE TYPESCRIPT START COMMAND

Supabase shipped five Postgres releases overnight across three build variants while the CLI ditched its Go binary proxy for native TypeScript in the local dev stack.

javascript 22 shipped 1-min read

@supabase 4 days ago

DOCS CONTENT API NOW PLUGGABLE, RLS LEAK PATCHED IN STUDIO

The MCP server can point at alternative GraphQL endpoints for docs testing, while a critical fix stops Studio from leaking RLS-protected values during cell loads.

javascript 80 shipped 2-min read

@supabase 5 days ago

CLICKHOUSE SCHEMA CORRUPTION FIX LANDS ACROSS ETL STACK

Supabase shipped a critical fix that prevents ClickHouse from destroying newer columns during CDC replay restarts, then propagated the same safety logic across Pulumi and Terraform tooling.

javascript 95 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.