RepoJournal
Supabase @supabase
124 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-29
stories 76
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

POSTGRES ACROSS VERSIONS SHIPS NOJIT BUILD; SUPABASE-JS FIXES OVERLAPPING OAUTH FLOWS

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

github-actions[bot] Colum Ferry Charis farazdagi supabase-releaser[bot] mandarini Vaibhav
12 people shipped this
github-actions[bot] @github-actions[bot] 5 cited Colum Ferry @Coly010 3 cited Charis @charislam 2 cited farazdagi @farazdagi 1 cited supabase-releaser[bot] @supabase-releaser[bot] 1 cited mandarini @mandarini 1 cited Vaibhav @7ttp 1 cited Cemal Kılıç @cemalkilic TheOtherBrian1 @TheOtherBrian1 Alaister Young @alaister supabase-releaser @supabase-releaser dependabot @dependabot

Supabase Postgres rolled out nojit builds across 15.14, 17.6, and the new 17.9 OrioleDB track overnight, while the JavaScript SDK's v2.111.0 solves a critical auth bug where simultaneous OAuth or password recovery flows would collide.

The Postgres desk shipped five coordinated releases [1][2][3][4][5] across three major versions, including the first production-ready OrioleDB variant, giving operators escape routes from JIT-related instability across the entire supported stack. Meanwhile, supabase-js v2.111.0 [6] attacks a real-world auth failure: overlapping flows like simultaneous social sign-in and password recovery now each get their own PKCE verifier slot (a ring of 5) instead of stomping on a single shared key [7], with `signInWithOAuth` returning the flow ID and `exchangeCodeForSession` accepting it as an optional selector. The CLI desk landed four fixes [8][9][10][11] that tighten error rendering for migration failures to match the Go CLI byte-for-byte, surface actionable diagnostics when Docker images won't run, revoke PUBLIC privileges correctly in schema diffs, and align SSO domain handling across the two implementations. Studio continued its SQL editor refactor with three stacked PRs [12][13] introducing discriminated union types for snippet sources and source-aware writes, while the ETL pipeline gained append observability metrics for Snowflake [14].

Action items

References

  1. [1] 15.14.1.157-nojit1 ↗ supabase/postgres
  2. [2] 17.6.1.157-nojit1 ↗ supabase/postgres
  3. [3] 17.9.0.010-orioledb-nojit1 ↗ supabase/postgres
  4. [4] 15.14.1.157-nojit1-x86 ↗ supabase/postgres
  5. [5] 17.6.1.157-nojit1-x86 ↗ supabase/postgres
  6. [6] v2.111.0 ↗ supabase/supabase-js
  7. [7] feat(auth): store PKCE verifiers in per-flow slots to survive overlapping flows ↗ supabase/supabase-js
  8. [8] fix(cli): render Go's caret, Detail, and 42704 hint in migration-apply errors (#5967) ↗ supabase/cli
  9. [9] fix(cli): diagnose unrunnable images (#5966) ↗ supabase/cli
  10. [10] fix(cli): bump default pg-delta version to pick up PUBLIC-privilege revoke fix (#5970) ↗ supabase/cli
  11. [11] fix(cli): always send domains in sso update PUT body to match Go (CLI-1981) (#5973) ↗ supabase/cli
  12. [12] feat(studio): log_sql content shape + remap content.sql to unchecked_sql (#48305) supabase/supabase ↗
  13. [13] feat(studio): discriminated snippet union + source-aware writes (#48313) supabase/supabase ↗
  14. [14] feat(snowflake): add append observability metrics ↗ supabase/etl

$ ls supabase/reviews/ # the step-back reads

the week in review Studio moves to Nitro, CLI stack goes flag-gated the month in review Supabase ships CLI v2, Postgres middleware, and safety rails across Studio
Topics: JavaScript Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on July 29, 2026?
Supabase Postgres rolled out nojit builds across 15.14, 17.6, and the new 17.9 OrioleDB track overnight, while the JavaScript SDK's v2.111.0 solves a critical auth bug where simultaneous OAuth or password recovery flows would collide. In total, 27 commits, 31 pull requests, and 18 releases landed.
Who contributed to Supabase on July 29, 2026?
12 developers shipped this update, including github-actions[bot], Cemal Kılıç, Charis, TheOtherBrian1, Alaister Young, farazdagi, supabase-releaser[bot], and mandarini, and 4 more.
What were the notable Supabase updates?
15.14.1.157-nojit1, 17.6.1.157-nojit1, and 17.9.0.010-orioledb-nojit1.
♥

$ log @supabase --recent

Turbopack build cache disabled, eval results refreshed 4 shipped CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh 70 shipped MCP v0.13.0 gates destructive SQL, CLI stops deleting vector buckets 113 shipped Replicator health probes land, Studio pipeline overview rebuilt 135 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.