RepoJournal
Supabase

@supabase

The open-source Firebase alternative powering thousands of startups

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Mon 6 jul
  2. Tue 7 jul
  3. Wed 8 jul
  4. Thu 9 jul
  5. Fri 10 jul
  6. Sat 11 jul
  7. Sun 12 jul
  8. Mon 13 jul
  9. Tue 14 jul
  10. Wed 15 jul
  11. Thu 16 jul
  12. Sat 18 jul
  13. Sun 19 jul
  14. Mon 20 jul
  15. Tue 21 jul
  16. Wed 22 jul
  17. Thu 23 jul
  18. Fri 24 jul
  19. Sat 25 jul
  20. Mon 27 jul
  21. Tue 28 jul
  22. Wed 29 jul
  23. Thu 30 jul
  24. Fri 31 jul
  25. Sat 1 aug
  26. Sun 2 aug
  27. Mon 3 aug
  28. Tue 4 aug
  29. Wed 5 aug
  30. Today 6 aug
Topics: JavaScript Full archive →

The Wire · Showcase

CLI FIXES KILL SELINUX FAILURES AND DEBUG TLS BYPASS, STUDIO GETS QUERY BLOCKING VISIBILITY

By RepoJournal · Filed · About Supabase

github-actions[bot] Vaibhav joshenlim jmqd Victor Farazdagi kanad Colum Ferry
12 people shipped this
github-actions[bot] @github-actions[bot] 5 cited Vaibhav @7ttp 3 cited joshenlim @joshenlim 1 cited jmqd @jmqd 1 cited Victor Farazdagi @farazdagi 1 cited kanad @kanadgupta 1 cited Colum Ferry @Coly010 1 cited Ana @ana1337x Alaister Young @alaister Miranda Limonczenko @czenko SaxonF @SaxonF David Birdsong @davidbirdsong

The Go CLI patched three production gotchas overnight: SELinux now stops blocking pg-delta, debug mode no longer silently kills TLS, and sslmode flags finally stick.

Supabase CLI landed three fixes that will spare your morning on-call shift. First, pg-delta on SELinux-enforcing systems (Fedora with rootless Podman) was hitting EACCES errors reading CA bundles [1]. Second, running with --debug silently disabled TLS on every database connection, which meant SSL-enforcing projects worked without the flag but failed with it [2]. Third, the --db-url sslmode parameter was being dropped entirely during connection setup [3]. Separately, Studio shipped a critical usability win: the activity table now surfaces root blocking queries so you can see which ones are actually causing the problem [4]. The CLI also fixed db reset error messages to match Go behavior [5] and added oxc toolchain to VS Code support [6]. Postgres released six new site variants [ref:16, ref:17, ref:18, ref:19, ref:20], and ETL tightened Docker publishing guardrails while adding durable write duration metrics to catch latency bias between sync and deferred destinations [ref:6, ref:8].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] fix(cli): pg-delta selinux bind mount (#5990) supabase/cli
  2. [2] fix(cli): keep TLS under --debug (#5981) supabase/cli
  3. [3] fix(cli): honor --db-url sslmode (#5980) supabase/cli
  4. [4] Joshen/fe 4000 activity table to show queries which are blockers ↗ supabase/supabase
  5. [5] fix(cli): use Go's bare invalid-version error in db reset (CLI-1979) (#5969) supabase/cli
  6. [6] chore: add oxc toolchain to root devDependencies for the VS Code extension (#5986) supabase/cli
  7. [7] 17.6.1.157-site ↗ supabase/postgres
  8. [8] 17.9.0.010-orioledb-site ↗ supabase/postgres
  9. [9] 15.14.1.157-site ↗ supabase/postgres
  10. [10] 15.14.1.157-site-x86 ↗ supabase/postgres
  11. [11] 17.9.0.010-orioledb-site-x86 ↗ supabase/postgres
  12. [12] Add durable write duration metric to apply loop ↗ supabase/etl
  13. [13] fix(ci): guard stable Docker image publishing (#945) supabase/etl

Quick answers

What shipped in Supabase on July 30, 2026?
The Go CLI patched three production gotchas overnight: SELinux now stops blocking pg-delta, debug mode no longer silently kills TLS, and sslmode flags finally stick. In total, 40 commits, 42 pull requests, and 13 releases landed.
Who contributed to Supabase on July 30, 2026?
12 developers shipped this update, including Ana, Alaister Young, joshenlim, Miranda Limonczenko, SaxonF, jmqd, Victor Farazdagi, and Vaibhav, and 4 more.
What were the notable Supabase updates?
fix(cli): pg-delta selinux bind mount (#5990), fix(cli): keep TLS under --debug (#5981), and fix(cli): honor --db-url sslmode (#5980).

More from @supabase

Supabase @supabase

POSTGRES CHANGES NOW FILTER AND SELECT COLUMNS, CLI HARDENS SERVICE LIFECYCLE

Supabase shipped Enhancements for Postgres Changes with AND filter composition and column selection, while the CLI consolidated lazy-stack v2 with hardened OS primitives for artifact management.

Ana claude[bot] Nik Richers charislam +4
javascript 81 shipped
Supabase @supabase

CLI STABILIZES, STUDIO SHIPS MANUAL SAVES AND PRIVATELINK READ REPLICAS

Supabase cut flaky tests across the stack while rolling out editor defaults and networking features that users have been waiting for.

Vaibhav Coly010 soedirgo Charis +5
javascript 82 shipped
Supabase @supabase

STUDIO REDIRECTS FIXED, DATABASE CONNECTIONS ENTER PREVIEW, PG-TOOLBELT HANDLES UTF-8

Feature preview navigation now works reliably after a nuqs timing bug fix, while database connections move into preview testing across both hosted and self-hosted deployments.

Alaister Young Nik Richers Stephen Morgan Joshen Lim +8
javascript 79 shipped
Supabase @supabase

STUDIO SHIPPING SAFETY RAILS AS REALTIME HITS 2.122.0

Supabase Studio locked down form state protection across replication and OAuth flows while the Realtime service adds group lookup to its admin dashboard.

dnywh realtime-release-bot[bot] edgurgel semantic-release-bot
javascript 18 shipped

Daily updates, in your inbox

Follow Supabase

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

langchain-oss-model-profiles[bot] Mason Daugherty John Kennedy ccurme +7
ai-agents 54 shipped
Local LLMs Local LLMs

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.

jessegross Daniel Hiltgen Xuan-Son Nguyen Niklas Wenzel +10
llms 240 shipped
CachyOS @CachyOS

WIKI TRANSLATION ROLLBACK CHAOS, MIRROR STACK HOLDING STEADY

CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.

Jinra Aarrayy buster-biopsys
infra 57 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR BUMPS ZIZMOR SECURITY SCANNER TO 1.28.0

The Elixir repo updated its CI security action overnight, pulling in the latest zizmor static analysis tooling.

dependabot
elixir 1 shipped
Want every project, not just this one?