The Wire · Showcase
POSTGRES SHIPS FRESH BUILDS ACROSS THREE VERSIONS, SUPABASE STUDIO HARDENS SCOPED TOKEN CONTROLS
By RepoJournal · Filed · About Supabase
Supabase postgres cut four releases overnight spanning versions 15, 17, and 17 with OrientDB, while Studio rolled out lifecycle-aware token expiration and alternative permission modeling across the platform.
The postgres desk shipped a flurry of releases [1] [2] [3] [4], with v17.6.1.160-cli addressing cron trigger permissions and a multigres data directory override bug [3]. Over on supabase/supabase, the Studio team landed three interconnected token security features: lifecycle and role-aware scoped token view sheet [5], enforced expiration date limits with configurable boundaries [6], and alternative permission modeling to support OR-of-AND access patterns [7]. These three PRs work together to give engineers finer control over short-lived credential grants. Meanwhile, evals refreshed eval results twice from automated runs [9] [10], and etl migrated replicator error emails from the legacy pipeline-error endpoint to the new ETL email API, preserving error deduplication in the process [8]. The broader story here: token security is getting substantially more granular, and infrastructure plumbing is shifting to centralized email routing.
One email a day. Unsubscribe in one click.
Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Test Studio scoped token expiration and alternative permissions in staging before deploying to production supabase/supabase [plan]
- → Monitor postgres v17.6.1.160-cli cron and multigres configs after rollout supabase/postgres [monitor]
- → Verify etl replicator error emails routing to correct channels post-migration supabase/etl [plan]
References
- [1] 15.14.1.160 ↗ supabase/postgres
- [2] 17.9.0.013-orioledb ↗ supabase/postgres
- [3] v17.6.1.160-cli ↗ supabase/postgres
- [4] 17.6.1.160 ↗ supabase/postgres
- [5] feat(studio): lifecycle and role-aware scoped token view sheet (#48848) supabase/supabase
- [6] feat(studio): enforce expiry scoped pat (#48811) supabase/supabase
- [7] fix(studio): model scoped pat permissions as OR-of-AND alternatives - smaller version ↗ supabase/supabase
- [8] feat(replicator): migrate error emails to ETL email API ↗ supabase/etl
- [9] chore: refresh eval results ↗ supabase/evals
- [10] chore: refresh eval results ↗ supabase/evals