Who contributed to Supabase on August 17, 2026?

7 developers shipped this update, including Danny White, doublethink, jgoux, github-actions[bot], dependabot, supabase-evals-releaser, and supabase-evals-releaser[bot].

What were the notable Supabase updates?

feat(studio): show PrivateLink resource IDs and use connection copy, fix(studio): clarify MFA backup authenticator copy, and feat(studio): extract PrivateLink status copy.

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SUPABASE STUDIO TIGHTENS PRIVATELINK UX ACROSS FOUR COMMITS

By RepoJournal · Filed 07:04 UTC on August 17, 2026 · About Supabase

7 people shipped this

Danny White @dnywh 3 cited

doublethink @doublethink 1 cited

jgoux @jgoux 1 cited

github-actions[bot] @github-actions[bot] 1 cited

supabase-evals-releaser @supabase-evals-releaser 1 cited

dependabot @dependabot

supabase-evals-releaser[bot] @supabase-evals-releaser[bot]

Four linked PRs ship clarity to PrivateLink configuration and MFA backup flows, replacing ambiguous copy with resource IDs and clearer field ordering.

Studio's PrivateLink interface now displays AWS account IDs and connection details that properly distinguish between primary and read replica configurations [1]. The labeling shift from "AWS account" to "connection" closes a gap where operators couldn't tell which resource ID belonged where. Paired with that, MFA backup authenticator copy got rewritten to clarify you're adding a second authenticator app, not another account identity [2], and the control moved up next to the warning instead of sitting at the card's bottom. Status labels extracted into a single lookup removes inline branching logic [3], and the connection sheet now leads with AWS account ID, then database, then optional description, so empty descriptions don't ghost-print as blank names [4]. CLI shipped beta.15 with a Realtime bump from v2.128.0 to v2.128.2 [6], while the stack refactor landed focused modules for workspace metadata and managed identity policy [5]. Evals refreshed latest results automatically [7].

Action items

→ Pull latest studio changes to verify PrivateLink resource IDs display correctly in your environments supabase/supabase [plan]
→ Test MFA setup flow if you ship auth UX to confirm new backup authenticator messaging is clear to users supabase/supabase [monitor]
→ Update to CLI v2.115.0-beta.15 if running Realtime-dependent workflows supabase/cli [plan]

References

[1] feat(studio): show PrivateLink resource IDs and use connection copy ↗ supabase/supabase
[2] fix(studio): clarify MFA backup authenticator copy ↗ supabase/supabase
[3] feat(studio): extract PrivateLink status copy ↗ supabase/supabase
[4] feat(studio): tighten PrivateLink sheet fields ↗ supabase/supabase
[5] refactor(stack): simplify managed identity policy ↗ supabase/cli
[6] v2.115.0-beta.15 ↗ supabase/cli
[7] chore: refresh eval results ↗ supabase/evals

Quick answers

What shipped in Supabase on August 17, 2026?: Four linked PRs ship clarity to PrivateLink configuration and MFA backup flows, replacing ambiguous copy with resource IDs and clearer field ordering. In total, 11 commits, 12 pull requests, and 1 releases landed.
Who contributed to Supabase on August 17, 2026?: 7 developers shipped this update, including Danny White, doublethink, jgoux, github-actions[bot], dependabot, supabase-evals-releaser, and supabase-evals-releaser[bot].
What were the notable Supabase updates?: feat(studio): show PrivateLink resource IDs and use connection copy, fix(studio): clarify MFA backup authenticator copy, and feat(studio): extract PrivateLink status copy.

SUPABASE HARDENS CORS AND SHIPS PROMPT-INJECTION EVALS

A config hardening for self-hosted envoy plus four new security evals signal Supabase is closing attack surfaces on both the infrastructure and AI agent fronts.

javascript 85 shipped

@supabase Aug 16

SUPABASE CLI FIXES MEMORY BLOWUP ON LARGE DB DUMPS

The CLI was buffering entire piped outputs in memory instead of respecting backpressure, turning a routine `supabase db dump` into an OOM killer on large databases.

javascript 8 shipped

@supabase Aug 15

CLI UNLOCKS ORIOLEDB PROJECTS, EVALS MOVES TO VERCEL SANDBOXES

Supabase CLI now exposes the experimental flags needed to spin up OrioleDB managed projects, while the evals system abandons GitHub Actions for faster, sandboxed test execution.

javascript 30 shipped

@supabase Aug 14

EXPLORER GETS NOTEBOOK CELLS AND ROUTED CHAT TABS

Supabase shipped major Explorer upgrades overnight: notebook cell management and persistent assistant chat routing, plus five new Postgres builds across versions 15 and 17.