Who contributed to Supabase on August 20, 2026?

4 developers shipped this update, including Miranda Limonczenko, kanad, claude[bot], and Saxon Fletcher.

What were the notable Supabase updates?

docs(database): restructure the RLS guide by information type (#49017), docs(database): split RLS tuning into its own guide (#49016), and feat: table for collecting interfaces feedback (#48420).

@supabase

The open-source Firebase alternative powering thousands of startups

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

ROW LEVEL SECURITY DOCS GET A REWRITE

By RepoJournal · Filed 06:57 UTC on August 20, 2026 · About Supabase

4 people shipped this

Miranda Limonczenko @czenko 2 cited

kanad @kanadgupta 1 cited

claude[bot] @claude[bot] 1 cited

Saxon Fletcher @SaxonF 1 cited

Supabase restructured its RLS documentation overnight, splitting the guide into clear sections so developers can find what they need without wading through reference material.

Miranda Limonczenko reorganized the RLS guide into three sections by information type, separating understanding, securing, and reference [1]. The old guide "alternated between context, procedure, and reference on almost every heading," forcing readers to skip through four sections to write a policy [1]. Performance tuning now lives in its own guide, trimming 225 lines of benchmark tables from the main page, and addressing the core question of whether RLS is actually your bottleneck [2]. Beyond docs, Supabase added a migration to collect product feedback from the CLI and MCP server, with token-based deletion support [3]. The Studio team also fixed an unguarded read on the OAuth authorize pages, closing a potential null reference crash [4], and improved the assistant's SQL rendering with AssistantQueryCell [5].

Action items

→ Review the restructured RLS guide and the new tuning guide for your security workflows supabase/supabase [monitor]
→ Test OAuth authorize flows to ensure the requester.name guard resolves your edge cases supabase/supabase [plan]

References

[1] docs(database): restructure the RLS guide by information type (#49017) supabase/supabase
[2] docs(database): split RLS tuning into its own guide (#49016) supabase/supabase
[3] feat: table for collecting interfaces feedback (#48420) supabase/supabase
[4] fix(studio): guard unguarded requester.name reads on the OAuth authorize and apps pages (#49267) supabase/supabase
[5] feat(studio): render assistant SQL with AssistantQueryCell (#49170) supabase/supabase

Quick answers

What shipped in Supabase on August 20, 2026?: Supabase restructured its RLS documentation overnight, splitting the guide into clear sections so developers can find what they need without wading through reference material. In total, 28 commits and 28 pull requests landed.
Who contributed to Supabase on August 20, 2026?: 4 developers shipped this update, including Miranda Limonczenko, kanad, claude[bot], and Saxon Fletcher.
What were the notable Supabase updates?: docs(database): restructure the RLS guide by information type (#49017), docs(database): split RLS tuning into its own guide (#49016), and feat: table for collecting interfaces feedback (#48420).

MCP SERVERS MOVE TO SDK V2

Supabase's MCP packages cut over to the v2 wire protocol today, and if you consume them, the next upgrade is not optional.

+11

javascript 126 shipped

@supabase Aug 19

SUPABASE CLI v2.115.0 BREAKS YOUR CI

If you run schema diffing or supabase test db in CI, this release is about to change what those commands do.

javascript 79 shipped

@supabase Aug 18

SUPABASE HARDENS CORS AND SHIPS PROMPT-INJECTION EVALS

A config hardening for self-hosted envoy plus four new security evals signal Supabase is closing attack surfaces on both the infrastructure and AI agent fronts.

javascript 85 shipped

@supabase Aug 17

SUPABASE STUDIO TIGHTENS PRIVATELINK UX ACROSS FOUR COMMITS

Four linked PRs ship clarity to PrivateLink configuration and MFA backup flows, replacing ambiguous copy with resource IDs and clearer field ordering.

javascript 24 shipped

Elsewhere on the wire

AI Agents Aug 21

CLINE V4.1.11 SHIPS IMAGE GENERATION AND AGENT-UI FIXES

Cline's latest release lets models generate images mid-task, while LlamaIndex quietly breaks frontend tool handlers.

ai-agents 78 shipped

Local LLMs Aug 21

DeepSeek V4 fuses shared experts, as vLLM ships a security guard

The biggest local-LLM repos are moving fast: DeepSeek V4's MoE kernel gets a massive fusion, while vLLM patches a security hole.

+12

llms 274 shipped

@CachyOS Aug 21

CachyOS Scheduler Hotfixes and Kernel Upgrades Lead the Day

A hotfix for the scx_cake scheduler and the latest Linux 7.2 kernel are rolling out across CachyOS repos.

infra 66 shipped

Elixir & Phoenix Aug 21

Phoenix 1.8.12 patches channel message drop

Phoenix shipped a patch release that fixes a channel bug silently dropping messages without a join_ref, and LiveView is quietly rewriting the rules of navigation.