RepoJournal
Supabase

@supabase

The open-source Firebase alternative powering thousands of startups

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Thu 23 jul
  2. Fri 24 jul
  3. Sat 25 jul
  4. Mon 27 jul
  5. Tue 28 jul
  6. Wed 29 jul
  7. Thu 30 jul
  8. Fri 31 jul
  9. Sat 1 aug
  10. Sun 2 aug
  11. Mon 3 aug
  12. Tue 4 aug
  13. Wed 5 aug
  14. Thu 6 aug
  15. Fri 7 aug
  16. Sat 8 aug
  17. Sun 9 aug
  18. Mon 10 aug
  19. Tue 11 aug
  20. Wed 12 aug
  21. Thu 13 aug
  22. Fri 14 aug
  23. Sat 15 aug
  24. Sun 16 aug
  25. Mon 17 aug
  26. Tue 18 aug
  27. Wed 19 aug
  28. Thu 20 aug
  29. Fri 21 aug
  30. Today 22 aug
Topics: JavaScript Full archive →

The Wire · Showcase

MCP SERVERS MOVE TO SDK V2

By RepoJournal · Filed · About Supabase

supabase-releaser[bot] jordienr awaseem edgurgel Joshen Lim charislam filipecabaco
15 people shipped this
supabase-releaser[bot] @supabase-releaser[bot] 3 cited jordienr @jordienr 1 cited awaseem @awaseem 1 cited edgurgel @edgurgel 1 cited Joshen Lim @joshenlim charislam @charislam filipecabaco @filipecabaco PragTob @PragTob supabase-evals-releaser @supabase-evals-releaser claude @claude Miranda Limonczenko @czenko mattrossman @mattrossman barryroodt @barryroodt raulb @raulb github-actions[bot] @github-actions[bot]

Supabase's MCP packages cut over to the v2 wire protocol today, and if you consume them, the next upgrade is not optional.

All three published MCP packages released breaking versions that move off the monolithic `@modelcontextprotocol/sdk` to the split v2 packages [1][2][3]. The peer dependency is now `@modelcontextprotocol/server`, so consumers must install the new package. Realtime also hardened its replication watchdog to restart the slot when it's not active [4], and the Studio quietly shipped a Workers list page behind a feature flag [5]. The docs team migrated 47 BigQuery-era log queries to the ClickHouse engine and retired the Logs Explorer, repointing every link at the SQL Editor [6]. If you're touching MCP integrations today, verify your package manifest before anything else. Everything else is steady motion, with 59 commits and 57 PRs across the period.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] mcp-server-postgrest: v0.2.0 ↗ supabase/mcp
  2. [2] mcp-server-supabase: v0.11.0 ↗ supabase/mcp
  3. [3] mcp-utils: v0.7.0 ↗ supabase/mcp
  4. [4] fix: update watch dog to check if slot is active ↗ supabase/realtime
  5. [5] feat(studio): workers list behind the workers flag (FE-4188) ↗ supabase/supabase
  6. [6] docs: migrate logs queries to ClickHouse and link to the SQL Editor ↗ supabase/supabase

Quick answers

What shipped in Supabase on August 21, 2026?
Supabase's MCP packages cut over to the v2 wire protocol today, and if you consume them, the next upgrade is not optional. In total, 59 commits, 57 pull requests, and 10 releases landed.
Who contributed to Supabase on August 21, 2026?
15 developers shipped this update, including Joshen Lim, charislam, jordienr, awaseem, edgurgel, filipecabaco, PragTob, and supabase-evals-releaser, and 7 more.
What were the notable Supabase updates?
mcp-server-postgrest: v0.2.0, mcp-server-supabase: v0.11.0, and mcp-utils: v0.7.0.

More from @supabase

Supabase @supabase

JUDGE UPGRADE: evals now reasons at medium effort

Supabase's eval judge is getting smarter, but the RLS guide fix is the one that will keep your docs green.

Miranda Limonczenko supabase-evals-releaser claude[bot] charislam +8
javascript 92 shipped
Supabase @supabase

ROW LEVEL SECURITY DOCS GET A REWRITE

Supabase restructured its RLS documentation overnight, splitting the guide into clear sections so developers can find what they need without wading through reference material.

Miranda Limonczenko kanad claude[bot] Saxon Fletcher
javascript 56 shipped
Supabase @supabase

SUPABASE CLI v2.115.0 BREAKS YOUR CI

If you run schema diffing or supabase test db in CI, this release is about to change what those commands do.

github-actions[bot] Vaibhav Andrew Valleteau Cemal Kılıç +4
javascript 79 shipped
Supabase @supabase

SUPABASE HARDENS CORS AND SHIPS PROMPT-INJECTION EVALS

A config hardening for self-hosted envoy plus four new security evals signal Supabase is closing attack surfaces on both the infrastructure and AI agent fronts.

Miranda Limonczenko Etienne Stalmans Jordi Enric dnywh +9
javascript 85 shipped

Daily updates, in your inbox

Follow Supabase

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

Cline hubs get drain and replay as Langchain plumb gates

Cline just shipped rollover-grade hub commands while Langchain exposes gateway internals, and OpenHands quietly broke its own monitoring contract.

github-actions[bot] eyurtsev langchain-oss-model-profiles langchain-oss-model-profiles[bot] +7
ai-agents 42 shipped
Local LLMs Local LLMs

SGLang ships v0.5.18 with 710 PRs and DeepSeek V4 FP4 auto-routing

The biggest release of the week just landed: SGLang v0.5.18 adds new models, fixes a silent disagg bug, and defaults DeepSeek V4 FP4 checkpoints to the right MoE runner.

ParthSareen hoyyeva jessegross Todd Malsbary +11
llms 266 shipped
CachyOS @CachyOS

KDE WIKI FIX TARGETS BLACK-SCREEN INSTALLS

CachyOS's KDE setup guide just got a critical correction that could save you from a black screen after install.

jlw-spqr Piotr Gorski
infra 45 shipped
Elixir & Phoenix Elixir & Phoenix

Elixir trims trailing whitespace with zero-cost slicing

Elixir's trim_trailing/1 just got a whole lot cheaper, and it's not the only performance fix in the pipeline.

Daniel Kukula Thomas Cioppettini asweet-confluent
elixir 8 shipped
Want every project, not just this one?