RepoJournal
Supabase @supabase
151 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-23
stories 6
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Supabase Guards QueryEditor Against Destructive Queries

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

supabase-evals-releaser supabase-evals-releaser[bot] github-actions[bot] dependabot joshenlim
5 people shipped this
supabase-evals-releaser @supabase-evals-releaser 1 cited supabase-evals-releaser[bot] @supabase-evals-releaser[bot] 1 cited github-actions[bot] @github-actions[bot] 1 cited dependabot @dependabot 1 cited joshenlim @joshenlim 1 cited

Supabase's QueryEditor now enforces SQL editor safety checks, blocking destructive operations without a WHERE clause.

Supabase's QueryEditor now enforces the same safety validations as the SQL editor, blocking destructive queries like UPDATEs without a WHERE clause in both notebook cells and the query tab [1]. This closes a dangerous gap where users could accidentally wipe tables from the explorer interface. Meanwhile, the storage service bumped to v1.70.7, shipping smoke-tested artifacts across linux/amd64, linux/arm64, and darwin/arm64 with an immutable image reference [2]. On the CLI front, dependabot nudged two npm dependencies, including a patch to jose that "reject[s] a JWE whose generated Key Management Parameters collide" [3], a quiet but worthwhile security hardening. The only other activity was routine eval-result refreshes [4] and a matching PR [5], both low-impact housekeeping. Overall, this is a quiet day with one meaningful product safety win and a minor dependency bump.

$ ls supabase/reviews/ # the step-back reads

the week in review CLI 2.120.0 adds persisted logs and OTel traces the month in review MCP v0.12.0 groups advisor lints, adds cost elicitation
Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on August 23, 2026?
Supabase's QueryEditor now enforces SQL editor safety checks, blocking destructive operations without a WHERE clause. In total, 2 commits, 3 pull requests, and 1 releases landed.
Who contributed to Supabase on August 23, 2026?
5 developers shipped this update, including supabase-evals-releaser, supabase-evals-releaser[bot], github-actions[bot], dependabot, and joshenlim.
What were the notable Supabase updates?
QueryEditor to have the same validations as per SQL editor, storage v1.70.7, and fix(deps): bump the npm-major group with 2 updates.
♥

$ log @supabase --recent

Self-hosted stack bumps realtime and storage, Studio remembers your chart range 72 shipped Realtime 2.144.0 patches a decimal CVE; realtime-csharp adds paged storage listing 151 shipped MCP server 0.14.0 adds health advisors, Supabase CLI routes every Management API call through the typed client 123 shipped Scoped OAuth reconsent in Studio, MCP drops double cost prompts 139 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.