RepoJournal
Supabase @supabase
151 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-25
stories 116
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SUPABASE SHIPS POSTGRES MIDDLEWARE PAIR AND FAST SHADOW BASELINE

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

Andrew Valleteau github-actions[bot] Arshdeep Singh Tomás Pozo raulb Matt Rossman Miranda Limonczenko
13 people shipped this
Andrew Valleteau @avallete 2 cited github-actions[bot] @github-actions[bot] 2 cited Arshdeep Singh @arshdeepsingh-bit 1 cited Tomás Pozo @tomaspozo 1 cited raulb @raulb 1 cited Matt Rossman @mattrossman 1 cited Miranda Limonczenko @czenko Katerina Skroumpelou @mandarini kanad @kanadgupta Vaibhav @7ttp supabase-releaser[bot] @supabase-releaser[bot] supabase-evals-releaser @supabase-evals-releaser supabase-evals-releaser[bot] @supabase-evals-releaser[bot]

The supabase/server package just delivered the RLS-scoped Postgres middleware you've been waiting for, and db diff just got 4x faster.

Supabase's server package now ships withPostgresClient and withPostgresAdminClient as a hardened pair, giving you RLS-enforced direct database access from middleware with a service-role companion [1]. The withOAuthProtectedResource helper moved to defineMiddleware, unblocking Edge Functions support [2]. Meanwhile, the CLI's shadow database baseline cache cuts warm provisioning from ~15.5s to ~3.3s on PG17 [3], and the pg-delta upgrade to alpha.46 brings parameter-ACL filtering plus OWNED BY handling to db diff [4]. The evals team promoted build-rls-003-org-roles-permissions to the benchmark suite, doubling down on RLS coverage [5], and the pg_net docs finally clarify the net schema permission model [6]. New runtime artifacts dropped for storage v1.71.0 and pooler v2.9.11 [7][8].

Action items

References

  1. [1] feat(middleware): ship withPostgresClient and withPostgresAdminClient (#115) ↗ supabase/server
  2. [2] fix: migrate `withOAuthProtectedResource` to `defineMiddleware` ↗ supabase/server
  3. [3] feat(cli): cache the shadow database baseline as a PGDATA snapshot (CLI-2191) (#6184) ↗ supabase/cli
  4. [4] feat(cli): upgrade pg-delta next to alpha.46 (#6300) ↗ supabase/cli
  5. [5] feat: promote build-rls-003-org-roles-permissions to benchmark suite (#162) ↗ supabase/evals
  6. [6] Clarify pg_net net schema grants (#49472) supabase/supabase ↗
  7. [7] storage v1.71.0 ↗ supabase/slim-services
  8. [8] pooler v2.9.11 ↗ supabase/slim-services

$ ls supabase/reviews/ # the step-back reads

the week in review CLI 2.120.0 adds persisted logs and OTel traces the month in review MCP v0.12.0 groups advisor lints, adds cost elicitation
Full archive → Weekly reviews →

Quick answers

What shipped in Supabase on August 25, 2026?
The supabase/server package just delivered the RLS-scoped Postgres middleware you've been waiting for, and db diff just got 4x faster. In total, 51 commits, 55 pull requests, and 10 releases landed.
Who contributed to Supabase on August 25, 2026?
13 developers shipped this update, including Arshdeep Singh, Miranda Limonczenko, Katerina Skroumpelou, Andrew Valleteau, kanad, Vaibhav, Tomás Pozo, and raulb, and 5 more.
What were the notable Supabase updates?
feat(middleware): ship withPostgresClient and withPostgresAdminClient (#115), fix: migrate `withOAuthProtectedResource` to `defineMiddleware`, and feat(cli): cache the shadow database baseline as a PGDATA snapshot (CLI-2191) (#6184).
♥

$ log @supabase --recent

Self-hosted stack bumps realtime and storage, Studio remembers your chart range 72 shipped Realtime 2.144.0 patches a decimal CVE; realtime-csharp adds paged storage listing 151 shipped MCP server 0.14.0 adds health advisors, Supabase CLI routes every Management API call through the typed client 123 shipped Scoped OAuth reconsent in Studio, MCP drops double cost prompts 139 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.