RepoJournal
Supabase

@supabase

The open-source Firebase alternative powering thousands of startups

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SUPABASE SHIPS POSTGRES MIDDLEWARE PAIR AND FAST SHADOW BASELINE

By RepoJournal · Filed · About Supabase

The supabase/server package just delivered the RLS-scoped Postgres middleware you've been waiting for, and db diff just got 4x faster.

Supabase's server package now ships withPostgresClient and withPostgresAdminClient as a hardened pair, giving you RLS-enforced direct database access from middleware with a service-role companion [1]. The withOAuthProtectedResource helper moved to defineMiddleware, unblocking Edge Functions support [2]. Meanwhile, the CLI's shadow database baseline cache cuts warm provisioning from ~15.5s to ~3.3s on PG17 [3], and the pg-delta upgrade to alpha.46 brings parameter-ACL filtering plus OWNED BY handling to db diff [4]. The evals team promoted build-rls-003-org-roles-permissions to the benchmark suite, doubling down on RLS coverage [5], and the pg_net docs finally clarify the net schema permission model [6]. New runtime artifacts dropped for storage v1.71.0 and pooler v2.9.11 [7][8].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] feat(middleware): ship withPostgresClient and withPostgresAdminClient (#115) supabase/server
  2. [2] fix: migrate `withOAuthProtectedResource` to `defineMiddleware` ↗ supabase/server
  3. [3] feat(cli): cache the shadow database baseline as a PGDATA snapshot (CLI-2191) (#6184) supabase/cli
  4. [4] feat(cli): upgrade pg-delta next to alpha.46 (#6300) supabase/cli
  5. [5] feat: promote build-rls-003-org-roles-permissions to benchmark suite (#162) supabase/evals
  6. [6] Clarify pg_net net schema grants (#49472) supabase/supabase
  7. [7] storage v1.71.0 ↗ supabase/slim-services
  8. [8] pooler v2.9.11 ↗ supabase/slim-services

Quick answers

What shipped in Supabase on August 25, 2026?
The supabase/server package just delivered the RLS-scoped Postgres middleware you've been waiting for, and db diff just got 4x faster. In total, 51 commits, 55 pull requests, and 10 releases landed.
Who contributed to Supabase on August 25, 2026?
13 developers shipped this update, including Arshdeep Singh, Miranda Limonczenko, Katerina Skroumpelou, Andrew Valleteau, kanad, Vaibhav, Tomás Pozo, and raulb, and 5 more.
What were the notable Supabase updates?
feat(middleware): ship withPostgresClient and withPostgresAdminClient (#115), fix: migrate `withOAuthProtectedResource` to `defineMiddleware`, and feat(cli): cache the shadow database baseline as a PGDATA snapshot (CLI-2191) (#6184).

More from @supabase

Daily updates, in your inbox

Follow Supabase

Keep up with Supabase in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?