RepoJournal
Supabase @supabase
111 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-05
stories 49
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Studio blocks HA project actions, docs warn on pgcrypto cipher change

By RepoJournal · Filed · About Supabase

supabase-releaser[bot] jgoux mattrossman Utkarash Kumar Singh Sean Oliver alaister github-actions[bot]
12 people shipped this
supabase-releaser[bot] @supabase-releaser[bot] 2 cited jgoux @jgoux 1 cited mattrossman @mattrossman 1 cited Utkarash Kumar Singh @utkarash2991 1 cited Sean Oliver @seanoliver 1 cited alaister @alaister 1 cited github-actions[bot] @github-actions[bot] supabase-evals-releaser @supabase-evals-releaser supabase-evals-releaser[bot] @supabase-evals-releaser[bot] supabase-releaser @supabase-releaser antlio @antlio kemaldotearth @kemaldotearth

Studio now stops pause, restore, and add-on actions on High Availability projects before they fail, and the Postgres 15.19/17.11 docs add the pgcrypto legacy-cipher caveat.

The Postgres 15.19/17.11 upgrade documentation now includes the pgcrypto legacy-cipher caveat for CVE-2026-14663, completing the customer-action items for that release [1]. If you run pgcrypto with legacy ciphers, this is the upgrade note you need.

Studio guards pause, restore/PITR, and add-on affordances on Multigres (`high_availability`) projects, showing an "unavailable" state instead of a 400 error after the click [2]. Also, the disk space exhaustion banner now refreshes every 5 minutes instead of lingering for roughly two hours, so it no longer shows stale information after you've fixed the problem [3].

The MCP server releases introduce cost-confirmation elicitation across mcp-server-supabase v0.12.0 and mcp-utils v0.8.0 [4][5]. For form-capable clients, legacy cost tools hide when both `create_project` and `create_branch` are in `costConfirmation.enabledTools`, preventing double prompts [6].

slim-services now supports Ubuntu 22.04 (glibc 2.35) for native service artifacts, bundling matched loader, glibc, and compiler runtimes for Node, BEAM, PostgreSQL, and PostgREST, while preserving static/musl paths for remaining services [7].

Action items

References

  1. [1] docs: add pgcrypto legacy-cipher caveat for the 15.19/17.11 upgrade (#49894) ↗ supabase/supabase
  2. [2] [FE-4337] feat(studio): block pause, restore, and add-ons on High Availability projects ↗ supabase/supabase
  3. [3] fix(studio): drop resource-warnings staleTime to 5 minutes (#49975) ↗ supabase/supabase
  4. [4] mcp-server-supabase: v0.12.0 ↗ supabase/mcp
  5. [5] mcp-utils: v0.8.0 ↗ supabase/mcp
  6. [6] feat(mcp): hide legacy cost tools from form-capable clients ↗ supabase/mcp
  7. [7] Support Ubuntu 22.04 for native service artifacts ↗ supabase/slim-services

$ ls supabase/reviews/ # the step-back reads

the week in review Knip gates Studio CI, CLI fixes schema skip the month in review Supabase ships CLI v2, Postgres middleware, and safety rails across Studio
Topics: JavaScript Full archive →

Quick answers

What shipped in Supabase on September 5, 2026?
Studio now stops pause, restore, and add-on actions on High Availability projects before they fail, and the Postgres 15.19/17.11 docs add the pgcrypto legacy-cipher caveat. In total, 22 commits, 22 pull requests, and 5 releases landed.
Who contributed to Supabase on September 5, 2026?
12 developers shipped this update, including github-actions[bot], jgoux, supabase-evals-releaser, supabase-evals-releaser[bot], supabase-releaser[bot], mattrossman, supabase-releaser, and Utkarash Kumar Singh, and 4 more.
What were the notable Supabase updates?
docs: add pgcrypto legacy-cipher caveat for the 15.19/17.11 upgrade (#49894), [FE-4337] feat(studio): block pause, restore, and add-ons on High Availability projects, and fix(studio): drop resource-warnings staleTime to 5 minutes (#49975).
♥

$ log @supabase --recent

Studio Explorer gets resizable query results split 11 shipped Worker deployments gain exposure control and --instances flag 9 shipped Supabase CLI ships config pull, workers logs, and no-wait deploys 72 shipped postgrest-typegen drops pg-format, fixes computed-field matching and trigger views 99 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.