124 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-19
stories 70

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

A quiet day weighted toward CLI correctness: consent handling, SSL mode classification, and project-state error messages all got sharper, while slim-services shipped new smoke-tested storage and realtime artifacts.

fix(cli): honour config push consent (CLI-2450) supabase/cli

by 7ttp

JSON and stream JSON confirmations used to return the default before reading stdin, so an explicit piped `n` was ignored and `config push` applied remote changes anyway; unattended runs now skip updates without affirmative input or `--yes`/`SUPABASE_YES`. This is a breaking change for anything scripting `config push` without an explicit flag.

fix(cli): distinguish an unenrolled project from a missing one on the compute routes supabase/cli

by johnstonmatt

The Management API returns 404 on the compute routes for several distinct conditions, and the CLI collapsed them into one message; projects outside the private alpha were told `No project <ref> was found for this account` or `"<name>" is not deployed`, sending people to re-link or re-push a project that was never the problem. Unenrolled projects are now distinguished from genuinely missing ones...

fix(cli): treat only verifying sslmodes as a local TLS demand (CLI-2366) supabase/cli

by Coly010

The predicate added earlier was too broad: it treated any populated `sslmode` as a TLS demand. `prefer` and `allow` name a TLS/plaintext fallback, and now only verifying sslmodes count as a local TLS demand, so `sslConfigsFor` no longer misreads fallback modes.

feat(studio): let High Compliance projects opt-in to Assistant data access supabase/supabase

by mattrossman

Orgs with the HIPAA add-on had the Assistant's opt-in level forced to `disabled` on High Compliance projects regardless of their AI settings, a restriction that predated the AI provider BAAs. The server and client restrictions are removed so those projects honor the org's chosen setting.

storage v1.79.4 supabase/slim-services

by github-actions[bot]

Portable, smoke-tested artifacts for linux/amd64, linux/arm64 and darwin/arm64 ship as `ghcr.io/supabase/cli/storage:v1.79.4`, with realtime following at v2.137.3; each release carries a SHA256SUMS file and an immutable digest reference for pinned deploys. Pgmeta also gained an independent admin listener via `PG_META_ADMIN_PORT`, accepting `0` for an OS-assigned port, which fixes collisions whe...

Quick answers

What shipped in Supabase on September 19, 2026?
A quiet day weighted toward CLI correctness: consent handling, SSL mode classification, and project-state error messages all got sharper, while slim-services shipped new smoke-tested storage and realtime artifacts. In total, 32 commits, 32 pull requests, and 6 releases landed.
Who contributed to Supabase on September 19, 2026?
13 developers shipped this update, including github-actions[bot], jgoux, supabase-evals-releaser, NickLittman, supabase-evals-releaser[bot], 7ttp, Coly010, and johnstonmatt, and 5 more.
What were the notable Supabase updates?
fix(cli): honour config push consent (CLI-2450), fix(cli): distinguish an unenrolled project from a missing one on the compute routes, and fix(cli): treat only verifying sslmodes as a local TLS demand (CLI-2366).