151 wires and counting

$ follow Supabase

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-15
stories 123

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

MCP server 0.14.0 adds health advisors, Supabase CLI routes every Management API call through the typed client

By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology

Supabase's MCP tooling grew an advisor surface and a bounded observability layer, while the CLI closed out its permission and typed-client plumbing and the hosted runtime images republished on upstream storage 1.82.2 and analytics 1.53.1.

mcp-server-supabase: v0.14.0 supabase/mcp

by supabase-releaser[bot]

mcp-server-supabase 0.14.0 ships health advisor support alongside the bounded cost lifecycle observations. Advisors were previously something you checked in the dashboard; now the assistant can surface them.

fix(cli): route every management api call through the typed client (#7123) supabase/cli

by Julien Goux

Every Management API call in apps/cli now goes through the typed @supabase/api client instead of a dozen hand-built URLs, and each call gets an api.operation span named after its OpenAPI operation ID. Telemetry can finally tell which operations a command really calls.

chore(cli): map db lint, push, reset and related command permissions (#7135) supabase/cli

by Prashansa Kulshrestha

db start, db test, db lint, db advisors, db reset, db push and seed buckets are now mapped to the Management API operations they can call, so scoped PATs can be granted per command. The shared withCondition model also accepts a database-target condition, and FlagCondition is no longer exported.

chore: shiki velite migration (#51579) supabase/supabase

by Anthony Lio

design-system, ui-library and learn drop @shikijs/compat and move to rehype-pretty-code, freeing them from shiki 1.6 after compat's lack of a v4 release blocked the earlier injection fix.

docs(cli): align declarative schema and diff engine docs with CLI behavior (#51609) supabase/supabase

by Wen Bo Xie

Four docs pages told readers to delete the declarative tree after db pull --declarative, but the command also rewrites [db.migrations].schema_paths in config.toml, so db diff kept failing afterward. The docs now match what CLI v2.120.0 actually does, which means three previously wrong outcomes in the guide no longer send you down the wrong path.

fix(mcp): use native HTTP for Devin MCP connections (#51646) supabase/supabase

by Alex Gercog

The Devin Desktop preset stops wrapping Supabase MCP URLs in npx -y mcp-remote and uses Devin's native Streamable HTTP url config, dropping a Node/npm bridge the client never needed; the preset also gains Devin-specific setup and auth instructions.

refactor(studio): add tool contracts and migrate update_notebook (#51626) supabase/supabase

by Charis

Studio's assistant tools had their identity and contract duplicated across as many as nine places with nothing binding them at compile time. The new contract/server split starts with update_notebook, the tool carrying the most copies.

mcp-utils: v0.9.0 supabase/mcp

by supabase-releaser[bot]

mcp-utils 0.9.0 lands the generic core underneath the MCP observability work: createMcpServer takes an optional observer and an optional classifyTool. It measures request attempts, outcomes and durations without shipping request payloads, and mcp-server-supabase 0.14.0 supplies the Supabase-owned types and cost facts.

Quick answers

What shipped in Supabase on October 15, 2026?
Supabase's MCP tooling grew an advisor surface and a bounded observability layer, while the CLI closed out its permission and typed-client plumbing and the hosted runtime images republished on upstream storage 1.82.2 and analytics 1.53.1. In total, 54 commits, 54 pull requests, and 15 releases landed.
Who contributed to Supabase on October 15, 2026?
12 developers shipped this update, including supabase-evals-releaser, supabase-evals-releaser[bot], Anthony Lio, Wen Bo Xie, Alex Gercog, Charis, Prashansa Kulshrestha, and Julien Goux, and 4 more.
What were the notable Supabase updates?
mcp-server-supabase: v0.14.0, fix(cli): route every management api call through the typed client (#7123), and chore(cli): map db lint, push, reset and related command permissions (#7135).