RepoJournal

$ cat supabase/month/2026-09-01.log

Supabase

Supabase

the month in review · September 2026

MCP v0.12.0 groups advisor lints, adds cost elicitation

By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology

♥

September's CLI work centered on a flag-gated stack, while the slim-services images moved PostgREST to v16.3 and Storage to v1.79.4.

958 commits 949 PRs merged 228 releases 30 briefings covered

all supabase reviews →

← previous month supabase wire →

mcp-server-supabase: v0.12.0 supabase/mcp

by supabase-releaser[bot]

The MCP server now returns advisor lints grouped rather than as a flat list, which changes the shape of the get_advisors response your tooling parses. The same release date also brought cost confirmation elicitation in mcp-utils v0.8.0, so agents ask before spending on project operations instead of doing it silently.

@supabase/config v0.4.0 supabase/cli

by github-actions[bot]

Worker deployments gained exposure control plus a new --instances flag, which lands in config v0.4.0. Both arrive as part of September's broader move to make the CLI stack flag-gated, so scripts pinning config behavior should pin the version.

postgrest v16.3 supabase/slim-services

by github-actions[bot]

PostgREST v16.3 is now published as portable, smoke-tested artifacts for linux/amd64, linux/arm64, and darwin/arm64, alongside a slimmer image that drops unneeded build weight. If you run the multi-platform images from ghcr.io, the immutable sha256 references are the ones to pin.

storage v1.79.4 supabase/slim-services

by github-actions[bot]

The storage line moved through v1.75.0, v1.75.1, v1.77.0, and now v1.79.4 over the month, each shipped as smoke-tested multi-platform artifacts. That cadence is the slim-services pipeline doing its job, not a single headline feature.

v17.6.1.178-cli supabase/postgres

by github-actions[bot]

The postgres build rescopes the pg_graphql and pg_cron event triggers during pg_upgrade and bumps supautils to 3.4.4. If you run major-version upgrades with either extension installed, this is the build that addresses trigger ownership across the upgrade boundary.

typegen: v0.2.1 supabase/sdk

by supabase-releaser[bot]

Typegen generators now emit the trailing newline themselves and the registry passes it through, which removes the diff churn that an appended newline caused in generated client files.

supabase_testing v0.1.1 supabase/supabase-flutter

by libsreleasetagger[bot]

A dependency bump only: supabase_testing v0.1.1 updates a dependency to its latest release.

$ ls supabase/month/ # the briefings behind this review

Tue Sep 1 CLI fixes schema skipping bug, default cache; ETL bumps rust-postgres Wed Sep 2 Shared DuckDB pooling, group advisor lints, realtime v2.133.0 Thu Sep 3 postgrest-typegen drops pg-format, fixes computed-field matching and trigger views Fri Sep 4 Supabase CLI ships config pull, workers logs, and no-wait deploys Sat Sep 5 Studio blocks HA project actions, docs warn on pgcrypto cipher change Sun Sep 6 Worker deployments gain exposure control and --instances flag Mon Sep 7 Studio Explorer gets resizable query results split Tue Sep 8 Realtime fixes empty-select payloads, ETL hardens CI Wed Sep 9 Database Connections leave feature preview, remote MCP gate removed Thu Sep 10 supabase pull orchestrator lands, CLI fixes broken start Fri Sep 11 Postgrest v16.3 and storage v1.75.1 slim artifacts, Vitest 5 across the monorepo Sat Sep 12 Supabase CLI gains stack service selection, slim-services pins imgproxy to Storage's compose value Sun Sep 13 Supabase CLI moves effect lint paths into config Mon Sep 14 Warehouse gains a query engine selector, design-system dev reloads faster Tue Sep 15 CLI stack goes flag-gated, functions serve stops crying wolf Wed Sep 16 Studio moves onto Nitro, CLI drops the legacy compute bridge Thu Sep 17 Replicator health probes land, Studio pipeline overview rebuilt Fri Sep 18 MCP v0.13.0 gates destructive SQL, CLI stops deleting vector buckets Sat Sep 19 CLI config push stops ignoring a piped "no"; storage and realtime artifacts refresh Sun Sep 20 Turbopack build cache disabled, eval results refreshed Mon Sep 21 Realtime throttles token refreshes, ETL makes shutdown explicit Tue Sep 22 Supabase ships recovery-code MFA sign-in, new stack init flag Wed Sep 23 Evals move to GPT-6 and Opus 5.5, CLI functions go full effect lint Thu Sep 24 SCRAM channel binding restored over TLS, C# array parsing fixed Fri Sep 25 Typegen language registry lands; postgres images roll Sat Sep 26 Foreign server deletes stop cascading, Studio logs get range selection Sun Sep 27 Supabase evals refreshed from the latest automated run Mon Sep 28 Auth starts with zero session limits, Realtime holds the pool open Tue Sep 29 Eval sandboxes lose real provider keys, Flutter fixes multi-column embeds Wed Sep 30 Realtime patches HIGH CVE in mint, ClickHouse ETL stops dropping inserts

Keep up with Supabase in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

all supabase reviews →

← previous month supabase wire →