Changelog

Specifying an explicit version in CREATE or ALTER EXTENSION is deprecated. From 2026-08-05 the version clause is ignored and the extension's default version is installed, with a warning.

Supabase's May developer update: custom OAuth/OIDC providers for Auth, ISO 27001 certification, @supabase/server SDK, branching without Git by default, plus Data API auto-exposure changes.

Supabase's February developer update: PrivateLink GA, Supabase as an official Claude connector, Postgres best practices for AI agents, and a heads-up that pg_graphql is becoming opt-in.

Supabase's January developer update: Stripe Sync Engine integration in the Dashboard, Index Advisor in the Table Editor, PostgREST v14 on the Data API, and the 2026 security roadmap.

Supabase Auth adds email templates for security-sensitive account changes: password, email, phone, identity link or unlink, and MFA enrollment. Enable via Feature previews.

Personal Access Tokens now support expiration dates (preset, custom up to one year, or never) and usage tracking updated every 15 minutes to help identify unused tokens.

Supabase developer update for April 2025: project-scoped roles on Team plans, the MCP server works with VS Code and deploys Edge Functions, plus Infinite Query and Social Auth in the UI Library.

Supabase project-scoped roles are now available on Team plans. Restrict an organization member to specific projects with per-project permissions, useful for security boundaries and HIPAA compliance.

Supabase developer update for December 2024: new Integrations page, AI Assistant fixes for Security and Performance advisors, inline AI in the SQL Editor, and Vercel Branching support.

On 2024-11-22, Supabase removes app.settings.jwt_secret from the postgres database. SQL functions calling current_setting('app.settings.jwt_secret') must migrate to Vault.

On 2024-10-15, Enterprise organizations lose Developer role write access to project API, Auth, Storage, Edge Functions, and Logs configuration. Read-Only role is unchanged.

Supabase HTTP APIs no longer use DigiCert as the root CA. Clients that trust only DigiCert must update their trust store to include the Cloudflare CAs Supabase now uses.

April 2024 Developer Updates: Supabase reaches General Availability, plus Edge Functions AI model support, Auth anonymous sign-ins, Storage S3 protocol, and Security and Performance Advisors.

Dashboard weekly roll-up from GA Week: Auth anonymous sign-ins, Storage S3 protocol support, new Security, Performance, and Index Advisors, and four new foreign data wrappers.

Supabase September 2022 update: three Kaizen weeks close 250+ issues, Auth UI launches on Product Hunt, and an open-source Postgres WASM ships with Snaplet.

Supabase August 2023 Launch Week 8: pgvector 0.5.0 with HNSW, Hugging Face support, Studio 3.0, the Integrations Marketplace, Supavisor 1M-connection pooling, plus SOC 2 and HIPAA.

Supabase May 2023 update: Supabase Vector toolkit launches, the Vault encrypted-secrets extension reaches all projects, and Next.js Auth Helpers add full App Router support with PKCE.

Supabase October 2023 update: @supabase/ssr launches for Next.js 14 server-side auth, pgvector outperforms Pinecone in benchmarks, and MFA arrives for Supabase Studio accounts.