Skip to content

supabase

v1.26.07 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 17d Relational Databases
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai alternative auth database deno embeddings
+12 more
example firebase nextjs oauth2 pgvector postgis postgresql postgrest realtime supabase vectors websockets

Affected surfaces

auth

ReleasePort's take

Light signal
editorial:auto 11d

Supabase Realtime Broadcast now accepts binary payloads.

Why it matters: Enables transmission of arbitrary binary data through the Realtime API, expanding integration possibilities for media and file‑transfer use cases.

Summary

AI summary

Broad release touches Quick Product Announcements, Made with Supabase, Meet the Supabase team, and Community Highlights.

Changes in this release

Feature Medium

Realtime Broadcast now supports binary payloads.

Realtime Broadcast now supports binary payloads.

Source: llm_adapter@2026-07-16

Confidence: high

Feature Low

Audit Log Drains are available for streaming project audit logs externally.

Audit Log Drains are available for streaming project audit logs externally.

Source: llm_adapter@2026-07-16

Confidence: high

Feature Low

Multigres keeps LISTEN/NOTIFY functional across pooled Postgres connections.

Multigres keeps LISTEN/NOTIFY functional across pooled Postgres connections.

Source: llm_adapter@2026-07-16

Confidence: high

Feature Low

TanStack DB syncs TanStack collections with Supabase tables over PostgREST and Realtime (alpha).

TanStack DB syncs TanStack collections with Supabase tables over PostgREST and Realtime (alpha).

Source: llm_adapter@2026-07-16

Confidence: high

Feature Low

Connect copies every required `@supabase/server` environment variable with a single click.

Connect copies every required `@supabase/server` environment variable with a single click.

Source: llm_adapter@2026-07-16

Confidence: high

Deprecation Low

Postgres `log_connections` defaults to off for new projects; existing Free and Pro projects are being migrated.

Postgres `log_connections` defaults to off for new projects; existing Free and Pro projects are being migrated.

Source: llm_adapter@2026-07-16

Confidence: high

Deprecation Low

pg_graphql v1.6.2 disables GraphQL schema introspection by default; enable per‑schema if needed.

pg_graphql v1.6.2 disables GraphQL schema introspection by default; enable per‑schema if needed.

Source: llm_adapter@2026-07-16

Confidence: high

Bugfix Medium

Wrappers v0.6.2 fixes OpenAPI FDW pagination issues and adds MongoDB foreign data wrapper support.

Wrappers v0.6.2 fixes OpenAPI FDW pagination issues and adds MongoDB foreign data wrapper support.

Source: llm_adapter@2026-07-16

Confidence: high

Bugfix Low

OpenCode integration configures MCP setup for connecting agents to Supabase database, Edge Functions, and logs.

OpenCode integration configures MCP setup for connecting agents to Supabase database, Edge Functions, and logs.

Source: llm_adapter@2026-07-16

Confidence: high

Bugfix Low

Self‑hosted Docker defaults change: `API_EXTERNAL_URL` now includes `/auth/v1` prefix; default image moves to Postgres 17.

Self‑hosted Docker defaults change: `API_EXTERNAL_URL` now includes `/auth/v1` prefix; default image moves to Postgres 17.

Source: llm_adapter@2026-07-16

Confidence: high

Full changelog

Here's everything that happened with Supabase in the last month:

OpenCode integrates with Supabase

OpenCode connects your agent to your Supabase database, Edge Functions, and logs. It configures the MCP setup for you.

Read the blog →

TanStack DB syncs with Supabase

@supabase-labs/tanstack-db syncs TanStack DB collections with your Supabase tables over PostgREST and Realtime. It's available in alpha.

Watch the demo →

Wrappers adds a MongoDB foreign data wrapper

Wrappers v0.6.2 lets you query and join MongoDB collections directly from Postgres. It also fixes OpenAPI FDW pagination.

Read the docs →

Multigres supports LISTEN/NOTIFY across pooled connections

Multigres keeps Postgres LISTEN/NOTIFY working even when connections are pooled away from clients.

Read the blog →

Realtime Broadcast supports binary payloads

Realtime Broadcast now sends and receives binary payloads in addition to JSON. Binary payloads cut encoding overhead for cases like sensor telemetry and live screenshot streaming.

The Dart, Kotlin, and Python clients don't support binary payloads yet, and older SDK versions silently drop them. Update your client before you rely on it.

Read the docs →

Quick Product Announcements

  • Postgres log_connections now defaults to off for new projects on all tiers as of July 9, and existing Free and Pro projects are being migrated to the new default. [GitHub Discussion]
  • pg_graphql v1.6.2 ships with GraphQL schema introspection off by default, so enable it per schema if you use GraphiQL or codegen tools. [GitHub Discussion]
  • Audit Log Drains are available, so you can stream your project's audit logs to an external destination. [Docs]
  • Connect copies every environment variable @supabase/server needs in a single click. [Demo]
  • Self-hosted Docker defaults changed: API_EXTERNAL_URL now includes the /auth/v1 prefix, and the default image moves to Postgres 17. [GitHub Discussion]

Meet the Supabase team

  • Supabase Live: Building high quality Supabase apps using TRAE. July 22 at 7 pm PT. [Register]
  • Supabase x Claude Community Meetup in Dublin. [Register]
  • Hangout with the Supabase team during Casual Wednesdays on Discord at 10:00 am PT. [Join]

Made with Supabase

  • Shapeships: A multiplayer browser game using simultaneous-turn mechanics, built on an authoritative Supabase backend. [Website]
  • Blind OS: An autonomous outreach and client-management system that finds leads, qualifies them, and follows up on payments. [Website]
  • rlsautotest: Generates pgTAP tests and seed data from your Supabase RLS policies to prove, per table and identity, who can read or write which rows. [GitHub] [PyPI]
  • Heym: An open-source visual AI workflow automation platform with a native Supabase node for querying and mutating tables through PostgREST. [GitHub]

Community Highlights

  • A practical security checklist for non-technical builders, with Row Level Security flagged as the single most important fix. [Read]
  • A transparent cost breakdown for a personal life-management system built with Claude Code and Supabase, plus an honest look at the security tradeoffs of self-hosting your own data. [Read]
  • A widely-shared guide to vibecoding with Claude Code positions Supabase as the default data layer and login system in its standard setup flow. [Read]

Breaking Changes

  • `pg_graphql` v1.6.2 now disables GraphQL schema introspection by default (enable per‑schema if needed).
  • Postgres `log_connections` defaults to off for new projects as of July 9; existing Free/Pro projects are being migrated.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track supabase

Get notified when new releases ship.

Sign up free

About supabase

The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.

All releases →

Related context

Beta — feedback welcome: [email protected]