The Supabase Management API `logs.all` endpoint is removed on 2026-09-23. Scripts calling it must migrate to the new ClickHouse-backed `logs` endpoint, which accepts ClickHouse SQL only.

Migration of Supabase Management API `logs.all` analytics endpoint to `logs` endpoint

Specifying an explicit version in CREATE or ALTER EXTENSION is deprecated. From 2026-08-05 the version clause is ignored and the extension's default version is installed, with a warning.

Extension version pinning is deprecated in favor of default versions

Stream Postgres changes to BigQuery in near real time with Supabase Pipelines, a managed CDC service configured right in the Dashboard. Now in public alpha on all paid plans.

[Public Alpha] Supabase Pipelines

Self-hosted Supabase makes Envoy the default API gateway, replacing Kong, the week of 2026-08-09. Opt back into Kong if you rely on its HTTPS listener, a custom `kong.yml`, or the kong service name.

Self-hosted Supabase: Envoy becomes the default API gateway (breaking change)

`@supabase/supabase-js` will require TypeScript 5.0 starting January 31, 2027, dropping support for TypeScript 4.7 to 4.9. Upgrade to 5.0 or later before then.

Deprecation notice: `@supabase/supabase-js` will require TypeScript 5.0+

Supabase Developer Update for July 2026: Realtime Broadcast now supports binary payloads, Wrappers v0.6.2 adds a MongoDB foreign data wrapper, and OpenCode integrates with Supabase.

Developer Update - July 2026

Postgres `log_connections` defaults to off for new projects and existing Free and Pro projects from 2026-07-09, cutting log noise. Re-enable it via the dashboard or Management API.

log_connections is to be turned off by default for new projects and existing Free/Pro projects

Self-hosted Supabase's default `API_EXTERNAL_URL` now includes `/auth/v1` from the week of 2026-07-06. SAML SSO users must repoint their IdP to the new `/auth/v1/sso/saml/*` endpoints.

Self-hosted Supabase: API_EXTERNAL_URL to include /auth/v1

Supabase Realtime Broadcast now sends and receives binary payloads (bytea) over WebSockets, the REST API, and the database, cutting JSON overhead for sensor streams and image frames.

Realtime Broadcast now supports binary payloads

Supabase's June developer update: $500M Series F led by GIC, Auth passkeys in beta, the Supabase ChatGPT app, the Supabase plugin for AI coding agents, and Multigres 0.1 alpha released.

Developer Update - June 2026

From 2026-06-03, new Free plan projects using Supabase's default SMTP cannot customize auth email templates. Existing projects keep theirs. Configure a custom SMTP provider to customize.

Changes to Email Template Customisation on Free Tier

Supabase Auth now supports passkeys (Beta): passwordless, phishing-resistant sign-in built on WebAuthn using biometrics, a device PIN, or a hardware security key. No action required.

Passkeys for Supabase Auth (Beta)

pg_graphql 1.6.0 disables GraphQL introspection by default for new projects created on or after 2026-06-29. Re-enable it by adding a comment on the schema.

Breaking change in pg_graphql 1.6.0 — GraphQL introspection disabled by default

Supabase project owners and admins can grant temporary database access via Personal Access Tokens (Feature Preview), scoped by role with expiry up to 90 days. No password disclosure.

Feature Preview: Temporary token-based database access

Self-hosted Supabase makes `analytics` and `vector` opt-in on 2026-06-03. Logs Explorer users must include `docker-compose.logs.yml` in their `docker compose` invocation.

Self-hosted Supabase: making Analytics and Vector opt-in

Self-hosted Supabase switches Studio and postgres-meta from `supabase_admin` to `postgres` on 2026-06-17. Existing instances must run `utils/reassign-owner.sh` to migrate ownership in `public`.

Self-hosted Supabase: switching Studio from supabase_admin to postgres (breaking change)

Self-hosted Supabase's default db image moves from Postgres 15 to Postgres 17 on 2026-06-17. PG 15 data does not auto-upgrade; run the upgrade script, or pin `supabase/postgres:15.x` to stay.

Self-hosted Supabase: upgrading from PG 15 to 17 (breaking change)

Supabase support for Postgres 14 ends on 2026-07-01. Projects still on Postgres 14 will be upgraded automatically; projects using removed extensions (timescaledb, plv8, pgjwt) will be paused.

Deprecation Notice: Support for Postgres 14 ending on 1st July 2026

Supabase client libraries (supabase-js, auth-js, realtime-js, functions-js, storage-js, postgrest-js) drop Node.js 20 support on 2026-06-30. Upgrade to Node.js 22 or later before that date.

Deprecation Notice: Dropping Support for Node.js 20

Supabase's May developer update: custom OAuth/OIDC providers for Auth, ISO 27001 certification, @supabase/server SDK, branching without Git by default, plus Data API auto-exposure changes.

Developer Update - May 2026

Supabase's OAuth token endpoint `/v1/oauth/token` returns HTTP 200 instead of 201 starting 1 June 2026. Check for any 2XX status (`response.ok`), not a hardcoded 201.

Breaking Change: OAuth token endpoint will return HTTP 200 instead of 201

New tables in the public schema will no longer be exposed to the Supabase Data API by default. Opt-in today, default for new projects on 2026-05-30, enforced on all projects on 2026-10-30.

Breaking Change: Tables not exposed to Data and GraphQL API automatically

The Supabase Dashboard adds an RLS Tester (Feature Preview): run SELECT queries as any role, see which RLS policies fire, and debug policies. Enable it from your profile menu.

Feature Preview: RLS Tester

Supabase client libraries (supabase-js, swift, flutter, py) now automatically retry GET and HEAD requests to PostgREST on transient 520, 503, and network errors. Enabled by default, opt-out per call.

Automatic PostgREST retries for transient errors

Supabase will add applicable taxes (VAT, GST, sales tax) to invoices based on each organization's billing address, rolling out from 1 May to 30 June 2026. Review your billing address and Tax ID.

Upcoming: Tax Collection on Supabase Invoices

The Supabase CLI now ships pg-delta (Public Alpha): a Postgres 15+ schema diffing engine and declarative SQL workflow. Edit `.sql` files, run `supabase db schema declarative sync`.

[Public Alpha] Declarative Schema Management with pg-delta

Supabase's April developer update: GitHub integration on all plans, Multigres Operator open-sourced, Supabase joins the Stripe Projects developer preview, and Supabase docs available over SSH.

Developer Update - April 2026

Supabase Edge Functions now rate-limit recursive and nested function-to-function calls at a minimum of 5,000 requests per minute per chain. Inbound and external requests are unaffected.

Edge Functions rate limits on recursive/nested Edge Functions calls

Supabase's March developer update: Log Drains on Pro, Storage performance and security overhaul, docs export as Markdown for AI tools, and Edge Functions dashboard for self-hosted and CLI.

Developer Update - March 2026

The Supabase Data API stops returning the OpenAPI spec to anon-key requests on 11 March 2026 for new projects and 8 April 2026 for all projects. Use a service role or secret API key instead.

Breaking Change: Removing access to OpenAPI spec via the anon key

Supabase's February developer update: PrivateLink GA, Supabase as an official Claude connector, Postgres best practices for AI agents, and a heads-up that pg_graphql is becoming opt-in.

Developer Update - February 2026

The Supabase Table Editor now batches inserts, edits, and deletes into a single transaction with a diff preview. Enable it under Feature Previews > Queue table operations.

Queue table Inserts, edits and deletes on the table editor

pg_graphql will be disabled by default on new Supabase projects, and on existing projects older than 30 days with zero GraphQL traffic. Re-enable it via Database Extensions if needed.

Breaking Change: pg_graphql no longer enabled automatically (within approx 3 weeks from today)

Saving SQL snippets now works in local Studio via the CLI. Snippets are stored in `supabase/snippets`, ready to commit alongside your code. Requires CLI v2.72.7 or later.

SQL snippets can now be saved in local Studio

Supabase's January developer update: Stripe Sync Engine integration in the Dashboard, Index Advisor in the Table Editor, PostgREST v14 on the Data API, and the 2026 security roadmap.

Developer Update - January 2026

The Data API is upgrading to PostgREST v14 worldwide, starting in `ap-northeast-1`. GET throughput rises ~20% via a JWT cache, and schema cache loading is faster. No breaking changes.

Data API upgrade to PostgREST v14

Developer Update for December 2025: Supabase ETL, Analytics and Vector Buckets, iceberg-js, Supabase Platform, OAuth 2.1 provider, Kiro integration, and AWS Marketplace listing.

Developer Update - December 2025

Supabase Vector Buckets (Public Alpha) can now be managed from the dashboard. Store, index, and query vector embeddings at scale alongside your project's other storage.

[Public Alpha] Manage Vector Buckets from the dashboard

Dashboard updates for 10 Nov to 25 Nov 2025: refreshed Storage UI ahead of Analytics and Vector buckets, and per-template toggles for the new security-sensitive Auth emails.

Dashboard Updates (101125 - 251125)

Supabase Auth adds email templates for security-sensitive account changes: password, email, phone, identity link or unlink, and MFA enrollment. Enable via Feature previews.

Notify users about security-sensitive actions on their accounts

Supabase Analytics Buckets (Public Alpha) can now be managed from the dashboard. Store large datasets for analytics and reporting alongside your project's other storage.

[Public Alpha] Manage Analytics Buckets from the dashboard

Dashboard updates for 20 Oct to 3 Nov 2025: refreshed Storage UI ahead of new bucket types, split Auth Reports, Sentry Log Drains support, and three new Realtime configuration settings.

Dashboard Updates (201025 - 031125)

supabase-js 2.75.1 and CLI 2.53.1+ infer `SETOF` functions as embedded relationships in `.select()` queries and raise compile-time errors for invalid rpc calls. Regenerate types to adopt.

Enhanced Type Inference for Embedded Functions (Computed Relationships)

Dashboard updates for 6 Oct to 20 Oct 2025: a faster Auth Users page with URL-persisted search, model switching for the Assistant, and a max events per second setting for Realtime.

Dashboard Updates (061025 - 201025)

The Supabase MCP server is now hosted at `https://mcp.supabase.com/mcp`. Connect via browser-based OAuth 2 from clients like ChatGPT, no `npx` or personal access token required.

Supabase Remote MCP server

New projects on Postgres 17.6.1.016 and later ship pgmq 1.5.1, which changes `delay` parameter behavior. Upgrades for existing projects are paused until an upstream fix lands.

Potential breaking change in pgmq from 1.4.4 to 1.5.1 and temporary halt on upgrade for existing projects

Dashboard updates for 22 Sep to 6 Oct 2025: Assistant response speed and quality improvements, contextual error handling in the Table Editor, and a wrap on Supabase Select.

Dashboard Updates (220925 - 061025)

The Supabase JS client libraries (supabase-js, auth-js, postgrest-js, realtime-js, storage-js, functions-js) now live in a single monorepo. No action required for package users.

Supabase JS Client Libs: Migration to Monorepo

Dashboard updates for 8 Sep to 22 Sep 2025: Query Performance Advisor refinements and a new Auth Audit Logs setting to stop writing audit logs to the project database.

Dashboard Updates (080925 - 220925)

Data API v13 (PostgREST) tightened JWT validation on 2025-07-24 and broke some custom JWT setups. Re-importing the custom signing key per the updated docs resolves the issue.

Changes to Custom JWT and Signing Keys issue resolution

Dashboard updates for 18 Aug to 1 Sep 2025: expiration dates for Personal Access Tokens, synced report tooltips, refreshed Auth Policies and Integrations pages, and Assistant refinements.

Dashboard Updates (180825 - 010925)

Personal Access Tokens now support expiration dates (preset, custom up to one year, or never) and usage tracking updated every 15 minutes to help identify unused tokens.

Personal Access Tokens: Expiration & Usage Tracking

Supabase Storage splits egress into cached and origin tiers with separate quotas. Cached egress is now $0.03 per GB, three times cheaper than origin egress, on Free and paid plans.

3x cheaper egress for cache hits

Supabase Auth gains OAuth 2.1 authorization server capabilities (Public Beta), turning your project into an identity provider for third-party apps and MCP clients.

OAuth 2.1 Server Capabilities for Supabase Auth

Edge Functions now run Deno 2.1 in every region. No action required; fall back to Deno 1.45 via the `forceDenoVersion=1` query parameter if you hit compatibility issues.

All regions now run Deno 2.1 compatible release

realtime-js 2.15.1 and supabase-js 2.55.0 require Node.js < 22 users to install `ws` and pass it as the `realtime.transport` option. Node.js 22+ and browsers need no change.

Change in `realtime-js` affecting Node.js < 22

The Python `gotrue` and `supafunc` packages are deprecated in favor of `supabase_auth` and `supabase_functions`. Update imports; `supabase-py 2.18.1` drops the old packages.

Deprecation Notice: Dropping support for python's gotrue and supafunc

Dashboard service settings (Database, Data API, Auth, Storage, Edge Functions, Log Drains) now live in their own sections. Old URLs redirect; Project Settings keeps shortcuts for now.

Dashboard Navigation Updates: Project Settings

Supabase Postgres image 17.4.1.062 was withdrawn after an issue was found. New projects use an earlier release; existing projects on this version should upgrade once a fix ships.

supabase v17.4.1.062 was withdrawn

A unified Logs view in the Supabase dashboard is coming soon, combining logs across all services with improved filtering and real-time updates. Sign up for early access.

Coming Soon: Combined View for Logs

Supabase JS libraries (supabase-js, auth-js, realtime-js, functions-js, storage-js, postgrest-js) drop Node.js 18 support on 2025-10-31. Upgrade to Node.js 20 or later.

Deprecation Notice: Dropping Support for Node.js 18

A Realtime Settings screen in the dashboard lets you configure channel restrictions, database connection pool size, and max concurrent clients per project.

Realtime Settings

Edge Functions now accept a `forceFunctionRegion` query parameter to pin invocations to a specific region, useful when request headers cannot be controlled (CORS, webhooks).

Update to Edge Functions Regional Invocations

Edge Functions now offer a Deno 2.1 preview on the hosted platform. Opt in via the `forceDenoVersion=2` query parameter or `x-deno-version: 2` header to test compatibility.

Deno 2.1 Preview - Hosted Environment

The upcoming Supabase Postgres 17 bundle drops `timescaledb`, `plv8`, `plls`, `plcoffee`, and `pgjwt`. Postgres 15 keeps the extensions until end of life around May 2026; drop them before upgrading.

Forthcoming Postgres 17 Release Notes

Supabase Studio brings back tabs in the Table Editor and SQL Editor, letting you switch between tables across schemas or between snippets without navigating the list. Now fully rolled out.

Feature Preview: Tabs for Table and SQL Editor

Supabase developer update for April 2025: project-scoped roles on Team plans, the MCP server works with VS Code and deploys Edge Functions, plus Infinite Query and Social Auth in the UI Library.

Developer Update - April 2025

Supabase Studio dashboard updates from 21 Apr to 5 May 2025: sort columns from the Table Editor column header, set a billing address and billing name when creating or upgrading an organization.

Dashboard Updates [210425 - 050525]

Supabase Studio dashboard updates from 7 to 21 Apr 2025: revamped organization layout (Feature Preview), redesigned billing breakdown, database upgrade logs, and Feature Previews on self-hosted.

Dashboard Updates [070425 - 210425]

Supabase project-scoped roles are now available on Team plans. Restrict an organization member to specific projects with per-project permissions, useful for security boundaries and HIPAA compliance.

Project scoped roles now available in Team plans

Supabase developer update for March 2025 and Launch Week 14: the official Supabase MCP server, the Supabase UI Library on shadcn, Realtime Broadcast from Database, and declarative schemas.

Developer Update - March 2025

Supabase Studio dashboard updates from 24 Feb to 7 Apr 2025 covering Launch Week 14: create, edit, test, and deploy Edge Functions in the dashboard, plus Table Editor and SQL Editor tabs.

Dashboard Updates [240225 - 070425]

On 2025-04-02 the Supabase Management API `GET /projects/{ref}/analytics/endpoints/logs.all` defaults to a one-minute window and caps explicit ranges at 24 hours. Update clients querying wider ranges.

Supabase Management API `GET` Logs Restrictions

On 2025-04-04 the Supabase Data API switches experimental routing for GET requests from round-robin across all replicas to geo-routing that targets the nearest available database, lowering latency.

Upcoming Change: Improved Experimental Routing for Read Replica Load Balancers

Supabase Dedicated Pooler is now generally available on Pro and above: a co-located PgBouncer instance with lower latency than the Shared Pooler for serverless workloads. Transaction mode, IPv6 only.

Dedicated Pooler with PgBouncer

On 2025-04-21 Supabase restricts SQL on the `auth`, `storage`, and `realtime` schemas: no creating or dropping tables or functions, no writes to migration tables. Move custom objects elsewhere.

Restricting Access on Auth, Storage, and Realtime Schemas on April 21, 2025

Supabase Edge Functions now run on Deno 2.1 locally via the Supabase CLI. Set `deno_version = 2` in `config.toml` to try it before the hosted runtime upgrade. Report regressions during the preview.

Deno 2.1 Preview **local only**

Supabase developer update for February 2025: deploy Edge Functions from the dashboard, CLI, or Management API; new Model Context Protocol docs; and cheaper third-party Auth quotas.

Developer Update - February 2025

Supabase third-party Auth quotas now match standard Auth: 50,000 MAU on the Free Plan and 100,000 MAU on Pro and Team. Overage stays at $0.00325 per MAU. Effective immediately, no action required.

Greatly increased Third-Party Auth MAU quota for Free and Paid Plans

Supabase Studio dashboard updates from 10 to 24 Feb 2025: the new Inline Editor (Feature Preview) for running SQL anywhere, plus Auth, Billing, Edge Functions, and Logs improvements.

Dashboard Updates [10/02/25 - 24/02/25]

The Supabase Management API now exposes endpoints to deploy a single Edge Function and to bulk-update functions atomically, useful for integrations and CI flows that do not depend on the Supabase CLI.

Deploy and update Edge Functions using the Management API

Supabase Studio Inline Editor (Feature Preview) opens a SQL editor anywhere in the dashboard, with an inline AI assistant (cmd+k) and a SQL-first flow for creating policies, triggers, and functions.

Feature Preview: Inline Editor

Supabase Dashboard navigation now centers on a single active organization, with separate sidebars for Projects and Organizations, an Organization picker in the header, and a new `/organizations` page.

Upcoming breaking change to Dashboard Navigation

Supabase CLI 2.13.3 beta adds `supabase functions deploy --use-api` to deploy Edge Functions without Docker and to import files outside the `supabase/` directory, ideal for monorepos and CI.

Deploy Edge Functions from CLI without needing Docker + import files outside of supabase directory

Supabase Studio dashboard updates from 27 Jan to 10 Feb 2025: deploy Edge Functions via the AI Assistant, Auth settings consolidated, reference rows in popovers, Security Definer view fix.

Dashboard Updates [27/01/25 - 10/02/25]

Supabase is deprecating Fly.io Postgres managed by Supabase on 2025-04-11. Signups are disabled; existing projects are removed on that date. Migrate to Supabase Postgres or Fly native Postgres.

Deprecation of Fly.io Postgres Managed by Supabase on April 11, 2025

Supabase developer update for January 2025: third-party Auth with Firebase reaches GA, stacked log charts highlight errors, supabase-js gains JSON type inference and stricter filter type validation.

Developer Update - January 2025

Supabase Studio dashboard updates from 13 to 27 Jan 2025: stacked log charts surface errors and warnings, three new disk autoscale parameters, and a flat SQL Editor search list with snippets surfaced.

Dashboard Updates [13/01/25 - 27/01/25]

The Supabase Free Plan 0.5 GB database size limit now applies per active project rather than per organization. Paused and deleted projects no longer count toward the cap. Effective immediately.

Relaxing Database Size limit on Free Plan - 0.5 GB Database Size per project

Supabase developer update for December 2024: new Integrations page, AI Assistant fixes for Security and Performance advisors, inline AI in the SQL Editor, and Vercel Branching support.

Developer Update - December 2024

supabase-js 2.48.0 infers types for JSON fields when querying with the `->` selector. Define a custom JSON type with `MergeDeep` and the SDK returns the correct shape for nested selections.

Enhanced Type Inference for JSON Fields in supabase-js

Supabase CLI 2.7.0 bundles static files with Edge Functions. Declare files in `config.toml` under `static_files` and read them at runtime via Deno APIs. Supports Wasm modules and HTML templates.

Add static files to Edge Functions

Supabase organizations can now top up their credit balance from billing settings. Topped-up credits never expire, apply to future invoices only, and are not refundable. Available on all paid plans.

Credit Balance Top Up

Supabase Studio dashboard updates from 30 Dec 2024 to 13 Jan 2025: Log Explorer detail panel UX overhaul, S3 protocol toggle in Storage settings, credit balance top-up, and assorted bug fixes.

Dashboard Updates [30/12/24 - 13/01/25]

Supavisor deprecates Session Mode on port 6543 on 2025-02-28; after that date port 6543 only supports Transaction Mode. Move Session Mode clients to port 5432. Transaction-only users need no action.

Supabase Connection Pooler Deprecating Session Mode on Port 6543 on February 28, 2025

supabase-js 2.47.12 now type-checks values passed to the `eq`, `neq`, and `in` query filters, including enums, across tables, views, and nested relations. LSP autocompletes enum values.

Type validation for query filter values in supabase-js

Supabase Edge Functions can now load NPM modules from a custom private registry, configured with `NPM_CONFIG_REGISTRY` in `.env` or on the deploy command. Requires Supabase CLI 2.2.8 or newer.

Use a custom NPM registry for Edge Function dependencies

Dashboard updates: mobile navigation lands for the dashboard, inline AI Assistant completions in the SQL Editor via CMD/CTRL+K, and bulk delete for up to 20 Auth users at a time.

Dashboard Updates [09/12/24 - 23/12/24]

Dashboard updates from Launch Week 13: a unified Integrations page, the AI Assistant V2 available across the dashboard, Supabase Cron, Supabase Queues, and Restore to a new project.

Dashboard Updates [18/11/24 - 09/12/24]

The Slack v1 OAuth provider in Supabase Auth is deprecated in favour of the new Slack (OIDC) provider. Migrate before 2025-01-15, when the legacy provider is removed from the dashboard.

Slack V1 OAuth Provider Deprecated in favour of Slack (OIDC)

- [How Do I Know if This Impacts Me?](#how-do-i-know-if-this-impacts-me)
- [What Should I Do?](#what-should-i-do)
- [Accessing Nested Fields](#accessing-nested-fields)
- [Timeline](#timeline)
- [Learn More](#learn-more)

Changelog

Security Patch Notice

Build in a weekend, scale to millions