Supabase CLI

Supabase CLI v2.106.0 — 2026-06-11

This release tightens database and deployment workflows, adds Git branch linking to Supabase branches, improves CLI behavior for coding-agent environments, and continues moving core commands into the TypeScript CLI shell.

⚠️ Breaking change

• New public schema objects are no longer exposed through the Data API by default — [api].auto_expose_new_tables now resolves to false when unset, matching the new hosted-project default. Local start/reset flows revoke the default Data API privileges for newly-created tables, sequences, and functions in public. Projects that still rely on the legacy auto-expose behavior can temporarily set auto_expose_new_tables = true in config.toml while migrating, but the flag is deprecated and scheduled for removal on 2026-10-30. The durable migration path is to add explicit SQL GRANTs for the anon, authenticated, and service_role roles that should access each object. (#5524)

Highlights

• Function deployments now retry rate limits — Transient rate-limit responses no longer immediately fail functions deploy; the CLI retries automatically. (#5534)
• Declarative schema sync handles the platform baseline for you — supabase db schema declarative sync --apply now provisions and records the required platform baseline automatically, so new declarative projects need less manual setup before their first apply. (#5515, #5521)
• Supabase branches can be linked to Git branches at creation time — Use supabase branches create --git-branch <branch> to associate a Supabase branch with the matching Git branch immediately. (#5250)

CLI automation

• Detected coding-agent invocations default to JSON — When the CLI detects a coding-agent environment, or when --agent yes is passed, commands default to JSON output unless the user explicitly requested another output mode, help, or version text. Use --agent no to keep human-oriented text output. (#5532)

Database workflows

• db pull skips unnecessary pg_dump work when the pg-delta diff engine can use the on-disk declarative catalog directly. (#5255)

Bug fixes

• Missing custom-hostname validation records and missing SSO SAML IDs no longer crash the CLI. (#5485, #5543)
• Vector storage setup now degrades cleanly: unavailable local vector storage is skipped, and remote bucket failures produce warnings instead of silent failures. (#5508, #5535)
• Channel selection from --experimental or SUPABASE_CHANNEL is preserved when TypeScript commands delegate to the Go proxy. (#5546)
• Legacy telemetry opt-out state and Go debug output parity were restored in the TypeScript shell. (#5465, #5467)

TypeScript port progress

• Now served by the TypeScript shell: bootstrap, config push, functions delete, functions download, gen signing-key, gen types, and services. Behavior remains aligned with the Go CLI while these commands move into the new implementation. (#5470, #5489, #5501, #5514, #5527, #5468)

Plus release workflow hardening, CI updates, generated API syncs, and dependency updates across Docker images, Go modules, and npm packages.

Full changelog: https://github.com/supabase/cli/compare/v2.105.0...v2.106.0

Supabase CLI v2.105.0 — June 4, 2026

More core commands now run on the native TypeScript shell. This release also includes improvements to vector storage and environment configuration for local development.

Improvements

• Vector storage enabled by default — New local projects now include vector buckets. (#5421)
• S3 and Supabase key available in Studio — Environment variables for S3 and sb key are automatically injected into your local Studio container. (#5438)

Bug fixes

• db diff with edge-runtime containers no longer fails due to port binding. (#5424)
• Telemetry opt-out preference now persists across CLI sessions. (#5465)

TypeScript port progress

• Now served by the TypeScript shell: init, link, unlink, login, logout. Behavior matches the Go CLI. (#5433, #5426, #5446)

Plus 13 internal improvements and dependency updates.

Full changelog: https://github.com/supabase/cli/compare/v2.104.0...v2.105.0

2.104.0 (2026-06-01)

Bug Fixes

• cli: route TS telemetry to production PostHog (#5411) (935e578)
• cli: schema-decode telemetry config (#5412) (88be432)
• cli: status gating (#5335) (1d1e719)
• cli: suppress spinner on stdout for legacy -o machine formats (#5410) (856339a), closes #5397
• cli: telemetry json parse crash (#5405) (50908ba)
• deps: bump the go_modules group across 1 directory with 9 updates (#5398) (8603361)

Features

• cli: port encryption commands to native TypeScript (#5409) (6410a03)
• cli: port postgres config (#5404) (94882bc)

2.103.0 (2026-06-01)

Bug Fixes

• auth: propagate passkey config to env (#5401) (7a12639)
• cli: decode Go keyring tokens (#5406) (8768e0e)
• cli: drop redundant identify from identity stitch (#5396) (34c3ce9)
• docker: bump supabase/postgres from 17.6.1.131 to 17.6.1.132 in /apps/cli-go/pkg/config/templates (#5402) (2dfacb9)
• docker: bump supabase/realtime from v2.101.0 to v2.102.1 in /apps/cli-go/pkg/config/templates in the docker-minor group (#5399) (dfc9d1e)
• docker: bump the docker-minor group across 1 directory with 2 updates (#5385) (e4649dd)

Features

• cli: migrate network bans (#5382) (0684ae6)
• cli: migrate vanity-subdomains (#5394) (f6f2a47)
• cli: port domains commands to native TypeScript (#5391) (2a8a087)
• cli: port projects commands to native TypeScript (#5392) (cbf20cc)
• cli: port snippets commands to native TypeScript (#5381) (5072003)
• cli: replace legacy hidden flags (#5403) (d401de5)

2.102.0 (2026-05-29)

Bug Fixes

• cli: restore completion subcommand tree in legacy shell (#5368) (8bc660e), closes #compdef
• cli: skip identity stitch in CI to stop ephemeral-env identify spam (#5366) (ca47a15), closes #5329
• cli: support legacy migrations alias (#5355) (0d53df0)
• cli: support older x64 CPUs (#5339) (56b598b)
• cli: update effect beta (#5380) (c1c0ed5)
• config: interpolate env() refs before schema decode (#5341) (d9f31cc), closes #5281
• docker: bump supabase/postgres from 17.6.1.106 to 17.6.1.130 in /apps/cli-go/pkg/config/templates (#5362) (bc3c9c7)
• docker: bump supabase/postgres from 17.6.1.130 to 17.6.1.131 in /apps/cli-go/pkg/config/templates (#5372) (2b87d72)
• docker: bump the docker-minor group across 1 directory with 9 updates (#5365) (a47344e)
• docker: bump the docker-minor group in /apps/cli-go/pkg/config/templates with 2 updates (#5371) (2bc4aea)
• docker: repair mirror image workflow dispatch (#5363) (af9cbf1)
• docker: restore Dependabot image updates (#5360) (5362083)

Features

• cli: add support for vector buckets in CLI operations (#5230) (7a2f6d6)
• cli: align legacy telemetry payload with Go CLI (#5359) (6928009)
• cli: port backups list and restore to native TypeScript (#5331) (627e534)
• cli: port branches commands to native TypeScript (#5374) (a0adb4d)
• cli: port network-restrictions commands to native TypeScript (#5367) (c87d52b)
• cli: port orgs commands to native TypeScript (#5379) (f03d18e)
• cli: port secrets commands to native TypeScript (#5357) (0cfdb72), closes #5341
• cli: port ssl-enforcement to native TypeScript (#5340) (c16564a)
• cli: port sso commands to native TypeScript (#5375) (d5a1e70)
• config,stack: add auto_expose_new_tables configuration option (#5239) (bbc5523), closes supabase/supabase#45329

2.101.0 (2026-05-21)

Bug Fixes

• alias and telemetry docs link (#5301) (efb0949)
• ci: drop co-incident tags in backfill-release-notes so it picks the right baseline (#5321) (88ed52d)
• cli: inject Sentry DSN and PostHog credentials into Go binary (#5314) (aa2b0f2)
• cli: inject version into Go binary via ldflags (#5313) (801729b), closes #5308
• cli: require hostname (#5328) (b2f10f0)
• cli: stabilize smoke tests with docker image caching and retries (#5258) (55e3406)
• correct local db push text (#5280) (9ab8670)

Features

• cli: Add --no-apply flag for db schema declarative sync command (#5220) (46cc858), closes #5218

Changelog

Bug fixes

• e4a7ace0226dfd7ee8886ebc550a4b5c476c047e: fix: mailer links regression (#5166) (@jgoux)

Others

• 893c2840996c7ec8cfaa38a2907b973a7859957c: chore: sync API types from infrastructure (#5160) (@supabase-cli-releaser[bot])
• 9da7facef2f648ef2a58b61731327c3ba2ce31af: fix (@7ttp)
• f6c1529132e6d3f5d397db6e2830771966133e4a: test (@7ttp)

Changelog

Bug fixes

• b89a94567975321f9eb58a487825fb2a35f11188: fix: skip bucket seeding (#5158) (@7ttp)

Changelog

Others

• 0dc6a4755da01e01ab75f34b955ccc01904afe35: feat(pg-delta): enhance pg-delta version handling (#5154) (@avallete)

Changelog

Features

• 3f01508fd6ac3278470938108bef739b03f229ac: feat: emit Claude Code plugin hint from CLI (#5153) (@Rodriguespn)

Changelog

Features

• cd3c3d3fccb49eaac7e9541afda95acb7bb05541: feat: add SUPABASE_HOSTNAME env var to override local service host (#4947) (@kanaka)

Changelog

Bug fixes

• a11f261c5b5c350a12d931d48c8afeded31ef25c: fix(functions): set nofile ulimit for Edge Runtime container (#5152) (@wucm667)

Others

• 73148544d2b1e4e2536577c4ec5fa51a3e614a7d: Update Dockerfile (#5144) (@joshenlim)

Changelog

Bug fixes

• be971cd991e3eeeca8ca9f0d1a7d83f5a9ebf375: fix: encode auth external url explicitly (#5092) (@jgoux)

Others

• 7285baba6eb272f3d3b63756030353f424022279: chore: update codegen api (#5143) (@avallete)

Changelog

Bug fixes

• d7a05f56e516a7e1f9bf393cfabb8140fc611d43: fix(windows): json unmarshal errors in telemetry and pg-delta declarative sync (#5128) (@avallete)

27 Apr 2026 (v2.95.4)

What's Changed

Features

• feat(auth): add support for configuring passkeys and webauthn
• feat(db): strengthen RLS advisory message for stronger agent compliance
• feat(telemetry): attach org/project groups to all CLI events
• feat: --diff-engine flag on db pull
• feat: exposing new api keys to functions

Bug fixes

• fix(docker): bump the docker-minor group across 1 directory with 6 updates
• fix(docker): bump the docker-minor group in /pkg/config/templates with 6 updates
• fix(pg-delta): declarative apply error results
• fix(pg-delta): declarative-sync-no-declarative-dir-set
• fix(start): guard db_logs vector transform against null regex capture
• fix: adds etl to managed schema
• fix: atomic parser
• fix: functions download
• fix: improve error handling and output formatting in pg-delta apply process
• fix: remove version comparison check for storage image updates

Others

• chore(workflows): enable install scripts for supabase package in Yarn
• chore: resync develop with main
• chore: sync API types from infrastructure
• chore: upgrade pg-delta to alpha.20 in multiple templates
• Update Dockerfile for Studio image 2026-04-27 by @joshenlim in https://github.com/supabase/cli/pull/5130

Changelog

Bug fixes

• 80566a16728ea6593f69beb2dc4baa8705398ba9: fix(start): guard db_logs vector transform against null regex capture (#5126) (@rebasecase)

Changelog

Bug fixes

• f265b3aa5c0c4d9d73c90fa613d59a179f5a7e67: fix: improve error handling and output formatting in pg-delta apply process (#5120) (@avallete)

Others

• 4b9992d54d6afa3891b1646d0335c92b2366f5dc: chore: upgrade pg-delta to alpha.20 in multiple templates (@avallete)
• 8790ef6763eeac0262ac3f1b9618f5877ac87bb9: Merge branch 'develop' into chore/bump-pg-delta-alpha-19 (@avallete)
• 1b8dcc14e4591e955bff5a255d69ce86547b99c2: chore: upgrade pg-delta to alpha.20 in multiple templates (#5119) (@avallete)