Supabase Changelog

PostgREST 13 is out! It comes with API and Observability improvements.

Spread To-Many relationships

This new feature allows you to represent one-to-many and many-to-many relationships as flat JSON arrays.

For example, you can now query hierarchical JSON structures like:

[
  {
    "title": "The Shawshank Redemption",
    "actors": ["Tim Robbins", "Morgan Freeman"],
    "genres": ["Drama"]
  },
  {
    "title": "The Godfather",
    "actors": ["Marlon Brando", "Al Pacino"],
    "genres": ["Drama", "Crime"]
  },
  {
    "title": "The Dark Knight",
    "actors": ["Christian Bale", "Heath Ledger"],
    "genres": ["Drama", "Crime", "Action"]
  }
]

Using the spread operator:

const { data, error } = await supabase.from('titles').select(`
  title:primary_title,
  ...people(actors:primary_name),
  ...genres(genres:name)
`)

Automatic tsvector conversion

You can now use full text search on text and json/jsonb columns in addition to tsvector columns:

const { data, error } = await supabase.from('titles').textSearch('primary_name', `'god' & 'father'`)

Text and JSON/JSONB columns are automatically converted with to_tsvector. For performance, add an index:

create index idx_titles on people
using gin (to_tsvector('english', primary_name));

Max Affected

Limit the number of rows affected by update or delete operations:

const { data, error } = await supabase
  .from('people')
  .update({ primary_name: 'Marlon Brando Jr.' })
  .eq('nconst', 'nm0000008')
  .maxAffected(1)

If rows affected exceed the limit, an error is thrown. This also works with rpc() calls that modify rows.

Content-Length header

Response body size in bytes is now available in the Content-Length header:

HTTP/1.1 200 OK
Content-Length: 104
Content-Location: /items

This helps identify requests consuming the most traffic to avoid exceeding egress limits.

Proxy-Status header

The PostgREST error code is now present in the Proxy-Status header:

HTTP/1.1 406 Not Acceptable
Proxy-Status: PostgREST; error=PGRST116

You can check these headers in the Supabase Logs Explorer.

Breaking Changes

JWT kid validation

PostgREST now validates the JWT kid claim, matching it against the configured JSON Web Key Set. If you use Supabase Auth or the CLI, this is handled automatically. For integrations with other Auth systems, ensure both JWT and JWKS follow these rules.

Schema validation in PostgREST search path

Schemas in db-schemas and db-extra-search-path are now validated. Non-existent schemas will cause PostgREST to fail. When dropping a schema during migration, sync it with the PostgREST search path:

begin;
drop schema old_schema;
alter role authenticator set pgrst.db_schemas = 'public, pg_graphql, others';
commit;

Try it out

PostgREST v13 is now available for all new projects on Supabase. Existing projects can upgrade to get this new version. See the full changelog for more details.

Lovable Cloud makes building with AI agents easier than ever, with every project powered by Supabase behind the scenes.

Learn about the security risks of connecting AI agents to databases and how to implement defense in depth strategies to protect your data from prompt injection attacks.

Learn how to build scalable data processing pipelines using Supabase Edge Functions, cron jobs, and database queues and handle large workloads without timeouts or crashes.

Supabase is explicitly making available a non-exclusive license of the OrioleDB patent to all OrioleDB users in accordance with the OrioleDB license.

Announcing the winners of the Supabase Launch Week 15 Hackathon.

Build a professional deployment workflow for your Supabase project. Learn essential patterns that prevent 3am panic attacks while keeping your workflow fun, simple, and safe.

Build a testing strategy that prevents production disasters without turning development into a slog. Learn which tests matter, which tools to use, and how to catch bugs before your users do.

Get your AI-generated app ready for production with this comprehensive guide covering security, performance, and deployment best practices.

Master the art of communicating with AI coding assistants through effective prompting strategies, iterative refinement, and systematic approaches that turn ideas into deployable applications.

The reasons why (and why not) to use Supabase Auth instead of building your own.

Build an Open Source Project over 10 days. 5 prize categories.

Mount S3-compatible buckets as persistent file storage in Edge Functions with up to 97% faster cold start times.

Upload files up to 500 GB with significant egress cost reductions.

18 Jul 2025 · 4 minute read

Here are the top 10 launches from the past week. They're all very exciting so make sure to check out every single one.

#1: New API Keys + JWT Signing Keys

Supabase Platform released new API keys, Publishable and Secret, and Supabase Auth now supports asymmetric JWTs with Elliptic Curve and RSA cryptographic algorithms. These changes improve the performance, reliability, and security of your Supabase projects.

#2: Analytics Buckets with Apache Iceberg Support

We launched Supabase Analytics Buckets in Private Alpha—storage buckets optimized for analytics with built-in support for Apache Iceberg. We've coupled this with the new Supabase Iceberg Wrapper to make it easier for you to query your analytical data.

#3: OpenTelemetry Support

We've added support for OpenTelementry (OTel) across our services so you can soon send logs, metrics, and traces to any OTel-compatible tooling. We've also unified logs under a single interface in our Dashboard as well as added new capabilities to our AI Assistant to improve the debugging experience.

#4: Build with Figma Make and Supabase

We've partnered with Figma so you can hook up a Supabase backend to your Figma Make project, enabling you to persist data and tap into the suite of Supabase products to help you build prototypes quickly and scale them when you gain traction.

#5: Storage: 500 GB Uploads and Cheaper Cached Egress

You can now upload files as large as 500 GB (up from 50 GB), enjoy much cheaper cached egress pricing at $0.03/GB (down from 0.09/GB), and increased egress quota that doubles your egress before you have to start paying.

#6: Edge Functions: Deno 2, 97% Faster Boot Times, and Persistent File Storage

Edge Functions now support Deno 2.1, persistent file storage so you can mount any S3-compatible storage and read and write to them inside of your functions, up to 97% faster boot times, and support for Deno's Sync APIs.

#7: Branching 2.0: GitHub Optional

You can now spin up, view diffs, and merge your branches directly from the Supabase Dashboard without having to connect to GitHub.

#8: Supabase UI: Platform Kit

We've built out several UI components to make it easy for you to feature the core of Supabase Dashboard inside your own app so you or your users can interact with Supabase projects natively with a customizable interface.

#9: Stripe-To-Postgres Sync Engine as an NPM Package

Now you can conveniently sync your Stripe data to your Supabase database by importing the npm package @supabase/stripe-sync-engine, whether in your Node.js app or even deploying it in a Supabase Edge Function.

#10: Algolia Connector for Supabase

We've been collaborating closely with Algolia to bring you a connector for Supabase so you can easily index your data and enable world class search experiences.

Bring lightning-fast search to your Supabase apps, with no code required.

New unified logging, advanced reports, and AI debugging capabilities.

Create, review and merge Supabase branches all within the dashboard.

Access to a new central security page and launch of additional controls.

Analytics buckets optimized for large-scale data analysis with Apache Iceberg support.