Supabase CLI

Changelog

Features

• 08d3e3f0443d6bd0dd40c58394887057578bf629: feat: deprecate beta channel on npm (#4537) (@sweatybridge)

Others

• ae86efb9c399b75ab4770be763d951cc7a01552c: chore: update fast forward permission (@sweatybridge)
• b6bbf0d1336c5494e2a205d08bb8e49efff2ac2e: chore: reduce default token permission scope (@sweatybridge)
• 6558d59e65016265f622764c532a004d6bde9520: chore: reduce scope of install perms (#4526) (@sweatybridge)
• 356b2aa5ba03843ac35a480f361371626fa0b892: chore: merge fast forward workflow to beta release (@sweatybridge)
• e2992a334e8191b1a82de7656a342fdb390494e0: chore: sync API types from infrastructure (#4529) (@supabase-cli-releaser[bot])
• eae61bfad77f3cf8329cef9b3557fc58edab9cb9: chore: move all npm ops to beta workflow (@sweatybridge)
• bf3b86055713915a9e3ecd6a8eefe5ab565fadf7: Revert "chore: move all npm ops to beta workflow" (@sweatybridge)
• 33fd875364cbb0469a9aff805102d8ecc7405d93: Revert "chore: merge fast forward workflow to beta release" (@sweatybridge)
• c21560637910eadfd4b15b7d6e5eba6380071231: chore: merge fast forward and release workflow (@sweatybridge)

Changelog

Bug fixes

• 53fa1f5c938a57aa2bd61d7eb54a1d14bc367878: fix: test tcp connection instead (@sweatybridge)

Others

• e819e363c6147fad71ec38344f96d8ee42083be1: chore: add id token permission to release workflow (@sweatybridge)

Changelog

Bug fixes

• 5cff25a960c7ba646a604be8a271c708263c5cad: fix: add id-token permission for npm oidc (#4519) (@staaldraad)

Others

• 536f4688ffd0660cf0654369b96f2c6e59413f38: chore: label prod deploy pr as do not merge (#4518) (@sweatybridge)

Changelog

Bug fixes

• dde2afb379ab21c8fd7e21751f40606a52370df1: fix: ensure app token is correctly scoped (#4517) (@staaldraad)

Others

• add717f67b3c9015d494c28212b372913136bc7c: chore: update npm tag workflow (@sweatybridge)
• 1d1f6565c6d7adc14135b3a3c096a158f0eb2cea: chore: refactor release workflow (@sweatybridge)
• dbc6cf6d4e678c478fb49191e66b7c37138d27e7: chore: sync API types from infrastructure (#4508) (@kiwicopple)

Changelog

Bug fixes

• c3b94a5da50aab54f6a8b30d1b7d9fa277af4798: fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates (#4515) (@dependabot[bot])

Others

• 16c3114790130a61a3e24cdd9b218d88833c096e: chore: remove GH_PAT usage and NPM_TOKEN (@staaldraad)
• 34f5f2f2de236dc4e95b9590aeb21e8c6cb8abc5: chore: token for pr merge (@staaldraad)
• 9f37d66615b9bf39b778dc57787fd114f3337548: chore: remove GH_PAT usage and NPM_TOKEN (#4510) (@sweatybridge)

Changelog

Bug fixes

• fc04c0a077338ae78dbc3e9d0022e02b23aa444b: fix: bump studio to 2025.11.25-sha-8de52c4 (#4514) (@mattrossman)

Changelog

Bug fixes

• 554656f7218fa3ad34b5d8faee1301fadea43e70: fix: mock fsevents module to avoid cgo (#4505) (@sweatybridge)

Changelog

Bug fixes

• ca241cff1e1ad164f5cb0c90c23d035aea385861: fix: enable es256 jwt signing algorithm support for gotrue (#4489) (@7ttp)

Changelog

Bug fixes

• 6d9e316442dde9f45a128d3e80fef9d940edbef2: fix: storage version comparison (#4476) (@sweatybridge)

Others

• 0dab4be59b69b5d1a9bd920d89db516983f1c31d: chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /pkg (#4491) (@dependabot[bot])
• 3df2b1dea8f47ce7d5115f1c9ddb348b6a24cc88: chore(deps): bump actions/checkout from 5 to 6 (#4481) (@dependabot[bot])

Changelog

Features

• 8823290a3035b8b3c0fb9e9e8f0ec9397ab50854: feat: add --name-id-format flag to sso add and sso update (#4477) (@hf)

Others

• 4a90b4fce93cf450d72a5ed5ad886810bd0d6f68: chore(deps): bump github.com/go-git/go-git/v5 from 5.16.3 to 5.16.4 in the go-minor group across 1 directory (#4490) (@dependabot[bot])
• 08f546dbb19585b57618b0c89a7a126907ca57ee: chore: sync API types from infrastructure (#4478) (@kiwicopple)

Changelog

Bug fixes

• 08bf47a6676eca66213179c0ce95fcb3ecfb6fa9: fix(docker): bump supabase/postgres from 17.6.1.053 to 17.6.1.054 in /pkg/config/templates (#4486) (@dependabot[bot])

Changelog

Bug fixes

• 0c22789bc9620d500ad304297e1c2c52a7d4d83a: fix(docker): bump the docker-minor group in /pkg/config/templates with 3 updates (#4480) (@dependabot[bot])

Others

• 49398d5acb52c3eae640eb1b05e1fc9bf58369c5: chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#4475) (@dependabot[bot])

Changelog

Bug fixes

• 3d189a98791358273ec910a849f391f8df945b4c: fix(docker): bump supabase/postgres from 17.6.1.052 to 17.6.1.053 in /pkg/config/templates (#4474) (@dependabot[bot])

Changelog

Bug fixes

• ea8884848d16c2c5c06c4741259e443f4a403551: fix(docker): bump supabase/logflare from 1.26.6 to 1.26.9 in /pkg/config/templates in the docker-minor group (#4473) (@dependabot[bot])

Changelog

Features

• 959b93d244d6b7d2fc3657486796cebbf81e4858: feat: support append mode when updating network restrictions (#4420) (@maxmetcalfe)

Changelog

Bug fixes

• 28425f50454fcb55a18b4cfc5970e785eebdca2e: fix: disable mailpit rdns to avoid smtp delays (#4440) (@Adityakk9031)

Others

• 1f436c020f2bcdf0a7f8bc7a8d178bbb43693239: chore(deps): bump the go-minor group across 2 directories with 2 updates (#4463) (@dependabot[bot])

Changelog

Bug fixes

• e6810ad3af8ce573b73ce3113f8eda3441246fad: fix(docker): bump the docker-minor group in /pkg/config/templates with 2 updates (#4465) (@dependabot[bot])

Changelog

Bug fixes

• 6a5e246a12fd2f7c63aa52e6c6ff00733ffbc265: fix: remove cluster wide search path config (#4472) (@sweatybridge)

Changelog

Bug fixes

• 1e00c100de7e6444d8e3bbc1ac7526cc891e7f5b: fix: unset rlimit for pooler container (@sweatybridge)

Others

• 8fbe3ab756e7814c6dd2ce24e765e2e2d160ca62: chore: sync API types from infrastructure (#4448) (@kiwicopple)

Changelog

Bug fixes

• 10cdd70c7eb0b9ca99624819c3482f62a8e3a695: fix: storage-api version to v1.31.1 (#4459) (@fenos)