Supabase JS

2.90.0 (2026-01-07)

🚀 Features

• realtime: expose heartbeat latency on heartbeat callback (#1982)

🩹 Fixes

• auth: add banned_until property to user type (#1989)
• auth: add last_challenged_at property to factor type (#1990)
• auth: clear initial setTimeout in stopAutoRefresh (#1993)
• auth: preserve session when magic link is clicked twice (#1996)
• auth: add configurable lock acquisition timeout to prevent deadlocks (#1962)
• functions: auto-stringify object body when custom Content-Type header is provided (#1988)
• postgrest: use post with return minimal for rpc head requests with object args (#1994)
• supabase: split type-only exports to avoid unused import warnings (#1979)
• supabase: inline string literal in databasewithoutinternals type (#1986)
• supabase: avoid edge runtime warnings in next.js (#1998)

❤️ Thank You

• Eduardo Gurgel
• Nico Kempe @nicokempe
• Vaibhav @7ttp
• yoshifumi kondo @yoshifumi-kondo

2.89.1-canary.8 (2026-01-07)

🩹 Fixes

• auth: add configurable lock acquisition timeout to prevent deadlocks (#1962)

❤️ Thank You

• yoshifumi kondo @yoshifumi-kondo

2.89.1-canary.7 (2026-01-07)

🩹 Fixes

• functions: auto-stringify object body when custom Content-Type header is provided (#1988)
• postgrest: use post with return minimal for rpc head requests with object args (#1994)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.6 (2026-01-05)

🩹 Fixes

• auth: preserve session when magic link is clicked twice (#1996)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.5 (2026-01-05)

🩹 Fixes

• auth: clear initial setTimeout in stopAutoRefresh (#1993)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.4 (2026-01-05)

🩹 Fixes

• supabase: avoid edge runtime warnings in next.js (#1998)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.3 (2026-01-05)

🩹 Fixes

• supabase: inline string literal in databasewithoutinternals type (#1986)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.2 (2026-01-05)

🩹 Fixes

• auth: add banned_until property to user type (#1989)
• auth: add last_challenged_at property to factor type (#1990)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.1 (2025-12-23)

🩹 Fixes

• supabase: split type-only exports to avoid unused import warnings (#1979)

❤️ Thank You

• Nico Kempe @nicokempe

2.89.1-canary.0 (2025-12-23)

🚀 Features

• realtime: expose heartbeat latency on heartbeat callback (#1982)

❤️ Thank You

• Eduardo Gurgel

2.89.0 (2025-12-18)

🚀 Features

• auth: add X (OAuth 2.0) provider (#1960)
• auth: add string array support for AMR claims (#1967)
• supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

• Cemal Kılıç @cemalkilic
• issuedat @issuedat
• Vaibhav @7ttp

2.88.1-canary.2 (2025-12-18)

🚀 Features

• supabase: export DatabaseWithoutInternals utility type (#1935)

❤️ Thank You

• Vaibhav @7ttp

2.88.1-canary.1 (2025-12-17)

🚀 Features

• auth: add string array support for AMR claims (#1967)

❤️ Thank You

• Cemal Kılıç @cemalkilic

2.88.1-canary.0 (2025-12-17)

🚀 Features

• auth: add X (OAuth 2.0) provider (#1960)

❤️ Thank You

• issuedat @issuedat

2.88.0 (2025-12-16)

🚀 Features

• auth: allow custom predicate for detectSessionInUrl option (#1958)
• postgrest: add notin filter (#1957)
• repo: migrate build system to tsdown for proper ESM/CJS support (#1961)

🩹 Fixes

• realtime: handle websocket race condition in node.js (#1946)
• realtime: omit authorization header when no access token exists (#1937)

❤️ Thank You

• Katerina Skroumpelou @mandarini
• Vaibhav @7ttp

2.87.4-canary.5 (2025-12-16)

🚀 Features

• repo: migrate build system to tsdown for proper ESM/CJS support (#1961)

❤️ Thank You

• Katerina Skroumpelou @mandarini

2.87.4-canary.4 (2025-12-16)

🚀 Features

• repo: use tsup (1b89a036)

🩹 Fixes

• auth: extension (714fb616)
• repo: backwards compatible deep import (e81ec6e4)
• repo: remove deep internal imports from tests (06e1ab87)
• repo: build before test tupes (13ae5ac7)
• repo: from tsup to tsdown (d7717526)
• repo: make sure its backwards compatible (372f63ed)
• repo: remove old build commands (e5737c8c)
• repo: restore package lock (5cfe4646)

❤️ Thank You

• Katerina Skroumpelou

2.87.4-canary.3 (2025-12-16)

🚀 Features

• auth: allow custom predicate for detectSessionInUrl option (#1958)

❤️ Thank You

• Katerina Skroumpelou @mandarini

2.87.4-canary.2 (2025-12-16)

🚀 Features

• postgrest: add notin filter (#1957)

❤️ Thank You

• Katerina Skroumpelou @mandarini

2.87.4-canary.1 (2025-12-16)

🩹 Fixes

• realtime: omit authorization header when no access token exists (#1937)

❤️ Thank You

• Vaibhav @7ttp