Releasesby IbisCustom OIDC Providers for Supabase Auth
GA6 months agoUnverifiedAdded Sep 24, 2026
Supabase Auth now supports custom OpenID Connect (OIDC) providers, enabling users to connect identity providers like GitHub Enterprise and regional services to their projects.
Topics: Security
More Supabase releases
Every Supabase releaseAI Agents Know About Supabase. They Don't Always Use It Right
Supabase released an open-source set of instructions designed to teach AI coding agents how to build on Supabase correctly.
Developer Update - April 2026
Here’s everything that happened with Supabase in the last month: Multigres Operator is now open source The Multigres Kubernetes operator is now open source, with direct pod management, zero-downtime rolling upgrades, pgBackRest PITR backups, and OTel tracing. GitHub | Twitter GitHub integration on all plans GitHub integration is now available on all plans.
Developer Update - April 2026
The April 2026 developer update introduces GitHub integration on all plans, the open-sourcing of the Multigres Operator, participation in the Stripe Projects developer preview, and documentation access over SSH.
We're Transferring the Stripe Sync Engine to Stripe
Supabase is transferring the maintenance and ownership of the Stripe Sync Engine to Stripe.
Tax collection on Supabase invoices
Supabase will begin adding applicable taxes, such as VAT, GST, and sales tax, to invoices based on the organization's billing address, rolling out from May 1 to June 30, 2026.
Automatic PostgREST retries for transient errors
Supabase client libraries now automatically retry GET and HEAD requests to PostgREST on transient 520, 503, and network errors. This behavior is enabled by default and can be opted out of per call.
RLS Tester in Feature Preview
The Supabase Dashboard has added an RLS Tester in Feature Preview, allowing users to run SELECT queries as any role, see which RLS policies fire, and debug policies.
Tables no longer automatically exposed to Data and GraphQL APIs
New tables in the public schema will no longer be exposed to the Supabase Data API by default. This change is opt-in immediately, becomes the default for new projects on May 30, 2026, and will be enforced on all projects on October 30, 2026.
Also shipped on Apr 8, 2026
Supabase in April 2026Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23869, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause excessive CPU consumption. Here's what Netlify customers need to know. Impact on Netlify Nominally, this is a server-side DoS vulnerability.
New pricing and packaging
- Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users. Changed: All plans can have an unlimited number of user devices in a tailnet.
Multiple Custom Domains General Availability
We’re excited to announce that __Multiple Custom Domains (MCD)__ is now __Generally Available__. With Multiple Custom Domains, Enterprise customers can support __multiple branded login experiences from a single Auth0 tenant__.
Dynamic dashboards is now generally available
Dynamic dashboards are now on by default for all Grafana Cloud users and self-managed Grafana instances. Every new and existing dashboard uses the new layout engine, editing experience, and dashboard structure automatically. Your existing dashboards are migrated to the new schema when you open them. No manual steps required.
Manage and use secrets in Grafana Cloud k6
We’re excited to announce the public preview of Secrets Management for Grafana Cloud k6, a new feature that lets you securely store and use sensitive values in your performance tests. If your tests rely on API tokens, credentials, or any other confidential data, you no longer need to hardcode them into your scripts or pass them around manually.
Event Time now available in Derived Properties
What it is: Event Time is now a selectable property in the derived property builder. You can pair it with any date-type user property to compute time differences: for instance, 'registration date - Event Time' gives you days since a user registered.