Branching Without Git Is Now The Default
GA5 months agoUnverifiedAdded Sep 24, 2026
Supabase has made branching without Git the default configuration for all projects, simplifying the development workflow for users.
Topics: Developer tools
More Supabase releases
Every Supabase releaseIntroducing @supabase/server
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Developer Update - May 2026
Here's everything that happened with Supabase in the last month: Custom OAuth/OIDC providers for Supabase Auth Connect any OAuth2 or OpenID Connect identity provider to your Supabase project, including GitHub Enterprise, regional IdPs, and any standards-compliant provider, with PKCE enabled by default.
Developer Update - May 2026
The May 2026 developer update introduces custom OAuth/OIDC providers, ISO 27001 certification, the @supabase/server SDK, branching without Git by default, and changes to Data API auto-exposure.
OAuth token endpoint to return HTTP 200 instead of 201
Starting June 1, 2026, Supabase's OAuth token endpoint will return HTTP 200 instead of 201. Developers should update their integrations to check for any 2XX status rather than a hardcoded 201.
Supabase Is Now an Official ChatGPT App
Supabase is now available as an official ChatGPT app, allowing users to connect their projects to ChatGPT to manage database infrastructure through natural language commands.
Support for Node.js 20 dropped in client libraries
Supabase client libraries will drop support for Node.js 20 on June 30, 2026. Users must upgrade to Node.js 22 or later before that date.
Tables no longer automatically exposed to Data and GraphQL APIs
New tables in the public schema will no longer be exposed to the Supabase Data API by default. This change is opt-in immediately, becomes the default for new projects on May 30, 2026, and will be enforced on all projects on October 30, 2026.
Support for Postgres 14 ending July 1, 2026
Supabase support for Postgres 14 ends on July 1, 2026. Remaining Postgres 14 projects will be upgraded automatically, while projects using removed extensions like timescaledb, plv8, or pgjwt will be paused.
Also shipped on May 4, 2026
Supabase in May 2026WAF Release - 2026-05-04
This week's release focuses on new detections to expand coverage across command injection, SQL injection, PHP object injection, remote code execution, and XSS attack vectors. Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage.
Cross-Event Querying is now Generally Available
Cross-Event Querying is now generally available: join queries across logs, metrics, and spans.
Add actor field to subscription contract and billing attempt mutations
We have introduced a new actor field in subscription mutations to help you track who initiated an action - whether it was the customer, the merchant, or the partner app's automated system. You can now include an actor argument when creating billing attempts or editing subscription contracts.
Default value of `appliesOnSubscription` changed to `true` for app discount inputs
The default value of appliesOnSubscription has been changed from false to true on the DiscountCodeAppInput and DiscountAutomaticAppInput input types in GraphQL Admin API. No action is required. This default value change has no effect on how discounts are applied at checkout.
Cog 0.19.3
Changelog 0780450 Bump version to 0.19.3 ( #2995 ) cac3e91 feat: experimental managed weights ( #2974 )
Aura-2 Voice Controls , Speed and Pronunciation
Aura-2 TTS voices now support runtime speed and pronunciation controls in English and Spanish, available on both batch and streaming WebSocket endpoints. Together, these controls give developers finer-grained tools to improve naturalness , tuning pacing and correcting pronunciation to match their needs.