Releasesby IbisIntroducing @supabase/server
GA5 months agoUnverifiedAdded Sep 24, 2026
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Topics: Security, Developer tools
More Supabase releases
Every Supabase releaseDeveloper Update - May 2026
Here's everything that happened with Supabase in the last month: Custom OAuth/OIDC providers for Supabase Auth Connect any OAuth2 or OpenID Connect identity provider to your Supabase project, including GitHub Enterprise, regional IdPs, and any standards-compliant provider, with PKCE enabled by default.
Developer Update - May 2026
The May 2026 developer update introduces custom OAuth/OIDC providers, ISO 27001 certification, the @supabase/server SDK, branching without Git by default, and changes to Data API auto-exposure.
Supabase Is Now an Official ChatGPT App
Supabase is now available as an official ChatGPT app, allowing users to connect their projects to ChatGPT to manage database infrastructure through natural language commands.
Support for Node.js 20 dropped in client libraries
Supabase client libraries will drop support for Node.js 20 on June 30, 2026. Users must upgrade to Node.js 22 or later before that date.
Branching Without Git Is Now The Default
Supabase has made branching without Git the default configuration for all projects, simplifying the development workflow for users.
OAuth token endpoint to return HTTP 200 instead of 201
Starting June 1, 2026, Supabase's OAuth token endpoint will return HTTP 200 instead of 201. Developers should update their integrations to check for any 2XX status rather than a hardcoded 201.
Support for Postgres 14 ending July 1, 2026
Supabase support for Postgres 14 ends on July 1, 2026. Remaining Postgres 14 projects will be upgraded automatically, while projects using removed extensions like timescaledb, plv8, or pgjwt will be paused.
Tables no longer automatically exposed to Data and GraphQL APIs
New tables in the public schema will no longer be exposed to the Supabase Data API by default. This change is opt-in immediately, becomes the default for new projects on May 30, 2026, and will be enforced on all projects on October 30, 2026.
Also shipped on May 6, 2026
Supabase in May 2026Secure more apps with External Access Tokens and Private Publishing
Replit has made Private Publishing available to Core and Starter plan users and introduced External Access Tokens for all private apps. These features allow secure access to private deployments without exposing them to the public internet.
Data migrations in Prisma 8
Prisma 8 allows developers to write data migrations in TypeScript, enabling column backfilling and data transformation alongside schema changes.
Introducing Create-Prisma: Start a Prisma App With One Command
The new create-prisma CLI tool allows developers to initialize a Prisma application with a single command. It includes a starter schema, seed data, database scripts, and optional Prisma Postgres setup.
Prefect 3.7: infrastructure decorators and plugins are GA
Two of our most-requested experimental surfaces graduate to general availability, flows can render their own dependency graphs, and prepared workspaces now run with uv.
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
Auth for MCP is now Generally Available
We are excited to announce Auth for MCP is now Generally Available. Auth for MCP gives you a straightforward way to add authentication and authorization to any MCP server, so you control exactly who gets access, and what they get access to. Implement authentication, CIMD registration, and OBO token exchange for AI agents.