Releasesby Glyphsupabase Developer Update - May 2026
Here's everything that happened with Supabase in the last month: Custom OAuth/OIDC providers for Supabase Auth Connect any OAuth2 or OpenID Connect identity provider to your Supabase project, including GitHub Enterprise, regional IdPs, and any standards-compliant provider, with PKCE enabled by default.
Also shipped May 7, 2026Supabase in May 2026 →
Security Center 2.0: Act on vulnerabilities in bulk across all your apps
Replit updated its Security Center to allow users to view and remediate vulnerabilities across all projects in bulk. Users can now identify and fix critical CVEs on published projects from a centralized dashboard.
Consistent Web Search and Fetch Across Every Model
OpenRouter now enables tool-calling models to perform web searches and fetch page content. Users can choose from multiple search and fetch engines to integrate these capabilities into their workflows.
Prisma 8: A Call for Extension Authors
Prisma 8 features a modular core that allows developers to build and integrate extensions for specific databases, vector search, and JSON-with-schema.
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Monitors & Alerts , Now Generally Available
We’ve updated how you build alerts - separated now into Monitors and Alerts - to give you more control over what you track and how your team gets notified.
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel...
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel files, both in the MotherDuck UI and in embedded Dives . Wire up exports from your Dive code with the new exportAs and useExport hooks from @motherduck/react-sql-query .
More from SupabaseEvery Supabase release →
Developer Update - May 2026
The May 2026 developer update introduces custom OAuth/OIDC providers, ISO 27001 certification, the @supabase/server SDK, branching without Git by default, and changes to Data API auto-exposure.
Supabase Is Now an Official ChatGPT App
Supabase is now available as an official ChatGPT app, allowing users to connect their projects to ChatGPT to manage database infrastructure through natural language commands.
Support for Node.js 20 dropped in client libraries
Supabase client libraries will drop support for Node.js 20 on June 30, 2026. Users must upgrade to Node.js 22 or later before that date.
Introducing @supabase/server
Supabase introduced @supabase/server to provide stateless authentication, RLS-scoped clients, and server-side CORS support. The package is designed to reduce boilerplate code for server-side implementations.
Branching Without Git Is Now The Default
Supabase has made branching without Git the default configuration for all projects, simplifying the development workflow for users.
Support for Postgres 14 ending July 1, 2026
Supabase support for Postgres 14 ends on July 1, 2026. Remaining Postgres 14 projects will be upgraded automatically, while projects using removed extensions like timescaledb, plv8, or pgjwt will be paused.
OAuth token endpoint to return HTTP 200 instead of 201
Starting June 1, 2026, Supabase's OAuth token endpoint will return HTTP 200 instead of 201. Developers should update their integrations to check for any 2XX status rather than a hardcoded 201.
Tables no longer automatically exposed to Data and GraphQL APIs
New tables in the public schema will no longer be exposed to the Supabase Data API by default. This change is opt-in immediately, becomes the default for new projects on May 30, 2026, and will be enforced on all projects on October 30, 2026.