Community Day

Summary

Supabase kicked off its Launch Week by showcasing integrations, ecosystem updates, and community contributions across its open-source stack. The platform announced that all hosted projects are upgrading to PostgREST 9, introducing inner joins, functions with unnamed parameters, and PostgreSQL 14 compatibility. Through community contributions, Supabase expanded authentication options to include Slack, Spotify, and MessageBird alongside existing providers. Updates to the Python ecosystem include package renaming to supabase, synchronous operation support in postgrest-py, and a rewritten gotrue-py matching JavaScript feature parity. Additionally, Supabase partnered with GitGuardian to automate secret detection and remediation across development lifecycles, protecting sensitive database service role keys.

Context

Supabase integrates multiple open-source technologies to build its developer platform, requiring ongoing coordination across community libraries, security tooling, and database middleware.

Approach / What changed

To open Launch Week, Supabase upgraded all projects to PostgREST 9, integrated GitGuardian for secret leak prevention, expanded OAuth and SMS providers, and updated Python client libraries.

Takeaways

• All Supabase projects transition to PostgREST 9, which introduces PostgreSQL 14 compatibility, inner joins, and support for functions with unnamed parameters.
• The Python client library gotrue-py was rewritten to achieve feature parity with gotrue-js, while postgrest-py added support for synchronous operations.
• Supabase partnered with GitGuardian to detect and remediate over 250 types of leaked secrets, helping teams protect sensitive database service role keys.

Related reading

• Supabase · Mar 28, 2022

  Community Day

  Supabase initiated its Launch Week with Community Day, announcing a series of ecosystem updates, security integrations, and open-source contributions. Through a partnership with GitHub, secret scanning now detects exposed Supabase service role API keys and automatically revokes them to prevent unauthorized database access. The pre-release of PostgREST version 10 introduces arrow operator queries for composite types and array elements, structured PostgreSQL-compliant error messages, and automated recovery from Linux EMFILE conditions. Authentication features expanded with four community-contributed OAuth providers, two phone providers, email one-time passwords via verifyOTP, and framework-specific supabase-auth-helpers starting with Next.js and Nuxt. Finally, Supabase launched a partner gallery powered by Postgres Full Text Search alongside educational courses and an upcoming ten-day virtual hackathon.

  Thor Schaeff

• Supabase · Nov 27, 2021

  PostgREST 9

  PostgREST 9 introduces several core updates to the tool that turns PostgreSQL databases into RESTful APIs. Developers can now perform inner joins when embedding tables using the !inner keyword, allowing top-level table rows to be filtered directly by embedded table attributes across multiple operators. The release also adds support for POST requests to functions containing a single unnamed parameter, which simplifies handling raw JSON payloads sent by external webhooks. To ensure compatibility with PostgreSQL 14, custom authentication functions accessing HTTP context headers and JWT claims must be updated to parse JSON properties from consolidated settings. Additional enhancements included in this version provide support for partitioned tables alongside documentation improvements and bug fixes.