Community Day

Summary

Supabase initiated its Launch Week with Community Day, announcing a series of ecosystem updates, security integrations, and open-source contributions. Through a partnership with GitHub, secret scanning now detects exposed Supabase service role API keys and automatically revokes them to prevent unauthorized database access. The pre-release of PostgREST version 10 introduces arrow operator queries for composite types and array elements, structured PostgreSQL-compliant error messages, and automated recovery from Linux EMFILE conditions. Authentication features expanded with four community-contributed OAuth providers, two phone providers, email one-time passwords via verifyOTP, and framework-specific supabase-auth-helpers starting with Next.js and Nuxt. Finally, Supabase launched a partner gallery powered by Postgres Full Text Search alongside educational courses and an upcoming ten-day virtual hackathon.

Context

Supabase hosts Launch Week to showcase community contributions and ship platform features, addressing challenges such as secret leakage in public repositories, database availability during heavy PostgREST load, and framework-specific authentication complexities.

Approach / What changed

Supabase partnered with GitHub for automated revocation of exposed service role keys, released a PostgREST v10 pre-release with improved array and composite type syntax and resilience fixes, added new OAuth and phone auth providers, and built framework auth helpers.

Takeaways

• PostgREST v10 enables querying composite type fields and array elements directly using arrow operators (->) without requiring computed columns, while standardizing error messages to match PostgreSQL formats.
• GitHub secret scanning integration automatically detects Supabase service_role API keys committed to repositories and forwards them to Supabase for immediate revocation and user notification.
• PostgREST v10 improves availability by recovering from Linux EMFILE (too many open files) errors under heavy load and adding liveness and readiness health checks.

Related reading

• Supabase · Nov 29, 2021

  Community Day

  Supabase kicked off its Launch Week by showcasing integrations, ecosystem updates, and community contributions across its open-source stack. The platform announced that all hosted projects are upgrading to PostgREST 9, introducing inner joins, functions with unnamed parameters, and PostgreSQL 14 compatibility. Through community contributions, Supabase expanded authentication options to include Slack, Spotify, and MessageBird alongside existing providers. Updates to the Python ecosystem include package renaming to supabase, synchronous operation support in postgrest-py, and a rewritten gotrue-py matching JavaScript feature parity. Additionally, Supabase partnered with GitGuardian to automate secret detection and remediation across development lifecycles, protecting sensitive database service role keys.

  Thor Schaeff

• Supabase · Apr 20, 2022

  Works With Supabase - announcing our Partner Gallery

  Supabase launched its Partner Gallery to showcase integration partners and certified expert agencies assisting developers on the platform. The open-source gallery is built using the Supabase stack, featuring Postgres Full Text Search, next-image with Supabase Storage, and email triggers via Supabase Edge Functions. Initial agency partners include Morrow, a UK app development agency specializing in React Native and Supabase, alongside Quinence, a Singapore-based product development studio. Integrated tooling covers authentication systems like Clerk and Stytch, database and developer utilities like Prisma, Snaplet, Vercel, and pgMustard, and low-code builders including Appsmith, Draftbit, Plasmic, and Teta. These ecosystem integrations allow developers to manage Postgres workflows, secure user authorization, and build applications across web and mobile platforms.