# Community Day

[Supabase](https://yomu.fyi/company/supabase) · Thor Schaeff · Mar 28, 2022

**Type:** Announcement

## Summary

Supabase initiated its Launch Week with Community Day, announcing a series of ecosystem updates, security integrations, and open-source contributions. Through a partnership with GitHub, secret scanning now detects exposed Supabase service role API keys and automatically revokes them to prevent unauthorized database access. The pre-release of PostgREST version 10 introduces arrow operator queries for composite types and array elements, structured PostgreSQL-compliant error messages, and automated recovery from Linux EMFILE conditions. Authentication features expanded with four community-contributed OAuth providers, two phone providers, email one-time passwords via verifyOTP, and framework-specific supabase-auth-helpers starting with Next.js and Nuxt. Finally, Supabase launched a partner gallery powered by Postgres Full Text Search alongside educational courses and an upcoming ten-day virtual hackathon.

## Context

Supabase hosts Launch Week to showcase community contributions and ship platform features, addressing challenges such as secret leakage in public repositories, database availability during heavy PostgREST load, and framework-specific authentication complexities.

## Approach / What changed

Supabase partnered with GitHub for automated revocation of exposed service role keys, released a PostgREST v10 pre-release with improved array and composite type syntax and resilience fixes, added new OAuth and phone auth providers, and built framework auth helpers.

## Takeaways

- PostgREST v10 enables querying composite type fields and array elements directly using arrow operators (->) without requiring computed columns, while standardizing error messages to match PostgreSQL formats.
- GitHub secret scanning integration automatically detects Supabase service\_role API keys committed to repositories and forwards them to Supabase for immediate revocation and user notification.
- PostgREST v10 improves availability by recovering from Linux EMFILE (too many open files) errors under heavy load and adding liveness and readiness health checks.

**Tags:** [Authentication](https://yomu.fyi/topic/authentication), [Developer Experience](https://yomu.fyi/topic/developer-experience), [Open Source](https://yomu.fyi/topic/open-source), [Postgres](https://yomu.fyi/topic/postgres), [REST APIs](https://yomu.fyi/topic/rest-api)

[Read original post](https://supabase.com/blog/community-day-lw4)
