NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #1880 most downloaded on npm
Isomorphic Javascript SDK for Supabase
Last release 2 days ago
02 Oct 2026
Ships on a steady schedule
a new release about every 2 weeks
Nearly every release is documented
notes for 60 of the last 60 stable releases
2 versions withdrawn
withdrawn after publishing
7 years old
838 releases · first in 2020
One column per quarter.
auth: add token_endpoint_auth_method to OAuth client create/update
token_endpoint_auth_method to OAuth client create/update (#2132)custom: prefix in Provider type (#2134)This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: fixes userattributes type
realtime: patch channel join payloads with resolved access token before flushing send buffer
auth: support custom providers via custom: prefix in Provider type
auth: add token_endpoint_auth_method to OAuth client create/update
token_endpoint_auth_method to OAuth client create/update (#2132)auth: lower lockAcquireTimeout default to 5s and fix stale JSDoc
auth: recover from orphaned navigator locks via steal fallback
auth: add skipAutoInitialize option to prevent constructor auto-init
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: add skipAutoInitialize option to prevent constructor auto-init
storage: add setHeader method to BaseApiClient
removeChannel (#2109)This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: resolve Firefox content script Promise.then() security errors in locks
postgrest: enforce type safety for table and view names in from() method
storage: add setHeader method to BaseApiClient
supabase: add canonical CORS headers export for edge functions
## 2.95.2 (2026-02-05) ### 🩹 Fixes - supabase: add module to tsdoc (1fac0c45) ### ❤️ Thank You - Katerina Skroumpelou
repo: test old working version on esm
repo: remove subpath to see if fixed
## 2.95.2-canary.0 (2026-02-05) ### 🩹 Fixes - repo: esm release issue (79f5b4a0) ### ❤️ Thank You - Katerina Skroumpelou
This was a version bump only, there were no code changes.
This was a version bump only, there were no code changes.
supabase: add canonical CORS headers export for edge functions
supabase: add canonical CORS headers export for edge functions
auth: correct OAuth authorization types to match API responses
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: correct OAuth authorization types to match API responses
postgrest: add URL length validation and timeout protection
postgrest: add URL length validation and timeout protection
ci: handle missing git auth header in release-canary script
auth: add webauthn tests and fix fallback naming
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
supabase: revert client platform and runtime detection headers
supabase: revert client platform and runtime detection headers
realtime: revert validate table filter in postgres_changes event dispatch
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: add optional jwt parameter to getAuthenticatorAssuranceLevel
## 2.92.1-rc.2 (2026-01-23) ### 🩹 Fixes - supabase: less hacky require (24b99037) ### ❤️ Thank You - Katerina Skroumpelou
supabase: another env detection issue
supabase: safe environment detection node v browser
Nothing published for this version
This was a version bump only, there were no code changes.
This was a version bump only, there were no code changes.
This was a version bump only, there were no code changes.
This was a version bump only, there were no code changes.
Nothing published for this version
auth: add optional jwt parameter to getAuthenticatorAssuranceLevel
auth: restore SSR OAuth functionality broken in v2.91.0
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
auth: add optional jwt parameter to getAuthenticatorAssuranceLevel
supabase: add missing HTTP headers for client platform and runtime detection
auth: restore SSR OAuth functionality broken in v2.91.0
realtime: set default serializer to 2.0.0
auth: clarify updateUserById applies changes directly
realtime: set default serializer to 2.0.0
auth: defer subscriber notification in exchangeCodeForSession to prevent deadlock
postgrest: prevent shared state between query builder operations
This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.
postgrest: prevent shared state between query builder operations
realtime: validate table filter in postgres_changes event dispatch
realtime: expose heartbeat latency on heartbeat callback
auth: add configurable lock acquisition timeout to prevent deadlocks
functions: auto-stringify object body when custom Content-Type header is provided
auth: preserve session when magic link is clicked twice
auth: clear initial setTimeout in stopAutoRefresh
supabase: avoid edge runtime warnings in next.js
supabase: inline string literal in databasewithoutinternals type
auth: add banned_until property to user type
supabase: split type-only exports to avoid unused import warnings
realtime: expose heartbeat latency on heartbeat callback
Your coding agent can read these notes before it upgrades. Set up the MCP server →