gotrue

• FIX: don't try to decode an empty body (#631). (ec13c88f)

• FIX: don't try to decode an empty body (#631). (ec13c88f)

• FEAT(postgrest,supabase): add useSchema() method for making rest API calls on custom schema. (#525). (40a0f090)

• fix: onAuthStateChanged now emits the latest AuthState #116

• FIX: Update http dependency constraints (#491). (825d0737)

• FIX: make Supabase client work in Dart Edge again (#675). (53530f22)
• FIX: Remove error parameter on _triggerChanError (#637). (c4291c97)
• FEAT: send messages via broadcast endpoint (#654). (2ff950d7)

• FEAT: send messages via broadcast endpoint (#654). (2ff950d7)

2023-09-25

Changes

---

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• realtime_client - v1.2.3
• supabase - v1.11.6
• supabase_flutter - v1.10.19

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• supabase - v1.11.6
• supabase_flutter - v1.10.19

---

• FIX(realtime_client,supabase): pass apikey as the initial access token for realtime client (#596). (af8e368b)

• FEAT: add logLevel parameter to RealtimeClientOptions (#592). (76e9fc20)

• REFACTOR: bump minimum Dart SDK version to 2.17.0 (#510). (ed927ee0)
• REFACTOR(realtime_client): Add docs on .subscribe() and give callback parameters names (#507). (7f9b310e)

• FIX: Format the files to adjust to Flutter 3.10.1 (#475). (eb0bcd95)
• FEAT: update dependency constraints to sdk < 4.0.0 (#474). (7894bc70)

• fix: verify otp exception on successful verification (#95)
• fix: query parameter format for redirect_to when making request (#96)
• fix: reset token retry count on session remove (#98)

• fix: a bug where emailRedirect does not work properly (#92)

• chore: v1.0.0 release 🚀
• BREAKING: update the public API to match JS library (#90)
  • signUp() now uses named parameters

    // Before
    final res = await supabase.auth.signUp('example@email.com', 'password');
    // After
    final res = await supabase.auth.signUp(email: 'example@email.com', password: 'password');
  

  • signIn() is split into different methods

    // Magic link signin
    // Before
    final res = await supabase.auth.signIn(email: 'example@email.com');
    // After
    final res = await supabase.auth.signInWithOtp(email: 'example@email.com');
  
    // Email and password signin
    // Before
    final res = await supabase.auth.signIn(email: 'example@email.com', password: 'password');
    // After
    final res = await supabase.auth.signInWithPassword(email: 'example@email.com', password: 'password');
  

  • onAuthStateChange is now a stream

    // Before
    supabase.auth.onAuthStateChange((event, session) {
      // ...
    });
    // After
    final subscription = supabase.auth.onAuthStateChange().listen((data) {
      final AuthChangeEvent event = data.event;
      final Session? session = data.session;
    });
    // Don't forget to cancel the subscription when you're done
    subscription.cancel();
  

  • update() is renamed to updateUser()

    // Before
    final res = await supabase.auth.update(
        UserAttributes(
          email: 'new@email.com',
          data: {
            'username': 'new_username',
          },
        ),
    );
    // After
    final res = await supabase.auth.updateUser(
        UserAttributes(
          email: 'new@email.com',
          data: {
            'username': 'new_username',
          },
        ),
    );
  

• fix: encoding issue with some languages(#89)

• BREAKING: data property of GotrueSessionResponse is renamed to session(#87)
• fix: bug where siningup with email verification throwed an exception(#87)

• BREAKING: rename GotrueError to GoTrueException

• chore: Update lints to v2.0.0
• feat: Add .generateLink() method(#83)
• fix: Nullable type error if signInWithEmail is used twice(#84)

• feat: Able to update phone number with auth.update method(#81)

• fix: OpenIDConnectCredentials's nonce parameter optional
• fix: use completer in the retry logic to return value when token refresh is complete(#75)

• fix: type casting of phone auth response(#79)

• FEAT(storage): add file versioning and bucket lifecycle policies (#1834). (564576ad)

Note: This release has breaking changes.

• BREAKING FEAT(postgrest): only accept the table's Insert and Update types on the typed builder (#1849). (333cc5c3)

---

Published to pub.dev: https://pub.dev/packages/supabase_typegen/versions/0.2.0

• fix: fetch the user, if missing, on /verify (#29)
• feat: add JWT headers when refreshing token (#53)
• feat: add signInWithOpenIDConnect (#61)

• Update a dependency to the latest release.

---

Published to pub.dev: https://pub.dev/packages/supabase_flutter_web_auth/versions/0.1.5

• FEAT(supabase_typegen): introspect the database through the Supabase CLI (#1837). (78d0f7aa)

---

Published to pub.dev: https://pub.dev/packages/supabase_typegen/versions/0.1.4

• FEAT(supabase_typegen): emit relation members from foreign key metadata (#1809). (9efd2d19)
• FEAT(postgrest): add typed ranges to the column-expression surface (#1808). (5ad78b9e)
• FEAT(postgrest): route where, order and select through column expressions (#1795). (2c350e5d)

---

Published to pub.dev: https://pub.dev/packages/supabase_typegen/versions/0.1.3

• FEAT: add supabase_typegen package generating typed table definitions (#1635). (6cfea7b1)

---

Published to pub.dev: https://pub.dev/packages/supabase_typegen/versions/0.1.2

• FEAT(supabase_flutter): pluggable OAuth launcher + opt-in supabase_flutter_web_auth (#1807). (cdee3646)

---

Published to pub.dev: https://pub.dev/packages/supabase_flutter_web_auth/versions/0.1.1

• REFACTOR: share the test helpers through supabase_common (#1745). (bcb41fa4)
• REFACTOR: share the auth callback parameters and secure random helpers (#1744). (66ac4901)
• FEAT: introduce the supabase_testing package (#1747). (5a3aa9b4)
• BREAKING REFACTOR(storage): share one SortDirection enum across the packages (#1752). (38396ed5)
• BREAKING REFACTOR: rework logging to emit only through the supabase logger hierarchy (#1741). (d1642c80)
• BREAKING REFACTOR(storage): move the Iceberg catalog into its own package (#1711). (26fc503d)

2026-08-05

Changes

---

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• gotrue - v2.27.1
• postgrest - v2.9.1
• realtime_client - v2.13.0
• storage_client - v2.8.0
• supabase - v2.16.0
• supabase_common - v0.1.2
• supabase_typegen - v0.1.1
• supabase_flutter - v2.17.1
• functions_client - v2.7.1

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• supabase_flutter - v2.17.1
• functions_client - v2.7.1

---

• fix: stop refreshToken timer on session removed
• fix: close http.Client on request done
• chore: update External OAuth Providers
• chore: add example code block

• fix: export gotrue_response classes

• BREAKING CHANGE: rename 'ProviderOptions' to 'AuthOptions'
• feat: support redirectTo option
• fix: handle jwt expiry less than 60 seconds

• fix: session refresh timer

• fix: wrong timestamp value

• fix: persistSessionString with wrong expiresAt

• fix: URL encode redirectTo

• fix: parsing provider callback url with fragment #12

• fix: parses provider token and adds oauth scopes and redirectTo
• fix: expiresAt conversion to int and getUser resolving JSON
• fix: signOut method

• fix: User nullable params
• fix: Session nullable params
• fix: lint errors

• chore: Migrate to Null Safety

• fix: Password and other attributes defaulting to email field.
• chore: export UserAttributes

• chore: export Provider class

• fix: updateUser bug
• fix: http success statusCode check
• fix: stateChangeEmitters uninitialized value

• fix: email verification required on sign up