supabase_common

Pre-release versioning run for the v3 train. Every published SDK package
lands on 3.0.0-dev.1 so the whole set can go to pub.dev as a coherent
prerelease.

Versions

supabase_auth, supabase_functions, supabase_realtime and
supabase_storage already carried 3.0.0-dev.1 in their pubspec, but
that number was hand-set during the package renames and never published,
so no matching changelog section existed. This run generates it and
leaves the version where it is.

iceberg

iceberg stays on 0.1.0. It has never been published, so its
accumulated changes are folded into the existing ## 0.1.0 changelog
section instead of opening a new one. supabase_storage keeps its
iceberg: 0.1.0 constraint.

Not versioned

• yet_another_json_isolate stays on 2.1.1
• supabase_testing stays on 0.1.0
• supabase_lints and supabase_typegen stay on 0.1.1, they version on
  their own tooling track

Their pubspec versions and changelogs are untouched, as are the
constraints pointing at them (yet_another_json_isolate: 2.1.1,
supabase_lints: ^0.1.1).

What changed

• Package pubspec.yaml versions plus the intra-workspace dependency
  constraints between them
• lib/src/version.dart for postgrest, supabase and
  supabase_flutter, regenerated by the update-version melos hook
• Per-package CHANGELOG.md and the workspace CHANGELOG.md
• supabase_flutter: ^3.0.0-dev.1 and supabase: ^3.0.0-dev.1 in the
  example apps

How it was generated

melos version with an explicit --manual-version entry for every
package that had versionable commits, so nothing was auto-bumped by
conventional-commit inference. Packages held back from the release were
passed their current version to stop melos auto-versioning them, and the
resulting no-op changelog sections were dropped again.

Verification

• flutter pub get resolves the workspace, pubspec.lock needs no
  change
• dart analyze --fatal-infos reports no issues

Tagging and publishing are left to release-tag.yml and
release-publish.yml once this merges.

Summary by CodeRabbit

• New Features

• Introduced the Supabase Flutter v3.0.0-dev.1 release, including
  improved realtime streams, asynchronous codecs, per-flow PKCE storage,
  unified retry configuration, and enhanced JSON performance.

• Added shared testing utilities and the new supabase_testing package.

  • Added Iceberg package v0.1.0.

• Bug Fixes

• Improved authentication redirect and session parsing, access-token
  handling, storage behavior, and resource disposal.

• Documentation

• Added comprehensive changelogs, breaking-change notes, and a v2-to-v3
  migration guide.

• REFACTOR: share the test helpers through supabase_common (#1745). (bcb41fa4)
• REFACTOR: share the auth callback parameters and secure random helpers (#1744). (66ac4901)
• REFACTOR: share the HTTP request pieces between the fetch layers (#1647). (a2a9eeaa)
• FIX(supabase_lints): enable lines_longer_than_80_chars and fix all violations (#1655). (a08b6577)
• FIX(supabase_common): accept uppercase and mixed-case UUIDs in validation (#1656). (691690cf)
• FEAT: introduce the supabase_testing package (#1747). (5a3aa9b4)
• FEAT: resolve an access token per request on the standalone clients (#1742). (dd61782a)
• FEAT(storage): expose the service error code on StorageException (#1657). (4f9cabfe)
• DOCS: fix inaccurate dartdoc comments across all packages (#1659). (090ee978)
• BREAKING REFACTOR(storage): share one SortDirection enum across the packages (#1752). (38396ed5)
• BREAKING REFACTOR: rework logging to emit only through the supabase logger hierarchy (#1741). (d1642c80)
• BREAKING REFACTOR: share one retry configuration across the clients (#1738). (3b2a4855)
• BREAKING REFACTOR: spell out abbreviations in the public API (#1712). (29286f43)
• BREAKING REFACTOR: share one exponential backoff calculation (#1646). (8bc93f5d)
• BREAKING REFACTOR: split every service exception into a client and an api base (#1644). (0202c332)
• BREAKING REFACTOR: share a single HttpMethod enum across the packages (#1678). (23d55c37)
• BREAKING FIX(supabase_flutter): persist the session with SharedPreferencesAsync (#1680). (41500b73)
• BREAKING FEAT: rename the storage_client package to supabase_storage (#1715). (6b0388f2)
• BREAKING FEAT: rename the realtime_client package to supabase_realtime (#1714). (d37bed56)
• BREAKING FEAT: rename the functions_client package to supabase_functions (#1713). (eb4f3773)
• BREAKING FEAT: rename the gotrue package to supabase_auth (#1697). (563b502e)
• BREAKING FEAT: use DateTime for all timestamp fields (#1663). (bad3af8f)

Note: This release has breaking changes.

• REFACTOR: share the test helpers through supabase_common (#1745). (bcb41fa4)
• REFACTOR: share the auth callback parameters and secure random helpers (#1744). (66ac4901)
• REFACTOR: share the HTTP request pieces between the fetch layers (#1647). (a2a9eeaa)
• FIX(supabase_lints): enable lines_longer_than_80_chars and fix all violations (#1655). (a08b6577)
• FIX(supabase_common): accept uppercase and mixed-case UUIDs in validation (#1656). (691690cf)
• FEAT: introduce the supabase_testing package (#1747). (5a3aa9b4)
• FEAT: resolve an access token per request on the standalone clients (#1742). (dd61782a)
• FEAT(storage): expose the service error code on StorageException (#1657). (4f9cabfe)
• DOCS: fix inaccurate dartdoc comments across all packages (#1659). (090ee978)
• BREAKING REFACTOR(storage): share one SortDirection enum across the packages (#1752). (38396ed5)
• BREAKING REFACTOR: rework logging to emit only through the supabase logger hierarchy (#1741). (d1642c80)
• BREAKING REFACTOR: share one retry configuration across the clients (#1738). (3b2a4855)
• BREAKING REFACTOR: spell out abbreviations in the public API (#1712). (29286f43)
• BREAKING REFACTOR: share one exponential backoff calculation (#1646). (8bc93f5d)
• BREAKING REFACTOR: split every service exception into a client and an api base (#1644). (0202c332)
• BREAKING REFACTOR: share a single HttpMethod enum across the packages (#1678). (23d55c37)
• BREAKING FIX(supabase_flutter): persist the session with SharedPreferencesAsync (#1680). (41500b73)
• BREAKING FEAT: rename the storage_client package to supabase_storage (#1715). (6b0388f2)
• BREAKING FEAT: rename the realtime_client package to supabase_realtime (#1714). (d37bed56)
• BREAKING FEAT: rename the functions_client package to supabase_functions (#1713). (eb4f3773)
• BREAKING FEAT: rename the gotrue package to supabase_auth (#1697). (563b502e)
• BREAKING FEAT: use DateTime for all timestamp fields (#1663). (bad3af8f)

• REFACTOR(supabase_common): share the local stack test configuration (#1640). (a08f06d3)

• FEAT(typegen): add supabase_typegen skeleton package (#1636). (91f26da0)

2026-07-15

Changes

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• functions_client - v2.7.0
• gotrue - v2.27.0
• postgrest - v2.9.0
• realtime_client - v2.12.0
• storage_client - v2.7.0
• supabase - v2.15.0
• supabase_common - v0.1.1
• supabase_flutter - v2.17.0
• supabase_lints - v0.1.1

• REFACTOR: extract shared code into supabase_common package (#1573). (46601bbb)
• FIX(supabase_common): align platform stats casing with other SDKs (#1596). (97a6fa6e)