
Supabase Finally Lets You Scope a Personal Access Token
Supabase's alpha for scoped personal access tokens, live since August 10, closes a nearly three-year-old gap where any token controlled the whole account.
Topic
7 articles tagged Supabase.

Supabase's alpha for scoped personal access tokens, live since August 10, closes a nearly three-year-old gap where any token controlled the whole account.

Supabase's Postgres Changes now supports AND filters, more operators and opt-in column selection, cutting bytes sent to Realtime subscribers.

Starting August 5, Supabase ignores explicit version numbers on Postgres extensions and installs the default version instead, closing a security gap.

Supabase is flipping the default API gateway in its self-hosted Docker stack from Kong to Envoy the week of Aug 9, 2026, a breaking change for some setups.

Supabase's managed Postgres-to-BigQuery replication service is now public alpha on every paid plan, billed hourly per pipeline whether or not it's replicating.

Supabase Realtime Broadcast can now carry binary payloads for telemetry and video, but clients on older SDKs drop the messages without any error.

Supabase turned off Postgres connection logging by default July 9, and migrated existing Free and Pro projects with no opt-in.