supabase/supabase
The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.
How supabase is put together
This repository is the Supabase monorepo: a pnpm + Turborepo workspace containing the Supabase Dashboard (apps/studio, a large React admin console being migrated from Next.js to TanStack Start/Vite), the marketing site (apps/www, Next.js), a design-system documentation app, a learning-content app (apps/learn), a lightweight read-only dashboard (apps/lite-studio on React Router 7), and shared workspace packages (ui, ui-patterns, common, icons, api-types, @supabase/pg-meta). It also ships the self-hosting stack under docker/ as Docker Compose files that wire together external Supabase services (Postgres, PostgREST, GoTrue auth, Storage, Realtime, postgres-meta) behind Kong/Envoy/Nginx/Caddy gateways. Data flow is browser -> Studio dashboard -> platform APIs (REST/GraphQL over Postgres) with JWT-based auth via GoTrue; the repo itself is primarily TypeScript/React frontends plus infrastructure-as-compose configuration.
Languages
Frameworks
Datastores
Infrastructure
Major components
apps/studio
The Supabase Dashboard: project management UI for databases, auth, storage, SQL editing, GraphQL (GraphiQL), AI assistant (AI SDK/OpenAI/Bedrock), billing (Stripe), and MCP tooling.
apps/www
Public marketing/documentation website built with Next.js, including edge middleware and content pipelines.
apps/design-system
Design-system component registry and documentation site (shadcn-style registry generated via ts-morph scripts, Contentlayer2 MDX docs).
apps/lite-studio
A minimal, client-side-rendered (SSR disabled) React Router 7 dashboard variant reusing ui/ui-patterns packages.
apps/learn + apps/ui-library
Course/learning content app and a component library playground app, both Contentlayer2-driven.
Shared workspace packages (ui, ui-patterns, common, icons, api-types, @supabase/pg-meta, shared-data)
Reusable UI primitives, hooks/patterns, shared config/tsconfig/eslint, generated API types, and Postgres metadata helpers consumed by all apps.
docker/ self-hosting stack
Docker Compose definitions and setup/reset/update scripts that assemble the full self-hosted Supabase platform (Postgres, GoTrue, PostgREST, Storage, Realtime, meta, gateways).
e2e/ test harnesses
End-to-end suites for studio, docs, and www that boot a local Supabase stack via CLI and generate local env/keys (scripts/generateLocalEnv.js).
The AI assistant gained notebook management tools while high-availability projects got their own tailored dashboard charts.
4 weeksWeek of 2026-08-24
Week of 2026-08-24latest
The AI assistant gained notebook management tools while high-availability projects got their own tailored dashboard charts.
Week of 2026-08-17
Notebook tooling matured with validation, evals, and diff previews, while read replicas moved to a new Infrastructure section.
Week of 2026-08-10
The Explorer workspace took shape with query tabs, chat integration, and log cells, alongside account and self-hosting improvements.
Week of 2026-08-03
Scoped personal access tokens got a full lifecycle overhaul, and the foundations of the Explorer and notebook features were scaffolded.
Over the past month, Supabase's dashboard work has centered on two big new areas: an AI-assisted 'notebook' experience for running queries and logs inside the Studio app, and a new 'Explorer' workspace with tabs, query editors, and infrastructure views. In parallel, the team shipped a major overhaul of scoped personal access tokens with role-aware permissions and expiry, plus a wave of accessibility and UI polish fixes across docs and marketing pages. High-availability project support also got dedicated attention, with tailored charts and SSL messaging for HA customers.
Week by week
2026-08-24The AI assistant gained notebook management tools while high-availability projects got their own tailored dashboard charts.latest6 changes
Feature
Config drift page in Studio
A new page lets teams see when a project's actual configuration has drifted from what's expected.
Feature
AI assistant can create, update, and delete notebooks
The assistant gained tools to manage notebooks directly, including rendering notebook runs and clarifying tool states.
Fix
Tailored charts for high-availability projects
HA projects now show always-on SSL enforcement, use multipooler copy for the pooler chart, and hide the irrelevant Disk IO Burst chart.
Feature
Blog post on enterprise-managed auth for the MCP server
A new post explains how enterprises can manage authentication for the Supabase MCP server, with a matching learn-more link in the product.
Fix
Unsaved-change warnings in notebooks
Running a query cell now marks the tab as unsaved, and closing a session triggers the browser's native confirmation prompt.
Fix
Accessibility cleanup across filters and controls
Filter groups on the website were given proper semantics and result announcements, plus pointer cursors and accessible names for shared UI components.
2026-08-17Notebook tooling matured with validation, evals, and diff previews, while read replicas moved to a new Infrastructure section.6 changes
Feature
Read replicas relocated under Infrastructure
Replica management moved out of Replication into a dedicated Infrastructure section with its own detail pages and redirects.
Feature
list_databases tool for the AI assistant
The assistant can now list databases to drive notebook creation, backed by eval test cases and prompt guidance.
Fix
Scoped PAT fixes for large accounts
Users with more than 100 projects no longer hit handling bugs, and the creation form gained permission presets.
Feature
Notebook diff previews restored
Completed updates show a preview of changes again, with previous content exposed and validation errors surfaced for auto-retry.
Fix
Support form requires full authentication
The support form now demands complete sign-in before submission to cut down on bad requests.
Docs
Self-hosted pooler guide
A new how-to guide documents setting up connection poolers for self-hosted deployments.
2026-08-10The Explorer workspace took shape with query tabs, chat integration, and log cells, alongside account and self-hosting improvements.6 changes
Feature
Explorer query tabs and chat discovery
New routed tabs let users run queries in Explorer, with assistant chat tabs and source selectors built in.
Feature
OAuth-only users can add a password
Accounts created via social login can now set a password so they can sign in directly.
Refactor
Notebook wire schema made source of truth
Query sources across Explorer and the SQL editor were unified around one schema, with optimistic locking added to notebook updates.
Docs
Enterprise-managed MCP auth documentation
Docs landed explaining enterprise authentication options for the MCP server, plus standardized quickstart guides.
Feature
Log cells and log-scale charts
Notebooks gained log display cells, and query result charts can now use logarithmic scales.
Chore
Vulnerable dependencies bumped
Several dependencies with known security issues were upgraded.
2026-08-03Scoped personal access tokens got a full lifecycle overhaul, and the foundations of the Explorer and notebook features were scaffolded.6 changes
Feature
Scoped token creation flow rebuilt
Token creation gained role-aware feedback, permission modeling as OR-of-AND alternatives, enforced expiry, and a legacy token mode.
Feature
Scoped token view sheet
A lifecycle-aware view shows token details with role-based access information, plus a warning that scoped tokens don't yet support the MCP server.
Chore
Explorer scaffolding laid down
The Explorer home page, layout, and tabs UI were initialized as the base for later query features.
Chore
Notebook editor initialized
The notebook editor page, content schema, and data store were set up ahead of the following weeks' feature work.
Chore
Automated WCAG accessibility scanning
Changed documentation pages are now scanned against WCAG 2.1 A/AA standards in warning mode.
Feature
Open Authorization Integration Addendum
A new legal/marketing document was published covering authorization integrations, alongside a Perplexity connector announcement.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 10 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required