Skip to content

chore(deps)(deps): bump the supabase group across 1 directory with 2 updates - #16

Open
dependabot[bot] wants to merge 233 commits into
masterfrom
dependabot/npm_and_yarn/supabase-f92b30b163
Open

chore(deps)(deps): bump the supabase group across 1 directory with 2 updates#16
dependabot[bot] wants to merge 233 commits into
masterfrom
dependabot/npm_and_yarn/supabase-f92b30b163

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the supabase group with 2 updates in the / directory: @supabase/ssr and @supabase/supabase-js.

Updates @supabase/ssr from 0.8.0 to 0.10.2

Release notes

Sourced from @​supabase/ssr's releases.

v0.10.2

0.10.2 (2026-04-09)

Bug Fixes

v0.10.2-rc.88

What's Changed

Full Changelog: supabase/ssr@v0.10.1...v0.10.2-rc.88

v0.10.1

0.10.1 (2026-04-08)

Bug Fixes

  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)

v0.10.0

0.10.0 (2026-03-30)

Features

  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)

v0.10.0-rc.79

What's Changed

Full Changelog: supabase/ssr@v0.10.0-rc.78...v0.10.0-rc.79

v0.10.0-rc.78

What's Changed

Full Changelog: supabase/ssr@v0.10.0-rc.77...v0.10.0-rc.78

v0.10.0-rc.77

What's Changed

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.10.2 (2026-04-09)

Bug Fixes

0.10.1 (2026-04-08)

Bug Fixes

  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)

0.10.0 (2026-03-30)

Features

  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)

0.9.0 (2026-03-02)

Features

  • release workflow RC versioning and publish reliability (#164) (81e68f4)

0.8.1 (2026-03-02)

Bug Fixes

  • update README session docs (#159) (b859905)
  • use skipAutoInitialize to prevent SSR token refresh race condition (#131) (0b7be28)
Commits
  • 6fc9c52 chore(main): release 0.10.2 (#198)
  • 6bf0226 fix(ci): remove packageManager field (#197)
  • 6f897b8 chore(main): release 0.10.1 (#195)
  • 465759d chore(ci): upgrade Node.js to 22 and npm to 11 via corepack (#196)
  • 5f04837 fix(auth): respect user-provided auth options in createBrowserClient (#167)
  • 693eab5 chore: update @​supabase/supabase-js to v2.102.1 (#193)
  • af23c17 chore: update @​supabase/supabase-js to v2.101.1 (#189)
  • 12a09d2 docs: shorten createServerClient tsdoc (#174)
  • 2224e06 chore: update @​supabase/supabase-js to v2.101.0 (#188)
  • 8a167dc chore(main): release 0.10.0 (#180)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.93.3 to 2.105.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.105.3

2.105.3 (2026-05-04)

🩹 Fixes

  • auth: narrow OAuth/CustomProvider types to fix downstream consumer typecheck (#2326)

v2.105.2

2.105.2 (2026-05-04)

🩹 Fixes

  • auth: forward lockAcquireTimeout to SupabaseAuthClient (#2309)
  • auth: add toJSON to WebAuthnError for correct JSON serialization (#2317)
  • misc: widen enum-like unions with (string & {}) for forward compat (#2303)
  • misc: reduce any usage across packages (#2314)
  • postgrest: unify insert/upsert signatures (#2315)

❤️ Thank You

v2.105.2-canary.4

2.105.2-canary.4 (2026-05-04)

This was a version bump only, there were no code changes.

v2.105.2-canary.3

2.105.2-canary.3 (2026-05-04)

This was a version bump only, there were no code changes.

v2.105.2-canary.2

2.105.2-canary.2 (2026-05-04)

🩹 Fixes

  • auth: add toJSON to WebAuthnError for correct JSON serialization (#2317)
  • misc: reduce any usage across packages (#2314)
  • postgrest: unify insert/upsert signatures (#2315)

v2.105.2-canary.1

2.105.2-canary.1 (2026-05-04)

🩹 Fixes

  • auth: forward lockAcquireTimeout to SupabaseAuthClient (#2309)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.105.1 (2026-04-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.105.0 (2026-04-27)

🚀 Features

  • auth: add passkey support with WebAuthn registration, authentication, and management (#2283)
  • realtime: Realtime deferred disconnect (#2282)

2.104.1 (2026-04-23)

🩹 Fixes

  • supabase: propagate custom fetch to realtime client (#2267)

❤️ Thank You

2.104.0 (2026-04-20)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.103.3 (2026-04-16)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.103.2 (2026-04-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.103.1 (2026-04-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.103.0 (2026-04-09)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.102.1 (2026-04-07)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.102.0 (2026-04-07)

🚀 Features

  • supabase: export PostgrestFilterBuilder and StorageApiError from supabase-js (#2222)

... (truncated)

Commits
  • db53b0f chore(release): version 2.105.2 changelogs (#2323)
  • 5223888 [patchback] docs(repo): @​category and @​subcategory tags across all packages (...
  • 0412d0d fix(auth): forward lockAcquireTimeout to SupabaseAuthClient (#2309)
  • 42c9cbb [patchback] fix(misc): widen enum-like unions with (string & {}) for forward ...
  • 7e1773c chore(release): version 2.105.1 changelogs (#2302)
  • ca8c418 chore(release): version 2.105.0 changelogs (#2290)
  • d19e6d3 [patchback] docs(misc): rename anon key → publishable key and service role ke...
  • c420456 [patchback] feat(auth): add passkey support with WebAuthn registration, authe...
  • bfb18bc [patchback] feat(realtime): Realtime deferred disconnect (#2282)
  • ed49eed chore(release): version 2.104.1 changelogs (#2273)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: your-github-username. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Mar 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
alphaclone-nextjs Ready Ready Preview, Comment May 4, 2026 5:10pm
alphaclone-nextjs-2 Ready Ready Preview, Comment May 4, 2026 5:10pm

@kilo-code-bot

kilo-code-bot Bot commented Mar 17, 2026

Copy link
Copy Markdown

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

This is a Dependabot dependency bump PR for the supabase group:

Package Old Version New Version
@supabase/ssr 0.8.0 0.9.0
@supabase/supabase-js 2.93.3 2.100.0 (resolved)

No application source code was changed. All modifications are confined to package.json and the generated package-lock.json.

Notable upstream changes included in these bumps:

  • @supabase/ssr 0.8.1 fixes a SSR token refresh race condition (skipAutoInitialize) — a meaningful correctness fix for Next.js SSR usage.
  • @supabase/supabase-js 2.94+ adds URL length validation, timeout protection, and new auth admin CRUD methods.
  • @types/phoenix is replaced by the vendored @supabase/phoenix 0.4.0 — an intentional upstream change, no consumer impact.
Files Reviewed (2 files)
  • package.json
  • package-lock.json

Fix these issues in Kilo Cloud


Reviewed by claude-4.6-sonnet-20260217 · 97,634 tokens

@kilo-code-bot

kilo-code-bot Bot commented Mar 30, 2026

Copy link
Copy Markdown

Kilo Code Review could not run — your account is out of credits.

Add credits or switch to a free model to enable reviews on this change.

Marek Z and others added 26 commits May 1, 2026 12:21
- Updated LinkedIn OAuth to include w_organization_social and r_organization_social scopes.
- Updated Facebook OAuth to include pages_manage_engagement scope for commenting.
- Implemented create_facebook_comment tool in MCPServer.
- Fixed missing MoreVertical import in LeadDetailModal.tsx.
- Fixed missing zoho integration name in integrationsService.ts.
- Verified build via tsc.
…updates

Bumps the supabase group with 2 updates in the / directory: [@supabase/ssr](https://github.com/supabase/ssr) and [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js).


Updates `@supabase/ssr` from 0.8.0 to 0.10.2
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.8.0...v0.10.2)

Updates `@supabase/supabase-js` from 2.93.3 to 2.105.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/develop/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.105.3/packages/core/supabase-js)

---
updated-dependencies:
- dependency-name: "@supabase/ssr"
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: supabase
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: supabase
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants