hahachait/padhle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
padhle/supabase-project/CHANGELOG.md
T
hahachait b2d8109019 padhle - post migration
2026-09-15 04:08:55 -04:00

44 KiB
Raw Permalink Blame History

Changelog

All notable changes to the Supabase self-hosted Docker configuration.

Changes are grouped by service rather than by change type. See versions.md for complete image version history and rollback information.

See per-service updates below for details. Only the most important changes relevant to self-hosted Supabase are included here. For the full list of changes, refer to the release notes and changelogs of each individual service.

Note: Configuration updates marked with "requires [...] update" are already included in the latest version of the repository. Pull the latest changes or refer to the linked PR for manual updates. After updating docker-compose.yml, pull the latest images and recreate containers - use docker compose pull && docker compose down && docker compose up -d.

0.8.0 - 2026-08-11

⚠️ Note: This update contains breaking changes. Make sure to read the important details below:

Configuration

  • ⚠️ Added API_GW_HTTP_PORT (falls back to KONG_HTTP_PORT; requires .env and docker-compose.yml update) - PR #48153

Documentation

  • Updated several self-hosting how-to guides to reflect the current configuration - PR #48153
  • Updated architecture diagram for self-hosted Supabase - PR #48763

Utils and tests

  • Updated tests/ to match the API gateway switch to Envoy - PR #48153

API gateway

  • ⚠️ Changed the default API gateway from Kong to Envoy; the kong service is now api-gw (requires docker-compose.yml update) - PR #48153
  • Changed docker-compose.envoy.yml to a no-op shim now that Envoy is the default (requires docker-compose.envoy.yml update) - PR #48153
  • Added an optional override for Kong (requires new docker-compose.kong.yml) - PR #48153
  • Updated the Caddy and nginx reverse proxies to forward to api-gw (requires docker-compose.caddy.yml, docker-compose.nginx.yml, volumes/proxy/caddy/Caddyfile, and volumes/proxy/nginx/supabase-nginx.conf.tpl update) - PR #48153

0.7.2 - 2026-08-04

Utils and tests

  • Fixed update.sh overwriting itself during an update; the new update.sh is now staged as update.sh.new for review instead of replacing the running script - PR #48690
  • update.sh now fetches only the docker/ directory (partial clone), making updates substantially faster and lighter - PR #48690

0.7.1 - 2026-08-03

Configuration

  • Added SUPABASE_JWKS configuration for Edge Functions to docker-compose.yml - PR #45635
  • Added upgrades.json - a version-keyed manifest to gate breaking changes (required for update.sh) - PR #47851
  • Updated .gitignore (required for update.sh)

Documentation

Utils and tests

  • Added base version stamp to setup.sh (saved in .supabase-version, required for update.sh) - PR #47848
  • Added update.sh. Refer to Update Your Self-Hosted Deployment - PR #47851
  • Added SUPABASE_JWKS configuration for Edge Functions to utils/add-new-auth-keys.sh - PR #45635
  • Updated tests/test-s3.sh and test-s3-backend.sh - PR #48500

API gateway

  • Updated Kong to 3.9.3
  • Added KONG_DNS_VALID_TTL configuration environment variable (requires docker-compose.yml update) - PR #47846
  • Updated Envoy to 1.39.0 (requires docker-compose.envoy.yml update)
  • Updated nginx-certbot to 6.2.0-nginx1.31.3 (requires docker-compose.nginx.yml update)

Studio

  • Updated to 2026.08.03-sha-022b374
  • Fixed URL generation for Edge Functions - PR #47861 (via @7ttp)
  • Fixed the Logs tab visibility in Auth > Users - PR #48122 (via @luizfelmach)

Storage

  • Changed RustFS image to 1.0.0-beta.11 temporarily (requires docker-compose.rustfs.yml update) - PR #48500

Edge Runtime

  • Changed JWKS configuration mechanism for main worker (requires docker-compose.yml and volumes/functions/main/index.ts update) - PR #45635

0.7.0 - 2026-07-07

⚠️ Note: This update contains breaking changes:

  • Access to the OpenAPI spec at /rest/v1/ via the anon (publishable) key has been removed. Requests using the service role or new secret API key are unaffected, and data access via /rest/v1/your_table or any client library continues to work as-is. See discussion #42949
  • API_EXTERNAL_URL has been updated to include the /auth/v1 path prefix (e.g. http://localhost:8000/auth/v1), aligning self-hosted with the platform and CLI. This makes custom OAuth providers work out of the box and moves SAML SSO endpoints to /auth/v1/sso/saml/*. See discussion #47093 and PR #47640

Configuration

  • ⚠️ Added KONG_ROUTER_FLAVOR to the compose configuration for Kong (requires docker-compose.yml update) - PR #45462
  • ⚠️ Changed the default API_EXTERNAL_URL in .env.example to contain /auth/v1 - PR #47640
  • ⚠️ Changed the default PGRST_DB_SCHEMAS to public,graphql_public in .env.example to avoid exposing storage (a protected schema)

Documentation

  • Minor updates to the how-to guides following the configuration changes

Utils and tests

  • Updated setup.sh to match the new API_EXTERNAL_URL configuration
  • Updated utils/generate-keys.sh to also generate a unique REALTIME_DB_ENC_KEY
  • Updated tests/test-self-hosted.sh and tests/test-auth-keys.sh to reflect the changes in the API gateway configuration

API gateway

  • ⚠️ Updated Kong and Envoy configuration to restrict access to PostgREST /rest/v1/ (requires docker-compose.yml, volumes/api/kong.yml and volumes/api/envoy update) - PR #45462 (via @luizfelmach)
  • ⚠️ Updated Kong and Envoy configuration to match the new /auth/v1/sso routing for SAML SSO (requires docker-compose.yml, volumes/api/kong.yml and volumes/api/envoy update) - PR #47640

Studio

  • Updated to 2026.07.07-sha-a6a04f2
  • Fixed the local SQL snippets not being shown in the SQL Editor - PR #47403, PR #47409
  • Fixed the exposed schemas and tables UI to properly reflect non-platform configuration (Data API > Settings) - PR #47511
  • Fixed the behavior of the type generator (Data API > Docs) - PR #47577

Auth

  • ⚠️ Changed Auth configuration placeholders to match the new default API_EXTERNAL_URL (requires docker-compose.yml update) - PR #47640
  • ⚠️ Changed GOTRUE_JWT_ISSUER to match the new default API_EXTERNAL_URL (requires docker-compose.yml update) - PR #47640

Realtime

  • ⚠️ Added a new configuration variable REALTIME_DB_ENC_KEY for Realtime with a fallback to the default value (requires docker-compose.yml update) - PR #46021

0.6.0 - 2026-06-17

⚠️ Note: This update contains breaking changes. Make sure to read the important details below:

  • Postgres 17 is now the default. Do not start Postgres 17 on an existing Postgres 15 data directory. See the Upgrade to Postgres 17 guide. Check the Configuration and Postgres sections for additional information
  • API gateway configuration includes a security fix for Realtime routes - it is strongly recommended to add this update to any self-hosted Supabase instance running Realtime
  • Studio and Postgres Meta configuration now use postgres and not supabase_admin to connect to Postgres

Configuration

  • ⚠️ Changed the default Postgres image to supabase/postgres:17.6.1.136 - PR #46981
  • ⚠️ Added docker-compose.pg15.yml - for deployments not yet upgraded, and as the rollback target for utils/upgrade-pg17.sh - PR #46981
  • Updated docker-compose.pg17.yml to match the new default - PR #46981

Documentation

Utils and tests

  • Updated utils/upgrade-pg17.sh (bumped Postgres image, added additional migrations), and tests/test-pg17-upgrade.sh (added tests for pg_cron) - PR #46981
  • Updated tests/test-self-hosted.sh (added tests for resumable upload, modified tests for Realtime and GraphQL) - PR #46731, PR #46856, PR #46981
  • Updated tests/test-auth-keys.sh (modified tests for Realtime) - PR #46856

API gateway

  • ⚠️ Updated Kong and Envoy configuration to block access to Realtime /api/tenants and /api/openapi endpoints. This is a security fix (requires volumes/api/kong.yml and volumes/api/envoy update) - PR #46856
  • Updated entrypoint for Kong to use /bin/sh (requires docker-compose.yml update) - PR #46873

Studio

  • ⚠️ Updated studio configuration to use postgres instead of supabase_admin to connect to Postgres (requires docker-compose.yml update). See discussion #46081 and the how-to guide for important information - PR #47022

PostgREST

  • Added healthcheck for rest (requires docker-compose.yml update) - PR #46658

Postgres Meta

  • ⚠️ Updated meta configuration to use postgres instead of supabase_admin to connect to Postgres (requires docker-compose.yml update) - PR #47022

Edge Runtime

  • Added healthcheck for functions (requires docker-compose.yml update) - PR #46655

Postgres

  • ⚠️ Updated the default image to 17.6.1.136 (from 15.8.1.085). pg_graphql is now disabled by default on fresh installs. Databases that already use GraphQL keep it after an upgrade. See discussion #46080 and the how-to guide for more information - PR #46981

0.5.0 - 2026-06-03

⚠️ Note: This update includes important changes. Please check the details below.

Configuration

  • ⚠️ Logs and analytics are now optional and were removed from the default docker-compose.yml. A new docker-compose.logs.yml override has been added. Check the main configuration guide and the changes to Studio below for more information - PR #45327 (via @luizfelmach)
  • ⚠️ Added COMPOSE_FILE to .env.example for configuring compose overrides (also used by run.sh) - PR #45603

Documentation

  • Added a new reference list of all configuration environment variables - PR #46124
  • Updated the main installation and configuration guide (added "quick start" path and opt-in for logs and analytics; removed the legacy JWT secrets generator) - PR #46416, PR #45359
  • Updated the logs and analytics how-to guide - PR #46452

Utils

  • Added setup.sh and run.sh to support quick start and easier management of the compose configuration - PR #45603
  • Updated utils/add-new-auth-keys.sh and utils/rotate-new-api-key.sh to remove the dependency on OpenSSL and Node.js - PR #45941
  • Updated tests/test-container-logs.sh to skip checks for kong, analytics and vector when the services are not running - PR #46099

API gateway

  • Updated Envoy version to 1.38.0 (see docker-compose.envoy.yml) - PR #46023
  • Updated Envoy configuration to address a discrepancy in API key checking (requires volumes/api/envoy update) - PR #46023

Studio

  • Updated to 2026.06.03-sha-0bca601
  • ⚠️ Added ENABLED_FEATURES_LOGS_ALL to Studio service configuration (requires docker-compose.yml update) - PR #45327
  • ⚠️ Added SUPABASE_PUBLISHABLE_KEY and SUPABASE_SECRET_KEY to Studio service configuration (requires docker-compose.yml update) - PR #46173
  • ⚠️ Added start_period to Studio healthcheck for more reliable cold-boot on slower hosts (requires docker-compose.yml update) - PR #45327
  • Fixed incorrect connection strings in the connect sheet for self-hosted environments - PR #46217
  • Updated project home and functions page, and added a minimal project settings implementation - PR #46544, PR #46550, PR #46554

Auth

  • Updated to v2.189.0 - Changelog | Release
  • ⚠️ Added GOTRUE_JWT_ISSUER to Auth service configuration (requires docker-compose.yml update) - PR #46020

PostgREST

Realtime

Storage

Postgres Meta

Edge Runtime

Supavisor

  • Updated to 2.9.5 - Release
  • Added POSTGRES_HOST to Supavisor service configuration (requires docker-compose.yml and volumes/pooler/pooler.exs update) - PR #41273

Analytics (Logflare)

  • Updated to 1.43.1 - Release
  • ⚠️ Changed default docker-compose.yml to no longer include logs & analytics. Read more in Supabase's changelog - PR #45327

2026-04-27

Configuration

  • ⚠️ Added docker-compose.envoy.yml and volumes/api/envoy. See also the API gateway updates below - PR #43838
  • ⚠️ Changed Studio healthcheck and some other configuration for better compatibility with Podman (requires docker-compose.yml update) - PR #44754
  • ⚠️ Changed Studio configuration to bind to all IPv4 interfaces only (requires docker-compose.yml update) - PR #44772

Documentation

  • Added a new how-to describing how to switch from supabase_admin to postgres role for Studio - PR #42975 (via @singh-inder)
  • Added a new how-to for configuring Envoy as the new API gateway - PR #45152
  • Updated the main setup guide and the how-tos to reflect the state of the self-hosted Supabase configuration - PR #45011

Utils

  • ⚠️ Added utils/reassign-owner.sh to update database objects. Read more in the "Remove superuser access" how-to guide - PR #42975
  • ⚠️ Changed utils/add-new-auth-keys.sh to also update docker-compose.yml - PR #45056

API gateway

  • ⚠️ Added Envoy as the new optional API gateway (requires docker-compose.envoy.yml, volumes/api/envoy, and volumes/logs/vector.yml update) - PR #43838 (via @luizfelmach)

Studio

  • Updated to 2026.04.27-sha-5f60601
  • ⚠️ Added 4 new lints to the Security Advisor. Read more about lint rules 0026 - 0029 in the Performance and Security Advisors section of the Supabase documentation - PR #45253, PR #45260

2026-04-08

Documentation

Utils

API gateway

  • ⚠️ Added configuration for SAML SSO (requires .env, docker-compose.yml and volumes/api/kong.yml update) - PR #43385 (via @luizfelmach)

Studio

  • Updated to 2026.04.08-sha-205cbe7

PostgREST

Storage

imgproxy

  • Changed IMGPROXY_ENABLE_WEBP_DETECTION environment variable to IMGPROXY_AUTO_WEBP (requires .env and docker-compose.yml update) - PR #43919

Postgres Meta

Analytics (Logflare)

Postgres

  • ⚠️ Added docker-compose.pg17.yml override - PR #44147
  • ⚠️ Added utils/upgrade-pg17.sh - PR #44147
  • ⚠️ Added documentation explaining the upgrade to Postgres 17

2026-03-16

⚠️ Note: This update includes important changes. Please check the details below. The following configuration files have been added/updated: utils/add-new-auth-keys.sh, utils/rotate-new-api-keys.sh, docker-compose.yml, .env.example, docker-compose.s3.yml, docker-compose.rustfs.yml, volumes/api/kong.yml, volumes/api/kong-entrypoint.sh, docker-compose.caddy.yml, docker-compose.nginx.yml, volumes/functions/main/index.ts, and volumes/proxy.

Configuration

  • ⚠️ Added scripts and templates to support the new API key format (sb_ API keys) and the new asymmetric authentication. Check the how-to guide for detailed instructions - PR #43554
  • Added optional proxy configuration for Caddy and nginx. Read the how-to guide to learn more - PR #43291

Documentation

Utils and tests

  • Added utils/add-new-auth-keys.sh and utils/rotate-new-api-keys.sh - PR #43554
  • Added tests/ with 100+ test cases - PR #43573

Studio

  • Updated to 2026.03.16-sha-5528817
  • ⚠️ Added the link to the Data API page in Integrations - PR #43268
  • ⚠️ Added PGRST_DB_SCHEMAS, PGRST_DB_EXTRA_SEARCH_PATH, and PGRST_DB_MAX_ROWS to Studio configuration (requires docker-compose.yml update) - PR #43268

MCP Server

API gateway

  • ⚠️ Updated Kong to 3.9.1 - PR #43554

PostgREST

Realtime

  • ⚠️ Added mandatory METRICS_JWT_SECRET environment variable (requires docker-compose.s3.yml update) - PR realtime#1729

Storage

  • Updated to v1.44.2 - Release
  • ⚠️ Added STORAGE_PUBLIC_URL environment variable to simplify proxy configuration (requires docker-compose.s3.yml update) - PR storage#900
  • ⚠️ Added RustFS as an optional S3 backend - PR #42935
  • ⚠️ Changed Docker Compose configuration for S3 backends to use named volumes - PR #43815

Edge Runtime

  • Updated to v1.71.2 - Release
  • ⚠️ Added SUPABASE_PUBLISHABLE_KEYS, SUPABASE_SECRET_KEYS, and SUPABASE_PUBLIC_URL environment variables (requires docker-compose.yml update)
  • ⚠️ Added an option for a "hybrid" JWT verification following the addition of the new API keys and the new asymmetric authentication (requires volumes/functions/main/index.ts update) - PR #42130
  • ⚠️ Added optional rate limiter - PR edge-runtime#670

2026-02-18

Storage

  • Changed MinIO image to use Chainguard minio and minio-client (requires docker-compose.s3.yml update) - PR #42942
  • Updated Storage image version to v1.37.8 in docker-compose.s3.yml
  • Removed imgproxy service from docker-compose.s3.yml to minimize redundancy - PR #42942
  • Fixed inconsistent storage service entry ordering in docker-compose.yml and docker-compose.s3.yml to improve diff readability - PR #42942

Edge Runtime

  • Added a deno-cache named volume to avoid re-downloading dependencies (requires docker-compose.yml and volumes/functions/* update) - PR #40822

2026-02-16

⚠️ Note: This update includes several breaking changes, including a security fix for Analytics. Please check the details below. The following configuration files have been updated: docker-compose.yml, .env.example, docker-compose.s3.yml, volumes/api/kong.yml, and volumes/logs/vector.yml.

Studio

  • Updated to 2026.02.16-sha-26c615c
  • Added Edge Functions management UI (requires docker-compose.yml update) - PR #40690, PR #42322, PR #42349, PR #42350

MCP Server

Auth

PostgREST

Realtime

Storage

  • Updated to v1.37.8 - Release
  • ⚠️ Changed environment variable configuration for Storage (requires docker-compose.yml, .env.example and .env update) - PR #37185, PR #42862
  • ⚠️ Added default configuration to access buckets via /storage/v1/s3 endpoint (requires docker-compose.yml and .env update) - PR #37185
  • ⚠️ Changed MinIO configuration for the S3 backend (requires docker-compose.s3.yml and .env update) - PR #37185

Edge Runtime

Analytics (Logflare)

  • Updated to 1.31.2 - Release
  • ⚠️ Changed default configuration to disable Logflare on 0.0.0.0:4000 to prevent access to /dashboard (requires docker-compose.yml update). Read more in the "Production Recommendations" section of Logflare documentation - PR #42857
  • ⚠️ Changed Kong routes to not include /analytics/v1 by default (requires /volumes/api/kong.yml update) - PR #42857

Vector

  • Updated to 0.53.0-alpine - Changelog | Release
  • ⚠️ Major version jump from 0.28.1 (requires volumes/logs/vector.yml update) - PR #42525
  • ⚠️ Changed Postgres sink configuration to bypass Kong (requires volumes/logs/vector.yml update) - PR #42857
  • ⚠️ Changed retry settings for all sinks to increase timeouts (requires volumes/logs/vector.yml update) - PR #42857

2026-02-05

Storage

  • Updated to v1.37.1 - Release
  • Fixed an issue with Storage not starting because of an issue with migrations - PR storage#845

2026-01-27

Studio

Auth

  • Updated to v2.185.0 - Changelog | Release
  • ⚠️ Fixed security-related issues

PostgREST

Realtime

  • Updated to v2.72.0 - Release
  • Changed healthchecks logging to off by default (requires docker-compose.yml update) - PR realtime#1677, PR #42156
  • Changed logging configuration and healthcheck frequency to reduce log volume (requires docker-compose.yml update) - PR #42112

Storage

imgproxy

Postgres Meta

Edge Runtime

Analytics (Logflare)

Postgres

  • No image update
  • Fixed Postgres logging configuration (requires volumes/logs/vector.yml update) - PR #41800

2025-12-18

Documentation

  • Updated self-hosting installation and configuration guide - PR #40901, PR #41438

Utils

  • Added utils/generate-keys.sh - PR #41363
  • Added utils/db-passwd.sh - PR #41432
  • Changed reset.sh to POSIX and added more checks - PR #41361

Studio

  • Updated to 2025.12.17-sha-43f4f7f
  • ⚠️ Fixed additional issues related to React2Shell
  • Fixed an issue with the Users page not being updated on changes - PR #41254

MCP Server

Auth

Postgres Meta

Analytics (Logflare)

  • Updated to 1.27.0 - Release
  • Fixed multiple issues, including a race condition

2025-12-10

Studio

  • Updated to 2025.12.09-sha-434634f
  • ⚠️ Fixed security issues related to React2Shell

MCP Server

  • Updated to v0.5.9 - Release
  • ⚠️ Changed MCP tool get_anon_key to get_publishable_keys

PostgREST

  • Updated to v14.1 - Changelog | Release
  • ⚠️ Major upgrade from v13.x to v14.x - please report any unexpected behavior

Realtime

Storage

Edge Runtime

Analytics (Logflare)

2025-12-08

Realtime

  • No image update
  • Changed boolean values to strings in Docker Compose for better compatibility with Podman - PR #40994, also PR realtime#1614
  • Changed healthcheck in Docker Compose for better compatibility with Podman - PR #41159

2025-11-26

Studio

  • Updated to 2025.11.26-sha-8f096b5
  • Fixed MCP get_advisors tool - PR #40783
  • Fixed AI Assistant request schema - PR #40830
  • Fixed log drains page - PR #40835

Realtime

Analytics (Logflare)

  • Updated to 1.26.13 - Release
  • Fixed crashdump when POSTGRES_BACKEND_URL is malformed - PR logflare#2954

2025-11-25

Studio

Auth

Realtime

Storage

Edge Runtime

Analytics (Logflare)

  • Updated to 1.26.12 - Release
  • Fixed Auth logs query - PR logflare#2936
  • Fixed build configuration to prevent crashes with "Illegal instruction (core dumped)" - PR logflare#2942

2025-11-17

Storage

  • No image update
  • Fixed resumable uploads for files larger than 6MB (requires docker-compose.yml update) - PR #40500

2025-11-12

Studio

  • Updated to 2025.11.10-sha-5291fe3 - Dashboard updates
  • Added log drains - PR #28297
  • Fixed Studio using postgres role instead of supabase_admin - PR #39946

Auth

Realtime

Storage

Edge Runtime

Supavisor

2025-11-05

Studio

  • No image update
  • Fixed Studio failing to connect to Postgres with non-default settings (requires docker-compose.yml update) - PR #40169

Realtime

  • No image update
  • Fixed realtime logs not showing in Studio (requires volumes/logs/vector.yml update) - PR #39963

2025-10-28

Studio

  • Updated to 2025.10.27-sha-85b84e0 - Dashboard updates
  • Fixed broken authentication when uploading files to Storage - PR #39829

Realtime

Storage

Postgres Meta

Edge Runtime

2025-10-27

Studio

  • No image update
  • Added Kong configuration for MCP server routes (requires volumes/api/kong.yml update) - PR #39849
  • Added documentation page for MCP server configuration - PR #39952

2025-10-21

Studio

Realtime

Storage

Postgres Meta

Edge Runtime

Supavisor

2025-10-13

Analytics (Logflare)

2025-10-08

Studio

  • Updated to 2025.10.01-sha-8460121 - Dashboard updates
  • Added "local" remote MCP server - PR #38797, PR #39041
  • ⚠️ Changed Studio connection method to postgres-meta - affects non-standard database port configurations

Auth

PostgREST

Realtime

Storage

Postgres Meta

Analytics (Logflare)

Postgres

Supavisor

Reference in New Issue View Git Blame Copy Permalink