This Supabase release addresses an outdated tzdata package in older Postgres versions, resolving incorrect local time conversions for specific zones including America/Vancouver, Africa/Casablanca, and America/Edmonton. The fix ensures accurate `AT TIME ZONE` results for affected projects running versions prior to 15.19.0.003 or 17.11.0.003, with existing stored data and timestamps remaining unaffected.
Official Neon product update: Gemini 4 Argon, Apple and Microsoft sign-in, HIPAA for backend services, new Functions templates, and more release - Oct 30, 2026. Read the publisher’s changelog for full details.
Appwrite 1.9.10. Source highlight: Appwrite 1.9.10 is a security release for self-hosted deployments on the 1.9 line. It backports the hardening shipped in 2.6.2 across auth, API keys, databases, realtime, GraphQL, storage, VCS, functions, migrations and messaging, and moves the runtime to a patched Brotli. It keeps Console 8.7.37 fo
Appwrite 2.6.2. Source highlight: Appwrite 2.6.2 is a security release for self-hosted deployments on the 2.6 line. It brings the hardening work merged since 2.6.1 across auth, API keys, databases, realtime, GraphQL, storage, VCS, functions, sites, migrations and messaging. It also moves the runtime to a patched Brotli and the Conso
PocketBase version v0.40.6 introduces critical security updates, memory usage protections for thumbnail generation, and shifts future update distribution away from GitHub. Developers should update promptly to mitigate Go security vulnerabilities and benefit from dependency upgrades.
PocketBase v0.22.57 introduces a memory-safe limit for image thumbnail generation and updates dependencies to address a security vulnerability related to the eMudhra CA compromise. These changes improve system resilience against excessive memory consumption and enhance overall security posture.
Official Neon product update: Jev on the AI Gateway, automatic top-up for AI Gateway credits, an OAuth provider for Managed Better Auth, and more release - Oct 23, 2026. Read the publisher’s changelog for full details.
Appwrite 1.9.9. Source highlight: Appwrite 1.9.9 is a precautionary maintenance release for self-hosted deployments on the 1.9 line. It moves the runtime to PHP 8.5.12. It retains Console 8.7.37 for compatibility with the 1.9 server APIs. Upgrading from 1.9.8 keeps the existing migration class and introduces no schema changes.
Appwrite 2.6.1. Source highlight: Appwrite 2.6.1 is a precautionary maintenance release that moves the runtime to PHP 8.5.12. It ships with the same 1.2.97 self-hosted Console as 2.6.0, has no schema changes, and upgrading from 2.6.0 only replaces the images.
Appwrite 2.6.0. Source highlight: Appwrite 2.6.0 brings image metadata controls, resource descriptions, database and storage fixes, and security updates to self-hosted deployments. It includes self-hosted Console 1.2.97, updated from 1.2.74. Back up your instance and run the migration after upgrading: this minor release includes sch
Appwrite 1.9.8. Source highlight: Appwrite 1.9.8 is a security patch for self-hosted deployments following the eMudhra certificate compromise. It retains Console 8.7.37 for compatibility with the 1.9 server APIs. Upgrading from 1.9.7 keeps the existing migration class and introduces no schema changes.
Supabase has added native OpenTelemetry traces and metrics support to its .NET SDK using System.Diagnostics, allowing zero-overhead observability across Auth, Postgrest, Storage, and Functions clients. Developers can now seamlessly integrate Supabase client telemetry into their existing OpenTelemetry pipelines without forcing direct package dependencies.
Appwrite 2.5.0. Source highlight: Appwrite 2.5 lets you turn on passkeys for your projects from the Console, including in native Android apps. Functions can now run on an interval instead of a cron expression. Function runtimes no longer crash-loop after the executor restarts, the bundled ClickHouse does far less work under load, an
Supabase is removing four outdated CBC-mode TLS 1.2 cipher suites on project HTTP APIs starting November 10, 2026. Clients running on end-of-life operating systems or legacy embedded devices that do not support modern GCM or ChaCha20 ciphers will lose HTTP API access.
Supabase has released the Supabase.Extensions.DependencyInjection package to simplify .NET SDK integration. It introduces the AddSupabase extension method to automatically register the main client and all sub-clients with a scoped lifecycle.
Supabase has adopted the .NET SDK (supabase-csharp) as a first-party, officially supported library maintained by their core team. Developers can now build .NET applications with guaranteed feature parity, regular updates, and direct engineering support.
Official Neon product update: All AI Gateway models with prepaid credits, backend features with your coding agent, and new ways to send feedback release - Oct 09, 2026. Read the publisher’s changelog for full details.
PocketBase v0.40.5 delivers crucial security fixes for Go's net/http library alongside improvements to JSVM migration error handling and SQLite performance. Upgrading is strongly recommended due to potential DoS vulnerability fixes.
PocketBase v0.22.56 bumps the minimum Go GitHub action version to 1.27.2 to incorporate crucial net/http security fixes. Developers are strongly advised to update to mitigate a potential Denial of Service (DoS) vulnerability.
Appwrite 1.9.7. Source highlight: Appwrite 1.9.7 is a security patch for the 1.9 line. It closes two migration paths that could read data a user should not reach, expires JWTs together with their session, and hardens the builds worker. It ships with the 8.7.37 self-hosted Console (was 8.7.30). Upgrading from 1.9.6 needs no migration
Appwrite 2.4.0. Source highlight: Appwrite 2.4 adds custom profile photos, Webflow sign-in, push messages straight to a user without a device target, and webhook delivery IDs with retries that only resend what failed. The Console gets CLI and MCP onboarding and a breached password policy. Outbound requests and sign-in tokens are loc
Supabase has migrated its status page hosting to incident.io while maintaining the status.supabase.com URL. Webhook and SMS status notifications have been discontinued, requiring Slack and RSS subscribers to manually resubscribe to the new platform.
Supabase added a new 'No access' organization role for Team and Enterprise plans, allowing admins to invite members without default visibility into all projects. Members with this role now appear in the organization member list and require explicit project-level access grants.
Supabase has deprecated its framework adapters within `@supabase/server` for Hono, H3, Elysia, and NestJS, with removal scheduled for December 1, 2026. Users must migrate to a new "bridge" pattern that leverages `@supabase/middleware` for framework integration, requiring code modifications to how Supabase clients and authentication claims are accessed.
Supabase Middleware 1.0 releases a new MIT‑licensed engine that lets developers define typed per‑request logic once with defineMiddleware and pipeline and run it across any JavaScript runtime. This gives developers a unified, adapter‑free way to handle authentication, CORS, and database scoping regardless of the host platform.