Tags from cli

v2.81.2

2026-03-17T15:29:40Z

v2.81.1

2026-03-17T14:27:29Z

fix: add start command warning (#4963)

* warn

* lint

---------

Co-authored-by: Kalleby Santos <[email protected]>

v2.81.0

2026-03-17T11:57:31Z

feat(db): add `supabase db advisors` command for checking security an…

…d performance issues (#4957)

v2.80.0

2026-03-17T09:39:55Z

feat: add global `--agent` flag with auto-detection for AI coding age…

…nts (#4960)

feat: add global --agent flag with auto-detection for AI coding agents

Introduces a global --agent flag (auto/yes/no) that detects whether the
CLI is being invoked by an AI coding agent based on environment variables.
When agent mode is active, db query defaults to JSON output with a
security envelope (untrusted data boundary). When in human mode, it
defaults to table output without the envelope. Explicit --output always
takes precedence.

Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>

v2.79.0

2026-03-16T14:57:28Z

feat(db): add `supabase db query` command for executing SQL (#4955)

* feat(db): add `supabase db query` command for executing SQL

Add a new CLI command that allows executing raw SQL against local and
remote databases, designed for seamless use by AI coding agents without
requiring MCP server configuration.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* fix(db): address PR review feedback for db query command

- Remove unnecessary math.MaxInt guard on fd cast, use //nolint:gosec
- Add --db-url, --linked, --local flags with mutual exclusivity
- Replace custom jsonReader with bytes.NewReader
- Add tests for formatOutput with nil cols/data

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

---------

Co-authored-by: Claude Opus 4.6 <[email protected]>

v2.78.1

2026-03-13T15:18:03Z

fix: add privilege migration note for db dump (#4885)

docs: add privilege migration note for db dump

Co-authored-by: Kalleby Santos <[email protected]>

v2.78.0

2026-03-10T14:13:16Z

feat: add hybrid jwt verification (#4721)

* feat: adding hybrid jwt verification

Allows verify new JWTs as well legacy

* stamp: detect algorithm before verify JWT

It helps to reduce latency for Legacy token verifications, since it
avoid unnecessary requests.

* feat: passing down JWKs as internal env

- It reduces functions bootime, since there's no need to fetch JWK on
fly

* stamp: using URL object instead of string concatenation

* stamp: codegen

---------

Co-authored-by: Andrew Valleteau <[email protected]>

v2.77.1

2026-03-09T15:25:38Z

fix: save profile to global path (#4697)

Co-authored-by: Andrew Valleteau <[email protected]>

v2.77.0

2026-03-06T15:18:54Z

feat: pass pgrst config to studio container (#4920)

Co-authored-by: Andrew Valleteau <[email protected]>

v2.76.17

2026-03-05T13:50:06Z

fix(function): support multiline import type statements in import sca…

…nning (#4872)

* fix(function): support multiline import type statements in import scanning

The regex pattern `.*?` does not match newlines, causing multiline
`import type { X }` statements to be skipped during bind-mount file
scanning. This results in type-only imports not being mounted in
the Docker container, causing runtime errors like:

worker boot error: Module not found "file:///.../types/MyType.ts"

Changed `.*?` to `[\s\S]*?` to match any character including newlines,
consistent with the `{[^{}]+}` pattern used for braced imports.

This fix enables proper handling of Deno 2.x style multiline type imports:

```typescript
import type {
MyType,
OtherType,
} from './types.ts'
```

Includes test case to prevent regression.

* test(function): add non-braced default type import to fixture

Cover `import type Foo from '...'` pattern in the multiline import
type test. This form also routes through the `[\s\S]*?` branch and
was previously untested.

* fix(function): use (?:type\s+)? for multiline import type matching

Narrow the regex fix for multiline import type statements per PR review feedback. Instead of widening .*? to [\s\S]*? (which affects all import patterns), add (?:type\s+)? to consume the type keyword so braced imports route into the {[^{}]+} branch that already handles newlines.

---------

Co-authored-by: Andrew Valleteau <[email protected]>