Supabase RLS breaking change (Oct 30, 2026): 5-minute check to avoid 42501 errors
Oct 30, 2026, Supabase is enforcing a breaking change for RLS grants in the public schema. Existing tables are unaffected; new tables created after…
Последние новости Web от Tech News
Все темы
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
cutting N+1 queries in Next.js API routes with Supabase RPC
when a dashboard starts pulling relational data from Supabase, the naive approach is to fire a separate select per row. the result is a classic N+1…
Our marketing pages never read your session, so the header guesses from a cookie with useSyncExternalStore
Fetch the Nakodo home page with curl and the header offers you "Sign in" and "Start free". Open the same URL in a browser where you are signed in an…
We stopped asking Supabase who you are on every request, and the only thing that got worse is revocation
Munchable's marketing site and its 373 generated answer pages are statically rendered, and they still run a function on every request, because the h…
Wait, How Did Hackers Steal the Encryption Key Too?" 5 Supabase Security Traps I Fixed in Production
Introduction: The Headline That Made My Stomach Drop Almost every week, we see another headline about a major tech company or hot startup suffering…
Supabase pg-delta migration guide: adopt declarative schemas safely
A schema diff can be technically valid and still remove data you meant to keep. That is why switching an existing Supabase project to Declarative Sc…
Lovable Cloud: What You Actually Get
Lovable Cloud is the backend Lovable switches on for you the first time your app needs to save something. Ask for a login page or a table of orders…
Stop rebuilding the 80%: the foundation every AI agent SaaS needs before its first customer
Every AI agent SaaS I've built needed the same foundation before a customer could pay for it. I rebuilt it several times before I stopped. Here's th…
I asked AI agents to rewrite Supabase in Rust
Let me start with a confession: I don't really know what I'm doing. I'm not a Rust developer. I've never written a database backend. I run a small S…
You Gave Your SECURITY DEFINER Function a Dedicated Owner Role. It Broke. Here's Why.
The least-privilege pattern for Supabase RPCs is well documented: don't let postgres own your SECURITY DEFINER function — create a dedicated NOLOGIN…
Lovable vs Bolt vs v0 vs Massvai: Which AI App Builder for a Full-Stack Next.js App?
Four prompt-to-app tools compared on stack, deployment, code ownership and pricing model, with recommendations by scenario rather than a single winn…
auth.uid() is null: why Supabase RLS denies your app
Row level security compares auth.uid() with the row's owner. When the request carries no JWT, auth.uid() is null, every comparison is false, inserts…
Supabase .NET DevLog #13
Welcome to our weekly log for the Supabase .NET SDK 🎉 Sorry for being a little late on this one. Like I said last week, I spent more time working on…
Supabase: permission denied for table (42501)
This is not row level security. The database role your app uses ( anon or authenticated ) has no privilege on the table at all, so Postgres refuses…
Lovable Cloud to Supabase Migration Checklist
Most Lovable Cloud to Supabase migration guides stop at "dump the database, restore it, change two env vars." That part takes an afternoon. The bugs…
Hand Off a Lovable or Bolt App to a Developer: Prep Guide
You built the app in Lovable or Bolt. Now you've found a developer or agency to take it further, and their first message is: "Can you send me access…
How to Set Up a Free Cloud Database and Add Your First Table with Supabase
Setting up a backend database traditionally meant provisioning virtual machines, managing port forwarding, and writing manual SQL schemas before wri…
pg_restore finished fine. One of my tables wasn't there.
A restore test on a real 105-table Supabase database failed a few weeks ago. The tool doing it restores in a strict mode, so it stopped on the first…
Building a Multi-Agent Valet Trash Command Center: Supabase Edge Functions, VAPI, and PostgreSQL at Scale
OPENING PARAGRAPH: We built a production command center for Quiet Hours Valet that orchestrates 8 concurrent AI voice agents, 8 automation scenarios…
Supabase Connection String: IPv6, ENOTFOUND, and the Transaction Pooler Fix
The short version Supabase uses IPv6 by default. Most local dev environments and many hosting providers don't support IPv6, so DNS resolution fails…
58 of 154 public Supabase apps had a working service_role key in git
58 of 154 public Supabase apps had a working service_role key in git. Here's what that means for yours. If you build with Lovable, Bolt, Cursor, or…
Одна карточка на всех без сервера: детерминированная генерация, RLS и флаг retired в шахматном бинго
Разбираю несколько инженерных решений из небольшого браузерного проекта: бинго на шахматных задачах Lichess без собственного сервера. Как получить о…
Building a Store Without a Payment Gateway — Manual Checkout on Next.js and Supabase
Not every market has easy access to Stripe. In a lot of places the real payment rails are bank transfer and mobile wallets, confirmed by a human. Th…
Automatic lip sync animation generator for Blender animations
I don't know if anyone else here has ever used Blender or tried their hand at 3D animation, but if you have, you know it's hard. Like really hard. I…
We attacked our own AI-agent governance 69 times. Here are the 5 times it gave way.
9 September 2026 · Luc Richelet. Every number below comes from a real execution log, under real PostgreSQL login roles, on two clean databases. Noth…
I Ship Mobile Apps for $0: Vercel + Render + Supabase Free Tier
TL;DR: My entire mobile stack costs $0 a month. Expo builds the app. Supabase holds data and auth. Render runs background jobs. Vercel hosts the lan…
Expo + Supabase GitHub Auth Broke 3 Times — Here's the Fix
TL;DR: GitHub login in my Expo app broke three separate times. A deep link that went nowhere. A PKCE flow I wired backwards. A redirect URL with a t…
What I learned building synchronized YouTube playback for Moka-fi
I built Moka-fi as a cozy online café where friends can study, talk, play and spend time together. One of the newest rooms is Watch Together, where…
5 Ways to Download Supabase Storage Files as a ZIP
A "download all" button sounds simple until it has to combine private files, survive a slow connection, and deliver the same export twice. For Supab…
I built a free concert tracker solo: 13 languages, 11,000 prerendered pages, one React codebase for iOS, Android and web
I go to a lot of concerts. In January 2025 I got tired of a spreadsheet that could not tell me which opener I had seen twice, so I started building…