Pull Request Explorer

Summary

Health Assessment

Summary

Health Assessment

Summary

Health Assessment

Summary

Log kid on bad signer error

Adds debugging information for token errors, improving user troubleshooting.

Health Assessment

• • Quick fix with single commit, fast review, minimal rework.

Summary

Restart Connect on process death for active users

Ensures active WebSocket connections remain available by restarting the Connect process when it unexpectedly terminates, improving reliability for real-time services.

Health Assessment

• • Review took over 3 days, but no rework after review, indicating a straightforward bug fix with minimal complexity.

Summary

Fix Mint dependency update

Updates the Mint library to address security or compatibility issues, ensuring stable real‑time communication.

Health Assessment

• • Quick fix with minimal changes, merged within an hour, indicating low complexity and high confidence.

Summary

chore: update @supabase/supabase-js to v2.110.7

Updates the Supabase JavaScript client to the latest stable release, incorporating recent bug fixes and performance improvements.

Health Assessment

• • Quick merge with minimal changes, indicating routine dependency update.

Summary

Update @supabase/supabase-js to v2.110.6

Bumps the Supabase JavaScript client to the latest stable release, incorporating recent bug fixes and performance improvements.

Health Assessment

• • Automated dependency bump merged quickly with minimal review, indicating low complexity and risk.

Summary

e2e test for supabase-js heartbeat defaults

Ensures heartbeat and timeout defaults are correctly applied in e2e tests, improving reliability.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and high confidence.

Summary

Bump Mint dependency

Updates the Mint library to address security vulnerabilities, ensuring safer HTTP/2 handling.

Health Assessment

• • Quick security patch applied with a single commit and minimal code changes, resolved within minutes.

Summary

Health Assessment

Summary

Update supabase-js dependency to v2.110.5

This PR updates the Supabase JavaScript client library to the latest patch, ensuring compatibility and bug fixes for edge runtime and function calls.

Health Assessment

• • Quick dependency bump merged within 8.6 hours with minimal changes, indicating efficient process.

Summary

Bump postgrex due to CVE

Update postgrex to address CVE-2026-58225, ensuring security of Postgres notifications.

Health Assessment

• • Quick turnaround with minimal changes, indicating a straightforward security update.

Summary

Bump plug dependency to address CVEs

Security fix to update plug dependency, mitigating identified CVEs.

Health Assessment

• • Quick security fix with minimal changes and no review friction.

Summary

Add support for feature flag bucket keys

Enables granular control of feature flag rollout by allowing tenants to be assigned to specific buckets, ensuring consistent flag behavior across multiple flags.

Health Assessment

• • The PR took nearly five days to merge, with a single review and a follow-up commit to address formatting. The feature adds significant new functionality for feature flag management.

Summary

Update supabase-js dependency to v2.110.3

This PR updates the Supabase JavaScript client library to the latest patch, ensuring compatibility and bug fixes for authentication and PostgREST interactions.

Health Assessment

• • Fast merge with minimal changes, indicating low complexity and risk.

Summary

Mirror Supabase/Postgres Migrations for Tests

Aligns test migrations with production to accurately simulate permission checks and adds edge case coverage.

Health Assessment

• • Rapid review and merge with minimal rework; tests now mirror production migrations, enhancing reliability.

Summary

Health Assessment

Summary

Update @supabase/supabase-js to v2.110.2

This PR updates the Supabase JavaScript client library to the latest stable version, ensuring compatibility and bug fixes for authentication flows.

Health Assessment

• • PR was auto-generated and merged without a formal review, indicating minimal risk but potential oversight.

Summary

Health Assessment

Summary

Fix role leak on apply_rls

Corrects a role leakage bug in the Realtime service that could cause queries to run under incorrect roles, preventing potential permission issues.

Health Assessment

• • The PR required a single commit but had a long review period, reflecting careful scrutiny of security implications.
• • The change is a straightforward bugfix with moderate impact on the Realtime service.

Summary

Bump cowlib to address security vulnerabilities

The update patches critical HTTP response splitting and cookie injection vulnerabilities in cowlib. This ensures safer handling of HTTP requests and protects against potential exploitation.

Health Assessment

• • Quick turnaround with minimal changes; the PR was merged within 19 hours after a single review.

Summary

Bump dependencies for security fixes

Updates Mint, Req, Plug, and related libraries to address critical CVEs, strengthening the system’s security posture.

Health Assessment

• • Quick resolution of critical security vulnerabilities with minimal changes and a single review cycle.

Summary

chore: update @supabase/supabase-js to v2.110.1

Updates the Supabase JavaScript client library to v2.110.1, incorporating recent bug fixes and feature improvements for better stability and compatibility.

Health Assessment

• • Quick dependency bump with minimal changes, merged within 9 hours, indicating efficient review and low risk.

Summary

Restrict Realtime Schema

Apply schema restrictions to prevent unintentional changes to the realtime schema, improving data protection and security.

Health Assessment

• • The PR had a relatively fast time to first review, indicating efficient communication among team members.
• • The large scope of changes and multiple commits suggest a complex issue that required significant rework.

Summary

Fix dashboard tenant migrations edge cases

Adds missing schema migrations table, admin role, and PG15 catalog to ensure tenant migrations work correctly across database versions.

Health Assessment

• • The PR required multiple rework cycles and large database catalog updates, indicating complexity and potential risk to production.

Summary

Fix grant exec on realtime.check_equality_op/5

Ensures correct execution permissions for the realtime function, preventing potential failures in real‑time data operations.

Health Assessment

• • Merged within 10 minutes with a single commit, indicating a straightforward, low‑risk fix.

Summary

Add IPv4 warning log

Adds a log warning for IPv4 addresses to improve visibility of network configuration.

Health Assessment

• • Quick fix with minimal changes and fast review, indicating low complexity and high confidence.

Summary

Add new filters to e2e tests

Adds new filters to end‑to‑end tests, improving test coverage and reliability.

Health Assessment

• • PR completed quickly with a single commit and no review iterations, indicating a straightforward maintenance change.

Summary

Prevent CI on tenant DB catalog update

Stops unnecessary CI runs when updating tenant DB catalog, reducing build overhead and avoiding duplicate commits.

Health Assessment

• • Quick merge with no review needed; minimal impact.

Summary

Revert dependencies to previous version

Reverts dependency versions to a prior stable release, restoring compatibility and preventing build failures.

Health Assessment

• • Quick fix with minimal changes, resolved within 3.3 hours and no major rework.

Summary

fix: OrioleDB support

Enables OrioleDB support for realtime, improving data consistency and reducing latency for real‑time applications.

Health Assessment

• • The PR added several migrations and tests to support OrioleDB, required multiple commits for refinement, but was reviewed quickly and merged within a day, indicating moderate review friction and a medium‑sized change.

Summary

Update e2e test to use new system message

Updates end‑to‑end test to use the new system message, ensuring test coverage aligns with updated system behavior.

Health Assessment

• • Rapid review and merge with minimal changes, indicating low complexity and risk.