Skip to content

[Snyk] Upgrade @supabase/supabase-js from 2.86.2 to 2.87.1#30

Open
UsmanBuk wants to merge 1 commit intomainfrom
snyk-upgrade-8140491442d97b68c4204568906197b4
Open

[Snyk] Upgrade @supabase/supabase-js from 2.86.2 to 2.87.1#30
UsmanBuk wants to merge 1 commit intomainfrom
snyk-upgrade-8140491442d97b68c4204568906197b4

Conversation

@UsmanBuk
Copy link
Copy Markdown
Owner

@UsmanBuk UsmanBuk commented Jan 4, 2026 •
edited by codeant-ai Bot
Loading

User description

snyk-top-banner

Snyk has created this PR to upgrade @supabase/supabase-js from 2.86.2 to 2.87.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: @supabase/supabase-js
  • 2.87.1 - 2025-12-09

    2.87.1 (2025-12-09)

    🩹 Fixes

    • auth: skip navigator lock when persistSession is false (#1928)
    • realtime: preserve custom JWT tokens across channel resubscribe (#1908)
    • realtime: handle null values in postgres changes filter comparison (#1918)

    ❤️ Thank You

  • 2.87.1-canary.1 - 2025-12-08

    2.87.1-canary.1 (2025-12-08)

    🩹 Fixes

    • auth: skip navigator lock when persistSession is false (#1928)
    • realtime: handle null values in postgres changes filter comparison (#1918)

    ❤️ Thank You

  • 2.87.1-canary.0 - 2025-12-08

    2.87.1-canary.0 (2025-12-08)

    🩹 Fixes

    • realtime: preserve custom JWT tokens across channel resubscribe (#1908)

    ❤️ Thank You

  • 2.87.0 - 2025-12-08

    2.87.0 (2025-12-08)

    🚀 Features

    • storage: align analytics from method with { data, error } pattern (#1927)

    🩹 Fixes

    • repo: update lock file after dependabot to use npm 11 (#1926)

    ❤️ Thank You

  • 2.86.3-canary.0 - 2025-12-05

    2.86.3-canary.0 (2025-12-05)

    🚀 Features

    • storage: align analytics from method with { data, error } pattern (#1927)

    🩹 Fixes

    • repo: update lock file after dependabot to use npm 11 (#1926)

    ❤️ Thank You

  • 2.86.2 - 2025-12-04

    2.86.2 (2025-12-04)

    🩹 Fixes

    • storage: correct QueryVectorsResponse to use vectors instead of matches (#1922)

    ❤️ Thank You

from @supabase/supabase-js GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

CodeAnt-AI Description

Upgrade Supabase client from v2.86.2 to v2.87.1

What Changed

  • The app now uses @supabase/supabase-js v2.87.1 and its updated subpackages (auth, realtime, postgrest, functions, storage)
  • Session handling no longer triggers navigator locking when session persistence is disabled, avoiding unnecessary session-write delays
  • Real-time channels retain custom JWT tokens across resubscribe, reducing lost authentication for live updates

Impact

✅ Fewer session persistence delays when persistence is disabled
✅ Fewer realtime reauthentication failures during reconnects
✅ Uses latest Supabase client for up-to-date API behavior

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

@snyk-bot
fix: upgrade @supabase/supabase-js from 2.86.2 to 2.87.1
de4801b 
Snyk has created this PR to upgrade @supabase/supabase-js from 2.86.2 to 2.87.1.

See this package in npm:
@supabase/supabase-js

See this project in Snyk:
https://app.snyk.io/org/usmanbuk/project/6f2ddca2-b077-48d1-81bb-56e1bf375d91?utm_source=github&utm_medium=referral&page=upgrade-pr
@codeant-ai
Copy link
Copy Markdown

codeant-ai Bot commented Jan 4, 2026

CodeAnt AI is reviewing your PR.

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Jan 4, 2026

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch snyk-upgrade-8140491442d97b68c4204568906197b4

Comment @coderabbitai help to get the list of available commands and usage tips.

@codeant-ai codeant-ai Bot added the size:S This PR changes 10-29 lines, ignoring generated files label Jan 4, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai Bot commented Jan 4, 2026

CodeAnt AI finished reviewing your PR.

@codeant-ai
Copy link
Copy Markdown

codeant-ai Bot commented Jan 4, 2026

💡 Enhance Your PR Reviews

We noticed that 3 feature(s) are not configured for this repository. Enabling these features can help improve your code quality and workflow:

🚦 Quality Gates

Status: Quality Gates are not enabled at the organization level
Learn more about Quality Gates

🎫 Jira Ticket Compliance

Status: Jira credentials file not found. Please configure Jira integration in your settings
Learn more about Jira Integration

⚙️ Custom Rules

Status: No custom rules configured. Add rules via organization settings or .codeant/review.json in your repository
Learn more about Custom Rules

Want to enable these features? Contact your organization admin or check our documentation for setup instructions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

size:S This PR changes 10-29 lines, ignoring generated files

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@UsmanBuk @snyk-bot