[Snyk] Upgrade @supabase/supabase-js from 2.58.0 to 2.75.0#29
[Snyk] Upgrade @supabase/supabase-js from 2.58.0 to 2.75.0#29rajumanoj333 wants to merge 1 commit intomasterfrom
Conversation
Snyk has created this PR to upgrade @supabase/supabase-js from 2.58.0 to 2.75.0. See this package in npm: @supabase/supabase-js See this project in Snyk: https://app.snyk.io/org/rajumanoj333/project/9ede291a-b6ea-4920-a59e-bbb46a046462?utm_source=github&utm_medium=referral&page=upgrade-pr
|
CodeAnt AI is reviewing your PR. Thanks for using CodeAnt! 🎉We're free for open-source projects. if you're enjoying it, help us grow by sharing. Share on X · |
|
⏳ Code review in progress. Analyzing for code quality issues and best practices. You can monitor the review status in the checks section at the bottom of this pull request. Detailed findings will be posted upon completion. Using Amazon Q Developer for GitHubAmazon Q Developer1 is an AI-powered assistant that integrates directly into your GitHub workflow, enhancing your development process with intelligent features for code development, review, and transformation. Slash Commands
FeaturesAgentic Chat Code Review CustomizationYou can create project-specific rules for Amazon Q Developer to follow:
Example rule: FeedbackTo provide feedback on Amazon Q Developer, create an issue in the Amazon Q Developer public repository. For more detailed information, visit the Amazon Q for GitHub documentation. Footnotes
|
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary of ChangesHello @rajumanoj333, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request, automatically generated by Snyk, updates the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
codeant-ai
bot
added
the
size:M
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request, automatically generated by Snyk, upgrades @supabase/supabase-js from 2.58.0 to 2.75.0. This is a good maintenance practice. Although this is a minor version bump, it spans 38 individual releases, which introduces a risk of unexpected behavior. A key change to be aware of is the deprecation of async function callbacks in onAuthStateChange starting from version 2.74.0. While the provided code files do not seem to use Supabase for authentication, it is crucial to perform thorough regression testing on any part of the application that might be using Supabase features to ensure a smooth upgrade.
| "@radix-ui/react-label": "^2.1.7", | ||
| "@radix-ui/react-slot": "^1.2.3", | ||
| "@supabase/supabase-js": "^2.58.0", | ||
| "@supabase/supabase-js": "^2.75.0", |
There was a problem hiding this comment.
This upgrade to @supabase/supabase-js v2.75.0 is a significant jump of 38 versions. It's important to be aware that version 2.74.0 introduced a deprecation notice for using async functions with onAuthStateChange. While the provided code files don't appear to use this functionality, it's crucial to verify this across the entire codebase. Given the large number of intermediate versions, I strongly recommend thorough regression testing of all features that rely on Supabase to prevent any potential issues.
![amazon-q-developer[bot]](https://avatars.githubusercontent.com/in/1220912?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ Supabase Upgrade Review - Approved
This PR successfully upgrades the Supabase JavaScript client from version 2.58.0 to 2.75.0, bringing 38 versions worth of improvements and new features.
Key Improvements:
- Enhanced TypeScript Support: New embedded functions type inference for better developer experience
- New Features: OAuth 2.1 client admin endpoints and broadcast replay configuration
- Bug Fixes: Storage baseUrl normalization fixes and various stability improvements
- Dependency Updates: Consistent node-fetch updates across all Supabase modules
Security & Compatibility:
- ✅ No breaking changes identified in the release notes
- ✅ All dependency versions are properly aligned
- ✅ Package-lock.json correctly reflects the changes
- ✅ Snyk-generated upgrade suggests no security vulnerabilities
Recommendation:
Approve and merge - This is a well-structured dependency upgrade that brings valuable improvements without introducing breaking changes. The upgrade should enhance the application's functionality and maintain security best practices.
Consider testing the application after deployment to ensure all Supabase integrations continue to work as expected, particularly any database function calls that will benefit from the new type inference.
Coming soon: You'll be able to request the agent to implement changes and create commits on your pull request's source branch. This may trigger any configured CI/CD workflows automatically.
You can disable any CI/CD workflow that you have configured to run on the source branch of the pull request. For more information, see Disabling and enabling a workflow in the GitHub documentation.
| "@radix-ui/react-label": "^2.1.7", | ||
| "@radix-ui/react-slot": "^1.2.3", | ||
| "@supabase/supabase-js": "^2.58.0", | ||
| "@supabase/supabase-js": "^2.75.0", |
There was a problem hiding this comment.
This Supabase upgrade looks good! The jump from 2.58.0 to 2.75.0 brings significant improvements including enhanced type inference for embedded functions, OAuth 2.1 client admin endpoints, and broadcast replay configuration support. The upgrade appears to be non-breaking based on the release notes.
| "version": "2.75.0", | ||
| "resolved": "https://registry.npmjs.org/@supabase/postgrest-js/-/postgrest-js-2.75.0.tgz", | ||
| "integrity": "sha512-YfBz4W/z7eYCFyuvHhfjOTTzRrQIvsMG2bVwJAKEVVUqGdzqfvyidXssLBG0Fqlql1zJFgtsPpK1n4meHrI7tg==", |
There was a problem hiding this comment.
The PostgREST upgrade from 1.21.4 to 2.75.0 is a major version bump that includes the new embedded functions type inference feature. This should provide better TypeScript support and developer experience when working with database functions.
| "license": "MIT", | ||
| "dependencies": { | ||
| "@supabase/node-fetch": "^2.6.14" | ||
| "@supabase/node-fetch": "2.6.15" |
There was a problem hiding this comment.
Good to see the node-fetch dependency has been updated to 2.6.15 across all Supabase modules. This ensures consistency and includes any security patches or bug fixes in the fetch implementation.
| "version": "2.75.0", | ||
| "resolved": "https://registry.npmjs.org/@supabase/storage-js/-/storage-js-2.75.0.tgz", | ||
| "integrity": "sha512-wpJMYdfFDckDiHQaTpK+Ib14N/O2o0AAWWhguKvmmMurB6Unx17GGmYp5rrrqCTf8S1qq4IfIxTXxS4hzrUySg==", |
There was a problem hiding this comment.
The storage-js upgrade includes support for sorting in list v2 operations and fixes for baseUrl normalization. These improvements should enhance file management capabilities and resolve potential URL handling issues.
|
CodeAnt AI finished reviewing your PR. |
2 participants
User description
Snyk has created this PR to upgrade @supabase/supabase-js from 2.58.0 to 2.75.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 38 versions ahead of your current version.
The recommended version was released 24 days ago.
Release notes
Package name: @supabase/supabase-js
-
2.75.0 - 2025-10-09
- postgrest: add embeded functions type inference (#1632)
- Andrew Valleteau @ avallete
-
2.74.1-canary.7 - 2025-10-08
- postgrest: add embeded functions type inference (#1632)
- Andrew Valleteau @ avallete
-
2.74.1-canary.6 - 2025-10-07
-
2.74.1-canary.5 - 2025-10-07
-
2.74.1-canary.4 - 2025-10-07
-
2.74.1-canary.3 - 2025-10-07
-
2.74.1-canary.2 - 2025-10-06
-
2.74.1-canary.1 - 2025-10-06
-
2.74.1-canary.0 - 2025-10-06
-
2.74.0 - 2025-10-06
- auth: add deprecation notice to
- auth: add OAuth 2.1 client admin endpoints (#1582)
- docs: explicitly mark options as optional (#1622)
- realtime: add support to configure Broadcast Replay (#1623)
- release: enable trusted publishing (#1592)
- storage: add support for sorting to list v2 (#1606)
- storage: remove trailing slash from baseUrl normalization (#1589)
- Cemal Kılıç @ cemalkilic
- Doğukan Akkaya
- Eduardo Gurgel
- Etienne Stalmans @ staaldraad
- Lenny @ itslenny
- Stojan Dimitrovski @ hf
- Taketo Yoshida
-
2.73.1-canary.8 - 2025-10-06
-
2.73.1-canary.7 - 2025-10-06
-
2.73.1-canary.6 - 2025-10-06
-
2.73.1-canary.5 - 2025-10-06
-
2.72.1-canary.15 - 2025-09-26
-
2.72.1-canary.14 - 2025-09-26
-
2.72.1-canary.13 - 2025-09-26
-
2.72.1-canary.12 - 2025-09-26
-
2.72.1-canary.11 - 2025-09-26
-
2.72.1-canary.10 - 2025-09-26
-
2.72.1-canary.9 - 2025-09-26
-
2.72.1-canary.8 - 2025-09-26
-
2.72.1-canary.7 - 2025-09-26
-
2.72.1-canary.6 - 2025-09-26
-
2.72.1-canary.5 - 2025-09-26
-
2.72.1-canary.2 - 2025-09-24
-
2.72.1-canary.0 - 2025-09-30
-
2.71.2-canary.29 - 2025-09-23
-
2.71.2-canary.28 - 2025-09-23
-
2.71.2-canary.27 - 2025-09-23
-
2.71.2-canary.7 - 2025-09-19
-
2.71.2-canary.6 - 2025-09-19
-
2.71.2-canary.4 - 2025-09-19
-
2.71.2-canary.3 - 2025-09-19
-
2.71.2-canary.2 - 2025-09-19
-
2.71.2-canary.1 - 2025-09-19
-
2.71.2-canary.0 - 2025-09-18
-
2.58.1-canary.0 - 2025-10-01
-
2.58.0 - 2025-09-25
from @supabase/supabase-js GitHub release notes2.75.0 (2025-10-09)
🚀 Features
❤️ Thank You
2.74.1-canary.7 (2025-10-08)
🚀 Features
❤️ Thank You
2.74.1-canary.6 (2025-10-07)
This was a version bump only, there were no code changes.
2.74.1-canary.5 (2025-10-07)
This was a version bump only, there were no code changes.
2.74.1-canary.4 (2025-10-07)
This was a version bump only, there were no code changes.
2.74.1-canary.3 (2025-10-07)
This was a version bump only, there were no code changes.
2.74.1-canary.2 (2025-10-06)
This was a version bump only, there were no code changes.
2.74.1-canary.1 (2025-10-06)
This was a version bump only, there were no code changes.
2.74.1-canary.0 (2025-10-06)
This was a version bump only, there were no code changes.
2.74.0 (2025-10-07)
🚀 Features
onAuthStateChangewith async function (#1580)🩹 Fixes
❤️ Thank You
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
CodeAnt-AI Description
Upgrade Supabase client to v2.75.0 in frontend
What Changed
Impact
✅ Support for embedded Postgres function type inference in the client✅ Frontend uses updated auth/storage/realtime/PostgREST clients for API compatibility✅ Consistent installs with lockfile pinned to Supabase 2.75.0💡 Usage Guide
Checking Your Pull Request
Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.
Talking to CodeAnt AI
Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:
This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.
Example
Preserve Org Learnings with CodeAnt
You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:
This helps CodeAnt AI learn and adapt to your team's coding style and standards.
Example
Retrigger review
Ask CodeAnt AI to review the PR again, by typing:
Check Your Repository Health
To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.