Skip to content

chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.108.1 in the supabase group across 1 directory#1157

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/supabase-d8ae556e4b
Closed

chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.108.1 in the supabase group across 1 directory#1157
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/supabase-d8ae556e4b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the supabase group with 1 update in the / directory: @supabase/supabase-js.

Updates @supabase/supabase-js from 2.105.0 to 2.108.1

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.108.1

2.108.1 (2026-06-09)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)
  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.2

2.108.1-canary.2 (2026-06-09)

This was a version bump only, there were no code changes.

v2.108.1-canary.1

2.108.1-canary.1 (2026-06-08)

🩹 Fixes

  • postgrest: then typing (#2349)

❤️ Thank You

v2.108.1-canary.0

2.108.1-canary.0 (2026-06-08)

🩹 Fixes

  • ci: forward DOGFOOD_APP_CLIENT_ID to dogfood workflow (#2434)

❤️ Thank You

v2.108.0

2.108.0 (2026-06-08)

🚀 Features

  • auth: auth.resend() consistent confirmation flow (#2144)

🩹 Fixes

  • auth: do not console.error AuthApiError already returned through contract (#2428)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

2.106.2 (2026-05-25)

🩹 Fixes

  • misc: add react-native export condition for Hermes-safe resolution (#2393)

❤️ Thank You

2.106.1 (2026-05-20)

🩹 Fixes

  • misc: hide dynamic import from hermesc (#2381)

❤️ Thank You

2.106.0 (2026-05-18)

🚀 Features

  • supabase: W3C/OpenTelemetry trace context propagation (#2163)

🩹 Fixes

  • release: mark @​supabase/tracing private and snapshot it for JSR (#2370)

... (truncated)

Commits
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • 57014e1 chore(release): version 2.107.0 changelogs (#2421)
  • 54ec2b6 feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...
  • 3397c92 feat(supabase): update X-Client-Info to structured metadata format (#2359)
  • 335207f feat(realtime): allow httpSend to send binary payload (#2400)
  • 42f12dd docs(repo): ship per-package AGENTS.md and migrations via npm (#2397)
  • b200b74 chore(release): version 2.106.2 changelogs (#2396)
  • a5f09cf chore(repo): adopt pnpm catalog and clean up devDeps (#2389)
  • c72cc56 fix(misc): add react-native export condition for Hermes-safe resolution (#2393)
  • a7bdb23 docs(supabase): expand tracePropagation tsdoc with examples (#2388)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github May 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented May 17, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
website Ready Ready Preview, Comment Jun 8, 2026 10:08am

Request Review

@dependabot dependabot Bot changed the title chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.105.4 in the supabase group chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.105.4 in the supabase group across 1 directory May 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 3547554 to f9ee76c Compare May 17, 2026 23:39
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from f9ee76c to ccadcbf Compare May 18, 2026 00:37
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from ccadcbf to 44a426e Compare May 18, 2026 02:32
@dependabot dependabot Bot changed the title chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.105.4 in the supabase group across 1 directory chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.106.0 in the supabase group across 1 directory May 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 44a426e to 6c9f48c Compare May 18, 2026 18:05
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 6c9f48c to 9a5a2c3 Compare May 18, 2026 18:54
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 9a5a2c3 to 4d9abbc Compare May 18, 2026 20:52
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 4d9abbc to 1d80af8 Compare May 18, 2026 21:49
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 1d80af8 to 7c63199 Compare May 18, 2026 21:55
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 7c63199 to c0a376e Compare May 20, 2026 05:03
@dependabot dependabot Bot changed the title chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.106.0 in the supabase group across 1 directory chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.106.1 in the supabase group across 1 directory May 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from c0a376e to f425a11 Compare May 20, 2026 17:01
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from f425a11 to 1258a62 Compare May 20, 2026 18:41
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 1258a62 to 11ebdd9 Compare May 20, 2026 19:29
@dependabot dependabot Bot changed the title chore(deps): Bump @supabase/supabase-js from 2.105.0 to 2.106.1 in the supabase group across 1 directory chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.106.2 in the supabase group across 1 directory May 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from b660a8a to d7e2137 Compare May 25, 2026 15:43
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from d7e2137 to 2ae0091 Compare May 27, 2026 00:29
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 2ae0091 to a9554bf Compare June 2, 2026 06:00
@dependabot dependabot Bot changed the title chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.106.2 in the supabase group across 1 directory chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.107.0 in the supabase group across 1 directory Jun 2, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from a9554bf to 18db772 Compare June 2, 2026 22:26
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch 2 times, most recently from 0084e90 to 3edc601 Compare June 5, 2026 18:15
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 3edc601 to 09614b4 Compare June 5, 2026 23:53
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 09614b4 to 4b2c783 Compare June 8, 2026 10:07
@dependabot dependabot Bot changed the title chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.107.0 in the supabase group across 1 directory chore(deps): bump @supabase/supabase-js from 2.105.0 to 2.108.1 in the supabase group across 1 directory Jun 12, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 4b2c783 to 529e2fd Compare June 12, 2026 02:01
@github-actions

github-actions Bot commented Jun 12, 2026

Copy link
Copy Markdown

Website Preview

Deploy failed. No preview URL was captured.

View logs for details.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 529e2fd to 205092e Compare June 13, 2026 03:39
Bumps the supabase group with 1 update in the / directory: [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js).


Updates `@supabase/supabase-js` from 2.105.0 to 2.108.1
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.108.1/packages/core/supabase-js)

---
updated-dependencies:
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.105.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: supabase
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/supabase-d8ae556e4b branch from 205092e to 170a307 Compare June 13, 2026 04:27
wrsmith108 added a commit that referenced this pull request Jun 13, 2026
…66) (#1424)

Consolidated manual bump of the low-risk direct-manifest routine deps from the
June Dependabot batch. Done manually because Dependabot can't regenerate a valid
lockfile for this repo (transitive jose@5.10.0 drift via ruflo → @claude-flow/cli
fails `npm ci`), so its recreate of each routine PR produces a broken lockfile.

- globals 17.4.0 → 17.6.0 (root + website devDeps) — supersedes #1160
- @types/node ^25.9.0 → ^25.9.3 (root, cli, vscode-extension, website) — supersedes
  the @types/node half of #1253
- @supabase/supabase-js 2.105.0 → 2.108.1 (root + website; transitive @supabase/*
  sub-packages follow) — supersedes #1157

Verified: `npm audit --omit=dev --audit-level=high` stays 0; build 7/7; typecheck
clean. Lockfile diff is minimal (no new transitive highs). The higher-risk routine
groups (@InQuirer 7→8 major, otel/smithy/aws-sdk transitive-only, typescript-eslint
peer conflict, @types/vscode engine-coupled) are tracked separately for a deliberate
maintenance pass.

Co-authored-by: Ryan Smith <wrsmith108@users.noreply.github.com>
Co-authored-by: claude-flow <ruv@ruv.net>
Co-authored-by: Claude <noreply@anthropic.com>
@wrsmith108

Copy link
Copy Markdown
Member

Superseded by #1424 (26e5afe3), which bumped @supabase/supabase-js to 2.108.1 (transitive @supabase/* sub-packages followed). Closing.

@wrsmith108 wrsmith108 closed this Jun 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/supabase-d8ae556e4b branch June 13, 2026 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant