2.90.2-canary.0 (2026-01-12)

🩹 Fixes

• auth: defer subscriber notification in exchangeCodeForSession to prevent deadlock (#2014)

❤️ Thank You

• Vaibhav @7ttp

2.90.1 (2026-01-08)

🩹 Fixes

• postgrest: prevent shared state between query builder operations (#1978)
• realtime: validate table filter in postgres_changes event dispatch (#1999)

❤️ Thank You

• Vaibhav @7ttp

2.90.1-canary.1 (2026-01-08)

🩹 Fixes

• postgrest: prevent shared state between query builder operations (#1978)

❤️ Thank You

• Vaibhav @7ttp

2.90.1-canary.0 (2026-01-07)

🩹 Fixes

• realtime: validate table filter in postgres_changes event dispatch (#1999)

❤️ Thank You

• Vaibhav @7ttp

2.90.0 (2026-01-07)

🚀 Features

• realtime: expose heartbeat latency on heartbeat callback (#1982)

🩹 Fixes

• auth: add banned_until property to user type (#1989)
• auth: add last_challenged_at property to factor type (#1990)
• auth: clear initial setTimeout in stopAutoRefresh (#1993)
• auth: preserve session when magic link is clicked twice (#1996)
• auth: add configurable lock acquisition timeout to prevent deadlocks (#1962)
• functions: auto-stringify object body when custom Content-Type header is provided (#1988)
• postgrest: use post with return minimal for rpc head requests with object args (#1994)
• supabase: split type-only exports to avoid unused import warnings (#1979)
• supabase: inline string literal in databasewithoutinternals type (#1986)
• supabase: avoid edge runtime warnings in next.js (#1998)

❤️ Thank You

• Eduardo Gurgel
• Nico Kempe @nicokempe
• Vaibhav @7ttp
• yoshifumi kondo @yoshifumi-kondo

2.89.1-canary.8 (2026-01-07)

🩹 Fixes

• auth: add configurable lock acquisition timeout to prevent deadlocks (#1962)

❤️ Thank You

• yoshifumi kondo @yoshifumi-kondo

2.89.1-canary.7 (2026-01-07)

🩹 Fixes

• functions: auto-stringify object body when custom Content-Type header is provided (#1988)
• postgrest: use post with return minimal for rpc head requests with object args (#1994)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.6 (2026-01-05)

🩹 Fixes

• auth: preserve session when magic link is clicked twice (#1996)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.5 (2026-01-05)

🩹 Fixes

• auth: clear initial setTimeout in stopAutoRefresh (#1993)

❤️ Thank You

• Vaibhav @7ttp

2.89.1-canary.4 (2026-01-05)

🩹 Fixes

• supabase: avoid edge runtime warnings in next.js (#1998)

❤️ Thank You

• Vaibhav @7ttp