supabase / supabase-js

77%

master: 80%

LAST BUILD ON BRANCH chore/harden-security

branch: chore/harden-security

CHANGE BRANCH

x

Reset

• chore/harden-security
• 280
• Issue-Fix
• J0/bump-2-18-gotrue
• J0/bump_gotrue_2_20
• J0/bump_gotrue_2_21
• J0/bump_gotrue_2_22
• Nuxt1
• auth.resend-consistent-flow
• avallete/chore-bump-postgrest-js-1-19-2
• bewinxed/authjs-lockless
• bewinxed/webauthn-add-tests
• browser_test
• bs/postgrest-js-13
• bug1
• bug2
• bug58
• bugfix/supabase-url-handling
• bump-functions-js
• bump-functions-js-230
• bump-functions-js-244
• bump-functions-js-245
• bump-functions-js-250
• bump-realtime-js
• cemal/feat-add-auth-admin-oauth-client-crud
• cemal/feat-add-oauth-app-list-and-revoke
• cemal/feat-add-oauth-client-update
• cemal/feat-amr-claim-update
• cemal/feat-auth-add-oauth-endpoints
• cemal/feat-auth-custom-oidc-providers
• cemal/feat-bump-authjs-version
• cemal/feat-custom-claims-allowlist
• cemal/feat-fix-oauth-client-delete-bug
• cemal/feat-support-custom-providers-as-param
• cemal/fix-auth-oauth-response
• cemal/fix-no-redirect-in-authorization-get
• cemal/fix-oauth-client-token-auth-endpoint
• chore/add-cross-repo-test
• chore/add-preview-release
• chore/add-supabase-cli-as-devdeps-package
• chore/ai-agent-improvements
• chore/branch-management
• chore/bump-pg-meta-0-93-1-add-partitioned-tests
• chore/bump-phoenix
• chore/bump-postgres-js-1-29-4
• chore/bump-postgres-meta-0-92-0
• chore/bump-postgrest-js-1-17-11
• chore/bump-postgrest-js-1-17-4
• chore/bump-postgrest-js-1-18-0
• chore/bump-postgrest-js-functions-type-introspection
• chore/ci-dogfood-remove-project
• chore/ci-node22-upgrade
• chore/clarify-count-pagination-behavior
• chore/cleanup-deps
• chore/cleanup-deps-take-2
• chore/cleanup-lock
• chore/cleanup-unused-scripts
• chore/client-sdk
• chore/coverage
• chore/coveralls-fail-on-error
• chore/create_admin_client
• chore/dependabot-alerts
• chore/deps-bump-supabase-js-1-17-5
• chore/develop-master-branch-model
• chore/disable-browser-test
• chore/dogfood-log
• chore/examples-bump-deps
• chore/exclude-md-files
• chore/fix-add-jsr-slow-types-check
• chore/fix-expo-tests
• chore/fix-nx-stuff
• chore/fix-refs
• chore/format-pre-push
• chore/gitignore-update
• chore/increase-timeout
• chore/jsr-publish-via-wrapper
• chore/just-test-release
• chore/lock-file-update
• chore/migrate-nx-latest
• chore/migrate-to-pnpm
• chore/monorepo
• chore/more-action-hardening
• chore/new-lock-files
• chore/per-language-sdk-compliance-workflow
• chore/per-package-migrations-convention
• chore/pin-phoenix
• chore/re-enable-test
• chore/realtime-channel-type
• chore/realtime-js-bump
• chore/realtime-js-version
• chore/realtime-js-version-bump
• chore/realtime-unused-deps
• chore/realtime-version-bump
• chore/release-jsr
• chore/remove-concurrency
• chore/remove-deno-1-tests
• chore/remove-deno-lock
• chore/remove-examples
• chore/remove-package-locks
• chore/remove-pnpm
• chore/restore-master-default
• chore/sdk-compliance-plumbing
• chore/slack-notif-message
• chore/storage-type-string
• chore/sync-master
• chore/test-coveralls
• chore/ts-project-refs
• chore/unified-error-type
• chore/units-coverage
• chore/unpin-realtime-docker-version
• chore/unpublish-packages
• chore/update-examples
• chore/update-lock-file
• chore/update-pnpm-lock
• chore/update-realtime-example
• chore/update-realtime-integration-tests-2.0.0
• chore/update-ssr
• chore/upgrade-jest-to-latest-for-snapshot
• chore/upgrade-postgrest-js-deps
• chore/upgrade-rc-for-release
• chore/upgrade-rc4
• chore/use-verdaccio-for-integration-tests
• ci-add-paths-ignore
• ci/add-token-on-checkout
• ci/canary-versioning-again
• ci/change-testing-strategy
• ci/concurrency
• ci/create-revert-flow
• ci/deprecate-v
• ci/dogfood-workflow
• ci/fix-canaries
• ci/fix-canary
• ci/fix-canary-versions
• ci/fix-coveralls
• ci/fix-flaky
• ci/fix-jsr
• ci/fix-parallel-builds
• ci/fix-secrets-dogfood
• ci/fix-user-perms
• ci/implement-rc-strategy
• ci/increase-stale-finder
• ci/no-patchback-tag
• ci/npm-version-install
• ci/rc-release-etc
• ci/revert-commit-fix
• ci/setup-environments
• ci/skip-depthfirst-on-forks
• ci/test-out-cli-beta
• ci/unpublish
• ci/update-action-syntax
• ci/update-actions
• claude/exciting-austin-3c045a
• claude/intelligent-bartik-078450
• claude/strange-germain-48c9aa
• codex/faster-select-column-cleaning
• dd/functions-custom-domains
• dependabot/github_actions/actions-minor-and-patch-44186e11e8
• dependabot/github_actions/actions-minor-and-patch-6a98abd9ac
• dependabot/github_actions/actions-minor-and-patch-aca0a8a16e
• dependabot/github_actions/actions/cache-6.1.0
• dependabot/github_actions/actions/checkout-7.0.0
• dependabot/github_actions/actions/download-artifact-8.0.1
• dependabot/github_actions/actions/github-script-9.0.0
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/nrwl/nx-set-shas-5.0.1
• dependabot/npm_and_yarn/babel/traverse-7.23.2
• dependabot/npm_and_yarn/brace-expansion-1.1.12
• dependabot/npm_and_yarn/examples/next-storage/next-13.5.0
• dependabot/npm_and_yarn/examples/next-storage/next-14.1.1
• dependabot/npm_and_yarn/examples/next-storage/postcss-and-next-8.4.31
• dependabot/npm_and_yarn/examples/next-todo/braces-3.0.3
• dependabot/npm_and_yarn/examples/next-todo/next-13.5.0
• dependabot/npm_and_yarn/examples/next-todo/next-14.1.1
• dependabot/npm_and_yarn/examples/next-todo/postcss-and-postcss-and-next-and-postcss-flexbugs-fixes-and-postcss-preset-env-8.4.31
• dependabot/npm_and_yarn/examples/next-ts/babel/traverse-7.23.2
• dependabot/npm_and_yarn/examples/next-ts/es5-ext-0.10.64
• dependabot/npm_and_yarn/examples/next-ts/next-13.5.0
• dependabot/npm_and_yarn/examples/next-ts/next-14.1.1
• dependabot/npm_and_yarn/examples/next-ts/next-14.2.10
• dependabot/npm_and_yarn/examples/next-ts/postcss-and-next-8.4.31
• dependabot/npm_and_yarn/glob-10.5.0
• dependabot/npm_and_yarn/jws-3.2.3
• dependabot/npm_and_yarn/loader-utils-2.0.4
• dependabot/npm_and_yarn/multi-362863fc2a
• dependabot/npm_and_yarn/multi-75e6bc5210
• dependabot/npm_and_yarn/multi-ba6acecb92
• dependabot/npm_and_yarn/node-forge-1.3.3
• dependabot/npm_and_yarn/npm_and_yarn-01f5ad5e18
• dependabot/npm_and_yarn/npm_and_yarn-14dc0ebc5a
• dependabot/npm_and_yarn/npm_and_yarn-1ca40131d0
• dependabot/npm_and_yarn/npm_and_yarn-20b630b4a0
• dependabot/npm_and_yarn/npm_and_yarn-2b901f0e0d
• dependabot/npm_and_yarn/npm_and_yarn-3fd8e400b9
• dependabot/npm_and_yarn/npm_and_yarn-4193688582
• dependabot/npm_and_yarn/npm_and_yarn-44278727d1
• dependabot/npm_and_yarn/npm_and_yarn-47ab31ee9e
• dependabot/npm_and_yarn/npm_and_yarn-4812224855
• dependabot/npm_and_yarn/npm_and_yarn-4d6871336c
• dependabot/npm_and_yarn/npm_and_yarn-52c0a76dcb
• dependabot/npm_and_yarn/npm_and_yarn-55b8bfc2de
• dependabot/npm_and_yarn/npm_and_yarn-5be2081b8c
• dependabot/npm_and_yarn/npm_and_yarn-74782dd26e
• dependabot/npm_and_yarn/npm_and_yarn-85af2c71bb
• dependabot/npm_and_yarn/npm_and_yarn-b3b4accef5
• dependabot/npm_and_yarn/npm_and_yarn-c2faeb1381
• dependabot/npm_and_yarn/npm_and_yarn-c4fb857816
• dependabot/npm_and_yarn/npm_and_yarn-d4e8015482
• dependabot/npm_and_yarn/npm_and_yarn-daac711fc2
• dependabot/npm_and_yarn/npm_and_yarn-e1f204eff9
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/brace-expansion-1.1.12
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/ejs-3.1.10
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/follow-redirects-1.15.11
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/form-data-3.0.4
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/http-proxy-middleware-2.0.9
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/multi-4df209198f
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/multi-6bc014718a
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/multi-75e6bc5210
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/multi-96c788614a
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/nanoid-3.3.11
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/node-forge-1.3.2
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/tough-cookie-4.1.4
• dependabot/npm_and_yarn/packages/core/auth-js/example/react/webpack-dev-middleware-5.3.4
• dependabot/npm_and_yarn/packages/core/realtime-js/example/braces-3.0.3
• dependabot/npm_and_yarn/packages/core/realtime-js/example/glob-10.5.0
• dependabot/npm_and_yarn/packages/core/realtime-js/example/next-14.2.35
• dependabot/npm_and_yarn/packages/core/realtime-js/example/npm_and_yarn-ad77747e51
• dependabot/npm_and_yarn/packages/core/realtime-js/example/npm_and_yarn-bf05dc1ecf
• dependabot/npm_and_yarn/tar-fs-3.1.1
• dependabot/npm_and_yarn/test-tracing/npm_and_yarn-107113fbe7
• dependabot/npm_and_yarn/test-tracing/npm_and_yarn-6c0e8fc4a8
• dependabot/npm_and_yarn/test-tracing/npm_and_yarn-77bcb2b000
• dependabot/npm_and_yarn/test-tracing/npm_and_yarn-960f08ee85
• dependabot/npm_and_yarn/vite-7.1.11
• dependabot/npm_and_yarn/webpack-5.76.0
• dependabot/npm_and_yarn/webpack-5.94.0
• dependabot/npm_and_yarn/ws-8.17.1
• dependabot/npm_and_yarn/yaml-and-husky--removed
• develop
• docs-clean-up-rest-broadcast-channel
• docs-neq-null-warning
• docs/auth-signout-warn-global
• docs/constructor-examples
• docs/enhance-tsdoc-0
• docs/example-snippets
• docs/include-cors
• docs/otel-sdk
• docs/postgrest-error-hints
• docs/postgrest-rollback-clarify
• docs/postgrest-tsdoc-1
• docs/storage-api-docs-enhance
• docs/storage-cleanup
• docs/storage-deprecate-fields
• docs/storage-upsert
• docs/storage-vectors-override
• docs/testing-supabase-js-local
• docs/tsdoc-category-subcategory-tags
• docs/typedoc-jsdoc-warnings
• docs/update-user-id-auth
• docs/upsert-update
• etienne/prodsec-142-ardvark-supa-02
• etienne/sec-601-current-password
• etienne/sec-666-pin-all-github-actions-to-full-commit-sha
• etienne/strict-escaping
• expo_ci_fix
• feat-insert-returning
• feat/add-create-client-helper-type
• feat/add-embeded-functions-type-inference
• feat/add-iceberg
• feat/add-missing-http-headers
• feat/add-missing-http-headers-2
• feat/add-notin-filter
• feat/add-paging-support-to-bucket-list
• feat/add-postgrest-operators
• feat/add-select-on-pg-changes
• feat/add-sorting-to-list-v2
• feat/add-success-discriminator
• feat/auth-detect-session-url-predicate
• feat/auth-sb-identifier
• feat/auth-skipAutoInitialize
• feat/auth-user-updated-on
• feat/better-hints-postgrest
• feat/bump-postgrest-js
• feat/bump-realtime-js
• feat/cors-module
• feat/createclient-plugins
• feat/debug-option-for-gotrue-client
• feat/dependency-firewall
• feat/drop-node-20-support
• feat/explicit-realtime-rest-call
• feat/export-postgrestfilterbuilder
• feat/expose-postgrest-query-builder-options
• feat/expose-purgeCache
• feat/fail-on-network-error
• feat/file-download-versioning
• feat/gotrue-js-2-16-0
• feat/hints
• feat/http-send-binary-payload
• feat/list_users_with_filter
• feat/postgres-changes-check
• feat/postgrest-js-1.15.0
• feat/postgrest-js-1.17.0
• feat/postgrest-js-1.17.0-rc.1
• feat/realtime-auth-header
• feat/realtime-broadcast-replay
• feat/realtime-default-serializer-v2
• feat/realtime-deferred-disconnect
• feat/realtime-js-bump
• feat/realtime-set-auth
• feat/realtime-user-broadcast-push-metadata
• feat/realtime-version-bump
• feat/reduce-any
• feat/remove-node-fetch
• feat/select-types
• feat/serve-coverage
• feat/storage-content-encoding
• feat/storage-header-util
• feat/storage-iceberg-return
• feat/storage-purge-cache
• feat/storage-vector-js
• feat/strip-nulls
• feat/supersedes
• feat/support-new-realtime-features
• feat/trace-propagation
• feat/typechecked-from
• feat/typescript-jwt-claims
• feat/update-realtime-js
• feat/update-realtime-js-2.16
• feat/update-realtime-next
• feat/update-storage-version-to-support-new-host
• feat/use-reusable-workflows
• feat/use-storage-zone-to-allow-large-uploads
• feat/use-tsup
• feat/v2-serializer
• feat/ws-mem-leak-fix
• feat/x-client-info
• feature/storage-content-encoding
• feature/storage-set-header
• feature/typedoc-options-should-be-optional
• fix-add-regional-functions-types-&-feature-to-supabase-js
• fix-auth-deadlock
• fix-auth0-namespaced-claims
• fix-getClaims-allowExpired
• fix-invalid-table-name-error
• fix-lockAcquireTimeout-clean-v2
• fix-method-binding
• fix-postgrest-shared-state
• fix-remove-channel
• fix-return-type
• fix-rpcfails
• fix/1848-sso-redirectto-ignored
• fix/43381-eq-type-safety
• fix/Null-should-be-included-in-return-type
• fix/access-token-required
• fix/add-app-metadata-type
• fix/add-system-message-replication-handling
• fix/analytics-bucket-id-prop
• fix/another-regression
• fix/app-pdf
• fix/auth-broadcastchannel-cleanup
• fix/auth-cloudflare-network-error-codes
• fix/auth-error-tojson
• fix/auth-getuser-preserve-session-on-session-not-found
• fix/auth-implicit-grant-error-gate
• fix/auth-js-emit-initial-session-log-level
• fix/auth-js-pkce-recovery-event
• fix/auth-lock-doc-timeout
• fix/auth-narrow
• fix/auth-non-blocking-subscriber-notifications
• fix/auth-pkce-code-verifier-missing-error
• fix/auth-recover-refresh-console-error
• fix/auth-refresh-preserve-session
• fix/auth-refresh-preserve-session-2
• fix/auth-replace-navigator-lock
• fix/auth-types
• fix/auth-webauthn-error-tojson
• fix/banned-until-type
• fix/broken-auth
• fix/browser-dns-error-hint
• fix/build-scripts
• fix/bump-postgrest-js
• fix/bump-realtime-js
• fix/bump-up-realtime
• fix/bump-up-realtime-js
• fix/bump-up-realtime-js-2.8.4
• fix/chore-bump-postgrest-js-1-18-1
• fix/cleanup-code-verifier
• fix/clear-session-on-offline-signout
• fix/connError-heartbeat
• fix/custom-token-set-auth
• fix/database-without-internals-helper
• fix/defensive-check
• fix/deno-timer-leak
• fix/dependabot-and-lock
• fix/dogfood-ci
• fix/dogfood-client-id-secret
• fix/double-slash-regression
• fix/e2e-tests
• fix/edge-process-warning
• fix/edge-runtime-deprecation-warning
• fix/edge-runtime-warnings
• fix/environment-detection
• fix/error-message-analytics-bucket
• fix/esm-issue
• fix/esm-wrapper-issues
• fix/exchange-code-deadlock
• fix/explicit-realtime-rest-call
• fix/export-type-utils-for-ssr-use
• fix/firefox-extension-promise-error
• fix/firefox-issue
• fix/fix-list-v2-types
• fix/funcjs
• fix/functions-client-fix
• fix/functions-content-type-case
• fix/functions-error-toJSON
• fix/functions-error-tojson
• fix/get-claims-expired-error
• fix/getitemasync-null-on-corrupt-json
• fix/guard-nav-lock
• fix/hermes-rn-esm-resolution
• fix/init-notify-deadlock
• fix/issue-1043-case-insensitive-auth-header
• fix/issue-1594-lock-acquire-timeout
• fix/jsdelivr-issue
• fix/jsr-publish-flags-and-beta
• fix/jsr-tracing-version-constraint
• fix/lastchallenge
• fix/link-identity-provider-token
• fix/lock-file-issue
• fix/make-download-return-type-backward-compatible
• fix/multi-schema-singleton-storage-key
• fix/navigator-lock-orphan-recovery
• fix/next16-ssr-uuid-generation
• fix/no-remove-session-on-proactive-refresh-failure
• fix/nullable-accessToken
• fix/nullish-coalescing-operator
• fix/oauth-authorization-details-type
• fix/oniani1-auth-webauthn-error-tojson
• fix/order-foreign-table-types
• fix/otel-import-issue
• fix/postgrest-abort-non-error-rejections
• fix/postgrest-args
• fix/postgrest-bigint-serialization
• fix/postgrest-collapse-insert-upsert-overloads
• fix/postgrest-error-class
• fix/postgrest-error-instanceof-1643
• fix/postgrest-error-tojson
• fix/postgrest-excess-property-check
• fix/postgrest-from-type-safety
• fix/postgrest-headers-plain-object
• fix/postgrest-js-1.15.6
• fix/postgrest-js-1.15.8
• fix/postgrest-js-1.16.1
• fix/postgrest-js-1.17.0-rc.3
• fix/postgrest-js-1.17.0-rc.4
• fix/postgrest-js-1.17.3
• fix/postgrest-js-1.8.5
• fix/postgrest-js-bubble-up-fetch-error-causes
• fix/postgrest-js-esm-typings
• fix/postgrest-json-parse-on-ok-response
• fix/postgrest-maybesinlge
• fix/postgrest-not-null-narrowing
• fix/postgrest-reject-excess-props-record
• fix/postgrest-rpc-double-slash
• fix/postgrest-scalar-type
• fix/postgrest-tstyche-testfilematch
• fix/postgrest-url-validation
• fix/prepare-for-postgrest-14-release
• fix/prettify-wrapped-types
• fix/prioritize-setAuth-action
• fix/process-poly
• fix/proper-dual-packaging
• fix/protected-realtime
• fix/realtime-auth-header
• fix/realtime-channel-error-message
• fix/realtime-custom-jwt-resubscribe-1904
• fix/realtime-dts-phoenix-deep-imports
• fix/realtime-fetch-custom
• fix/realtime-filter
• fix/realtime-headers-ws
• fix/realtime-httpsend-version-error
• fix/realtime-js-bump
• fix/realtime-js-decode
• fix/realtime-session-storage-restricted-contexts
• fix/realtime-set-auth
• fix/realtime-set-auth-called-on-token-change
• fix/realtime-subscription-race-condition
• fix/realtime-suppress-disconnected-heartbeat
• fix/realtime-throttle-subscriptions
• fix/realtime-throw-error-objects
• fix/realtime-track-enables-presence
• fix/realtime-version
• fix/realtime-worker-memory-leak
• fix/realtime11
• fix/rebase-main
• fix/reltime-remove-channel
• fix/remove-realtime-limiter
• fix/remove-signed-url-render-normalization
• fix/removesession
• fix/resolve-conflict
• fix/revert-bad-commits
• fix/revert-client-headers
• fix/revert-from-schema-rpc-changes
• fix/revert-new-parser
• fix/revert-realtime-auth-changes
• fix/revert-set-auth-change
• fix/rpc-get-typings
• fix/rpc-no-params-react-native
• fix/rpc-obj
• fix/sdk-compliance-realtime-capabilities
• fix/sdk-compliance-workflow
• fix/service-role-session-bypass
• fix/session-del
• fix/session-user
• fix/signout-clear-storage-on-missing-session
• fix/simplify-realtime-serializer
• fix/single-object-upsert-columns
• fix/storage-client-option
• fix/storage-create-signed-urls-type
• fix/storage-download-fetch-parameters
• fix/storage-empty-transform-routing
• fix/storage-error-statuscode-type
• fix/storage-error-tojson
• fix/storage-exists-frontend
• fix/storage-list-analytics
• fix/storage-list-sortby-defaults
• fix/storage-no-error-on-404
• fix/storage-signed-url
• fix/storage-single-value-headers
• fix/storage-transform
• fix/storage-types-fileobject
• fix/storage-unknown-error-response-like-detection
• fix/storage-upload-content-type
• fix/storage-upload-signed
• fix/storage-upload-to-signed-url-duplex
• fix/storage-vector-json-check
• fix/stream-download-builder-promise-interface
• fix/subscribed
• fix/supabase-client-no-postgrest-option
• fix/supabase-js-cryptic-tooltip-types
• fix/supply-chain-ignore-scripts
• fix/suppress-getsession-warning-after-getuser
• fix/test-config
• fix/then-error
• fix/thor-bump-deps
• fix/timeout-edge
• fix/timeout-on-listen-for-auth-events
• fix/toJSON-explicit-return-types
• fix/tsdoc1
• fix/type-only-error-reexports
• fix/type-revert
• fix/typedoc-workspace-source-resolution
• fix/types-tests
• fix/uncaught1
• fix/update-next
• fix/update-npm
• fix/update-realtime
• fix/update-rpc-types
• fix/update-typedoc
• fix/upload-signed-url-parity
• fix/upload-to-signed-url-metadata
• fix/url-trailing-slash
• fix/use-supabase-node-fetch
• fix/vector-sdk-fixes
• fix/verify-otp-email-change-null-user
• fix/widen-enum-unions
• fix/wrong-type-vector
• fix24
• fix44
• fix45
• fix87
• fix91-new
• fix_set_dep_versions_to_prevent_version_creep
• fm/auth-1145-passkeys
• fm/auth-1177-passkey-tests
• fm/bump-auth-v2.185.0
• grdsdev/postgrest-auto-retry
• guilherme/allow-deps-update
• guilherme/bump-realtime
• guilherme/ci-browser-integration
• guilherme/ci-improvements
• guilherme/ci-run-deno-integration
• guilherme/clibs-244-add-warning-in-js-lib-when-node-version-equals-18
• guilherme/expo-compatibility-test
• guilherme/fix-build
• guilherme/fix-url-string-manipulating
• guilherme/fix/bump-realtime-js
• guilherme/merge-master-into-next
• guilherme/realtime-url-manipulation
• guilherme/revert-last-fix
• guilherme/test/next-integration
• guilherme/use-url-api
• hf/add-third-party-auth-support
• hf/add-user-storage-auth-option
• hf/auth-2-72-0
• hf/auth-js-2-69-1
• hf/auth-js-2-71-0
• hf/bump-auth-js
• hf/bump-auth-js-2-68-0
• hf/bump-gotrue-js-2-10-1
• hf/bump-gotrue-js-2-12-0
• hf/bump-gotrue-js-2-45-0
• hf/bump-gotrue-js-2-46-1
• hf/bump-gotrue-js-2-54-0
• hf/deprecation-notice-on-auth-state-change
• hf/dont-send-non-jwts-in-authorization
• hf/fixed-gotrue-js-2-43-1
• hf/get-authenticator-assurance-level
• hf/switch-auth-js
• hf/update-gotrue-js-2-31-0
• hi/storage-js-v2.3.1
• hide-tsdocs
• iat/add-x-provider
• internal-settings-typings
• ip/bump-storage
• ip/bump-storage-1
• issue-1470-test-realtime-2-11-12
• ivasilov/fluent-query-builder
• j0/bump_auth_2_67_1
• j0/bump_gotrue_2_23
• j0/bump_gotrue_2_26
• j0/bump_node_version
• j0/update_versions
• jeremias/docs-478-fix-incorrect-parameter-name-in-javascript-limit
• jeremias/sdk-744-move-auth-js-docs-from-yml-to-tsdoc
• jeremias/sdk-745-move-realtime-js-docs-from-yml-to-tsdoc
• json1
• kiwicopple/add-throwOnError
• km/bump-auth-deps
• km/bump-auth-js
• km/bump-gotrue-js
• km/bump-gotrue-version
• km/fix-bump-gotrue-js
• km/set-custom-auth-header
• km/update-auth-js
• km/update-gotrue-version
• master
• more-functions-js-imports
• more-postgrest-js-imports
• more_test
• multiple-clients-warning-by-storage-key
• next
• next-tests
• nyannyacha-patch-1
• patch-1
• patch-2
• patchback/2263
• patchback/2268
• patchback/2269
• patchback/2270
• patchback/2280
• patchback/2281
• patchback/2285
• patchback/2287
• patchback/2294
• patchback/2296
• patchback/2297
• patchback/2300
• patchback/2304
• patchback/2311
• patchback/2312
• patchback/2313
• patchback/2318
• patchback/2320
• patchback/2325
• patchback/2328
• patchback/2329
• patchback/2332
• patchback/2333
• patchback/2340
• patchback/2352
• perf/precompile-regexp
• postgrest-js-1.17.10
• postgrest-js-1.17.9
• rc
• rebase-master-to-next
• ref/setsession-error
• refactor/decouple-js-build-from-compliance-workflow
• refactor/dedupe-storage-js
• refs/pull/1045/merge
• refs/pull/792/merge
• refs/pull/793/merge
• refs/pull/838/merge
• refs/pull/839/merge
• refs/pull/854/merge
• refs/pull/855/merge
• refs/pull/869/merge
• refs/pull/883/merge
• release-2.74.0
• release-2.99.3
• release/2.95.2
• revert-1380-km/update-gotrue-version
• revert-2014-fix/exchange-code-deadlock
• revert/2-50-4
• revert/41283fae5e6e
• revert/realtime-changes
• revert/url-encode
• snickerdoodle2/fix-memory-test
• storage/v2.6.0
• storage/v2.7.0
• sup-66-copy-bindings
• supersedes-Bigint
• swm/realtime-use-phoenix
• test/deflake-realtime-broadcast-e2e
• test/flaky-functions
• test/jest-version
• test/old-code-bug
• test/old-working-version
• test/postgres-hints
• test/postgrest-js-bigint-precision
• test/postgrest-pipeline
• test/supabase-cli-authjs
• test/supabase-cli-postgrest
• test/unify-testing
• test/use-supabase-cli
• test/verdaccio-ci-test
• tests
• tests/postgrest-tests
• thor/bump-auth-n-functions-js
• thor/jsr-release
• thor/query-result-type-helpers
• tmp/test-build
• tmp/unpublish-bad-v
• type-tests
• update-actions
• upgrade-github-actions-node24
• upgrade-github-actions-node24-general
• v3
• validate-url
• verify-jsr
• whatsapp
• without_warn

Build # 25728410923

Build Type

Pull #2357

github

Committed by web-flow

Commit Message

Merge 4ebe36322 into 3bbaaf49c

Pull Request Pull Request #2357: chore(repo): harden security for npm installs

Coverage Stats

2692 of 3882 branches covered (69.35%)

Branch coverage included in aggregate %.

4118 of 4932 relevant lines covered (83.5%)

103.56 hits per line