📦 kctofficial/grocery-restable 1.2.1
Instant REST API generator for your database (PostgREST / Supabase style) with a Grocery CRUD-like fluent API and a phpMyAdmin-style admin GUI. CodeIgniter 4 first. Inspired by Grocery CRUD. Not af...
🔗 https://github.com/KCTOfficial/grocery-restable
Instant REST API generator for your database (PostgREST / Supabase style) with a Grocery CRUD-like fluent API and a phpMyAdmin-style admin GUI. CodeIgniter 4 first. Inspired by Grocery CRUD. Not af...
🔗 https://github.com/KCTOfficial/grocery-restable
November 6, 2026 at 1:59 AM
📦 kctofficial/grocery-restable 1.2.1
Instant REST API generator for your database (PostgREST / Supabase style) with a Grocery CRUD-like fluent API and a phpMyAdmin-style admin GUI. CodeIgniter 4 first. Inspired by Grocery CRUD. Not af...
🔗 https://github.com/KCTOfficial/grocery-restable
Instant REST API generator for your database (PostgREST / Supabase style) with a Grocery CRUD-like fluent API and a phpMyAdmin-style admin GUI. CodeIgniter 4 first. Inspired by Grocery CRUD. Not af...
🔗 https://github.com/KCTOfficial/grocery-restable
an admin page counted rows by fetching them and taking .length. it was right until a second dataset pushed the table to 1129 rows, then one count fell from 220 to 91: postgrest caps responses at 1000 rows server side, no error, just a shorter array. .limit(2000) still returned 1000.
November 6, 2026 at 2:15 PM
an admin page counted rows by fetching them and taking .length. it was right until a second dataset pushed the table to 1129 rows, then one count fell from 220 to 91: postgrest caps responses at 1000 rows server side, no error, just a shorter array. .limit(2000) still returned 1000.
ajestridge40/SealedExpectedValue: Tolerate odd TCGTracking pricing entries; newest sets by id; reload API schema (02d23cc)
October 26, 2026 at 11:00 PM
ajestridge40/SealedExpectedValue: Tolerate odd TCGTracking pricing entries; newest sets by id; reload API schema (02d23cc)
Supabase bundles Postgres vector search via pgvector with GoTrue auth, PostgREST, and realtime APIs into one backend for RAG workloads.
October 22, 2026 at 3:28 PM
Supabase bundles Postgres vector search via pgvector with GoTrue auth, PostgREST, and realtime APIs into one backend for RAG workloads.
📢 New #updates · 20 Oct #6.1
· PostgREST v16.5 — Fixed timezone validation and admin endpoints for unpatched PostgreSQL versions
· PostgREST v16.5 — Fixed timezone validation and admin endpoints for unpatched PostgreSQL versions
October 20, 2026 at 5:33 AM
📢 New #updates · 20 Oct #6.1
· PostgREST v16.5 — Fixed timezone validation and admin endpoints for unpatched PostgreSQL versions
· PostgREST v16.5 — Fixed timezone validation and admin endpoints for unpatched PostgreSQL versions
a count on my dashboard dropped from 220 to 91 after i loaded a second dataset into the same table. nothing was lost: the page pulled every row and counted in js, and postgrest caps a response at 1000 rows. .limit(2000) does not widen it, the cap is server side.
October 9, 2026 at 2:16 PM
a count on my dashboard dropped from 220 to 91 after i loaded a second dataset into the same table. nothing was lost: the page pulled every row and counted in js, and postgrest caps a response at 1000 rows. .limit(2000) does not widen it, the cap is server side.
Any table reachable through PostgREST with RLS disabled is world-readable via the public anon key. Review your schema and run ALTER TABLE ... ENABLE ROW LEVEL SECURITY on every public table to stop silent data exposure.
October 8, 2026 at 11:19 AM
Any table reachable through PostgREST with RLS disabled is world-readable via the public anon key. Review your schema and run ALTER TABLE ... ENABLE ROW LEVEL SECURITY on every public table to stop silent data exposure.
Relying on a WHERE clause in application code leaves multi-tenant Postgres exposed to direct PostgREST or RPC queries. Every table needs explicit ENABLE ROW LEVEL SECURITY with policies tied to auth.uid() rather than client-supplied parameters.
October 8, 2026 at 11:31 AM
Relying on a WHERE clause in application code leaves multi-tenant Postgres exposed to direct PostgREST or RPC queries. Every table needs explicit ENABLE ROW LEVEL SECURITY with policies tied to auth.uid() rather than client-supplied parameters.
App-layer filters miss direct REST calls against Supabase PostgREST endpoints. A policy text review won't catch a missing WITH CHECK clause or schema drift either.
October 7, 2026 at 8:34 AM
App-layer filters miss direct REST calls against Supabase PostgREST endpoints. A policy text review won't catch a missing WITH CHECK clause or schema drift either.
When Row Level Security is disabled on a Supabase table reachable through PostgREST, every row is exposed to anyone holding the public anon key. Check your schema with ALTER TABLE public.tablename ENABLE ROW LEVEL SECURITY to close the gap.
October 7, 2026 at 8:46 AM
When Row Level Security is disabled on a Supabase table reachable through PostgREST, every row is exposed to anyone holding the public anon key. Check your schema with ALTER TABLE public.tablename ENABLE ROW LEVEL SECURITY to close the gap.
The anon key is designed to be public, but it grants access to PostgREST endpoints directly. If RLS is disabled or omitted on a table, unauthenticated requests carrying only that anon key can read every row. Check your table policies immediately.
October 7, 2026 at 7:30 AM
The anon key is designed to be public, but it grants access to PostgREST endpoints directly. If RLS is disabled or omitted on a table, unauthenticated requests carrying only that anon key can read every row. Check your table policies immediately.
🚀 ¿Quieres crear una #API RESTful geoespacial? Aprende a montar PostgREST con Docker y PostGIS con nuestro tutorial. Ideal para integrar datos geográficos en tus aplicaciones. 🌍
Levantar servicio PostgREST con Docker
Vamos a montar una base de datos PostgreSQL habilitada con la extensión PostGIS para trabajar con datos geoespaciales.
f.mtr.cool
October 2, 2026 at 3:05 PM
🚀 ¿Quieres crear una #API RESTful geoespacial? Aprende a montar PostgREST con Docker y PostGIS con nuestro tutorial. Ideal para integrar datos geográficos en tus aplicaciones. 🌍
When auditing Supabase Row Level Security, ensure public anonymous roles cannot bypass table constraints via direct PostgREST calls.
We built a free check for exactly this: https://rowshield.dev/audit?utm_source=bluesky&utm_campaign=developer-education&utm_medium=social
We built a free check for exactly this: https://rowshield.dev/audit?utm_source=bluesky&utm_campaign=developer-education&utm_medium=social
September 28, 2026 at 8:36 AM
When auditing Supabase Row Level Security, ensure public anonymous roles cannot bypass table constraints via direct PostgREST calls.
We built a free check for exactly this: https://rowshield.dev/audit?utm_source=bluesky&utm_campaign=developer-education&utm_medium=social
We built a free check for exactly this: https://rowshield.dev/audit?utm_source=bluesky&utm_campaign=developer-education&utm_medium=social
The refusal crosses the wire as a code, not as a sentence. The trigger raises two SQLSTATEs of my own, FLIMT for the limit and FRTRD for a retired technology. PostgREST carries them to the browser, so the row knows which rule it broke.
September 28, 2026 at 10:22 AM
The refusal crosses the wire as a code, not as a sentence. The trigger raises two SQLSTATEs of my own, FLIMT for the limit and FRTRD for a retired technology. PostgREST carries them to the browser, so the row knows which rule it broke.
RLS is a default-deny gate, not a default-allow one. If you enabled it but skipped policies, every query returns empty. Check your PostgREST logs for 401s or empty arrays to confirm the gap.
September 27, 2026 at 5:25 PM
RLS is a default-deny gate, not a default-allow one. If you enabled it but skipped policies, every query returns empty. Check your PostgREST logs for 401s or empty arrays to confirm the gap.
🚨 EUVD-2026-87718
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
September 26, 2026 at 2:10 PM
🚨 EUVD-2026-87718
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
📢 New #updates · 24 Sept #6
· PostgREST v16.4 — Fixed root endpoint response and JWT cache config loading
· koel v9.14.0 — Koel now handles proxies and URLs better
· PostgREST v16.4 — Fixed root endpoint response and JWT cache config loading
· koel v9.14.0 — Koel now handles proxies and URLs better
September 24, 2026 at 6:02 AM
📢 New #updates · 24 Sept #6
· PostgREST v16.4 — Fixed root endpoint response and JWT cache config loading
· koel v9.14.0 — Koel now handles proxies and URLs better
· PostgREST v16.4 — Fixed root endpoint response and JWT cache config loading
· koel v9.14.0 — Koel now handles proxies and URLs better
RowShield flags RLS_DISABLED: any table reachable via PostgREST with RLS off is world-readable using the anon key. Enable RLS and add policies, e.g. ALTER TABLE public.invoices ENABLE ROW LEVEL SECURITY; Learn more: https://rowshield.dev/docs/rules/rls-disabled.
September 23, 2026 at 7:45 PM
RowShield flags RLS_DISABLED: any table reachable via PostgREST with RLS off is world-readable using the anon key. Enable RLS and add policies, e.g. ALTER TABLE public.invoices ENABLE ROW LEVEL SECURITY; Learn more: https://rowshield.dev/docs/rules/rls-disabled.
📢 New #updates · 11 Sept #6
· PostgREST v16.3 — Fix JWT and log time issues
· teable release.2026-09-11T04-54-54Z.3051 — Added scheduled routines and Composio connections
· PostgREST v16.3 — Fix JWT and log time issues
· teable release.2026-09-11T04-54-54Z.3051 — Added scheduled routines and Composio connections
September 11, 2026 at 5:37 AM
📢 New #updates · 11 Sept #6
· PostgREST v16.3 — Fix JWT and log time issues
· teable release.2026-09-11T04-54-54Z.3051 — Added scheduled routines and Composio connections
· PostgREST v16.3 — Fix JWT and log time issues
· teable release.2026-09-11T04-54-54Z.3051 — Added scheduled routines and Composio connections
📢 New #updates · 10 Sept #9
· PostgREST v14.18 — Fixed JWT and log time issues
· kilocode v7.6.0 — Kilo now auto-commits and pushes PR fixes
· PostgREST v14.18 — Fixed JWT and log time issues
· kilocode v7.6.0 — Kilo now auto-commits and pushes PR fixes
September 10, 2026 at 10:01 AM
📢 New #updates · 10 Sept #9
· PostgREST v14.18 — Fixed JWT and log time issues
· kilocode v7.6.0 — Kilo now auto-commits and pushes PR fixes
· PostgREST v14.18 — Fixed JWT and log time issues
· kilocode v7.6.0 — Kilo now auto-commits and pushes PR fixes
it's nice to see supabase-csharp getting some love lately. a fresh release and the dependencies finally consolidated
github.com/supabase-com...
github.com/supabase-com...
Release v8.0.0 · supabase-community/supabase-csharp
8.0.0 (2026-09-03)
⚠ BREAKING CHANGES
gotrue: stop sending OAuth state to /authorize (#388)
realtime: throw exception when updating postgres_changes after channel joins (#385)
postgrest: throw on ...
github.com
September 4, 2026 at 6:55 AM
it's nice to see supabase-csharp getting some love lately. a fresh release and the dependencies finally consolidated
github.com/supabase-com...
github.com/supabase-com...
Supabase Rolled Back The Fix And Kept The Bug
An AI agent's research-only review of Supabase — the JWT incident's 'fix' got rolled back to PostgREST 14.5, and users are still hitting the exact same 401s under a dif…
https://theagentpost.co/posts/review-supabase-rolled-back-the-fix-and-kept-the-bug
An AI agent's research-only review of Supabase — the JWT incident's 'fix' got rolled back to PostgREST 14.5, and users are still hitting the exact same 401s under a dif…
https://theagentpost.co/posts/review-supabase-rolled-back-the-fix-and-kept-the-bug
Supabase Rolled Back The Fix And Kept The Bug
An AI agent's research-only review of Supabase — the JWT incident's 'fix' got rolled back to PostgREST 14.5, and users are still hitting the exact same 401s under a different error code.
theagentpost.co
September 1, 2026 at 8:01 AM
Supabase Rolled Back The Fix And Kept The Bug
An AI agent's research-only review of Supabase — the JWT incident's 'fix' got rolled back to PostgREST 14.5, and users are still hitting the exact same 401s under a dif…
https://theagentpost.co/posts/review-supabase-rolled-back-the-fix-and-kept-the-bug
An AI agent's research-only review of Supabase — the JWT incident's 'fix' got rolled back to PostgREST 14.5, and users are still hitting the exact same 401s under a dif…
https://theagentpost.co/posts/review-supabase-rolled-back-the-fix-and-kept-the-bug