Supabase Developer Update May 2026: More Secure APIs, Custom Auth Providers, and Better Developer Tooling
Supabase's May 2026 developer update brings several notable changes: custom OAuth2/OIDC provider support with PKCE enabled by default, a security-focused change making new public schema tables no longer automatically exposed via the Data API (requiring explicit GRANT statements), and ISO/IEC 27001:2022 certification. A new `@supabase/server` SDK simplifies server-side development across Edge Functions, Vercel, Deno, Bun, and Cloudflare Workers. Additional updates include Git-free branching as default, revamped Data API settings with per-table toggles, Terraform Provider v1.9.0 improvements, and the Stripe Sync Engine moving to Stripe's GitHub org. The platform also hit 100,000 GitHub stars and 8 million developers.