2.117.0 (2026-09-07)

Bug Fixes

• cli-go: repoint overlay.yaml at renamed JitListAccessResponse schema (#6425) (f50e083), closes #6417 #6423
• cli: accept sbp_v0 tokens (CLI-2262) (#6360) (e4cc29c)
• cli: confine auth email content_path to project root (CLI-2320) (#6489) (ad95a9a)
• cli: hedge config's 404 message, align push load errors (#6490) (3343c2f)
• cli: honor SUPABASE_API_* overrides (CLI-2318) (#6467) (6689867)
• cli: honour deletion of extension-managed objects in declarative sync (#6449) (25ffc73)
• cli: read stdin on demand (CLI-2223) (#6450) (c7e6481), closes #6290 #6290
• cli: skip provisioned ledger ddl (CLI-2275) (#6422) (08103c0)
• cli: stop skipping colliding schemas (CLI-2272) (#6394) (e2ee2a7)
• cli: warn when PowerShell mangles piped dumps (#6418) (430d5ed)
• config: align pgdelta format_options example with the 180 default (#6435) (adbbe16), closes #6434 #6434
• config: correct ProjectConfig's hosted-field coverage (CLI-2316) (#6451) (ca62446)
• config: retire push-capability pruning from ProjectConfig (CLI-2314) (#6469) (2677ccc), closes #6454 #6454
• deps: bump github.com/posthog/posthog-go from 1.23.1 to 1.24.0 in /apps/cli-go in the go-minor group across 1 directory (#6412) (95f0c2b)
• deps: bump the go-minor group across 1 directory with 2 updates (#6442) (c326986)
• deps: bump the go-minor group across 2 directories with 2 updates (#6458) (81a1f81)
• deps: bump the go-minor group across 2 directories with 3 updates (#6429) (d345d94)
• deps: bump the npm-major group across 1 directory with 28 updates (#6430) (44f463a)
• docker: bump the docker-minor group across 1 directory with 5 updates (#6320) (ab54bd0)
• stack: prepare slim postgres socket directory (#6401) (cbc4737)

Continuous Integration

• config: add independent release automation for @supabase/config (CLI-2233) (#6381) (ed81a1c), closes #6366 #6366

Features

• cli: add config diff command (#6295) (6b85fba), closes #6205 #6339 #6339
• cli: add config pull command (CLI-2064) (#6438) (1ce17f5)
• cli: add supabase workers list, status and delete (#6263) (f3d1e6b), closes #6262 #6262
• cli: add supabase workers new (#6261) (b4a9199), closes #6260
• cli: add supabase workers push (#6262) (4214807), closes #6261
• cli: add SUPABASE_USE_SLIM_IMAGES flag for slim ghcr images (#6382) (de133cf)
• cli: detect and confirm branch targets in config push (#6446) (ace845a)
• cli: inject function slug into served functions (#6345) (713129c)
• cli: make shadow baseline cache opt-out (default ON) (#6403) (c3472e9), closes #39
• cli: make the bundled pg-delta engine the only pg-delta implementation (#6487) (3095e91)
• cli: move workers commands under experimental parent (#6409) (74ab30a)
• cli: prompt for worker name if not provided (#6349) (c636947), closes #6389 #6410 #6371
• cli: rebuild config push as diff-first partial updates (CLI-2313) (#6454) (cb8041a)
• config: add toProjectConfig and the ProjectConfig hosted subset (CLI-2230) (#6339) (c3064f1), closes #6335 #6335 #6335
• config: export diffProjectConfig from the public entrypoint (#6447) (1e80750)
• config: publish @supabase/config to npm (CLI-2169) (#6423) (ed426e5), closes #6381
• config: trim the public surface and add a compiled build (CLI-2234, CLI-2232) (#6366) (38de698)
• stack: replace remote runtime protocol with Effect RPC (#6303) (ca8b80f)
• workers logs: add supabase experimental workers logs (#6410) (d39af7a), closes #6389 #6371 #6349 #6408
• workers push: make the build wait opt-out with --no-wait flag (#6371) (56f8d9e), closes #6410 #6349 #6389
• workers: add exposure control and new --instances flag (#6432) (2c66579)
• workers: bring the command family's output onto one shape (#6389) (eceb7d5), closes #6349 #6410 #6371

Performance Improvements

• cli: strategy-driven parallel provisioning for pg-delta next plan shadows (#6215) (7405976), closes #6102 #6184 #6203

BREAKING CHANGES

• config: outside packages/config/ must not produce a major —
  plus merge-commit, root-commit (--root), and non-ASCII-path (-z vs
  core.quotePath) edges.

• The plan refuses to run without a baseline config-v* tag: with none,
  semantic-release would cut 1.0.0 with notes generated from the entire
  monorepo history — a whole-history changelog as the approval artifact.
  Escape hatch: CONFIG_RELEASE_ALLOW_NO_BASELINE=1.
• While private: true (until CLI-2169 flips it), the plan job still
  runs everything — version, gate, pack — and reports
  blocked_on_private; every config push to develop rehearses the plan
  half of the train while publishing nothing.