[Snyk] Upgrade @supabase/supabase-js from 2.108.2 to 2.112.3

[Power-Maverick]

Snyk has created this PR to upgrade @supabase/supabase-js from 2.108.2 to 2.112.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 49 versions ahead of your current version.

• The recommended version was released a month ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: @supabase/supabase-js

• 2.112.3 - 2026-08-11
  

  2.112.3 (2026-08-11)

  🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

  ❤️ Thank You

  • Katerina Skroumpelou @ mandarini
• 2.112.3-canary.0 - 2026-08-11
  

  2.112.3-canary.0 (2026-08-11)

  🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

  ❤️ Thank You

  • Katerina Skroumpelou @ mandarini
• 2.112.2 - 2026-08-06
  

  2.112.2 (2026-08-06)

  🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

  ❤️ Thank You

  • Filipe Cabaço @ filipecabaco
  • Vaibhav @ 7ttp
• 2.112.2-canary.1 - 2026-08-06
  

  2.112.2-canary.1 (2026-08-06)

  🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

  ❤️ Thank You

  • Vaibhav @ 7ttp
• 2.112.2-canary.0 - 2026-08-06
  

  2.112.2-canary.0 (2026-08-06)

  🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)

  ❤️ Thank You

  • Filipe Cabaço @ filipecabaco
• 2.112.1 - 2026-08-05
  

  2.112.1 (2026-08-05)

  🩹 Fixes

  • auth: preserve 5xx error message (#2587)
  • realtime: ensure setAuth doesn't disable token refresh (#2592)

  ❤️ Thank You

  • Eduardo Gurgel
  • Vaibhav @ 7ttp
• 2.112.1-canary.1 - 2026-08-05
  

  2.112.1-canary.1 (2026-08-05)

  🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

  ❤️ Thank You

  • Eduardo Gurgel
• 2.112.1-canary.0 - 2026-08-03
  

  2.112.1-canary.0 (2026-08-03)

  🩹 Fixes

  • auth: preserve 5xx error message (#2587)

  ❤️ Thank You

  • Vaibhav @ 7ttp
• 2.112.0 - 2026-08-03
  

  2.112.0 (2026-08-03)

  🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

  🩹 Fixes

  • auth: accept uppercase UUIDs in validateUUID (#2467)
  • postgrest: honour throwOnError when maybeSingle finds multiple rows (#2580)
  • storage: resolve createSignedUrls return type mismatch (#2474)
  • storage: expose service error code on StorageApiError (#2537)
  • supabase: forward db retry option (#2571)

  ❤️ Thank You

  • Anubhav Anand @ i-anubhav-anand
  • Gourab Singha @ gourabsingha1
  • Juhef @ juheff
  • Katerina Skroumpelou @ mandarini
  • Thribhuvan
  • Vaibhav @ 7ttp
  • Zuhef Ahmed @ Zuhef
• 2.112.0-canary.2 - 2026-08-03
  

  2.112.0-canary.2 (2026-08-03)

  This was a version bump only, there were no code changes.

• 2.112.0-canary.1 - 2026-07-31
• 2.112.0-canary.0 - 2026-07-31
• 2.112.0-beta.0 - 2026-07-30
• 2.111.1-canary.1 - 2026-07-30
• 2.111.1-canary.0 - 2026-07-30
• 2.111.0 - 2026-07-28
• 2.111.0-canary.0 - 2026-07-28
• 2.110.9 - 2026-07-27
• 2.110.9-canary.3 - 2026-07-27
• 2.110.9-canary.2 - 2026-07-27
• 2.110.9-canary.1 - 2026-07-23
• 2.110.9-canary.0 - 2026-07-22
• 2.110.8 - 2026-07-21
• 2.110.8-canary.2 - 2026-07-21
• 2.110.8-canary.1 - 2026-07-21
• 2.110.8-canary.0 - 2026-07-21
• 2.110.7 - 2026-07-16
• 2.110.7-canary.1 - 2026-07-16
• 2.110.7-canary.0 - 2026-07-16
• 2.110.6 - 2026-07-15
• 2.110.6-canary.2 - 2026-07-15
• 2.110.6-canary.1 - 2026-07-15
• 2.110.6-canary.0 - 2026-07-14
• 2.110.5 - 2026-07-14
• 2.110.4 - 2026-07-14
• 2.110.4-canary.0 - 2026-07-14
• 2.110.3 - 2026-07-13
• 2.110.3-canary.1 - 2026-07-13
• 2.110.3-canary.0 - 2026-07-10
• 2.110.2 - 2026-07-09
• 2.110.2-canary.0 - 2026-07-07
• 2.110.1 - 2026-07-07
• 2.110.1-canary.0 - 2026-07-07
• 2.110.0 - 2026-06-30
• 2.110.0-canary.0 - 2026-06-30
• 2.109.0 - 2026-06-30
• 2.108.3-canary.2 - 2026-06-19
• 2.108.3-canary.1 - 2026-06-18
• 2.108.3-canary.0 - 2026-06-17
• 2.108.2 - 2026-06-15

from @supabase/supabase-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Power-Maverick]

This is a minor version upgrade that includes bug fixes and new features. No breaking changes are documented in the official changelog for this version range.

Key Changes:

• Auth: Fixes include preserving valid sessions on refresh failure and downgrading certain fetch failures from errors to warnings. [2]
• Storage: A fix was added to properly URL-encode object keys in CDN purge methods. [2]
• Functions: Response Content-Type headers are now matched case-insensitively. [2]

These changes consist of bug fixes and internal improvements and should not require any developer action.

Source: Official Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
web	Ready	Preview	Sep 13, 2026 10:47am UTC