@supabase/supabase-js 2.106.2 → 2.107.0-beta.0

package/migrations/README.md

@@ -0,0 +1,25 @@
+# Migration notes for `@supabase/supabase-js`
+
+Each file in this directory describes one migration theme — what changed in `@supabase/supabase-js`, who is affected, and what callers need to do.
+
+Files are shipped with the npm package, so the migration notes you see here are pinned to the version of `@supabase/supabase-js` you have installed. Upgrading the package brings the relevant migration notes along with it.
+
+## How agents should use this directory
+
+When helping a developer upgrade `@supabase/supabase-js`:
+
+1. Read the migration files in `node_modules/@supabase/supabase-js/migrations/` for the version they have installed.
+2. Cross-reference against the version they are upgrading to.
+3. Apply the migration steps described in each relevant file.
+
+## How humans should use this directory
+
+Browse the files for the migration theme you care about. Each file is self-contained and explains its own scope, audience, and steps.
+
+## File naming
+
+One file per migration theme, named by topic rather than version (e.g. `<theme>.md`, kebab-case). A single version can ship multiple theme files; a single theme can span multiple versions. Each file documents its own `Since` / `Will require action by` version range internally.
+
+## Cross-cutting migration notes
+
+Migrations that span multiple Supabase packages (e.g. Node.js version drops, monorepo restructures) live in [`docs/MIGRATION.md`](../../../../docs/MIGRATION.md) at the repository root, not here. This directory is scoped to `@supabase/supabase-js` only.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supabase/supabase-js",
-  "version": "2.106.2",
+  "version": "2.107.0-beta.0",
   "description": "Isomorphic Javascript SDK for Supabase",
   "keywords": [
     "javascript",
@@ -13,7 +13,9 @@
   "author": "Supabase",
   "files": [
     "dist",
-    "src"
+    "src",
+    "migrations",
+    "AGENTS.md"
   ],
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -57,11 +59,11 @@
     "directory": "packages/core/supabase-js"
   },
   "dependencies": {
-    "@supabase/auth-js": "2.106.2",
-    "@supabase/functions-js": "2.106.2",
-    "@supabase/realtime-js": "2.106.2",
-    "@supabase/postgrest-js": "2.106.2",
-    "@supabase/storage-js": "2.106.2"
+    "@supabase/auth-js": "2.107.0-beta.0",
+    "@supabase/functions-js": "2.107.0-beta.0",
+    "@supabase/realtime-js": "2.107.0-beta.0",
+    "@supabase/postgrest-js": "2.107.0-beta.0",
+    "@supabase/storage-js": "2.107.0-beta.0"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.2",

package/src/lib/types.ts

@@ -182,9 +182,14 @@ export type SupabaseClientOptions<SchemaName> = {
      */
     debug?: SupabaseAuthClientOptions['debug']
     /**
-     * Provide your own locking mechanism based on the environment. By default no locking is done at this time.
+     * Provide your own locking mechanism based on the environment. By default
+     * the auth client coordinates refreshes itself and the server resolves
+     * cross-tab races. Passing a custom `lock` opts into a legacy path that
+     * wraps every auth operation in your supplied lock.
      *
-     * @experimental
+     * @deprecated Custom locks still work in v2.x for backwards compatibility.
+     * The legacy lock path will be removed in v3 — drop this option from your
+     * `createClient` options before upgrading.
      */
     lock?: SupabaseAuthClientOptions['lock']
     /**
@@ -200,11 +205,13 @@ export type SupabaseClientOptions<SchemaName> = {
      */
     experimental?: SupabaseAuthClientOptions['experimental']
     /**
-     * Maximum time in milliseconds to wait when acquiring the auth lock before
-     * stealing it from the previous holder. See `GoTrueClientOptions.lockAcquireTimeout`
-     * for full semantics (zero fails immediately, negative waits indefinitely).
+     * Maximum time in milliseconds to wait for acquiring the custom lock
+     * supplied via `lock`. Only consulted when a custom `lock` is passed.
      *
      * @default 5000
+     *
+     * @deprecated Only used by the legacy lock path. Will be removed in v3
+     * along with the `lock` option.
      */
     lockAcquireTimeout?: SupabaseAuthClientOptions['lockAcquireTimeout']
     /**

package/src/lib/version.ts

@@ -4,4 +4,4 @@
 // - Debugging and support (identifying which version is running)
 // - Telemetry and logging (version reporting in errors/analytics)
 // - Ensuring build artifacts match the published package version
-export const version = '2.106.2'
+export const version = '2.107.0-beta.0'