[{"data":1,"prerenderedAt":113},["ShallowReactive",2],{"WD8VQKa4I8":3,"related-supabase-notes/weekly-roundup-2026-11-06":27},{"id":4,"slug":5,"title":6,"excerpt":7,"meta_title":8,"meta_description":9,"page_content":10,"featured_image":18,"fields":19,"tags":21,"published":25,"published_at":26,"created_at":26,"updated_at":26},"e02d1867-3551-405f-a5e0-e0c0bf3a9da7","notes/weekly-roundup-2026-11-06","Weekly round-up: Supabase CLI v3, a TLS date on Tuesday and WordPress 7.2 Beta 4","A breaking Supabase CLI release, the 10 November TLS cipher removal, WordPress 7.2 Beta 4 and a quiet week for Nuxt.","Weekly Round-Up: Supabase CLI v3 and a TLS Date","Supabase CLI v3 breaking change, the 10 November TLS cipher removal, WordPress 7.2 Beta 4 and a quiet week for Nuxt.",{"blocks":11},[12],{"id":13,"data":14,"type":17},"577bf307-0493-4c99-8a3b-8b3e7e00362f",{"content":15,"maxWidth":16},"\u003Cp>A short week with one breaking change worth reading and two dates close enough to act on.\u003C/p>\u003Ch2>Supabase CLI v3 is local by default\u003C/h2>\u003Cp>Supabase published a breaking-change notice on 4 November for CLI v3. Version 3.0.0 came out on 2 November and the Homebrew install moved to v3 on 3 November, so a routine upgrade may already have given it to you. Commands now target your local stack by default instead of a hosted project, and every command that changes a hosted project asks for confirmation first, with the default answer set to No. Config precedence changed as well. I like the direction, because the expensive mistake is running a destructive command against the wrong project. The catch is anything unattended. A CI job or script that used to change a hosted project without prompting will now stop and wait. Pin the CLI version in your pipelines and read the notice before you upgrade.\u003C/p>\u003Ch2>The TLS date is four days out\u003C/h2>\u003Cp>The earliest removal of four CBC-mode TLS 1.2 cipher suites on Supabase project APIs is 10 November, next Tuesday. Old clients and embedded devices are the likely casualties, so check what connects to your project before then. On 1 December the framework adapters in @supabase/server are removed too, so if you use them, plan the switch now. If your stack leans on \u003Ca href=\"/supabase\">Supabase\u003C/a>, put both dates in the calendar. A smaller item: a 30 October Postgres fix corrects local time conversions for Vancouver, Edmonton and Casablanca. Upgrading means downtime, so it is only worth scheduling if you store or convert times in those zones.\u003C/p>\u003Ch2>WordPress and Nuxt\u003C/h2>\u003Cp>WordPress is still on 7.1.4 as far as I can tell. 7.2 reached Beta 4 on 3 November with the final release due 8 December, and a beta is not for live sites. Patching a self-hosted CMS on that treadmill is what \u003Ca href=\"/hd-cms\">HD CMS\u003C/a> is built to remove. Nuxt had no new release post this week. 4.6.0 from 5 October is the latest stable version listed, and DevTools v4 from last week is the only recent news, so if you build with \u003Ca href=\"/vue-nuxt\">Vue and Nuxt\u003C/a> there is nothing to do.\u003C/p>\u003Cp>Last week's round-up is \u003Ca href=\"/notes/weekly-roundup-2026-10-30\">here\u003C/a>. If any of this lands on your desk and you would rather hand it over, \u003Ca href=\"/contact\">get in touch\u003C/a>.\u003C/p>","lg","wysiwyg","",{"author":20},"Headless Digital",[22,23,24],"roundup","supabase","nuxt",true,"2026-11-06T08:04:58.500182+00:00",[28,31,42,55,67,77,88,102],{"id":4,"slug":5,"title":6,"excerpt":7,"meta_title":8,"meta_description":9,"featured_image":18,"fields":29,"tags":30,"published":25,"published_at":26,"created_at":26,"updated_at":26},{"author":20},[22,23,24],{"id":32,"slug":33,"title":34,"excerpt":35,"meta_title":36,"meta_description":37,"featured_image":18,"fields":38,"tags":39,"published":25,"published_at":40,"created_at":40,"updated_at":41},"71243a89-01b4-44a1-ac3c-67f5a9e80392","notes/weekly-roundup-2026-10-30","Weekly round-up: WordPress 7.1.4, Nuxt DevTools v4 and a Supabase date","A WordPress security release, Nuxt DevTools v4, a Supabase TLS date 11 days out, and Magento after APSB26-153.","Weekly Round-Up: WordPress 7.1.4, Nuxt, Supabase","WordPress 7.1.4 security release, Nuxt DevTools v4, the Supabase TLS 1.2 cipher date and Magento after APSB26-153.",{"author":20},[22,23,24],"2026-10-30T17:29:07.995403+00:00","2026-10-30T17:29:15.931786+00:00",{"id":43,"slug":44,"title":45,"excerpt":46,"meta_title":47,"meta_description":48,"featured_image":49,"fields":50,"tags":51,"published":25,"published_at":53,"created_at":53,"updated_at":54},"373d4861-e13f-4d2b-9035-3447f516db09","notes/weekly-roundup-2026-10-23","Weekly round-up: a PHP patch that matters more than the Magento one","A critical PHP release, no new Magento bulletin, a Supabase TLS date 18 days out, and WordPress 7.2 Beta 1.","Weekly Round-Up: PHP Patch, Magento and Supabase","This week: a critical PHP release, Magento after APSB26-153, the Supabase TLS date and WordPress 7.2 Beta 1.","https://sktegczfmabucrnpgrvp.supabase.co/storage/v1/object/public/media/4db12fbc-5e44-4763-9c0c-5d1ae595c185/unsplash/weekly-roundup-2026-10-23-ieic5Tq8YMk.webp",{"author":20},[22,52,23],"magento","2026-10-23T07:06:14.944319+00:00","2026-10-25T09:42:35.655363+00:00",{"id":56,"slug":57,"title":58,"excerpt":59,"meta_title":60,"meta_description":61,"featured_image":62,"fields":63,"tags":64,"published":25,"published_at":65,"created_at":65,"updated_at":66},"3fa30c75-b63a-4414-8078-bf9a57b7eb3c","notes/weekly-roundup-2026-10-16","Weekly round-up: Magento APSB26-153 and a Supabase TLS deadline","Adobe's APSB26-153 has five critical Magento fixes, Supabase disables old TLS 1.2 ciphers on 10 November, and the .NET SDK grows up.","Weekly Round-Up: Magento APSB26-153, Supabase TLS","This week: Magento APSB26-153 with five critical fixes, Supabase disabling old TLS 1.2 ciphers on 10 November, and .NET SDK updates.","https://sktegczfmabucrnpgrvp.supabase.co/storage/v1/object/public/media/4db12fbc-5e44-4763-9c0c-5d1ae595c185/unsplash/weekly-roundup-2026-10-16-OnI_TNcIv9U.webp",{"author":20},[22,52,23],"2026-10-16T07:14:57.117895+00:00","2026-10-24T07:35:14.407387+00:00",{"id":68,"slug":69,"title":70,"excerpt":71,"meta_title":72,"meta_description":73,"featured_image":18,"fields":74,"tags":75,"published":25,"published_at":76,"created_at":76,"updated_at":76},"cdfe1566-04cc-4260-96ab-1f2d0bf327d7","notes/weekly-roundup-2026-10-09","Weekly round-up: Nuxt 4.6, scoped Supabase tokens, and a December deadline","Nuxt 4.6 and the end of Nuxt 3, scoped Supabase personal access tokens, the 1 December adapter removal, and WordPress 7.1.3.","Weekly Round-Up: Nuxt 4.6, Supabase Scoped Tokens","This week: Nuxt 4.6 and Nuxt 3 end of life, scoped Supabase access tokens, a 1 December deprecation date, and WordPress 7.1.3.",{"author":20},[22,23,24],"2026-10-09T07:14:08.209884+00:00",{"id":78,"slug":79,"title":80,"excerpt":81,"meta_title":82,"meta_description":83,"featured_image":18,"fields":84,"tags":85,"published":25,"published_at":87,"created_at":87,"updated_at":87},"4b57ca81-a3e2-4785-a023-dcbdf8c077d5","notes/weekly-roundup-2026-10-02","Weekly round-up: Postgres security release, OrioleDB beta, and Supabase Middleware 1.0","Supabase's Postgres security release with four breaking changes, OrioleDB in public beta, Supabase Middleware 1.0, and a note on WordPress 7.1.2.","Weekly Round-Up: Postgres Release, OrioleDB Beta","This week: Supabase's Postgres 17.11 security release and its four breaking changes, OrioleDB public beta, and Supabase Middleware 1.0.",{"author":20},[22,23,86],"wordpress","2026-10-02T07:13:16.097003+00:00",{"id":89,"slug":90,"title":91,"excerpt":92,"meta_title":93,"meta_description":94,"featured_image":18,"fields":95,"tags":97,"published":25,"published_at":99,"created_at":100,"updated_at":101},"fd7b0e56-d3d2-4824-a2ce-2948a6ecfa7d","notes/why-16000-supabase-databases-were-left-exposed","16,326 Supabase Databases Were Left Exposed. Here's Why","UpGuard found over 16,000 public Supabase databases leaking real personal data this week. The cause traces back to one setting, and it's worth checking on your own project.","16,000 Exposed Supabase Databases: What Happened","UpGuard found 16,326 public Supabase databases leaking real data this week. The cause was one setting. Here's what to check on your own project.",{"author":96},"Adam Jackson",[23,98],"ai","2026-10-02T08:00:00+00:00","2026-09-27T07:18:05.689274+00:00","2026-10-02T08:00:01.68075+00:00",{"id":103,"slug":104,"title":105,"excerpt":106,"meta_title":107,"meta_description":108,"featured_image":18,"fields":109,"tags":110,"published":25,"published_at":111,"created_at":111,"updated_at":112},"d75fb417-2460-4469-b103-4e062f46d229","notes/weekly-roundup-2026-09-25","Weekly round-up: a critical WordPress RCE, Nuxt's build layer swap, and Claude gets serious about small business","A critical WordPress RCE worth patching today, Nuxt 4.5's build layer swap, Claude for Small Business grows up, and a quick look at this month's Supabase changelog.","Weekly Round-Up: WordPress RCE, Nuxt 4.5, Claude for SMBs","This week: a critical WordPress RCE worth patching today, Nuxt 4.5's new build layer, Claude for Small Business grows up, and a Supabase changelog look.",{"author":96},[22,86,24,98,23],"2026-09-25T07:19:43.316037+00:00","2026-10-01T19:41:42.773395+00:00",1793955657044]