chore(deps): bump supabase from 3.6.0 to 3.7.0

[dependabot]

Bumps supabase from 3.6.0 to 3.7.0.
Updates io.github.jan-tennert.supabase:auth-kt from 3.6.0 to 3.7.0

Release notes

Sourced from io.github.jan-tennert.supabase:auth-kt's releases.

3.7.0

Changes

Core

• Fix append tag by @​jan-tennert in supabase-community/supabase-kt#1284
• Add Star History section to README by @​hieuwu in supabase-community/supabase-kt#1290
• Fix chat-demo-mpp example not compiling by @​cmelchior in supabase-community/supabase-kt#1296
• fix(integration-test): grant table privileges on test_items to PostgREST roles by @​PierreVieira in supabase-community/supabase-kt#1333
• implement structured X-Client-Info header by @​jan-tennert in supabase-community/supabase-kt#1300
• add sdk compliance by @​jan-tennert in supabase-community/supabase-kt#1354
• feat(core): check api key format when creating supabase client by @​jan-tennert in supabase-community/supabase-kt#1362

Auth

• Add support for custom OAuth provider by @​jan-tennert in supabase-community/supabase-kt#1236
• feat(auth): expose public getter for AuthConfig.httpCallbackConfig on Desktop by @​PierreVieira in supabase-community/supabase-kt#1322
• fix(auth): don't throw an error when there is no stored session by @​PierreVieira in supabase-community/supabase-kt#1320
• Add API support for Passkeys by @​jan-tennert in supabase-community/supabase-kt#1327 under supabase.auth.passkeys - Note, there is currently no sign-in method. We are still deciding how to move on with Native APIs. Compose Auth support may come as a temporary solution.
• Add PKCE support for resend by @​jan-tennert in supabase-community/supabase-kt#1337
• fix(auth): clear session on any rest exception by @​jan-tennert in supabase-community/supabase-kt#1359
• fix(auth): return refreshed token from resolveAccessToken + tolerate non-object error bodies by @​Merkost in supabase-community/supabase-kt#1352
• add custom_claims_allowlist to custom providers admin api by @​jan-tennert in supabase-community/supabase-kt#1349

Realtime

• Add support for binary broadcasts, httpSend and VSN 2.0.0 by @​jan-tennert in supabase-community/supabase-kt#1325

  Either use the ByteArray type in broadcastFlow:

  channel.broadcastFlow<ByteArray>("test").collect {
      println(it.decodeToString())
  }

  Or use broadcastFlow without a type to receive both types:

  channel.broadcastFlow("test").collect {
      when(it.payload) {
          is BroadcastPayload.Binary -> println(it.payload.data.decodeToString())
          is BroadcastPayload.Json -> println(it.payload.value)
      }
  }

  New method to broadcast messages (the old ones are using this in the implementation if not connected)':

  channel.httpSend("myEvent", BroadcastPayload.Binary(byteArrayOf(1,2,3)))

• Implement deferred disconnect after removing last channel by @​jan-tennert in supabase-community/supabase-kt#1276

• docs(realtime): clarify that maxAttempts governs channel rejoin attempts by @​PierreVieira in supabase-community/supabase-kt#1331

• fix(realtime): log transient websocket reconnects at WARN instead of ERROR by @​PierreVieira in supabase-community/supabase-kt#1329

... (truncated)

Changelog

Sourced from io.github.jan-tennert.supabase:auth-kt's changelog.

3.7.0 - July 20, 2026

Core

• Fix append tag by @​jan-tennert in supabase-community/supabase-kt#1284
• Add Star History section to README by @​hieuwu in supabase-community/supabase-kt#1290
• Fix chat-demo-mpp example not compiling by @​cmelchior in supabase-community/supabase-kt#1296
• fix(integration-test): grant table privileges on test_items to PostgREST roles by @​PierreVieira in supabase-community/supabase-kt#1333
• implement structured X-Client-Info header by @​jan-tennert in supabase-community/supabase-kt#1300
• add sdk compliance by @​jan-tennert in supabase-community/supabase-kt#1354
• feat(core): check api key format when creating supabase client by @​jan-tennert in supabase-community/supabase-kt#1362

Auth

• Add support for custom OAuth provider by @​jan-tennert in supabase-community/supabase-kt#1236
• feat(auth): expose public getter for AuthConfig.httpCallbackConfig on Desktop by @​PierreVieira in supabase-community/supabase-kt#1322
• fix(auth): don't throw an error when there is no stored session by @​PierreVieira in supabase-community/supabase-kt#1320
• Add API support for Passkeys by @​jan-tennert in supabase-community/supabase-kt#1327 under supabase.auth.passkeys - Note, there is currently no sign-in method. We are still deciding how to move on with Native APIs. Compose Auth support may come as a temporary solution.
• Add PKCE support for resend by @​jan-tennert in supabase-community/supabase-kt#1337
• fix(auth): clear session on any rest exception by @​jan-tennert in supabase-community/supabase-kt#1359
• fix(auth): return refreshed token from resolveAccessToken + tolerate non-object error bodies by @​Merkost in supabase-community/supabase-kt#1352
• add custom_claims_allowlist to custom providers admin api by @​jan-tennert in supabase-community/supabase-kt#1349

Realtime

• Add support for binary broadcasts, httpSend and VSN 2.0.0 by @​jan-tennert in supabase-community/supabase-kt#1325

  Either use the ByteArray type in broadcastFlow:

  channel.broadcastFlow<ByteArray>("test").collect {
      println(it.decodeToString())
  }

  Or use broadcastFlow without a type to receive both types:

  channel.broadcastFlow("test").collect {
      when(it.payload) {
          is BroadcastPayload.Binary -> println(it.payload.data.decodeToString())
          is BroadcastPayload.Json -> println(it.payload.value)
      }
  }

  New method to broadcast messages (the old ones are using this in the implementation if not connected)':

  channel.httpSend("myEvent", BroadcastPayload.Binary(byteArrayOf(1,2,3)))

• Implement deferred disconnect after removing last channel by @​jan-tennert in supabase-community/supabase-kt#1276

• docs(realtime): clarify that maxAttempts governs channel rejoin attempts by @​PierreVieira in supabase-community/supabase-kt#1331

• fix(realtime): log transient websocket reconnects at WARN instead of ERROR by @​PierreVieira in supabase-community/supabase-kt#1329

... (truncated)

Commits

• 835bfb0 add missing compliance features
• 87fd66f Merge pull request #1364 from supabase-community/update-vers
• 8404a42 v3.7.0
• bed82d0 Merge pull request #1363 from supabase-community/fix-compliance
• 041748a Merge pull request #1362 from supabase-community/check-api-format
• b0e09a4 fix SDK compliance
• 28dcf67 Check Api key format when creating supabase client
• 3e7c0f9 Merge pull request #1359 from supabase-community/clear-session
• 1b47d09 Merge pull request #1360 from supabase-community/forbid-new-api
• 0a48558 fix return
• Additional commits viewable in compare view

Updates io.github.jan-tennert.supabase:compose-auth from 3.6.0 to 3.7.0

Release notes

Sourced from io.github.jan-tennert.supabase:compose-auth's releases.

3.7.0

Changes

Core

• Fix append tag by @​jan-tennert in supabase-community/supabase-kt#1284
• Add Star History section to README by @​hieuwu in supabase-community/supabase-kt#1290
• Fix chat-demo-mpp example not compiling by @​cmelchior in supabase-community/supabase-kt#1296
• fix(integration-test): grant table privileges on test_items to PostgREST roles by @​PierreVieira in supabase-community/supabase-kt#1333
• implement structured X-Client-Info header by @​jan-tennert in supabase-community/supabase-kt#1300
• add sdk compliance by @​jan-tennert in supabase-community/supabase-kt#1354
• feat(core): check api key format when creating supabase client by @​jan-tennert in supabase-community/supabase-kt#1362

Auth

• Add support for custom OAuth provider by @​jan-tennert in supabase-community/supabase-kt#1236
• feat(auth): expose public getter for AuthConfig.httpCallbackConfig on Desktop by @​PierreVieira in supabase-community/supabase-kt#1322
• fix(auth): don't throw an error when there is no stored session by @​PierreVieira in supabase-community/supabase-kt#1320
• Add API support for Passkeys by @​jan-tennert in supabase-community/supabase-kt#1327 under supabase.auth.passkeys - Note, there is currently no sign-in method. We are still deciding how to move on with Native APIs. Compose Auth support may come as a temporary solution.
• Add PKCE support for resend by @​jan-tennert in supabase-community/supabase-kt#1337
• fix(auth): clear session on any rest exception by @​jan-tennert in supabase-community/supabase-kt#1359
• fix(auth): return refreshed token from resolveAccessToken + tolerate non-object error bodies by @​Merkost in supabase-community/supabase-kt#1352
• add custom_claims_allowlist to custom providers admin api by @​jan-tennert in supabase-community/supabase-kt#1349

Realtime

• Add support for binary broadcasts, httpSend and VSN 2.0.0 by @​jan-tennert in supabase-community/supabase-kt#1325

  Either use the ByteArray type in broadcastFlow:

  channel.broadcastFlow<ByteArray>("test").collect {
      println(it.decodeToString())
  }

  Or use broadcastFlow without a type to receive both types:

  channel.broadcastFlow("test").collect {
      when(it.payload) {
          is BroadcastPayload.Binary -> println(it.payload.data.decodeToString())
          is BroadcastPayload.Json -> println(it.payload.value)
      }
  }

  New method to broadcast messages (the old ones are using this in the implementation if not connected)':

  channel.httpSend("myEvent", BroadcastPayload.Binary(byteArrayOf(1,2,3)))

• Implement deferred disconnect after removing last channel by @​jan-tennert in supabase-community/supabase-kt#1276

• docs(realtime): clarify that maxAttempts governs channel rejoin attempts by @​PierreVieira in supabase-community/supabase-kt#1331

• fix(realtime): log transient websocket reconnects at WARN instead of ERROR by @​PierreVieira in supabase-community/supabase-kt#1329

... (truncated)

Changelog

Sourced from io.github.jan-tennert.supabase:compose-auth's changelog.

3.7.0 - July 20, 2026

Core

• Fix append tag by @​jan-tennert in supabase-community/supabase-kt#1284
• Add Star History section to README by @​hieuwu in supabase-community/supabase-kt#1290
• Fix chat-demo-mpp example not compiling by @​cmelchior in supabase-community/supabase-kt#1296
• fix(integration-test): grant table privileges on test_items to PostgREST roles by @​PierreVieira in supabase-community/supabase-kt#1333
• implement structured X-Client-Info header by @​jan-tennert in supabase-community/supabase-kt#1300
• add sdk compliance by @​jan-tennert in supabase-community/supabase-kt#1354
• feat(core): check api key format when creating supabase client by @​jan-tennert in supabase-community/supabase-kt#1362

Auth

• Add support for custom OAuth provider by @​jan-tennert in supabase-community/supabase-kt#1236
• feat(auth): expose public getter for AuthConfig.httpCallbackConfig on Desktop by @​PierreVieira in supabase-community/supabase-kt#1322
• fix(auth): don't throw an error when there is no stored session by @​PierreVieira in supabase-community/supabase-kt#1320
• Add API support for Passkeys by @​jan-tennert in supabase-community/supabase-kt#1327 under supabase.auth.passkeys - Note, there is currently no sign-in method. We are still deciding how to move on with Native APIs. Compose Auth support may come as a temporary solution.
• Add PKCE support for resend by @​jan-tennert in supabase-community/supabase-kt#1337
• fix(auth): clear session on any rest exception by @​jan-tennert in supabase-community/supabase-kt#1359
• fix(auth): return refreshed token from resolveAccessToken + tolerate non-object error bodies by @​Merkost in supabase-community/supabase-kt#1352
• add custom_claims_allowlist to custom providers admin api by @​jan-tennert in supabase-community/supabase-kt#1349

Realtime

• Add support for binary broadcasts, httpSend and VSN 2.0.0 by @​jan-tennert in supabase-community/supabase-kt#1325

  Either use the ByteArray type in broadcastFlow:

  channel.broadcastFlow<ByteArray>("test").collect {
      println(it.decodeToString())
  }

  Or use broadcastFlow without a type to receive both types:

  channel.broadcastFlow("test").collect {
      when(it.payload) {
          is BroadcastPayload.Binary -> println(it.payload.data.decodeToString())
          is BroadcastPayload.Json -> println(it.payload.value)
      }
  }

  New method to broadcast messages (the old ones are using this in the implementation if not connected)':

  channel.httpSend("myEvent", BroadcastPayload.Binary(byteArrayOf(1,2,3)))

• Implement deferred disconnect after removing last channel by @​jan-tennert in supabase-community/supabase-kt#1276

• docs(realtime): clarify that maxAttempts governs channel rejoin attempts by @​PierreVieira in supabase-community/supabase-kt#1331

• fix(realtime): log transient websocket reconnects at WARN instead of ERROR by @​PierreVieira in supabase-community/supabase-kt#1329

... (truncated)

Commits

• 835bfb0 add missing compliance features
• 87fd66f Merge pull request #1364 from supabase-community/update-vers
• 8404a42 v3.7.0
• bed82d0 Merge pull request #1363 from supabase-community/fix-compliance
• 041748a Merge pull request #1362 from supabase-community/check-api-format
• b0e09a4 fix SDK compliance
• 28dcf67 Check Api key format when creating supabase client
• 3e7c0f9 Merge pull request #1359 from supabase-community/clear-session
• 1b47d09 Merge pull request #1360 from supabase-community/forbid-new-api
• 0a48558 fix return
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #228.