Commit 199243d
feat: trigger release for skills v0.1.2 sync (#30)
* chore: sync skills from supabase-agent-skills (v0.1.2)
- Bump supabase skill to v0.1.2
- Add changelog check step before implementing (fetch changelog.md, scan breaking-change tags)
- Warn against deprecated auth.role() and its silent failure with anonymous sign-ins
- Add BOLA/IDOR warning: TO authenticated alone is not authorization
- Require both USING and WITH CHECK on UPDATE policies
- Add SECURITY DEFINER bypass-RLS warnings and keep-in-private-schema guidance
- Update security-rls-performance.md example to use private schema and revoke EXECUTE
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
* fix: trigger release for skills v0.1.2 sync
---------
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>1 parent d7c2103 commit 199243d
0 file changed
0 commit comments