Bump Supabase from 1.6.0 to 8.0.0

[dependabot]

Updated Supabase from 1.6.0 to 8.0.0.

Release notes

Sourced from Supabase's releases.

8.0.0

8.0.0 (2026-09-03)

⚠ BREAKING CHANGES

• gotrue: stop sending OAuth state to /authorize (#​388)
• realtime: throw exception when updating postgres_changes after channel joins (#​385)
• postgrest: throw on multi-row Single() result instead of returning null (#​346)
• gotrue: add retry/backoff and injectable HttpClient support (#​371)
• supabase: migrate from Newtonsoft.Json to System.Text.Json (#​360)
• realtime: migrate from Newtonsoft.Json to System.Text.Json
• postgrest: migrate from Newtonsoft.Json to System.Text.Json
• storage: migrate from Newtonsoft.Json to System.Text.Json (#​358)
• gotrue: migrate from Newtonsoft.Json to System.Text.Json (#​357)
• functions: migrate from Newtonsoft.Json to System.Text.Json (#​356)
• packages now target netstandard2.1 instead of netstandard2.0. .NET Framework consumers (netstandard2.0 is its ceiling) and pre-netstandard2.1 runtimes (Mono <6.4, older Xamarin/Unity) can no longer reference these packages and must move to a netstandard2.1-capable target (.NET Core 3.0+/.NET 5+).
• postgrest: IPostgrestTable.Delete(QueryOptions?, CancellationToken) and its Table implementation now return Task instead of Task. await table.Delete() is unaffected; code that assigns the result to Task or captures the method group must be recompiled/adjusted.

Features

• core: add retry/backoff plumbing for injectable HttpClient support (#​367) (eda8d8d)
• dependency-injection: add Supabase.Extensions.DependencyInjection package (#​387) (a4692ee)
• functions: add retry/backoff and injectable HttpClient support (#​370) (21e198a)
• functions: migrate from Newtonsoft.Json to System.Text.Json (#​356) (3f9780d)
• gotrue: add cloudflare errors code (#​398) (a038165)
• gotrue: add retry/backoff and injectable HttpClient support (#​371) (74a72d0)
• gotrue: migrate from Newtonsoft.Json to System.Text.Json (#​357) (0d58f45)
• gotrue: support async session persistence (#​399) (e0d494e)
• gotrue: support soft-delete on admin DeleteUser (#​402) (ed9e5c4)
• postgrest: add injectable HttpClient support (#​376) (f6bfa69)
• postgrest: add opt-in retry option (#​375) (07b6bfe)
• postgrest: migrate from Newtonsoft.Json to System.Text.Json (fe5364b)
• quality-gate: mark public API shipped after release (#​403) (cd77655)
• realtime: add retry/backoff and injectable HttpClient support (#​382) (252a0d0)
• realtime: migrate from Newtonsoft.Json to System.Text.Json (c6767dc)
• storage: add retry/backoff and injectable HttpClient support (#​381) (b81b7f7)
• storage: expose service error code (#​380) (1da90f9)
• storage: migrate from Newtonsoft.Json to System.Text.Json (#​358) (673970c)
• supabase: add retry/backoff and injectable HttpClient support (#​383) (95946de)
• supabase: migrate from Newtonsoft.Json to System.Text.Json (#​360) (1915bf1)
• supabase: support publishable and secret API keys (#​397) (66a5fd3)

Bug Fixes

• gotrue: keep persisted sessions across restarts and network failures (#​394) (ad25352)
• gotrue: keep sessions the sign-in and refresh paths do not own (#​405) (18c3882)
• gotrue: resolve provider URL when linking an identity (#​391) (1bb1ef5)
• gotrue: send apikey header on standalone admin/stateless authed calls (#​401) (b1a60c0)
• gotrue: stop sending OAuth state to /authorize (#​388) (afa5ff3)
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)