From ab14467f3ed1d0c459405059df9129cb7a9c4846 Mon Sep 17 00:00:00 2001
From: "supabase-releaser[bot]"
 <223506987+supabase-releaser[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 14:28:23 +0000
Subject: [PATCH] chore(main): release server 1.5.0

---
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  | 24 ++++++++++++++++++++++++
 jsr.json                      | 13 ++++++++++---
 package.json                  |  2 +-
 4 files changed, 36 insertions(+), 5 deletions(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 4918b25..dd8fde7 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.4.1"
+  ".": "1.5.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1dff52f..17ea808 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,29 @@
 # Changelog
 
+## [1.5.0](https://github.com/supabase/server/compare/server-v1.4.1...server-v1.5.0) (2026-08-31)
+
+
+### Features
+
+* `withOAuthProtectedResource` url config ([#117](https://github.com/supabase/server/issues/117)) ([11cce29](https://github.com/supabase/server/commit/11cce29d1a1dda312a72a17f496e369ebdb56b49))
+* add `withOAuthProtectedResource` ([#113](https://github.com/supabase/server/issues/113)) ([3908590](https://github.com/supabase/server/commit/39085907d163a434f18132639f92ab4b5082b5ab))
+* add withRequiredClaims user-mode auth gate ([#127](https://github.com/supabase/server/issues/127)) ([05a95b6](https://github.com/supabase/server/commit/05a95b6dcb69d74e9fddf5d57b8d8e04e72e6696))
+* **errors:** add self-identifying errors with hints and diagnostics ([#130](https://github.com/supabase/server/issues/130)) ([b8b086c](https://github.com/supabase/server/commit/b8b086c021b356d414c4e85ee8980594c4dc539e))
+* flow upstream ctx types through withSupabase nesting ([#119](https://github.com/supabase/server/issues/119)) ([f393c6e](https://github.com/supabase/server/commit/f393c6e7257fb103017d70a56e0437fcc7a9f060))
+* **middleware:** ship withPostgresClient and withPostgresAdminClient ([#115](https://github.com/supabase/server/issues/115)) ([77656ba](https://github.com/supabase/server/commit/77656bae3b76d37cebcf53a089230fe59c94161b))
+* validate middleware prereqs against Supabase context ([#126](https://github.com/supabase/server/issues/126)) ([1576369](https://github.com/supabase/server/commit/15763696d4600508e00402e08af80853bae14b42))
+* withSupabase on the @supabase/middleware engine ([#88](https://github.com/supabase/server/issues/88)) ([2b5d4fd](https://github.com/supabase/server/commit/2b5d4fd82e2b38e5de3b19c840b3ca1a9813d893))
+
+
+### Bug Fixes
+
+* construct supabaseAdmin lazily on first access ([#124](https://github.com/supabase/server/issues/124)) ([fbb652f](https://github.com/supabase/server/commit/fbb652f55e28669cc57f4319126b4734c9a40e6f))
+* declare pg and keep it out of the root CJS bundle ([#122](https://github.com/supabase/server/issues/122)) ([f05307f](https://github.com/supabase/server/commit/f05307ff4a6128940deb3151ef13b27bcf5c4116))
+* harden oauth-protected-resource header and URL edge cases ([#131](https://github.com/supabase/server/issues/131)) ([0c1a2b6](https://github.com/supabase/server/commit/0c1a2b67e4af10464104f963437b9061a4064684))
+* migrate `withOAuthProtectedResource` to `defineMiddleware` ([#116](https://github.com/supabase/server/issues/116)) ([04831ce](https://github.com/supabase/server/commit/04831cedcccedfdbdce99fbbaf6ee80fc8fc49b3))
+* report missing JWKS as ENV_ERROR in user-mode verification ([#128](https://github.com/supabase/server/issues/128)) ([9c064c5](https://github.com/supabase/server/commit/9c064c58df01f741b0941641245e81be3d15e350))
+* require node &gt;=22 to match @supabase/middleware ([#132](https://github.com/supabase/server/issues/132)) ([d60afcf](https://github.com/supabase/server/commit/d60afcfa113377d1f62d42d42c1eb0f6459d140d))
+
 ## [1.4.1](https://github.com/supabase/server/compare/server-v1.4.0...server-v1.4.1) (2026-07-22)
 
 
diff --git a/jsr.json b/jsr.json
index 4d276a2..ccd30f6 100644
--- a/jsr.json
+++ b/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@supabase/server",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "exports": {
     ".": "./src/index.ts",
     "./core": "./src/core/index.ts",
@@ -18,7 +18,14 @@
     "./oauth-protected-resource": "./src/oauth-protected-resource/index.ts"
   },
   "publish": {
-    "include": ["src/**/*.ts", "README.md", "LICENSE"],
-    "exclude": ["src/**/*.test.ts", "src/**/*.spec.ts"]
+    "include": [
+      "src/**/*.ts",
+      "README.md",
+      "LICENSE"
+    ],
+    "exclude": [
+      "src/**/*.test.ts",
+      "src/**/*.spec.ts"
+    ]
   }
 }
diff --git a/package.json b/package.json
index 2be2491..1d5e832 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@supabase/server",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Server-side utilities for Supabase. Handles auth, client creation, and context injection so you write business logic, not boilerplate.",
   "keywords": [
     "edge",