build(deps-dev): Bump the npm group with 2 updates

[dependabot]

Bumps the npm group with 2 updates: concurrently and supabase.

Updates concurrently from 10.0.5 to 10.0.6

Release notes

Sourced from concurrently's releases.

v10.0.6

What's Changed

• docs: update issue link to the transferred repo path by @​yzxcj797 in open-cli-tools/concurrently#609
• docs: update API example to ESM by @​Bibin-VR in open-cli-tools/concurrently#611
• fix: skip force-kill logging when no processes remain by @​imshunsuke in open-cli-tools/concurrently#616
• deps: update shell-quote to 1.12.0 by @​Abicodexi and @​Mayvis in open-cli-tools/concurrently#622

New Contributors

• @​yzxcj797 made their first contribution in open-cli-tools/concurrently#609
• @​Bibin-VR made their first contribution in open-cli-tools/concurrently#611
• @​imshunsuke made their first contribution in open-cli-tools/concurrently#616
• @​Abicodexi made their first contribution in open-cli-tools/concurrently#622

Full Changelog: open-cli-tools/concurrently@v10.0.5...v10.0.6

Commits

• d84bab6 10.0.6
• d26574e deps: update shell-quote to 1.12.0 (#622)
• 13bdff1 fix: skip force-kill logging when no processes remain (#616)
• b2580cc docs: update API example to ESM (#611)
• 3159edb docs: update issue link to the transferred repo path (#609)
• See full diff in compare view

Updates supabase from 2.119.0 to 2.120.0

Release notes

Sourced from supabase's releases.

v2.120.0

Supabase CLI v2.120.0 — 2026-10-06

A mix of usability improvements and bug fixes, with two major additions for debugging and observability: service logs now persist to disk and ship to Analytics, and CLI runs can export OpenTelemetry traces for end-to-end performance analysis. Stack commands also accept short IDs from stack list, making them much less tedious to use.

Highlights

• Service logs persist, ship to Analytics, and stack logs gains history — Every service's output now lives in <stateRoot>/<stackId>/logs/, survives restarts and owner exits, and reaches your project's Logs page in Studio. supabase stack logs prints retained history by default; -f/--follow switches to live output. New --since, --tail, and --service flags. (#6893)
• Trace CLI runs end-to-end with opt-in OTLP export — Set SUPABASE_TRACE_FILE to export a JSON trace of one run to a file, or SUPABASE_OTLP_ENDPOINT to stream to Tempo, Jaeger, or Grafana. Spans track migrations, containers, API operations, and database queries. Off by default; costs nothing when unset. Two scripts (trace-report, bench-cli) turn traces into critical-path analysis and fair A/B comparisons. (#6935)
• Stack commands now accept short IDs — supabase stack list prints an 8-character ID; every --stack-id flag now accepts it (or any unique 4+ character prefix), eliminating the tedium of copying full 64-character hashes. (#6967)

Improvements

• Upgrade check is now cached outside projects — supabase --version and commands run outside a supabase/ directory no longer hit GitHub's API on every run; the check is cached in ~/.supabase/cli-latest for 10 hours. On slow or offline networks, this saves ~3 seconds per run. (#6939)
• Config rejection errors name the setting and the fix — When a saved stack rejects a configuration change, the error now says which config.toml key or env var changed and suggests reverting it or running supabase stack destroy --stack-id <id>. JSON and stream-json errors carry structured details for agents. (#6944)
• Command telemetry now tags stack backend and OrioleDB — Telemetry records whether each command ran on legacy or stack backend, the runtime (docker, podman, or native), and whether the project uses OrioleDB. (#6940)

Bug fixes

• Config: stop treating disabled data API as enabled — config diff, config push, and config pull no longer report false drift or propose incorrect changes when the data API is disabled. (#6949)
• Gateway URLs now print even when API is disabled — supabase start now shows API_URL, FUNCTIONS_URL, and MCP_URL regardless of [api] enabled, since Kong serves auth regardless. (#6986)
• Typegen stdin feed no longer hangs on early-exit tools — Fixed an intermittent hang in supabase gen types when a tool exits before reading its full input. (#6948)
• stop --no-backup now prunes migra cache — Volumes created by db diff and db pull are now labeled and cleaned up on stop --no-backup, not left behind. (#6982)
• Native stack: wait for processes to exit before reporting stopped — supabase stack stop now confirms that native service processes have exited before returning, preventing port conflicts or file locks when services restart. (#6937)
• Native stack: prevent ephemeral port collisions on reopen — Backend ports are now reserved below the OS ephemeral range, fixing intermittent port already in use errors when stacks restart. (#6941)
• Fix intermittent instance root claim race — Instance root owner markers are now written atomically, eliminating a rare concurrency bug on high-load systems. (#6933)

Dependency updates

• @​supabase/typegen 0.2.2 — TypeScript output now includes a ComputedFields key on tables and views, fixing type generation for functions with named row parameters. (#6919)
• pg-delta 1.0.0-alpha.57 — No longer emits unnecessary REVOKE statements for column-level grants when running declarative sync against unchanged exports. (#7020)

---

Plus 1 internal improvement.

Full changelog: supabase/cli@v2.119.0...v2.120.0

v2.120.0-beta.13

No release notes provided.

v2.120.0-beta.12

No release notes provided.

v2.120.0-beta.11

No release notes provided.

v2.120.0-beta.10

No release notes provided.

... (truncated)

Commits

• dae0811 feat(cli): upgrade pg-delta to 1.0.0-alpha.57 (#7020)
• 56360b2 chore(stack): bump storage to v1.79.36-r0 (#7022)
• 121479f chore(stack): bump storage to v1.79.35-r0 (#7021)
• 8eeba0b chore(stack): bump pgmeta to v0.100.0-r0 (#7019)
• bdd8f02 chore(stack): bump storage to v1.79.34-r0 (#7018)
• 5319636 chore(stack): bump postgres to 15.19.0.004-r0 (#7006)
• e47ae94 chore(stack): bump postgres to 17.11.0.004-r0 (#7005)
• 0a4f1c4 chore(stack): bump realtime to v2.140.10-r0 (#7003)
• f2612b6 chore(stack): bump analytics to v1.52.0-r0 (#6998)
• 3625261 chore(stack): bump realtime to v2.140.9-r0 (#6996)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions