Releases Index

Serverless Postgres

Managed Postgres with scale-to-zero and branching for modern stacks.

This week's digestNov 2 – 8, 2026

Supabase CLI v3 flips the default to local, as the Postgres tools race toward agents

Supabase's CLI v3 makes local the default target and gates every hosted change behind confirmation, while Neon opens AI Gateway credits to Free plan accounts and ships project recovery, and PlanetScale adds OIDC auth for CI and emergency backups for Vitess.

Read the digest25 releases covered
Week of Nov 9in progress · digest Monday
MonNov 9, 20265 releases
NeonPlanetScaleSupabase
Daily summary

Supabase CLI hardens database connections with pinned CA

Supabase CLI v3.1.0 now verifies the hosted server certificate on every linked database connection, a security tightening that comes alongside a local CORS behavior change that can break functions lacking CORS headers.

  • Supabase CLI now pins the Supabase CA across all linked database operations — db push/pull/dump/diff/reset, migrations, and inspect — so unverified hosts are rejected.
  • Local CORS for /functions/v1 moved from the gateway to your function, so functions that don't set CORS headers are now blocked by browsers.
  • Supabase CLI added inspect db xid-age, toast-sizes, and collation-drift diagnostics, config.jsonc support, and a SUPABASE_API_MAX_RETRIES cap for CI.
  • Neon's CLI moved development to the neon-pkgs repo and now ships npm package neon, with binaries rebundled on Node.js 22.23.4 to fix a Brotli decoder out-of-bounds write.
  • PlanetScale accounts can disconnect GitHub sign-in and switch to email and password from account settings.
neonctlv9.3.2

PlanetScale Changelog

2 updates

Passkeys and hardware security keys can now be added from account settings and used to sign in instead of an authenticator app code. Organizations with SSO enabled keep configuration with their SSO provider.

Details

Accounts that sign in with GitHub can now switch to email and password sign-in from account settings by selecting Disconnect GitHub, confirming on GitHub, and setting a password. After disconnecting, GitHub sign-in stops working for that account and the user is signed out of PlanetScale in other browsers.

Details
Week of Nov 215 releases
DigestSupabase CLI v3 flips the default to local, as the Postgres tools race toward agentsRead →
ThuNov 5, 20268 releases
SupabaseNeonPlanetScale
Daily summary

PlanetScale removes long-lived CI secrets with OIDC auth

PlanetScale added OpenID Connect authentication so GitHub Actions and Depot CI workflows trade an OIDC token for short-lived PlanetScale credentials, while Neon shipped a one-command Function Registry for agents and published fleet data showing Lakebase Postgres rarely reads from object storage.

  • PlanetScale API now accepts OIDC tokens from GitHub Actions and Depot CI, letting admins define a trust policy of required claims, granted access, and token lifetime instead of storing long-lived secrets.
  • Neon's Function Registry lets agents scaffold working functions with a single neon functions new command, with templates for Vercel Chat SDK, Mastra, TanStack AI, and Context.dev.
  • Neon reported that Lakebase Postgres answers roughly 99.46% of page reads from the compute node's local cache and nearly all the rest from pageserver NVMe, leaving about 39 object-storage requests per second.
  • PlanetScale MCP server moved to a new platform and now sends queries from four dedicated IPs, so IP-restricted Postgres databases must allow all four; Vitess needs no change.
  • PlanetScale CLI now verifies role connection URLs against the system CA store, and Supabase's config package can read and write commented JSONC configs.

supabase-flutter v3 types the whole API surface

supabase-flutter v3 adds type safety across queries, functions, realtime, and auth, and changes v2 behavior for anyone who upgrades. Nothing changes until you upgrade, and the release points to a migration guide for changes the compiler misses.

Details
CLIconfig-v1.2.0

AI Gateway credits for all accounts; project recovery in Console

AI Gateway prepaid credits can now be purchased on the Free plan, starting at $5, and deleted projects can be recovered from the Neon Console for 7 days after deletion. Computes up to 16 CU, including autoscaling computes, now receive compute updates automatically instead of requiring manual restarts.

Details
AI gateway credits card on the Billing page, showing the credit balance and the Add credits button

Neon Blog

2 updates

Neon Function Registry collects ready-made functions that agents install with neon functions new, starting from working code instead of reading docs and picking package versions. Templates cover Vercel Chat SDK, Mastra, TanStack AI, Context.dev, plus Postgres, AI Gateway, Object Storage, and Auth examples, and require Neon CLI 8.11.0 or later.

Details
Function Registry adds working-code templates via one command

Production fleet stats show the compute node's local cache answers about 99.46% of page accesses and pageserver NVMe another 0.54%, leaving only about 39 requests per second to reach object storage. Object storage reads come almost entirely from branches or restores at old points in time and projects waking after scaling to zero, and only their first reads pay that cost.

Details
Lakebase architecture showing compute, pageservers, and object storage

PlanetScale Changelog

2 updates

Workflows in GitHub Actions and Depot CI can now exchange an OIDC token for a short-lived PlanetScale service token instead of storing long-lived credentials in CI secrets. Organization admins define a trust policy in the dashboard specifying required claims, granted access, and token lifetime, and the planetscale/auth-action handles the exchange with the id-token: write permission.

Details

The PlanetScale MCP server now runs on a new platform and sends database queries from four dedicated IP addresses. Postgres databases with IP restrictions must allow all four addresses for MCP queries to connect; Vitess databases need no changes.

Details
PlanetScale CLIv0.350.0
WedNov 4, 20263 releases
PlanetScaleSupabaseNeon
Daily summary

Supabase adds Realtime broadcast persistence; Neon moves MCP server to stateless spec

Supabase JS made Realtime broadcasts persist and exposed per-request query builder options in .from, while Neon's MCP server adopted the stateless MCP 2.0 spec and retired its SSE endpoints.

  • Supabase Realtime broadcasts now persist, so messages sent to a channel survive beyond the moment of delivery.
  • Supabase JS lets PostgREST query builder options be passed to .from, enabling a custom fetch per request.
  • Supabase no longer clears the local session when a global sign out fails server-side, and storage's exists stops treating invalid JWTs or missing buckets as missing files.
  • Neon's MCP server now supports the stateless MCP 2.0 spec and has retired its older Server-Sent Events endpoints.
Client SDKv2.119.0
+2

Neon MCP server moves to stateless MCP 2.0; SSE endpoints retired

Neon's MCP server now supports the stateless MCP spec revision dated 2026-07-28, commonly called MCP 2.0, and the old Server-Sent Events endpoints are retired. Tool calls on the server have grown about 14% week over week since August, and the MCP server now handles more tool calls and roughly twice the daily active users of the Neon CLI.

Details
Neon blog cover with the headline Is MCP good yet?
TueNov 3, 20264 releases
SupabasePlanetScale
Daily summary

PlanetScale MCP turns agent friction into feedback for the team

PlanetScale's MCP server gained tools that let AI agents file problems and unanswerable questions directly to the team, while its CLI picked up branch maintenance windows, dedicated read replica detach, and emergency backups; Supabase's day was minor config and canary work.

  • PlanetScale's MCP server now offers planetscale_submit_feedback and planetscale_ask_question so agents can report wrong results, confusing errors, or missing tools, attaching the tool, org, database, and user identity.
  • PlanetScale CLI added branch maintenance window and event commands, a detach command for dedicated read replicas, and emergency flags on backup create.
  • Supabase's config package added a require_current_password auth email setting.
CLIconfig-v1.1.0

MCP agents can file feedback and questions with PlanetScale

The PlanetScale MCP server gains planetscale_submit_feedback for reporting wrong results, confusing errors, or missing tools, and planetscale_ask_question for recording questions the docs could not answer. Each submission includes the tool, organization, and database it concerns along with the user's ID and email so the team can follow up.

Details
PlanetScale CLIv0.349.0