---
collection: serverless-postgres
collection_name: Serverless Postgres
week_start: 2026-07-06
title: Searchable encryption comes to Postgres
release_count: 69
generated: 2026-07-13
canonical: https://releases.sh/collections/serverless-postgres/digest/2026-07-06
---

# Searchable encryption comes to Postgres

CipherStash's searchable field-level encryption integrates with Supabase, and Neon and PlanetScale each ship new CLI commands built for AI agent workflows, making this a week of platform-level security and automation upgrades for serverless Postgres.

### Searchable encryption lands in Postgres

The biggest story of the week is that field-level encryption with search capability is now a first-class citizen on Postgres. [Supabase's CipherStash integration](/release/rel_weVc6T7QfWH6uG0-C-4z4-supabase-launches-cipherstash-integration-for-searchable-field-level-encryption) lets you encrypt individual columns while still being able to filter, sort, and join on those values — all without ever decrypting them on the server. Setup is a single CLI command, and it works with Supabase.js, Drizzle, and Prisma out of the box. For any application handling PII, healthcare data, or financial records, this closes a longstanding gap: you no longer have to choose between encrypting data and querying it efficiently.

### CLI commands built for agents

Across the three major platforms, this week's releases share a clear theme: CLIs are being redesigned for AI agent consumption. [Neon's `neon api` command](/release/rel_lrb5jYY9piH4HoNsKTohd-neon-ships-neon-api-cli-command-cmd-k-console-search-and-new-nat-gateway-ips) gives agents access to every Platform API route from the terminal using your existing CLI login, without managing raw API keys. The command surfaces all available endpoints via `neon api --list` and supports full HTTP method flags. [PlanetScale went even further](/release/rel_vizFf01xzEn-kII-_t0P8-planetscale-cli-v0-292-0-adds-first-class-ai-agent-support-with-pscale-sql-and) with a `pscale sql` command for non-interactive queries (read-only by default, destructive statements blocked without `--force`), plus a `pscale agent-guide` command that provides machine-readable bootstrap instructions covering CLI conventions, the hosted MCP server, and the PlanetScale API. Structured JSON error envelopes and next steps in workflow responses round out the agent-friendly tooling.

### Supabase's July feature drop and client SDK fixes

Beyond encryption, [Supabase's July 2026 release](/release/rel_Ktosx7Rw62FjzUgeSkVQD-supabase-july-2026-adds-mongodb-queries-binary-realtime-payloads-and-opencode) is packed: Wrappers v0.6.2 lets you query and join MongoDB collections directly from Postgres, Realtime Broadcast now supports binary payloads alongside JSON, and OpenCode integrates with Supabase for agentic coding workflows. TanStack DB syncs collections with Supabase tables in alpha, and Multigres now supports `LISTEN/NOTIFY` across pooled connections. On the client side, [SDK v2.110.2](/release/rel_aM_ihjE6KDDTRJHigOGmz-supabase-client-sdk-v2-110-2-clears-local-session-on-signout-failures) fixes a notable auth bug where signout failures could leave stale local sessions, while [v2.110.1](/release/rel_VZds9k9kQaZ6dQeKo_jw4-supabase-client-sdk-v2-110-1-defers-auth-notifications-and-suppresses-realtime) defers auth initialization notifications to prevent race conditions and suppresses disconnected status events from Realtime heartbeat consumers.

### PlanetScale adds Postgres replication and programmatic insights

PlanetScale's Postgres offering continues to mature. [Postgres roles can now be created with the REPLICATION attribute](/release/rel_apBaRFxZd99OfRc9pH6UL-planetscale-adds-replication-attribute-for-postgres-roles) through the API, dashboard, CLI, and Terraform provider, enabling logical replication and CDC setups. The new [Query Insights API endpoints](/release/rel_zdD8LRSB9hMaDSnPPF2iQ-planetscale-query-insights-api-endpoints-now-available) expose query statistics, errors, anomalies, and traffic budgets programmatically. And the [CLI v0.295.0](/release/rel_2qcMLJBXZ-YAGlfHpXIdp-planetscale-cli-v0-295-0-adds-cloudflare-d1-offline-migration-and-ddl-lint) adds a `pscale import d1` command for offline Cloudflare D1 migration, with hardened parsing and resume flows.

### Prisma Next documentation expands

[Prisma Next's documentation](/release/rel_U-1BT_eOlWT9sdFNI4Dgz-prisma-next-documentation-expanded-with-fundamentals-migrations-and-api) now covers fundamentals, data modeling, migrations, middleware and extensions, contract authoring, and a full API reference — a significant expansion that makes the new schema engine more approachable. The schema also now reads native PostgreSQL enums directly.

## Releases covered

### Neon

- [Neon ships neon api CLI command, Cmd+K console search, and new NAT gateway IPs](https://releases.sh/release/rel_lrb5jYY9piH4HoNsKTohd-new-neon-api-cli-command-cmd-k-search-in-console)

### PlanetScale

- [PlanetScale CLI v0.292.0 adds first-class AI agent support with pscale sql and agent-guide](https://releases.sh/release/rel_vizFf01xzEn-kII-_t0P8-pscale-sql-command-agent-guide-bootstrap-structured-auth-for-agents)
- [PlanetScale adds REPLICATION attribute for Postgres roles](https://releases.sh/release/rel_apBaRFxZd99OfRc9pH6UL-postgres-roles-support-replication-attribute)
- [PlanetScale Query Insights API endpoints now available](https://releases.sh/release/rel_zdD8LRSB9hMaDSnPPF2iQ-query-insights-data-accessible-via-api)
- [PlanetScale CLI v0.295.0 adds Cloudflare D1 offline migration and DDL lint warnings](https://releases.sh/release/rel_2qcMLJBXZ-YAGlfHpXIdp-d1-offline-migration-support-ddl-lint-warnings-for-views-and-triggers)

### Prisma

- [Prisma Next documentation expanded with fundamentals, migrations, and API reference](https://releases.sh/release/rel_U-1BT_eOlWT9sdFNI4Dgz-native-postgresql-enums-now-supported-docs-expanded)

### Supabase

- [Supabase July 2026 adds MongoDB queries, binary Realtime payloads, and OpenCode integration](https://releases.sh/release/rel_Ktosx7Rw62FjzUgeSkVQD-mongodb-foreign-data-wrapper-realtime-supports-binary-payloads)
- [Supabase Client SDK v2.110.2 clears local session on signout failures](https://releases.sh/release/rel_aM_ihjE6KDDTRJHigOGmz-local-session-cleared-on-signout-failures)
- [Supabase Client SDK v2.110.1 defers auth notifications and suppresses realtime disconnected status](https://releases.sh/release/rel_VZds9k9kQaZ6dQeKo_jw4-auth-notifications-deferred-until-init-resolves-realtime-disconnected-status)
