[dependabot]

Bumps @neondatabase/serverless from 1.1.0 to 1.2.0.

Changelog

Sourced from @​neondatabase/serverless's changelog.

1.2.0 (2026-10-01)

• Options to the neon(...) HTTP-client creation function, and to the transaction and query functions, now support individual connection parameters: user (or username), password, host (or hostname), port, database and connectionString.

  These can be strings (or number, for port) or sync or async functions to be resolved on every query. They can supplement, override parts of, or fully replace the first-argument connection string.

  So this still works:

  • const sql = neon(DATABASE_URL)

  But, for example, these now work too:

  • const sql = neon(DATABASE_URL_NO_PASSWORD, { password: () => getPasswordAsync() })
  • const sql = neon({ user, password, host, database })
  • const sql = neon({ connectionString: () => getConnectionString() })

• Client and Pool now support a sync or async function as the password connection parameter when pipelineConnect is enabled (this previously caused an error). And parseIntoClientConfig from pg-connection-string is exported at top-level to make it easy to use a password function alongside a connection string:

  import { Pool, parseIntoClientConfig } from '@neondatabase/serverless';
  const pool = new Pool({
  ...parseIntoClientConfig(process.env.DATABASE_URL),
  password: () => getDatabaseAuthToken('argument'),
  });

• A few other minor fixes.

• The package is no longer published to JSR. Please update any jsr references to npm:@neondatabase/serverless.

Commits

• 0a891fa Stop publishing to JSR, update release process, update some dependencies (#228)
• fa911c3 http connection parameters (#227)
• 8431144 Update dependencies, export parse from pg-connection-string as `parseConnec...
• bc18662 Release v1.1.0 (#208)
• ecce07e Update release scripts and instructions and add type shims maintenance guidan...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
autopilot	Ready	Preview	Oct 26, 2026 5:53am UTC

[dependabot]

Looks like @neondatabase/serverless is up-to-date now, so this is no longer needed.