deps: bump the platform-services group across 1 directory with 2 updates

[dependabot]

Bumps the platform-services group with 2 updates in the / directory: @neondatabase/serverless and @vercel/blob.

Updates @neondatabase/serverless from 1.1.0 to 1.2.0

Changelog

Sourced from @​neondatabase/serverless's changelog.

1.2.0 (2026-10-01)

• Options to the neon(...) HTTP-client creation function, and to the transaction and query functions, now support individual connection parameters: user (or username), password, host (or hostname), port, database and connectionString.

  These can be strings (or number, for port) or sync or async functions to be resolved on every query. They can supplement, override parts of, or fully replace the first-argument connection string.

  So this still works:

  • const sql = neon(DATABASE_URL)

  But, for example, these now work too:

  • const sql = neon(DATABASE_URL_NO_PASSWORD, { password: () => getPasswordAsync() })
  • const sql = neon({ user, password, host, database })
  • const sql = neon({ connectionString: () => getConnectionString() })

• Client and Pool now support a sync or async function as the password connection parameter when pipelineConnect is enabled (this previously caused an error). And parseIntoClientConfig from pg-connection-string is exported at top-level to make it easy to use a password function alongside a connection string:

  import { Pool, parseIntoClientConfig } from '@neondatabase/serverless';
  const pool = new Pool({
  ...parseIntoClientConfig(process.env.DATABASE_URL),
  password: () => getDatabaseAuthToken('argument'),
  });

• A few other minor fixes.

• The package is no longer published to JSR. Please update any jsr references to npm:@neondatabase/serverless.

Commits

• 0a891fa Stop publishing to JSR, update release process, update some dependencies (#228)
• fa911c3 http connection parameters (#227)
• 8431144 Update dependencies, export parse from pg-connection-string as `parseConnec...
• bc18662 Release v1.1.0 (#208)
• ecce07e Update release scripts and instructions and add type shims maintenance guidan...
• See full diff in compare view

Updates @vercel/blob from 2.6.1 to 2.8.0

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.0

Minor Changes

• 8b49164: Add putImage(pathname, bodyOrUrl, options): optimizes an image through Vercel Image Optimization and stores only the optimized output. The source can be the image content itself (string, File, Blob, Buffer or Stream) or a URL instance pointing at a public http(s) image, which is fetched server-side. Options mirror put (access, addRandomSuffix, allowOverwrite, cacheControlMaxAge, ifMatch) plus the required optimizeImage parameters (width, quality, format); contentType is not accepted since the stored content type always comes from the optimizer output. Deprecates the optimizeImage option on put and the putFromUrl function in favor of putImage; both keep working.

@​vercel/blob@​2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

Changelog

Sourced from @​vercel/blob's changelog.

2.8.0

Minor Changes

• 8b49164: Add putImage(pathname, bodyOrUrl, options): optimizes an image through Vercel Image Optimization and stores only the optimized output. The source can be the image content itself (string, File, Blob, Buffer or Stream) or a URL instance pointing at a public http(s) image, which is fetched server-side. Options mirror put (access, addRandomSuffix, allowOverwrite, cacheControlMaxAge, ifMatch) plus the required optimizeImage parameters (width, quality, format); contentType is not accepted since the stored content type always comes from the optimizer output. Deprecates the optimizeImage option on put and the putFromUrl function in favor of putImage; both keep working.

2.7.0

Minor Changes

• ad5a134: Add image optimization support: a new optimizeImage option on put and a new putFromUrl method. Both optimize the image through Vercel Image Optimization before storing it (only the optimized output is stored) and require OIDC authentication.

  const result = await put("avatars/foo.webp", body, {
    access: "public",
    optimizeImage: { width: 128, quality: 75, format: "webp" },
  });
  const result = await putFromUrl(
  "avatars/foo.webp",
  "https://example.com/photo.jpg",
  {
  access: "public",
  optimizeImage: { width: 128, quality: 75, format: "webp" },
  }
  );

Commits

• cdbac94 Version Packages (#1100)
• 8b49164 [blob] Add putImage, deprecate put optimizeImage option and putFromUrl (#1099)
• 7637604 Version Packages (#1097)
• ad5a134 [blob] Add optimizeImage option to put and new putFromUrl method (#1093)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
arcadeghosts-site	Ready	Preview	Oct 5, 2026 1:09pm UTC