Summary
- Upgrade to v16.2.11 or v15.5.21 now
- High-severity DoS, SSRF, and middleware bypasses fixed
- Fixes available in v16.3 canary/preview
Links
Resources
Recent
Latest Release Posts
Summary
- Monthly scheduled security releases
- July 20, 2026: patches for 16.2 & 15.5
- Fixes include 4 high and 5 medium issues
Summary
- Up to 90% dev-server memory reduction
- Persistent filesystem cache speeds builds
- Experimental Rust React compiler (20–50% faster)
Summary
- Bundled AGENTS.md auto-updates
- First‑party Skills for agent workflows
- agent-browser v0.27 adds React DevTools
Summary
- Instant navigations via streaming or cache
- Partial Prefetching: one shell per route
- Dev tools: Instant Insights, Inspector, instant() helper
Summary
- Stable, typed Adapter API
- Public, shared adapter test suite
- Verified open-source adapters
Summary
- Dev startup up to ~4× faster
- Server Function logs in dev terminal
- Attach debugger with next start --inspect
Summary
- AGENTS.md + bundled docs for agents
- Browser errors forwarded to terminal by default
- next-browser exposes DevTools & PPR analysis
Summary
- Server Fast Refresh enabled by default
- Subresource Integrity (SRI) support
- Dynamic imports are tree-shaken
Summary
- MCP exposes runtime and framework state to agents
- Vector prototype proved visibility + framework knowledge matters
- Run npx @next/codemod to generate agents.md
Summary
- Fine-grained incremental caching
- Automatic dependency tracking with value cells
- Persistent file-system cache (Next.js 16.1)
Summary
- Turbopack file system caching is stable
- Experimental interactive bundle analyzer
- Use next dev --inspect for targeted debugging
Summary
- DoS via App Router deserialization (CVE-2025-55184)
- Server Functions may leak compiled source (CVE-2025-55183)
- Upgrade to listed patched Next.js versions immediately
Summary
- CVSS 10.0 RCE via React Server Components
- Upgrade Next.js to patched releases immediately
- Run npx fix-react2shell-next and rotate secrets
Summary
- Cache Components (opt-in use cache + PPR)
- proxy.ts replaces middleware for Node runtime
- Turbopack is now stable and default
Summary
- Turbopack is now the default and stable bundler
- New caching APIs: updateTag() and refresh(); revalidateTag() requires cacheLife
- Routing optimized with layout deduplication and incremental prefetching
Summary
- turbopack builds beta
- nodejs middleware stable
- typed routes & typegen
Summary
- Turbopack passes 100% integration tests
- Try Next.js 16 preview via canary flags
- Node.js Middleware promoted to stable
Summary
- Turbopack builds (alpha)
- onNavigate and useLinkStatus navigation hooks
- Early client instrumentation hook
Summary
- App Router uses web-standard Request/Response APIs
- Export HTTP methods (GET/POST/etc.) in app/.../route.ts
- Static SPA export disables dynamic server endpoints