Vercel
Next.js ImageResponse Bug Forces an Off-Schedule Critical Patch
Next.js shipped an unscheduled critical RCE patch for ImageResponse (CVSS 9.5), breaking the monthly security cadence Vercel set up in July.
The Archive
Articles
Independent platform news and analysis for builders.
Vercel
Vercel Shows the CPU-Minute Math Behind the Surprise Bills
Vercel now shows billable duration and CPU minutes per deployment, months into complaints about Turbo build machines defaulting on and inflating invoices.
Netlify
Netlify's AI Gateway Gets a Model Built to Decide, Not Chat
Netlify's AI Gateway added TypeSafe's Jev, a model returning typed choices and probabilities instead of text, a day after Vercel shipped it too.
Firebase
Firebase Cloud Functions Gets the Auth Triggers 1st Gen Had
A Sept 15 release lets Cloud Functions for Firebase (2nd gen) fire onUserCreated and onUserDeleted natively, closing a gap open since 2nd gen launched.
Supabase
Supabase Advisors Now Watch Service Error Rates, No Agent Required
Supabase's new Health Check Advisors add native error-rate monitoring for Auth, Storage and Edge Functions inside Studio, no agent prompt needed.
Vercel
Vercel Cuts Hobby Deployment Grace Period From 30 Days to Zero
Vercel now deletes Hobby deployments over the shared 10GB cap immediately, ending the 30-day grace period and removing preview-deploy protections.
Firebase
Firebase AI Logic Puts a Gatekeeper on Every Gemini Request
Firebase AI Logic now runs developer-written Cloud Functions before and after every Gemini request, letting teams moderate, cap or redact calls server-side.
Supabase
Supabase's New Monitoring Tool Is a Prompt You Run Yourself
Supabase's Observability on Auto-Pilot ships four prepared prompts for AI agents to monitor a database, run through Claude Routines, Codex or Cursor.
Firebase
Firebase Spend Caps Can Pause Your App, but Not Your Bill
Firebase's new spend caps pause AI Logic, Functions and App Hosting at 100% of budget, but reporting lag means overages before the pause still bill in full.