
Next.js Now Warns You a Patch Is Coming Before It Says Why
Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.
The Archive
Independent platform news and analysis for builders.

Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.

Supabase's managed Postgres-to-BigQuery replication service is now public alpha on every paid plan, billed hourly per pipeline whether or not it's replicating.

Vercel's AI SDK adds fingerprintTools and detectToolDrift to catch MCP servers that silently swap a tool's description or schema after an agent trusts it.

The JS SDK's realtime listener used to miss rollout updates that didn't touch a parameter's value. A July 9 release closes that gap for good.

Netlify now lets Team Owners cap AI credit spend per team member, not just per team, after complaints of agents burning a month's allotment in one prompt.

Supabase Realtime Broadcast can now carry binary payloads for telemetry and video, but clients on older SDKs drop the messages without any error.

Vercel now masks Sensitive Environment Variable values in build output automatically, closing a leak into logs teams routinely share and store.

Crashlytics now separates Low Memory Kills from Out of Memory exceptions on Android 17 devices, surfacing what Android's new memory limits are doing.

Netlify moved Functions configuration into typed code, replacing magic filenames, so coding agents can discover and edit settings reliably.