Vercel
Vercel's MCP Servers Ditch Session State for the New Spec
Vercel's hosted MCP servers and the mcp-handler library now serve the stateless 2026-07-28 spec, no client-side changes required.
Topic
Releases
29 articles tagged Releases.
Firebase
Firebase Sunsets Extensions, Its Third Wind-Down This Year
Firebase will retire Extensions by March 2027, the third major product wind-down in about a year, after Studio and ML.
Supabase
Supabase Stops Honoring Your Pinned Extension Versions
Starting August 5, Supabase ignores explicit version numbers on Postgres extensions and installs the default version instead, closing a security gap.
Supabase
Supabase's Self-Hosted Stack Swaps Kong for Envoy Next Week
Supabase is flipping the default API gateway in its self-hosted Docker stack from Kong to Envoy the week of Aug 9, 2026, a breaking change for some setups.
Vercel
Vercel Puts Internal Apps and AI Agents Behind Your Identity Provider
Vercel Passport reached general availability July 31, gating internal apps and AI agents behind Okta, Entra ID, Auth0 or any OIDC provider.
Netlify
Netlify Makes New Projects Private by Default, Not Existing Ones
New Netlify teams on Credit-based plans now get private projects automatically. Teams that signed up before July 28 keep the old public-by-default behavior.
Vercel
Vercel Now Lets You Sign In With ChatGPT
A new beta login option lets developers authenticate to Vercel and v0 with a ChatGPT account, or connect the two from inside ChatGPT itself.
Netlify
React Router 7.18 Fixes Two Bugs Its Own Patches Missed
React Router 7.18.0 closes a DoS in the manifest endpoint and an open-redirect bypass, both follow-ups to fixes shipped earlier in 2026 that didn't fully hold.
Firebase
Firebase Crashlytics Splits System Kills From Memory Errors
On Android 17 and up, Crashlytics now gives Low Memory Kills and OutOfMemoryErrors their own separate issues instead of one shared bucket.
Vercel
Next.js Now Warns You a Patch Is Coming Before It Says Why
Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.
Supabase
Supabase Pipelines Opens to Everyone, Bills You Even When Paused
Supabase's managed Postgres-to-BigQuery replication service is now public alpha on every paid plan, billed hourly per pipeline whether or not it's replicating.
Vercel
Vercel's AI SDK Now Catches MCP Tools That Change After Approval
Vercel's AI SDK adds fingerprintTools and detectToolDrift to catch MCP servers that silently swap a tool's description or schema after an agent trusts it.
Firebase
Firebase Remote Config on Web Now Tracks Rollout Changes Live
The JS SDK's realtime listener used to miss rollout updates that didn't touch a parameter's value. A July 9 release closes that gap for good.
Netlify
Netlify Adds a Kill Switch for Runaway AI Agent Spend
Netlify now lets Team Owners cap AI credit spend per team member, not just per team, after complaints of agents burning a month's allotment in one prompt.
Supabase
Supabase Realtime Broadcast Now Sends Binary, Old Clients Miss It
Supabase Realtime Broadcast can now carry binary payloads for telemetry and video, but clients on older SDKs drop the messages without any error.
Vercel
Vercel Stops Printing Your Secrets Into Build Logs
Vercel now masks Sensitive Environment Variable values in build output automatically, closing a leak into logs teams routinely share and store.
Netlify
Netlify Functions Retire Magic Filenames for Typed Config
Netlify moved Functions configuration into typed code, replacing magic filenames, so coding agents can discover and edit settings reliably.
Supabase
Supabase Turns Off Connection Logging by Default, No Opt-In
Supabase turned off Postgres connection logging by default July 9, and migrated existing Free and Pro projects with no opt-in.
Vercel
Vercel Now Runs Rails, Django and Go Apps From a Plain Dockerfile
Vercel Functions now build and autoscale any Dockerfile-based backend, from Rails to Go, the same way it deploys a Next.js app.
Firebase
Firebase Cloud Messaging Retires the Registration Token, Docs Lag
Firebase's Node, Java and Python Admin SDKs now deprecate FCM's token field for fid, the Installation ID, but docs for targeted sends haven't caught up.
Firebase
Firebase's Auth Export Was Quietly Stripping MFA Enrollment
Firebase CLI v15.22.4 fixes auth:export and auth:import silently dropping mfaInfo, which had stripped MFA enrollment from users migrated between projects.
Firebase
Firebase Pushes iOS Developers Off CocoaPods by October
Firebase stops publishing new Apple SDK versions to CocoaPods in October 2026, ahead of CocoaPods trunk going read-only in December. Migrate to SPM.
Firebase
Genkit's Go SDK Goes Stable with Anthropic and Ollama Plugins
Google's Genkit Go SDK hit its first stable release June 18, committing to backward API compatibility and shipping Claude, Vertex AI and Ollama plugins.
Firebase
Firebase Auth Emulator Now Mocks WebAuthn Passkeys
Firebase CLI v15.21.0 adds mock passkey support to the Auth emulator, so developers can test WebAuthn sign-in flows locally without hardware authenticators.
Firebase
Genkit 1.39 Retires the Chat Beta, Lands Production Agents
Genkit JS v1.39.0 removes the beta Chat API and ships defineAgent, a production multi-turn agent framework with Firestore session persistence.
Firebase
Firebase SQL Connect Streaming Lands in the JavaScript SDK
The Firebase JS SDK just gained streaming for SQL Connect, letting web apps subscribe to live PostgreSQL data using the @refresh directive.
Firebase
App Check Gets Zero-Config Init in Firebase SDK 12.15
Firebase JS SDK 12.15.0 lets you drop the explicit reCAPTCHA provider from initializeAppCheck, reading recaptchaSiteKey from your project config instead.
Firebase
Firebase Drops Imagen: Migrate to Gemini Images Now
All Imagen models in Firebase AI Logic shut down June 24. Apps still calling them are broken. Here's the migration path to Gemini's Nano Banana models.
Firebase
Firestore Regional Endpoints Hit GA
Firestore's regional and multi-regional API endpoints are now GA on server SDKs, locking every request to one region for data-sovereignty compliance.