{"id":"src_U4D8mfwIxWDEaM4qDm3Lq","slug":"next-js","name":"Next.js","type":"github","url":"https://github.com/vercel/next.js","orgId":"org_qsyZSlC_PRGFDYIGsMfzp","productId":"prod_JoRuQm6EnVccYeDh_NTEz","productSlug":"nextjs","org":{"id":"org_qsyZSlC_PRGFDYIGsMfzp","slug":"vercel","name":"Vercel"},"isPrimary":false,"isHidden":false,"discovery":"curated","metadata":"{\"changelogDetectedAt\":\"2026-03-31T14:04:16.909Z\",\"wellKnownSweptAt\":\"2026-10-16T06:00:37.081Z\",\"sourceActor\":{\"nextAlarmAt\":\"2026-10-18T14:36:14.705Z\",\"lastAlarmAt\":\"2026-10-18T10:36:15.849Z\",\"managed\":true}}","notice":null,"kind":"sdk","stars":143068,"starsFetchedAt":"2026-10-18T10:38:14.845Z","releaseCount":64,"releasesLast30Days":8,"avgReleasesPerWeek":1.6,"latestVersion":"v16.4.2","latestDate":"2026-10-15T20:44:37.000Z","changelogUrl":null,"hasChangelogFile":false,"lastFetchedAt":"2026-10-18T10:38:14.845Z","lastPolledAt":"2026-10-18T10:38:04.625Z","changeDetectedAt":null,"trackingSince":"2025-12-08T20:34:37.000Z","releases":[{"id":"rel_XS5ol3EyLMxiabB6GcvMT","version":"v16.4.2","type":"feature","title":"v16.4.2","summary":"Backports Turbopack Pages Router dev module graph chaining, snapshot consistency fixes, and two GC paths that left half-torn-down dependency edges. Also fixes lazy dynamic-import chunk-list collisions, realpath errors during module resolution, and next-code-frame windows snapping to character boundaries.","titleGenerated":"Next.js v16.4.2 backports Turbopack dev module graph chaining to Pages Router","titleShort":"Backports: Pages Router dev graph chaining, GC path fixes","breaking":"none","importance":2,"content":"## What's Changed\r\n* [lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in https://github.com/vercel/next.js/pull/100002\r\n* [lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in https://github.com/vercel/next.js/pull/100008\r\n* [lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in https://github.com/vercel/next.js/pull/100212\r\n* [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in https://github.com/vercel/next.js/pull/100209\r\n* [lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in https://github.com/vercel/next.js/pull/100217\r\n* [lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in https://github.com/vercel/next.js/pull/100246\r\n* [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in https://github.com/vercel/next.js/pull/100211\r\n* [lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in https://github.com/vercel/next.js/pull/100262\r\n\r\n\r\n**Full Changelog**: https://github.com/vercel/next.js/compare/v16.4.1...v16.4.2","publishedAt":"2026-10-15T20:44:37.000Z","fetchedAt":"2026-10-15T22:10:37.241Z","url":"https://github.com/vercel/next.js/releases/tag/v16.4.2","media":[],"coverageCount":0},{"id":"rel_dLlbBnoJD1rKLyTZepjhb","version":"v16.4.1","type":"feature","title":"v16.4.1","summary":"Fixes two critical unauthenticated remote code execution flaws — in use cache functions returning typed arrays and in the Image Optimization API when SVG files are used — plus a high-severity denial of service in App Router using Server Actions.","titleGenerated":"Next.js v16.4.1 patches two critical unauthenticated RCE vulnerabilities","titleShort":"Critical unauthenticated RCEs patched in use cache and Image Optimization","breaking":"none","importance":5,"content":"This release contains security fixes for the following advisories:\r\n\r\nCritical:\r\n- [Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays](https://github.com/vercel/next.js/security/advisories/GHSA-673q-mjm6-r5xr)\r\n- [Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used](https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw)\r\n\r\nHigh:\r\n- [Denial of Service in App Router using Server Actions](https://github.com/vercel/next.js/security/advisories/GHSA-p3m5-59mp-jv5r)\r\n","publishedAt":"2026-10-14T17:47:59.000Z","fetchedAt":"2026-10-14T17:57:43.873Z","url":"https://github.com/vercel/next.js/releases/tag/v16.4.1","media":[],"coverageCount":0},{"id":"rel_CJ2rniZrAqIgxNq_4y9jt","version":"v15.5.28","type":"feature","title":"v15.5.28","summary":"Fixes a critical unauthenticated remote code execution vulnerability in the Image Optimization API when SVG files are used, plus a high-severity denial of service in App Router using Server Actions.","titleGenerated":"Next.js v15.5.28 patches critical RCE in Image Optimization API","titleShort":"Critical RCE in Image Optimization API patched","breaking":"none","importance":5,"content":"This release contains security fixes for the following advisories:\r\n\r\nCritical:\r\n- [Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used](https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw)\r\n\r\nHigh:\r\n- [Denial of Service in App Router using Server Actions](https://github.com/vercel/next.js/security/advisories/GHSA-p3m5-59mp-jv5r)\r\n","publishedAt":"2026-10-14T17:47:49.000Z","fetchedAt":"2026-10-14T17:57:43.873Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.28","media":[],"coverageCount":0},{"id":"rel_MzQV-8HgE0eGcwy6HJnLT","version":"v16.4.0","type":"feature","title":"v16.4.0","summary":"Check out the [16.4 announcement post](https://nextjs.org/blog/next-16-4) to get an overview of the changes.\r\n\r\n### Core Changes\r\n\r\n- Show compiler pl...","titleGenerated":null,"titleShort":null,"breaking":"unknown","importance":null,"content":"Check out the [16.4 announcement post](https://nextjs.org/blog/next-16-4) to get an overview of the changes.\r\n\r\n### Core Changes\r\n\r\n- Show compiler plugin warning in more situations: #75682\r\n- fix(scripts): correct typo in rm.mjs error message: #87015\r\n- docs: improve clarity and punctuation in README: #86096\r\n- Fix debug build paths Pages Router support entries: #93529\r\n- bundle-analyzer: record historical snapshots on each analyze run: #93520\r\n- fix: detect proxy.ts correctly with compound pageExtensions: #93246\r\n- feat(turbopack): support `false` values for `resolveAlias` config: #93331\r\n\r\n### Misc Changes\r\n\r\n- docs: correction to dynamicParams migration: #96624\r\n- docs: proxy event argument: #96435\r\n- docs: remove experimental note from runtime prefetching: #96615\r\n- Preserve per-segment prefetching after dynamic navigation: #96583\r\n- Rename static generation stream option to waitForAllReady: #96564\r\n- Remove obsolete static generation plumbing: #96563\r\n- [turbopack] Drop dead writes to `exports`: #96381\r\n- [turbopack] Ignore writes to `exports` after a `module.exports = {}` writes: #96380\r\n- [turbopack] Add test for sideEffects with optimizePackageImports: #96549\r\n- [turbopack] Strip leading BOM before parsing CSS: #96678\r\n- Upgrade React from `cbb046ab-20260731` to `7dfc7ccd-20260803`: #96550\r\n- docs: use relative doc links in instant-navigation error pages: #96672\r\n- Turbopack: terminate failed plugin worker threads: #96592\r\n- Fix HTML-limited bot matching in prerender bypass rules: #96584\r\n- [ci] Fix create_release_branch for new repo permissions: #96641\r\n- test: skip action module instance deploy test: #96629\r\n- docs: quote the dynamicParams build error in a blockquote: #96633\r\n- [react-sync] Open pull requests as the bot that authors the commits: #96682\r\n- [Bench] Fixes for pure Fizz bench: #96771\r\n- Derive foreground cache revalidation from the consumer: #96731\r\n- Fix race when navigating Back before hydration: #96252\r\n- docs: present each Skill as steps in the AI agents guide: #96751\r\n- Reuse completed cache entries for the rest of a request: #96727\r\n- Upgrade React from `7dfc7ccd-20260803` to `11eddecd-20260805`: #96735\r\n- Remove WorkStore execution mode: #96674\r\n- Remove cache revalidation execution mode reads: #96670\r\n- Separate App Route render and prerender pipelines: #96662\r\n- Remove App Page execution mode reads: #96660\r\n- test: fix missing await in css-chunking test: #96725\r\n- docs (Skills): stop assuming app/ at the root and port 3000: #96696\r\n- Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808\r\n- Use Tailwind Turbopack loader in create-next-app: #96606\r\n- docs: instant navigation quick start with an adoption prompt: #96663\r\n- Separate App Page render and prerender pipelines: #96659\r\n- Move App Router execution intent to entrypoints: #96640\r\n- Pass explicit render capabilities through App Render: #96576\r\n- Pass explicit prefetch hint policy through App Render: #96572\r\n- Replace WorkStore isStaticGeneration with executionMode: #96570\r\n- docs: document ! exclusion and src/ prefix for --debug-build-paths: #96703\r\n- Change `loadManifest` to return undefined with `handleMissing`: #96530\r\n- Refactor server from CacheNodeSeedData -> TransportData: #96679\r\n- Unify full/partial navigation response types: #96439\r\n- Unify RouteTree and CacheNodeSeedData on the client: #96406\r\n- Consolidate Promise.withResolvers polyfills: #96772\r\n- [ci] Open automated update pull requests with `nextjs-bot`: #96683\r\n- Require Cache Components for Instant Navigation testing: #96745\r\n- Fix use cache over- and under-invalidation in dev: #96235\r\n- Fix which pages the dev server announces, and when: #96250\r\n- docs: update redirected links to current targets: #96723\r\n- Fix(deployment-id): prevent exception on old webkit: #94604\r\n- [fragment-scroll] Remove `config.experimental.appNewScrollHandler`: #95602\r\n- [turbopack] Enable reexport-unknown execution test: #96774\r\n- ci: stop publishing @vercel/devlow-bench: #96887\r\n- fix(turbopack): name the module in the non-ESM-placeable error, and stop duplicating the importer in traces: #96560\r\n- fix(turbopack): support `type: 'text'` in rules, and error on binding imports of non-ESM modules: #96558\r\n- Lint devlow-bench with the root eslint config: #96871\r\n- Remove `turbopack/packages` and relocate devlow to `packages/`: #96860\r\n- Flush pending revalidations for forwarded action error responses: #96945\r\n- Handle Server Actions on dynamic PPR fallback routes: #96932\r\n- Turbopack: Improve how DiskWatcher is configured and fix polling watcher bugs: #96440\r\n- Turbopack: Allow DiskWatcher to use a mocked DiskFileSystem, add a small unit test: #96353\r\n- [turbopack] Add e2e test that uses component chunks + workers: #96556\r\n- [turbopack] Support `experimental.serverMinification` & expand `experimental.turbopackMinify`: #96578\r\n- Add a `turbopackChunking` documentation page for pages router: #96698\r\n- [turbopack] Don't run Webpack tests on Turbopack-only changes: #96656\r\n- [turbopack] Enable the shared runtime by default: #96778\r\n- [turbopack] Enable CJS tree shaking by default: #96779\r\n- refactor: clean up places that needlessly list all RenderStages: #96907\r\n- Fix the documented invocation for generating tests non-interactively: #96896\r\n- Make NextConfigComplete typing more accurate: #96700\r\n- Upgrade to swc 75: #96702\r\n- docs: link View Transitions skill on skills.sh and clarify the example prompt: #96863\r\n- [ci] Reset the turbopack deploy test project in the weekly cron: #96822\r\n- docs: add authentication with Cache Components guide and iron-session example: #95802\r\n- [turbopack] Fix a potential deadlock in scope_and_block: #95695\r\n- Remove the turbopack-build-events trace span, use `next build` instead: #96746\r\n- docs: add `export const dynamic = 'force-static'` to Route Handlers example on Static Exports: #96964\r\n- [turbopack] Follow re-exports for side-effect free async modules: #95993\r\n- [turbopack] Treat constants with values referencing other values as unsafe: #96190\r\n- [refactor] Rename `encodeCacheTag` to `encodeHeaderSafe`: #96936\r\n- Fix formatting of Google Fonts section in documentation: #88447\r\n- Fixing a bug - typo issue fixed: #97141\r\n- examples: fix Webiny API env variable name: #97134\r\n- docs: fix Link prefetch grammar and Client Components wording: #97132\r\n- Use emitted app entries for post-build processing: #97139\r\n- docs(mdx): fix package name in .md handling section: #97131\r\n- [turbopack] Reduce native React Compiler work: #96820\r\n- docs: rename repo to repository for consistency: #87849\r\n- Fix typo in Data Access Layer section: #87202\r\n- docs: runtime prefetching -> optimizing prefetching: #96934\r\n- [CC] Track APIs that cause incompatible static/app shells: #97040\r\n- Fix client component loading span timing: #96455\r\n- Trace development route compilation: #96454\r\n- Prefix `'use cache'` debug logs with the full directive: #97037\r\n- Revert \"[turbopack] Enable CJS tree shaking by default (#96779)\": #97018\r\n- Revert \"[turbopack] Follow re-exports for side-effect free async modules\": #97009\r\n- [fragment-scroll] Rename `ScrollAndMaybeFocusHandler` to `ScrollHandler`: #96828\r\n- Trace development route preparation: #96453\r\n- test: cleanup Turbopack snapshot config: #97013\r\n- Remove unused htmlLimitedBots from renderOpts: #96701\r\n- fix(turbopack): point at the glob that matched a file with no module type: #96561\r\n- [turbopack] Bail CJS tree-shaking on `var x = module.exports = {}`: #97130\r\n- docs: server client and directives: #96145\r\n- docs: clarify client cache freshness after hydration: #97180\r\n- docs: create client-side fetching guide: #96341\r\n- Turbopack: accept a module type argument for import.meta.glob: #96991\r\n- docs: align Cache Components authentication guide title: #97143\r\n- test: re-enable a few more passing NFT unit cases: #97017\r\n- [turbopack] Do the CJS analysis needed for scope hoisting: #95826\r\n- Remove legacy PPR code paths: #96868\r\n- Use Cache Components as the internal PPR signal: #96827\r\n- Make legacy PPR paths explicit: #96753\r\n- fix: typos in code comments: #97137\r\n- Fix spelling in two comments: #97136\r\n- Decouple loader tree construction from children ordering: #97192\r\n- Bump lightningcss: #97159\r\n- Update gh-stack skill guidance: #97163\r\n- [test] Unflake `use-cache-custom-handler-dev` tests: #97187\r\n- Forward a build-container pin to deploy-test deployments: #97191\r\n- Fix shared Turbopack runtime initialization race: #97215\r\n- Fix stale data after navigation despite revalidation: #95439\r\n- [turbopack] Only use the shared runtime by default on canary: #97208\r\n- test: fix 'ouput' typo in parseIdsFromCliOutput: #97266\r\n- Add the mtime fallback back: #97268\r\n- Allow issue participants to request reopening: #96947\r\n- [turbopack] Document clusters for chunking: #97267\r\n- Link to issues in the contribution guide and discourage trivial PRs: #97188\r\n- Stop serializing hmr version state: #97146\r\n- [turbopack] Add `clusters` to chunking heuristics: #95157\r\n- [test] Redirect the deployment host in-process for proxy deploy tests: #97260\r\n- [test] Unflake two `cache-components-dev-streaming` assertions: #97246\r\n- [test] Unflake `use-cache-default-profile-expire-zero` tests: #97250\r\n- Allow running `ncc` before `pnpm build`: #97234\r\n- Invalidate deferred Webpack entry sources: #97205\r\n- Unify how a response's shell and full payloads are written: #96878\r\n- Convert per-segment prefetches to NavigationFlightResponse format: #96877\r\n- Unify how server responses are written into the client cache: #96876\r\n- Convert tree prefetches to NavigationFlightResponse format: #96788\r\n- fix(next/image): skip 0-byte entries when initializing disk LRU cache: #94068\r\n- Update authentication diagram URL: #97320\r\n- Add a script for adopting fork pull requests: #97252\r\n- Migrate napi-rs bindings from v2 to v3: #95412\r\n- Upgrade React from `11eddecd-20260805` to `22e4f993-20260811`: #97249\r\n- Add RDC compression rollout controls: #97247\r\n- [testmode] Fix infinite recursion in testmode passthrough fetch: #96525\r\n- Turbopack: add imports_wildcard NFT unit test: #97373\r\n- Turbopack: improve chunk_item_content docs: #97370\r\n- test: Reenable i18n-api-support deploy test for Turbopack with adapters: #96898\r\n- Trace instrumentation startup: #97296\r\n- Trace route module preparation: #97295\r\n- Trace route module loading: #97318\r\n- fix(deps): bump `satori` and `@vercel/og`: #97276\r\n- [test] Cover `'use cache: private'` in route handlers: #97349\r\n- Fix missing Pages runtime in adapter Pages API outputs: #96819\r\n- docs: align SPA guide reducer example with React conventions: #97341\r\n- Update blob version.: #97342\r\n- Upgrade React from `22e4f993-20260811` to `eb8feb71-20260814`: #97382\r\n- Adopt SelectedMetadata for metadata rendering: #97387\r\n- fix(next/image): reject empty image on read/write to disk cache : #97278\r\n- Turbopack: remove stale manifests for deleted routes: #97333\r\n- Turbopack: make unreachable codegen more generic: #97385\r\n- Wait for back-before-hydration recoveries in the browser: #97321\r\n- Extract metadata resolution primitives: #97388\r\n- test: update React 18 redbox snapshot: #97415\r\n- Remove server route matcher stack: #94157\r\n- Anchor the async local storage instances to global symbols: #97255\r\n- test: deflake use-cache-size-zero warm reload: #97421\r\n- Scaffolding for concurrentRouterQueue flag: #97413\r\n- Reorganize client router modules: #97402\r\n- fix(turbo-persistence): allow 32-bit usize conversion: #97288\r\n- test: restore missing NFT `exports*` unit fixtures: #97459\r\n- [ci] Fix backport canary release dispatch: #97383\r\n- turbo-tasks-backend: Enforce that tasks exist when accessing them: #96043\r\n- turbo-tasks-backend: add persistence delete/tombstone plumbing for GC: #95975\r\n- turbo-persistence: add key-value tombstones for MultiValue families: #96929\r\n- Trace lazy App Route module loading: #97439\r\n- [ci] Wait for the `next` version to be available on npm before deploy tests: #97460\r\n- docs: fix stale Dev Overlay README link in contributing guide: #97486\r\n- docs: app router reference accuracy: #97477\r\n- test: Don't wait trying to load non-existing images: #97488\r\n- test: cover dynamic APIs with i18n base path: #97367\r\n- style(examples): remove redundant justify-content declaration: #97222\r\n- docs: rename Vercel Edge Config to Global Config in redirecting guide: #97456\r\n- fix: improve form accessibility by associating labels with inputs: #96335\r\n- [docs] fix: grammar typos in linking and navigating guide: #95544\r\n- fix(examples): correct error message typo: #97223\r\n- docs: fix typos in example links: #97149\r\n- Model prerenders as render candidates: #97431\r\n- Turbopack: support character class ranges in regex: #97502\r\n- docs: warn when catching permanentRedirect: #97496\r\n- Remove the development debug channel persistence: #97510\r\n- Stop the browser from restoring stale pages in development: #97505\r\n- Turbopack: gracefully handle outputFileTracingIncludes matching a symlink: #97507\r\n- docs: mention Valibot as validation library option in forms guides: #97468\r\n- [PPF] Remove `unstable_eager`: #97524\r\n- [PPF] Do not mark complete shell requests as partial: #97503\r\n- fix: add accessible label to icon-only link: #96334\r\n- Fix stale cross-references in skills/: #97566\r\n- docs: generateMetadata values should be serializable with use cache: #97551\r\n- Move preview props into separate manifest: #96004\r\n- docs: adjust interactive app guide: #97558\r\n- Turbopack: allow TURBOPACK_PRINT_CHUNK_GROUPS in release builds: #97515\r\n- [test] Point next-image-legacy images at a reachable endpoint: #97545\r\n- test: improve error-on-next-codemod-comment flakiness: #97553\r\n- Turbopack: cross-module constants: #90300\r\n- test: better isolate concurrent-install suite: #97546\r\n- docs: outlining and lcp: #96942\r\n- Turbopack: More aggressively debounce filesystem watch events if we detected changes to node_modules: #96116\r\n- docs: document metadata pagination field: #95509\r\n- docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645\r\n- Upgrade React from `eb8feb71-20260814` to `eafeac09-20260819`: #97636\r\n- Turbopack: rename to use turbopack: no side effects: #94427\r\n- refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360\r\n- [PPF] unstable_navigation(): #96908\r\n- [PPF] Scaffold unstable_navigation(): #97236\r\n- docs: Explicit cache output description: #97548\r\n- Improve Cache Components sync IO migration guidance: #97572\r\n- [test] Use a non-native stub for the server externals list test: #97614\r\n- Avoid GitHub API rate limits for create-next-app examples: #97612\r\n- [test] Cover the prerender worker-thread backend with an addon we control: #97543\r\n- [test] Convert the `prerender-native-module` suite to local fixture packages: #97542\r\n- [test] Replace the `turbopack-reports` `sqlite3` dependency with a local addon fixture: #97541\r\n- [test] Drop the dead `sqlite3` build approval from the `sharp-basic` suite: #97540\r\n- Remove HmrTarget: #97253\r\n- Keep HMR instructions typed until serialization: #96569\r\n- Serialize frozen collections by value only: #96686\r\n- feat(turbopack): isolate HMR listeners across microfrontends: #95997\r\n- Turbopack: deduplicate Pages Router app chunks: #97664\r\n- [react-sync] Check assignability before assigning the actor: #97638\r\n- fix: preserve trailing slash during export MPA fallback: #97613\r\n- Turbopack: Split the read and write codepath data structures for symlinks: #97395\r\n- Turbopack: Show last modified file when waiting for the filesystem to settle: #97648\r\n- docs: fix parallelRouteKey parameter name in useSelectedLayoutSegment(s): #97710\r\n- Turbopack: Avoid cloning paths in fs watcher if the path is already in a map: #97655\r\n- Remove generated error codes: #97687\r\n- [PPF] Instant validation for unstable_navigation(): #97309\r\n- Turbopack: trace graceful-fs calls: #97694\r\n- Migrate some async blocks to async closures: #97666\r\n- turbo-tasks: add scope_unbounded, a scoped execution primitive that allows more work to be discovered: #95974\r\n- test: make app-document-import-order more robust: #97682\r\n- Add a Turbopack error for missing root layouts: #97639\r\n- Improve Partial Prefetching adoption checks: #97637\r\n- test: stabilize poisoned proxy error overlay: #97609\r\n- docs: correct the upper stale bound for App Shell exclusion in cacheLife: #97653\r\n- docs: Adapters entry page lists its children pages twice: #97677\r\n- [PPF] unstable_prefetch(): #97622\r\n- [PPF] Scaffold unstable_prefetch(): #97618\r\n- docs: clarify beforeInteractive placement for root layouts: #97643\r\n- fix(turbopack): give eager `import.meta.glob` values the ESM namespace: #96559\r\n- introduce an options struct for constructing backend storage: #97284\r\n- [devtools] Fix indicator dragging on touch screens: #97723\r\n- Add next/cache-handlers types entrypoint: #97592\r\n- Remove unused return values from getPageStaticInfo: #97661\r\n- [turbopack] defer NFT module content hashes: #97773\r\n- test: deflake basePath external navigation: #97611\r\n- docs(adapters): document assetsHashes and routing.middlewareMatchers: #96536\r\n- Migrate remaining async blocks to async closures: #97701\r\n- Turn off the adapter route collapses by default: #97774\r\n- Serve a run of fallback shells from one route entry: #97738\r\n- [test] Capture the route table for apps with several param shapes: #97728\r\n- Stop emitting a separate route entry for a dynamic route's RSC form: #97726\r\n- Stop emitting a redundant route per prefetch segment: #97720\r\n- [test] Capture the dynamic routes a build passes to an adapter: #97719\r\n- turbo-tasks: compile conditional cell updates once, not per cell type: #97763\r\n- Turbopack: add unit test coverage for FileSystemPath::hash_file: #97743\r\n- Record fallback cache lifetime for blocking PPR routes: #97821\r\n- Document catchError for the Pages Router: #97748\r\n- clippy: allow needless late init where it makes sense: #96410\r\n- Turbopack: emit/collect: #96631\r\n- docs: note that response headers must be set before calling handle() in a custom server: #97693\r\n- Deduplicate the regress, wat/wasmparser and base64 dependencies: #97762\r\n- perf: split cold TurboMalloc accounting paths: #97767\r\n- turbo-tasks: execute scheduled tasks inline when they are read: #96808\r\n- Revert \"Record fallback cache lifetime for blocking PPR routes (#97821)\": #97835\r\n- Sweep stale Turbopack output from distDir on dev startup: #97591\r\n- Fix metadata prefetch cache key for search params: #97729\r\n- Turbopack: Improve file existence error handling in realpath_with_links and in module resolution: #97717\r\n- Write traces with buffered synchronous IO: #96874\r\n- fix(wasm): don't enable SWC's plugin host for wasm targets: #97859\r\n- fix(turbopack-node): make process_pool inert on wasm: #97858\r\n- fix(turbopack): make the SWC wasm-plugin backend native-only: #97857\r\n- fix(turbopack-trace-utils): skip the ctrl-c handler on wasm: #97856\r\n- refactor(turbopack-cli-utils): replace crossterm with owo-colors: #97855\r\n- fix(turbo-tasks-fs): create symlinks through the WASI API on wasi: #97854\r\n- fix(turbo-tasks): compile EventListener::wait on wasm: #97853\r\n- fix(turbo-rcstr): allow the napi feature on wasm targets: #97852\r\n- fix(next-napi-bindings): detect the target, not the host, in build.rs: #97576\r\n- Stop printing a stack frame for error message text: #97829\r\n- docs: clarify revalidateTag profile expire semantics: #97836\r\n- docs: param access on use-server: #97865\r\n- docs: fix typos and correctness issues in App Router docs: #97823\r\n- Add deploy release test skill: #97563\r\n- [test] Deflake the page config test for a string config value: #97848\r\n- test: stabilize read-only page recreation: #97674\r\n- Show the errors of an AggregateError behind a cause: #97830\r\n- Upgrade React from `eafeac09-20260819` to `bd6ea412-20260824`: #97812\r\n- fix: reuse a single drain listener when piping Node streams through gzip: #97698\r\n- test: preserve server cache after compile error: #97724\r\n- Fix Turbopack resolution through chained symlinks: #97825\r\n- Add evals for whether agents actually use Next.js: #97816\r\n- evals: judge behavior instead of matching source text: #97826\r\n- Bump @vercel/agent-eval to 2.2.1: #97885\r\n- feat(turbopack): resolve `/`-rooted imports from the project directory: #97799\r\n- [ci] Use short-lived access tokens for preview-build uploads instead of static token: #97256\r\n- Turbopack: correctly trace through TypeScript `__importStar`: #97697\r\n- [turbopack] simplify ecmascript effect queue: #97771\r\n- Update default Create Next App favicon: #97634\r\n- fix: don't drop client references when the concatenated module id is 0: #97936\r\n- Replace resumed render bailout error with ReactDOM.browser behind a flag: #96844\r\n- Replace useSearchParams bailout error with ReactDOM.browser behind a flag: #96843\r\n- Replace CSRBailout error with `ReactDOM.browser` behind a flag: #96826\r\n- fix(next/image): reject non-2xx internal image responses: #97957\r\n- [test] Pin Vercel CLI to Node 20.9 compatible version: #97960\r\n- Re-enable AVIF image optimization: #97931\r\n- Don't report a client-aborted RSC stream as a render error: #96715\r\n- [PPF] Only track runtime accesses when the promise is used: #97165\r\n- Fix Turbopack re-export cycle deadlock: #97933\r\n- Port React's @gate test directive to the e2e harness: #96228\r\n- Migrate from box_patterns to deref_patterns: #97924\r\n- Turbopack: expose list of non-inlined env vars: #95310\r\n- feat(turbo-tasks-fetch): stub HTTP on wasm targets: #97585\r\n- fix(turbo-rcstr): make TaggedValue usable on wasm: #97577\r\n- docs: explain origin matching for allowedOrigins and allowedDevOrigins: #97805\r\n- Turbopack: improve Pat::Assign modelling in analyzer: #97867\r\n- Upgrade rustc to nightly-2026-08-20: #97665\r\n- Upgrade React from `bd6ea412-20260824` to `f789f203-20260825`: #97887\r\n- [test] Fix flaky build CLI output capture: #97900\r\n- turbo-tasks-backend: parent_count reference counting: #95976\r\n- Upgrade Turbopack to hashbrown 0.15: #97808\r\n- ci: skip framework tests for agent evals and skills: #97998\r\n- Expand Turbopack dev cleanup: #97833\r\n- Add Cache Components option to create-next-app: #97695\r\n- Mark deploy release test skill as internal: #97961\r\n- Turbopack: shorten CSS module class names: #97944\r\n- Prune incomplete parallel route matchers: #97108\r\n- Upgrade React from `f789f203-20260825` to `29d9d318-20260826`: #97995\r\n- docs(skills): preserve prefetched UI during Partial Prefetching adoption: #97712\r\n- Omit undeclared children slots from app routes: #97184\r\n- Turbopack: widen the chunk ident hash from 7 to 13 base38 chars: #97945\r\n- Fix request-context retention in the default use cache handler: #97941\r\n- docs: improve discovery summaries: #97982\r\n- test: add test for local font with deployment id: #97987\r\n- Retain interception route host slots: #97242\r\n- test: disable flaky sync-io-blocks-root.test.ts: #97986\r\n- [test] Drain build output before start: #97947\r\n- Expose durableUseCacheEntries config in workStore: #97926\r\n- Pages Router: Deprecate React 18 support: #97689\r\n- Turbopack: call loadActionManifest for app-route: #97921\r\n- [test] Unpin Vercel CLI version: #97974\r\n- Turbopack: don't replace single-arg calls with argument in analyzer: #95277\r\n- Turbopack: allow compiling turbopack-node without a pool backend: #97943\r\n- Support immutable static assets with `output: 'export'`: #97711\r\n- Fix build error when aliasing `typescript` to `@typescript/typescript6`: #97942\r\n- Fix optimistic routing for encoded dynamic params: #97948\r\n- Fix intercepted route params after Proxy rewrites: #97953\r\n- [PPF] Fix navigation() in prospective runtime prerenders: #98000\r\n- Revert \"test: re-enable sync IO root coverage\": #98050\r\n- Turbopack: drop rust analyzer skip annotation: #98047\r\n- Turbopack: add next_config.use_react_experimental getter: #98032\r\n- More granular cache keys for use-cache entries: #95233\r\n- [ci] Remove dormant `code_freeze` workflow: #97756\r\n- test: re-enable sync IO root coverage: #97996\r\n- [ci] Remove the unused `wrong-issue-template` workflow and action: #97749\r\n- [image-optimizer] Refactor into lightweight transform module: #97988\r\n- [ci] Remove the stale-issue workflow: #97758\r\n- [ci] Use presigned URLs to upload preview builds: #97922\r\n- Turbopack: allow `get_definable_name` to return a list: #97984\r\n- docs(examples): document env var handling in the Docker examples: #97968\r\n- Turbopack: unify `member` and `in` handling: #97985\r\n- Update outdated snapshots: #98011\r\n- Guard filesystem reads against unresolved symlinks: #97902\r\n- Turbopack: enable export mangling by default in production builds: #97676\r\n- Turbopack: mangle exported names for smaller bundle sizes: #97672\r\n- [ci] Remove the popular workflow and its action: #97753\r\n- Store keys in key order in SST blocks that omit hashes: #97480\r\n- Honor non-interactive mode in upgrade codemod prompts: #98030\r\n- Transform .mjs files with Next.js codemods: #98029\r\n- evals: stop requiring the removed viewTransition flag in agent-043: #98116\r\n- errors: shorten \"use cache\" messages and unify them into one factory: #94300\r\n- test: add adoption skill evals: #97759\r\n- Upgrade React from `29d9d318-20260826` to `ff7445e6-20260831`: #98113\r\n- [ci] Simplify `upload-preview-tarballs` workflow: #98109\r\n- devlow: use commander for cli argument parsing: #93860\r\n- [PPF] Pass in original searchParams for private-cache pages: #98041\r\n- docs: document create-next-app Cache Components prompt and flag: #97798\r\n- lazy server hmr: #96566\r\n- Fix Turbopack HMR recovery after dropped connections: #97966\r\n- test: Improve test cache handler implementations: #98098\r\n- docs: Fix the documented contract for custom cache handlers: #98039\r\n- chore: remove unused code from image optimizer: #98060\r\n- docs: add layout stability guidance for videos and iframes: #98070\r\n- tests: Improve use-cache-cross-deployment tests: #98049\r\n- turbo-tasks-malloc: report memory from mimalloc: #97761\r\n- Remove Edge runtime handling in use-cache-wrapper: #98139\r\n- Skip discussions in the `issue_lock` workflow: #98146\r\n- [ci] Fix `issue_lock`: #97755\r\n- docs: document preloading with Cache Components: #97864\r\n- chore: Remove expired sharp release age exclusions: #98120\r\n- Reduce Turbopack cache size with per-family compression: #97714\r\n- [test] Skip hooks of suites skipped by a lazy `@force-gate`: #98169\r\n- Bump swc to v77: #97407\r\n- Upgrade React from `ff7445e6-20260831` to `21c89c9f-20260901`: #98147\r\n- turbo-tasks-backend: parent_count-driven garbage collection: #97282\r\n- Remove the worker thread for turbopack builds: #96862\r\n- turbo-tasks-malloc: address review feedback on #97761: #98153\r\n- test: remove stale deploy manifest exclusions: #98051\r\n- Enable hourly next-maintainer auto-close workflow: #98225\r\n- Return client errors for unrecognized Server Actions: #98123\r\n- Add Next Maintainer auto-close workflow: #98197\r\n- perf(turbopack): skip ignored files during server tracing: #97475\r\n- docs: note that experimental.taint taints process.env: #98145\r\n- test: preserve static params during Cache Components migration: #98209\r\n- Upgrade web-vitals to v6 and report soft navigations: #97232\r\n- Upgrade React from `21c89c9f-20260901` to `f4e439e1-20260902`: #98188\r\n- Turn on the adapter route collapses by default: #98218\r\n- fix: suppress missing package manager errors in next info: #97946\r\n- Turbopack: fix `source` field in CSS sourcemaps: #88225\r\n- fix: track dynamic accesses in final runtime prerenders: #98255\r\n- docs: add API reference pages for skipProxyUrlNormalize and skipTrailingSlashRedirect: #97967\r\n- fix: route info segment overrides not updating in dev overlay: #96968\r\n- test(turbopack): remove dead top-level task unmarks: #98246\r\n- Fix flaky successive HMR changes test: #97610\r\n- docs: Remove version label from Turbopack in Pages Router: #98316\r\n- Bump to swc v78: #98268\r\n- Create next.config.ts when generating apps with `pnpm new-test`: #98364\r\n- test(evals): accept LayoutProps in App Router migration: #98365\r\n- [test] Run deploy tests against local JavaScript changes by default: #98353\r\n- [test] Resolve `workspace:*` packages to the version under test: #98330\r\n- turbo-tasks: explicit GC root anchoring + cross-session orphan reclamation: #96857\r\n- [PPF] Fix missing runtime-follow up if hints are stale: #98278\r\n- Instant validation for caches excluded from prerenders: #98342\r\n- [PPF] Model caches with `stale < MIN_SHELL_STALE` as prefetch-only data: #98339\r\n- docs: document excluding content from a prefetch in the prefetching g…: #98175\r\n- docs: add unstable_navigation and unstable_prefetch API references: #98122\r\n- Fix turbopacks webpack loader setup to support options being optional: #98270\r\n- [ci] Align build-and-deploy triggers with build-and-test: #98331\r\n- test: stabilize server action HMR update: #98322\r\n- Add version for loaders api: #98377\r\n- turbo-tasks-backend: let a GC pass wind down when it is blocking an operation: #96676\r\n- docs: preserve Next.js development state: #98276\r\n- Adds .resolve to loaders api: #98361\r\n- Turbopack: fix require handling with alternative: #98258\r\n- docs: clarify ISR with Suspense params: #98210\r\n- [cd] Update `peerDependencies` in prereleases to accept the current prerelease: #98411\r\n- test: stabilize error recovery snapshot timing: #98414\r\n- example: Use a Redis cacheHandler w/o dependencies: #95346\r\n- Support durable use-cache entries with client components: #98140\r\n- Upgrade React from `f4e439e1-20260902` to `6c0e1047-20260908`: #98363\r\n- fix: preserve repeated --require/--import flags when forking workers: #96651\r\n- ci: check that Turbopack compiles for wasm: #97588\r\n- feat(next-napi-bindings): build Turbopack for wasm: #97586\r\n- Turbopack: fix output tracing include glob traversal: #98382\r\n- test: support deploy exclusions with force gates: #98149\r\n- Fix: Turbopack CSS HMR error when editing an unmounted merged CSS chunk: #94551\r\n- Dev server: More aggresively scold users for deleting .next when we detect it while dev is running: #98253\r\n- turbo-persistence: add TURBO_PERSISTENCE_MMAP=0 to disable mmap: #97873\r\n- Fix dev route discovery startup race: #97920\r\n- Re-enable @vercel/devlow-bench publishing: #98236\r\n- test: migrate caching deploy exclusions to force gates: #98154\r\n- Typecheck the Turbopack ECMAScript runtime in CI: #98422\r\n- Fix initial Turbopack HMR update handling: #98385\r\n- Skip bundler config validation in next/jest and under test: #98392\r\n- Remove `tsec`: #98423\r\n- Stabilize scope_unbounded panic test: #98416\r\n- test: restore deployment exclusion for shared Cache Components tests: #98464\r\n- Resolve metadata independently across parallel routes: #97345\r\n- docs: preserve route behavior during Cache Components adoption: #98275\r\n- Add a fast-path to 'get_relative_path_to' for a potential common case when 'from' is empty: #98440\r\n- docs: document React browser API: #97621\r\n- Enable React browser bailout by default: #98439\r\n- [evals] Cover focused Cache Components and Partial Prefetching cases: #97813\r\n- Deflake gc_interrupt_is_self_healing: #98445\r\n- Adds this.target for webpack loaders: #98436\r\n- test(evals): validate delegated error boundary components: #98387\r\n- test: stabilize deferred entries HMR assertions: #98418\r\n- Add in warning for workers around the fsevents bug: #98447\r\n- skill: add Partial Prefetching optimizer: #96471\r\n- bundle-analyzer: add table view to single-build analyzer: #93523\r\n- bundle-analyzer: add table view to compare mode: #93522\r\n- bundle-analyzer: add compare view with treemap diff: #93521\r\n- [testmode] Stop using deprecated `url.parse`: #98194\r\n- fix(next/image): don't share the requester's socket with the internal image response: #98168\r\n- Fix duplicate background revalidation for `'use cache'`: #98446\r\n- Turbopack: Deduplicate project options documentation: #98465\r\n- Report incompatible parallel route slots: #97430\r\n- Require canonical routes for interception routes: #97428\r\n- Error when app pages do not match any route: #97401\r\n- fix(turbopack): add `get_relative_request_to` for paths used as module requests: #98497\r\n- [ci] Cleanup orphaned `next-stats-action`: #98348\r\n- [scripts] Move scripts (and benchmarks) off of `node-fetch`: #98347\r\n- [test] Move fixtures off `node-fetch`: #98346\r\n- [test] Move the harness off `node-fetch`: #98195\r\n- fix(turbopack): resolve `../` and `/`-rooted `import.meta.glob` patterns: #96557\r\n- Durable use cache: optimize env var existence checks: #98504\r\n- Adds this.mode for webpack loaders: #98532\r\n- Upgrade React from `6c0e1047-20260908` to `019019be-20260911`: #98576\r\n- feat(next/image): Add experimental imgOptMozjpeg config: #98571\r\n- [turbopack] Lazily compile dynamic imports in development (client side): #97203\r\n- fix(devtools): handle pointercancel when dragging the indicator: #98506\r\n- [ci] Show full logs under GitHub Actions debug logging: #98501\r\n- fix(typegen): merge cacheLife types into next/cache instead of shadowing it: #98252\r\n- [test] Fix `proxy-request-with-middleware` deploy test: #98553\r\n- [ci] Remove the broken Test examples workflow and its test suite: #98517\r\n- Align fallback parameter staging with shell validation: #98512\r\n- Prevent synchronous IO from entering Cached Navigations: #98511\r\n- [ci] Fix scheduled Rspack test job: #98508\r\n- [ci] Remove Turbopack test manifest pipeline: #98507\r\n- test: stabilize OpenTelemetry collector lifecycle: #98427\r\n- Make TurbopackResult payloads disjoint: #98575\r\n- Durable use cache: fix runtime env var mutation: #98558\r\n- refactor(turbopack): drop the generic on `new_atom`, and stop it copying an owned string: #98520\r\n- Serialize turbo-tasks trybuild tests: #98415\r\n- Expose App Router runtime errors over HMR: #98438\r\n- test: avoid OpenTelemetry collector socket reuse: #98632\r\n- fix: Bump vendored @mswjs/interceptors from 0.42.0 to 0.42.5: #98607\r\n- Document codemod errors and intentional migration exceptions: #98565\r\n- Unify TODO markers for codemods and skip adoption-only codemods for upgrade: #98560\r\n- Optimize strict module factory chunks: #98421\r\n- Sort batched chunk items globally by path: #98433\r\n- test(turbopack): strongly read test operations: #98247\r\n- Add `next dev` wait for Turbopack shutdown: #98646\r\n- docs: document default turbopack.resolveExtensions: #98627\r\n- test: migrate package CSS side-effects coverage: #98635\r\n- Improve tree shaking through Next.js module wrappers: #98638\r\n- Trace export usage through client component proxies: #98621\r\n- fix(turbopack): trace cyclic modules to explicit entries: #98661\r\n- Use default pnpm package import method: #98703\r\n- Fix constant inlining in shorthand properties: #98662\r\n- test(turbopack): add strong read operation roots: #98248\r\n- Use pnpm for isolated test installs: #98425\r\n- [turbopack] Forward usage information across re-exports: #96282\r\n- [turbopack] Use options object for ESM references: #98680\r\n- test: enable verified runtime deploy tests: #98457\r\n- test: enable verified assets deploy tests: #98527\r\n- test: enable verified pages-router deploy tests: #98526\r\n- test: enable verified tooling deploy tests: #98525\r\n- test: enable verified app-router deploy tests: #98524\r\n- test: enable verified caching deploy tests: #98523\r\n- Fix unexpected query parameters in adapter deployments: #98584\r\n- Keep never-prerenderable params out of self-hosted shells: #98612\r\n- Fix addMissingDependency: #98588\r\n- docs: clarify metadata support in root not-found: #98670\r\n- Pages Router: do not return the `__appRouter` prefetch marker as route info on shallow navigation: #98187\r\n- Pages Router: key the client router filter prefetch marker by the `as` path: #98182\r\n- docs: add an intro paragraph to the glossary: #98654\r\n- Fix App Router locale path matching with Pages i18n: #98095\r\n- Upgrade React from `019019be-20260911` to `ff8f88fc-20260915`: #98693\r\n- Store code generation AST paths in a shared trie: #98581\r\n- Turbopack: Remove wasmer from lockfile by deleting dead feature option from our wasm crate: #98761\r\n- Prefer using join over try_join when you don't want a vec: #98547\r\n- Preserve committed app route response status during fallback: #98649\r\n- docs: scope React cache() guidance to the render pass: #98741\r\n- fix(next-custom-transforms): never place generated imports before directives: #98717\r\n- Pin tasks during construction: #98688\r\n- fix(use-cache): track root params read in \"use cache\" as vary params: #98674\r\n- [test] Fix Webpack deployment failures in PostCSS tests: #98710\r\n- Revert \"Fix App Router locale path matching with Pages i18n\": #98715\r\n- Nudge the agents for future defaults adoption: #98721\r\n- Add future defaults upgrade coverage for `next upgrade --ai`: #98643\r\n- Nudge the agents for latest version upgrade: #98640\r\n- Add \"latest\" upgrade coverage for `next upgrade --ai`: #98633\r\n- Nudge the agents for security vulnerable version upgrade: #98637\r\n- Add `next upgrade --ai` and security vulnerability coverage: #98562\r\n- agents: Add a `--comments-only` flag to `pr-status` script, trim down context bloat in AGENTS.md: #98781\r\n- Keep guards across restore owner handoff: #98700\r\n- [turbopack] Track webpack loader build dependency files: #98777\r\n- Replace lzzzz with lz4_flex: #98799\r\n- Bump to swc v79: #98809\r\n- [PPF] Fix unnecessary runtime prefetch with prefetch={true}: #98651\r\n- Keep metadata rendering stable across streaming modes: #97440\r\n- [test] Expand root-param navigation regression coverage: #98731\r\n- docs: rewrite the bots and crawlers section in the caching guide: #98782\r\n- Fix isStableBuild() treating commit preview tarballs as stable: #98811\r\n- perf(turbo-persistence): shard meta files by family: #97703\r\n- turbo-persistence: assorted read-path cleanups: #97797\r\n- turbo-persistence: give key block searches a dense region of their own: #97705\r\n- Introduce config options for Turbopack GC: #98378\r\n- Persist resurrected tasks as new tasks: #98729\r\n- Rspack: Remove bincode dependency from rspack by way of turbo-unix-path: #98855\r\n- Pin tasks across restore waiter handoff: #98728\r\n- test: honor skipStart for Vercel deployments: #98776\r\n- Use internal prefix for Turbopack shutdown env: #98747\r\n- test: retry waiting for ISR fallback in prefetch-static-shell: #98884\r\n- Fix generated Turbopack GC option docs: #98888\r\n- Add agent feedback behavior evals: #98887\r\n- Add experimental agent feedback workflow: #98582\r\n- Clean up unnecessary output asset creation: #98834\r\n- Properly disable laziness on next/dynamic: #98828\r\n- Set `experimental.agenticAutoUpgrade` after successful upgrade: #98871\r\n- example(cache-handler-redis): fix connection leak, hangs on a down Redis, and cross-page tag invalidation: #98716\r\n- Do not check Node version while agentic upgrade: #98852\r\n- test: run cargo unit tests with miri as well: #97535\r\n- test: unflake instant-validation: #98854\r\n- Preserve closed-parameter restrictions in client route prediction: #98889\r\n- [test] Fix deployment tests that relied on implicit startup: #98935\r\n- Turbopack: Add support for specifying additional roots: #98003\r\n- Turbopack: Add symlinks and additional roots to NFT metadata: #98469\r\n- Enable AI upgrade for canary: #99001\r\n- fix(turbo-persistence): preserve write errors on writer drop: #98840\r\n- Skip slow valued tombstone test under Miri: #98992\r\n- Improve the agent feedback review flow: #98937\r\n- Run AI upgrades with the latest official canary: #98870\r\n- test: move whole development-only suites out of e2e: #98842\r\n- Fix `instant-false` codemod to run on route segment filenames: #98880\r\n- test: migrate legacy deployment exclusion callers: #98473\r\n- Split revalidation errors by execution context: #98993\r\n- Enable strict route matching by default: #97397\r\n- Surface agent feedback gate connection failures: #98991\r\n- Generalize the build-time generator work-unit store name: #98891\r\n- Use structural React keys during server rendering: #98944\r\n- Upgrade React from `ff8f88fc-20260915` to `59aff3e1-20260918`: #98897\r\n- Remove unused `hasWarnings` and `warnings`: #96956\r\n- [PPF] Scaffold `unstable_ensureStatic` segment config: #98190\r\n- [agent-feedback] Respect CI and telemetry opt-out: #99062\r\n- Fix prefetch loop when a predicted route redirects: #98998\r\n- Fix dev overlay header layout on small screens: #99049\r\n- [PPF] Separate tracking of runtime data accesses for shells and prefetches: #98129\r\n- Harden `next/og` SVG serialization: #99061\r\n- test: clarify dev-only intent of duplicate Sass warning test: #98917\r\n- test: enable upward distDir deployment coverage: #98886\r\n- test: remove redundant deployment skips from mode-guarded suites: #98908\r\n- Turbopack: trace static project files referenced by packages: #98712\r\n- Durable use cache: fix next/image pulling in NEXT_DEPLOYMENT_ID: #98739\r\n- Unify hydration error tree details: #99008\r\n- Turbopack: forward module graph, entrypoint write, and emit spans to the JS trace: #98408\r\n- Fix startTime and shutdown delivery of forwarded Turbopack trace spans: #98426\r\n- Turbopack: loader change invalidation: #95732\r\n- perf: optimize CSS graph cycle removal: #98860\r\n- Use AGENTS.md for managed agent instructions: #99043\r\n- Turbopack: analyze mode tracing imports only: #98825\r\n- Turbopack: compact re-export registration: #98617\r\n- test: Add test for ESM and CJS exports of `next/*` APIs: #98882\r\n- Keep cached root parameters out of generic fallback shells: #98950\r\n- Fix missing content in Cached Navigations: #98767\r\n- [turbopack] Track members across namespace re-exports: #96396\r\n- [PPF] Implement `unstable_ensureStatic = \"shell\" | \"prefetch\"`: #98191\r\n- [PPF] Validate `unstable_ensureStatic` nesting: #98357\r\n- Replace lerna task-runner usage with pnpm: #99040\r\n- [cd] Fix release branch gate and drop dead lerna publish config: #99039\r\n- Turbopack: fix \"ModuleId not found for ident\" regression: #99090\r\n- Fix private-cache segment reuse across root params: #98810\r\n- Turbopack: fix `Unknown module type` error for imports in webpack loaders: #99088\r\n- Nudge future defaults upgrades for manual `next dev|build`: #98874\r\n- Nudge latest version upgrades for manual `next dev|build`: #98873\r\n- Nudge security upgrades for manual `next dev|build`: #98872\r\n- Upgrade React from `59aff3e1-20260918` to `8b0da1c6-20260922`: #99059\r\n- refactor(turbo-rcstr): drop unsupported 16-byte pointer width: #98355\r\n- test(turbo-tasks-backend): run the db_versioning tests on wasm: #97901\r\n- fix(turbo-tasks): let parking_lot block on wasm instead of panicking: #97860\r\n- test(turbo-tasks): run the wasm tests with a Node wasi host: #97789\r\n- [cd] Skip the release job when no new commits warrant a release: #98664\r\n- [test] Add fallback param deployment regression coverage: #98883\r\n- Turbopack: mangle exports behind an escaping namespace via the facade: #97770\r\n- test(dev): add dedicated compiler polling coverage: #97673\r\n- build(turbopack): upgrade notify to 9.0.0-rc.5: #98737\r\n- test(turbopack): add polling to filesystem watcher fuzzer: #98863\r\n- test(turbopack): fix filesystem watcher symlink expectations: #98983\r\n- test(turbopack): fix filesystem watcher read-write tracking: #98982\r\n- Don't re-request the App Shell to upgrade an ISR fallback: #94808\r\n- Fix unstable ensure static task annotation: #99075\r\n- test: update React 18 hydration error snapshots: #99073\r\n- Remove redundant unsafe_ignore annotations: #98961\r\n- Remove TraceRawVcs: #98953\r\n- test(turbopack): remove remaining test unmarks: #98376\r\n- Add experimental custom webpack support: #98862\r\n- Default agentic upgrades to a separate worktree: #99111\r\n- Improve agent upgrade failure message for missing app: #99117\r\n- Preserve error boundaries in on-demand partial prerenders: #99051\r\n- Preserve error boundaries during on-demand prerendering: #99037\r\n- docs: clarify Turbopack ModulePart export examples: #99104\r\n- Add some more verification and safety rules around custom `distDir`: #98997\r\n- Preserve closed-route admission across cache misses: #98964\r\n- Move suspension into operation guard: #99053\r\n- [agent-feedback] Shorten managed agent instructions: #99065\r\n- docs: clarify Cache Components build output: #98274\r\n- Update Rust namespace re-export snapshots: #99106\r\n- [ci] Skip preview tarball upload when the artifact is missing: #98713\r\n- [cd] Retry preview tarball uploads with backoff and richer diagnostics: #99060\r\n- Promote next analyze command: #99074\r\n- [ai-upgrade] Remind the agent to report the nudge: #99127\r\n- Tune Node server chunking for require overhead: #99120\r\n- Turbopack: fix another \"ModuleId not found for ident\" regression: #99102\r\n- test: enable deploy coverage for TypeScript config errors: #98849\r\n- test: enable deploy coverage for routing build errors: #98848\r\n- test: enable deploy coverage for cache build errors: #98847\r\n- Turbopack: chunk each layout segment once in production: #99100\r\n- bundle-analyzer: exclude traces from output types: #98536\r\n- turbo-tasks-gc: Defer most aggregation graph management until after GC has settled: #98591\r\n- Skip ESLint migration when scripts do not use next lint: #99103\r\n- Turbopack: pass RcStr to AnalyzeIssue: #99166\r\n- Use graph-backed codegen for client proxies and WASM loaders: #99115\r\n- [PPF] Instant validation for `ensureStatic = \"shell\" | \"prefetch\"`: #98249\r\n- Fix flaky lazy-dynamic-imports.test: #99057\r\n- [test] Skip flaky deploy tests: #99156\r\n- [cd] Tolerate 409 when uploading preview tarballs: #99091\r\n- [test] Fix new deploy suites: #99162\r\n- Provide only the relevant context for agent upgrade: #99189\r\n- Turbopack: Add support for additionalRoots to deployment adapters: #99015\r\n- Use Sonnet 5 with 1M context for AI upgrade handoff: #99183\r\n- docs: font per-call preload scope and the declarations font-family override: #99167\r\n- Revert \"Add experimental custom webpack support\": #99227\r\n- test: stabilize lazy dynamic import error overlay: #98730\r\n- turbo-tasks-gc: tear down reverse edges when collecting a task: #99145\r\n- Sequence CI for branch-based PR stacks: #99086\r\n- Prefetch scheduler mirrors the navigation's tree walk: #98975\r\n- Separate route structure comparison from param comparison: #98974\r\n- Store the head as its own CacheNode: #98973\r\n- Record which params a CacheNode's data depends on: #98972\r\n- Use RouteTree<T> for CacheNode tree: #98971\r\n- Remove the page/layout distinction from RouteTree: #98970\r\n- Fix root predicates: #98942\r\n- [turbopack] only remove followers if they are actually removed as children: #98843\r\n- turbo-tasks-backend: simplify the collectibility predicate and collect transient tasks: #98615\r\n- turbo-tasks-gc: Invalidating a deleted task should be a no-op: #98614\r\n- Avoid decoding prerender matcher parameters twice: #99121\r\n- Prepare `'use cache'` for static root-param tracking: #99239\r\n- [test] Adjust the prerender-encoding open fallback gate for non-adapter deploys: #99240\r\n- Turbopack: avoid project-wide traces from package directories: #99238\r\n- Hoist resolved pathname into app page route match: #99259\r\n- docs: papercuts in image API reference: #99256\r\n- test: run the TypeScript version warning suites in deploy: #99195\r\n- test: drop skipDeployment where another gate already excludes deploy: #99194\r\n- bundle-analyzer: suspend while loading analyzer data: #98535\r\n- Fix Server Actions hanging after navigation to PPR pages: #99252\r\n- Fix blurry bundle analyzer treemap on low-DPI displays: #99197\r\n- Rename bundle analyzer snapshot naming option: #99251\r\n- Reduce stacked PR gate polling and use ts-jest: #99215\r\n- Name the internal trace server process: #99257\r\n- test: enable deploy coverage for asset and compiler errors: #98850\r\n- test: consolidate duplicate mode branches in build error tests: #99135\r\n- test: snapshot the proxy-runtime build error output: #99136\r\n- Avoid obsolete pnpm overrides in pack-next: #99199\r\n- bundle-analyzer: move comparison state into URL: #98530\r\n- simplify `Transition` by removing dead members: #94467\r\n- fix: respect metadata streaming policy in Edge SSR: #99128\r\n- Avoid facade splits solely for export mangling: #99285\r\n- test: forward __NEXT_PARTIAL_PREFETCHING to test-deploy: #99275\r\n- Turbopack: Allow webpack loaders to cross filesystem roots when reading dependencies: #99202\r\n- Explain prerelease security upgrade limits: #99230\r\n- Support latest agentic upgrades on prerelease channels: #99223\r\n- Allow agentic upgrades without Git: #99217\r\n- Show security upgrade insights in DevTools: #99002\r\n- Use focused npm advisories and nudge only for ready upgrades: #99222\r\n- [test] Stabilize middleware revalidation test: #99378\r\n- test: scope loader build dependency update to Turbopack: #99380\r\n- Remove CLAUDE.md symlinks in favor of AGENTS.md: #98910\r\n- Align ExecuteContext task accessor names: #99258\r\n- [test] Stabilize responsive dev overlay header layout test: #99376\r\n- Turbopack: skip trimmed side-effect imports in SideEffectsModule: #95781\r\n- Turbopack: preserve import `with` clauses when direct-binding: #95529\r\n- Turbopack: fix split_module correctness for app-router: #95522\r\n- Turbopack: fix empty tree-shake chunks desyncing part ids (#93424): #95516\r\n- Fix custom cache handlers missing on initial requests: #99372\r\n- Allow Draft Mode on unlisted closed routes in adapter deployments: #99370\r\n- Fix bundle analyzer source table delta sorting: #99369\r\n- test: fix stale snapshots after `unstable_{prefetch,navigation}` rename: #99371\r\n- Virtualize bundle analyzer source table: #98539\r\n- [PPF] Remove leftover debug log in router: #99365\r\n- Remove unstable_ prefix from navigation() and prefetch(): #99241\r\n- Lazy dynamic imports for ssr: #98836\r\n- Refine the Security Insight upgrade prompt: #99354\r\n- [PPF] `ensureStatic = \"navigation\"`: #99171\r\n- docs: use prefetch={true} for links to ISR pages with Cache Components: #99261\r\n- Add agent feedback to create-next-app defaults: #99119\r\n- Make next-dev-loop browser headless by default: #98318\r\n- [test] Extend timeout for tests barely below it: #99305\r\n- docs: typo fixes: #99350\r\n- [ai-upgrade] ESC to move back during prompt: #99319\r\n- [ai-upgrade] Ask user to choose permission: #99291\r\n- [ai-upgrade] Ask user to choose model and effort: #99235\r\n- [ai-upgrade] Ask user whether to start upgrade in worktree: #99232\r\n- [create-next-app] Enable Cache Components by default in create-next-app: #99436\r\n- Include async module evaluation in client loading metrics: #99427\r\n- turbo-tasks-backend: fix leaf distance tracing compilation: #99443\r\n- Enable proxy export tests in deploy mode: #99400\r\n- docs: record API stabilization across Next.js 16 releases: #99420\r\n- test: migrate and explain custom server deploy exclusions: #98994\r\n- test: migrate and explain root-inference deploy exclusions: #99012\r\n- Enable build diagnostic suites in deploy mode: #99402\r\n- test(turbopack): remove filesystem fuzzer unit tests: #99089\r\n- [turbopack] Support webpack loader build dependency requests: #99071\r\n- [turbopack] Track webpack loader build dependency directories: #98838\r\n- [ci] Wire preview builds variables consistently: #99323\r\n- [ci] Enable PR comment in any repo: #99315\r\n- Fix bundle analyzer route selector: #98702\r\n- bundle-analyzer: use Rust React compiler: #98695\r\n- Link bundle analyzer empty states to source mode: #98542\r\n- Consolidate HTML render completion cleanup: #99426\r\n- Scope client component loading metrics to HTML renders: #99322\r\n- fix: preserve HTTP status codes during prerendering: #99078\r\n- test: enable deploy coverage for five verified suites: #99193\r\n- Document agent feedback field limits: #99415\r\n- test: migrate tooling deploy exclusions to force gates: #98156\r\n- Turbopack: Don't force non-recursive watcher for additional roots: #99396\r\n- turbo-persistence: intermediate merges take the newest files of similar size: #99433\r\n- turbo-persistence: space-amplification driven compaction with adaptive hash shards: #99268\r\n- test: enable basePath redirect deployment coverage: #99401\r\n- fix(incremental-cache): keep an ISR entry's cache lifetime across instances and restarts: #99289\r\n- Avoid mutating image qualities during validation: #99476\r\n- Remove the Cache Components deployment-test alias: #99446\r\n- Finalize the App Router dev indicator on output completion: #99384\r\n- [test] Cover external `next/image` in adapter deployments: #99466\r\n- Prepare image options without mutating configuration: #99394\r\n- [PPF] Use RDC in runtime prerenders: #98025\r\n- [PPF] Use RDC in cachedNavigations codepaths: #98005\r\n- test: add PPF coverage to use-cache and RDC tests: #99417\r\n- Restore static metadata prerendering for dynamic routes: #99463\r\n- Exclude metadata files from route handler type validation: #99377\r\n- Remove `true` from `agentUpgrade` option: #99461\r\n- fix: revalidateTag not reaching custom cache handlers when profiles differ : #99359\r\n- Enable agent upgrade reminders by default: #99311\r\n- Enable deploy tests for reusable fixture variants: #99404\r\n- test: enable compatible body-size cases in deploy: #98911\r\n- test: retain deploy exclusions for local process control: #99392\r\n- Enable nullish config tests in deploy mode: #99397\r\n- Always use generateBuildId if set explicitly: #99147\r\n- Set tracer library version: #98262\r\n- fix: propagate repeated tag revalidation from after(): #99499\r\n- Stabilize `ensureStatic`: #99513\r\n- Turbopack: Enable experimental.turbopackSharedRuntime by default: #99504\r\n- Measure AI upgrade nudges, handoffs, and completion: #99465\r\n- turbo-persistence: 32 bit fingerprints for the used keys AMQFs: #99333\r\n- Remove suspend during operations: #99383\r\n- test: migrate runtime deploy exclusions to force gates: #98159\r\n- test: migrate asset deploy exclusions to force gates: #98158\r\n- test: migrate Pages Router deploy exclusions to force gates: #98157\r\n- fix: stale usages of unstable_ensureStatic: #99540\r\n- Add unstable parameter matching APIs: #97393\r\n- docs: point next package security disclosure to HackerOne: #99459\r\n- docs: add ensureStatic reference and validation guidance: #99355\r\n- Enable Turbopack export name mangling by default for builds: #99362\r\n- Allow skipping React and ESLint upgrades: #99468\r\n- Prefer the declared package manager during upgrades: #99471\r\n- Use Next.js conventions in bundle analyzer UI: #98780\r\n- Pass App Page HMR state through a dev render context: #99487\r\n- Remove request forwarding from App Router error reporting: #99488\r\n- docs: self hosting immutable static assets: #97008\r\n- test: enable deployment fixtures with Corepack and portable tarballs: #99192\r\n- Resolve React dependency warnings from the target app: #99536\r\n- Move upgrade workflows out of public docs: #99546\r\n- Use Agent terminology throughout upgrades: #99545\r\n- Turbopack: Commit updated generated-native file: #99561\r\n- test: enable Relay multi-project deployment coverage: #99403\r\n- test: migrate independent App Router deploy exclusions to force gates: #99431\r\n- test: migrate mode-specific deploy exclusions to force gates: #98160\r\n- Optimize esm exports by shifting the protocol burden to getters: #98932\r\n- fix: fix pnpm builds in Docker examples: #97352\r\n- Assert transient task references are not serialized: #99300\r\n- Reorganize bundle analyzer toolbar: #98920\r\n- Show async module scope in bundle analyzer: #98918\r\n- Show bundle changes in compare treemap: #98837\r\n- improve disk read semantics around MustExist and AllowMissing: #99249\r\n- Allow opt-in facade-backed export mangling: #99309\r\n- Add bundle analyzer route summary: #98787\r\n- [turbo-tasks-backend] Correctly maintain outdated_collectibles to prevent unnecessary stale executions: #99386\r\n- Upgrade React from `8b0da1c6-20260922` to `278794d7-20261002`: #99600\r\n- Warn when Partial Prefetching is not configured: #99452\r\n- Store the Turbopack module cache in a Map: #98947\r\n- Improve agent feedback reporting reliability: #99591\r\n- Enable empty generateStaticParams deploy diagnostics: #99406\r\n- test: enable Nx deployment coverage: #99407\r\n- test: enable deployment coverage for monorepo fixtures: #99395\r\n- test: capture deployment experimental flags in config: #99534\r\n- test: extract a shared helper for deployment feature flags: #99533\r\n- Move App Page header parsing to handler entrypoints: #99506\r\n- docs: clarify ensureStatic levels from dogfooding: #99590\r\n- Gate param-matching deploy tests on the adapter: #99582\r\n- docs: update the MCP guide for next-devtools-mcp 0.4: #99583\r\n- Document agent upgrades across Next.js: #99293\r\n- [test] Fix the legacy image preload order assertion for React 18: #99572\r\n- docs: Remove task decomposition and validation boilerplate from AGENTS.md: #99558\r\n- Turbopack: Use a FrozenMap for DiskFileSystemMap: #99569\r\n- [test] Expose first-run e2e test failures in CI: #99528\r\n- Turbopack: `resolveFileUrl`/`placeholderFileUrl` is always called with a module path: #99560\r\n- Turbopack: Remove implicit mismatched root fallthrough for AfterResolvePluginCondition, accept None as a root: #99556\r\n- Turbopack: Allow ResolveMap entries to match against all possible roots: #99555\r\n- Turbopack: Support import.meta.url in additional roots: #99511\r\n- Followup from #99249  remove some redundant tests and enable missing assertions all the time: #99605\r\n- Simplify turbo-tasks-backend guards and execution contexts: #99599\r\n- Add allocation and memory data to the trace-server MCP protocol: #98546\r\n- turbo-tasks-backend: check access in track_modification and only track Data on serialization invalidation: #99581\r\n- Fix CI break caused by #98932: #99621\r\n- Fix: Unnecessary Suspense fallback triggered by URL update: #99612\r\n- Don't suspend client params on shallow URL updates: #99611\r\n- Add React Compiler memoization preservation option: #98589\r\n- Unify bundle analyzer delta colors: #99607\r\n- Turbopack: Cache canonicalized paths without turbo-tasks, try to find the longest cached prefix first: #99270\r\n- Record parameter matching usage in build metadata: #99594\r\n- Bundle Analyzer Agent Skill: Stream versioned analyzer graph as JSON Lines: #99387\r\n-  Revert \"Optimize esm exports by shifting the protocol burden to getters (#98932)\": #99704\r\n- [PPF] Log Sync IO errors in runtime prerenders: #99688\r\n- docs: clarify use client directive as a file level directive: #99703\r\n- Stabilize `forbidden()` and `unauthorized()`: #99689\r\n- turbopack-ecmascript-runtime: type-check every runtime file: #99670\r\n- test: unflake use-cache-search-params: #99691\r\n- Avoid mutating config for default export paths: #99496\r\n- Keep compile-mode metadata outside configuration: #99491\r\n- Keep dynamic asset prefixes outside configuration: #99490\r\n- eslint-config-next: support ESLint 10: #99628\r\n- Add Instant Insights for prefetch() and navigation(): #97801\r\n- rename `RenderStage.Runtime` to `PrefetchRuntime`: #99679\r\n- Collect root param dependencies for `'use cache'` at build time: #99274\r\n- Add client fixes for fully static route errors: #99659\r\n- docs: clarify hover prefetching with Partial Prefetching: #99665\r\n- Durable use cache entries: sort env var list: #99657\r\n- next-swc: rebuild native when embedded js/src files change: #99669\r\n- Improve static route error guidance: #99724\r\n- docs: add Turbopack experimental config references: #99723\r\n- Show choices for agent upgrade prompt: #99727\r\n- docs: add Keeping pages static guide and align the navigation stage docs: #99493\r\n- Turbopack: Check the invalidator map before adding a path to a batch: #99711\r\n- docs: add guide for optimizing the static shell: #97737\r\n- Keep dev and build running during upgrade prompts: #99702\r\n- docs: use auth interruption APIs in examples: #99698\r\n- docs: recommend auth interruption APIs in error handling: #99696\r\n- [test] Update snapshots: #99713\r\n- Bundle Analyzer Agent Skill: Trace conditional async and worker chunk loading: #99174\r\n- Bundle Analyzer Agent Skill: Show route chunk groups: #99170\r\n- Bundle Analyzer Agent Skill: Show modules in generated JS/CSS files: #99173\r\n- Bundle Analyzer Agent Skill: Expose more route details in analyze data: #99172\r\n- turbo-tasks-backend: stop dirtying dependents of GC-collected tasks: #99647\r\n- turbo-tasks-backend: treat reads and connects of collected tasks as errors: #99646\r\n- turbo-tasks-backend: stop pinning tasks during restores and always discard missing tasks: #99645\r\n- Bundle Analyzer Agent Skill: Add analyzer skill: #99169\r\n- Document next analyze export in the package bundling guide: #99735\r\n- Revert stabilization of `forbidden()` and `unauthorized()`: #99734\r\n- Preserve configured output directories during static export: #99507\r\n- Rename skill to next-bundle-optimizer and document its usage: #99731\r\n- [turbo-tasks-backend] Clean up task state before publishing execution completion: #99729\r\n\r\n### Credits\r\n\r\nHuge thanks to @acdlite, @icyJoseph, @lukesandberg, @sampoder, @ztanner, @vercel-release-bot, @marcoshernanz, @mischnic, @timneutkens, @eps1lon, @gaearon, @aurorascharff, @unstubbable, @lubieowoce, @wbinnssmith, @molebox, @kyamaz99, @sokra, @Janpot, @bgw, @m-kawafuji, @koenpunt, @gnoff, @mayur9210, @Jashnavi25, @jarrensj, @akselipalmer, @DavidIlie, @kelvinampofo, @Stanzilla, @syedsohailhussain1, @gaojude, @hammadxcm, @jimmyhmiller, @lazerg, @styfle, @bryan-ferry, @gdborton, @hardfist, @niketchandivade, @seanbeirnes, @0ldh, @fabian-hiller, @devjiwonchoi, @biubiukam, @fireairforce, @QingHeSite, @marceloboeira, @leejpsd, @hamidrezahanafi, @jgruica, @zeeshan56656, @mlekhi, @dacgray, @Xanaado, @mezotv, @anujbolewar, @spirosikmd, @Amusac, @itsybitsci, @ranger-ross, @bmorros94, @jamiboym, @kostyniuk, @alangenfeld, @aryabyte21, @martinfrancois, @kassens, @orzazade, @Samiislam851, @lukahartwig, @uaoa, @swarnava, and @6iu8a for helping!\r\n","publishedAt":"2026-10-07T10:03:29.000Z","fetchedAt":"2026-10-07T12:38:54.470Z","url":"https://github.com/vercel/next.js/releases/tag/v16.4.0","media":[],"coverageCount":0},{"id":"rel_DQMcmQahyywReveyI94ta","version":"v16.3.8","type":"feature","title":"v16.3.8","summary":"Patches a high-severity server-side request forgery in Image Optimization and five medium-severity issues including cache poisoning of SSG and ISR pages, cross-user content substitution, Draft Mode content leaking into persisted pages via a pending use cache fill, and a cache leak across root param values in nested use cache functions. Also fixes a low-severity information disclosure in the development server's Model Context Protocol endpoint.","titleGenerated":"Next.js v16.3.8 patches SSRF in Image Optimization and cache poisoning flaws","titleShort":"SSRF in Image Optimization fixed; cache poisoning patches land","breaking":"none","importance":4,"content":"This release contains security fixes for the following advisories:\r\n\r\nHigh:\r\n- [Server-Side Request Forgery in Image Optimization](https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4)\r\n\r\nMedium:\r\n- [Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass](https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x)\r\n- [Cache poisoning of SSG and ISR pages in self-hosted Next.js applications](https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676)\r\n- [Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service](https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p)\r\n- [Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages](https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7)\r\n- [Cache leak across root param values in nested 'use cache' functions](https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3)\r\n\r\nLow:\r\n- [Information disclosure in the Next.js development server's Model Context Protocol endpoint](https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv)","publishedAt":"2026-09-30T16:13:46.000Z","fetchedAt":"2026-09-30T19:25:30.207Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.8","media":[],"coverageCount":1},{"id":"rel_Wt01MLngRHNcckEsCK8uV","version":"v16.3.7","type":"feature","title":"v16.3.7","summary":"A backport release fixing a turbo-tasks-backend issue where a strongly consistent read would hang on a canceled task. The release contains only this fix and does not include pending canary features or changes.","titleGenerated":"Next.js v16.3.7 fixes hanging strongly consistent read on canceled task","titleShort":"Canceled task no longer hangs strongly consistent read","breaking":"none","importance":1,"content":"> [!NOTE]\r\n> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.\r\n\r\n### Core Changes\r\n\r\n- turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)\r\n\r\n### Credits\r\n\r\nHuge thanks to @lukesandberg for helping!\r\n","publishedAt":"2026-09-29T08:54:51.000Z","fetchedAt":"2026-09-29T11:10:48.614Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.7","media":[],"coverageCount":0},{"id":"rel_SrPpDsIbRUfhjcEdE239X","version":"v16.3.6","type":"feature","title":"v16.3.6","summary":"Fixes a remote code execution vulnerability in next/og ImageResponse, tracked as GHSA-vcvr-r3jv-pc5j.","titleGenerated":"Next.js v16.3.6 patches remote code execution in next/og ImageResponse","titleShort":"RCE in next/og ImageResponse patched","breaking":"none","importance":4,"content":"This release contains a security fix for [GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse](https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j)","publishedAt":"2026-09-22T17:15:10.000Z","fetchedAt":"2026-09-22T17:47:12.693Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.6","media":[],"coverageCount":0},{"id":"rel_DSdlEwMJe_0lvEka5a-8S","version":"v15.5.26","type":"feature","title":"v15.5.26","summary":"This release contains additional security hardening for next/og.","titleGenerated":"Next.js v15.5.26 hardens next/og security","titleShort":"next/og security hardening","breaking":"none","importance":3,"content":"This release contains additional security hardening for `next/og`. For more information, check out https://nextjs.org/blog/nextjs-security-update-september-22-2026","publishedAt":"2026-09-22T17:14:57.000Z","fetchedAt":"2026-09-22T17:47:12.693Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.26","media":[],"coverageCount":0},{"id":"rel_bweNnGn0URsmLsX5upu3_","version":"v16.3.5","type":"feature","title":"v16.3.5","summary":"Backported fixes skip 0-byte entries and reject empty images when initializing and reading or writing the next/image disk LRU cache, and fix use cache prerender signal retention. Standalone output with an adapter now emits whole-app server NFTs, and CSP nonce is added to script tags in loading and template files.","titleGenerated":"Next.js v16.3.5 fixes image cache and use cache prerender signal","titleShort":"Image disk cache handles 0-byte entries; use cache signal fixed","breaking":"none","importance":2,"content":"The following bug fixes have been backported. It does not include all pending features/changes on canary.\r\n\r\n- next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)\r\n- next/image: Reject empty images when reading/writing to the disk cache (#98186)\r\n- Emit whole-app server NFTs when `output: 'standalone'` is used with an adapter (#98167)\r\n- Add CSP nonce to script tags of loading and template files (#98403)\r\n- Fix `use cache` prerender signal retention (#98448)","publishedAt":"2026-09-11T19:15:50.000Z","fetchedAt":"2026-09-11T19:47:44.974Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.5","media":[],"coverageCount":0},{"id":"rel_TFRvZ31ql0vBt_l8qQt2a","version":"v16.3.4","type":"feature","title":"v16.3.4","summary":"Re-enables AVIF Image Optimization and backports fixes for infinite recursion in testmode passthrough fetch, a build error when aliasing TypeScript, and unset crossOrigin in Turbopack manifests.","titleGenerated":"Next.js v16.3.4 re-enables AVIF optimization and backports bug fixes","titleShort":"AVIF optimization restored; testmode recursion fixed","breaking":"none","importance":2,"content":"Follow-up release to [v16.3.3](https://github.com/vercel/next.js/releases/tag/v16.3.3) re-enabling AVIF Image Optimization ([#97949](https://github.com/vercel/next.js/pull/97949)).\r\n\r\nThe following bug fixes have been backported. It does **not** include all pending features/changes on canary.\r\n\r\n- testmode: Fix infinite recursion in testmode passthrough fetch (#97691)\r\n- Fix build error when aliasing typescript to @typescript/typescript6 (#97997)\r\n- Fix unset crossOrigin in Turbopack manifests (#97930)\r\n\r\n### Credits\r\n\r\nHuge thanks to @eps1lon, @mischnic, and @timneutkens for helping!","publishedAt":"2026-08-31T20:02:15.000Z","fetchedAt":"2026-08-31T21:47:59.615Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.4","media":[],"coverageCount":0},{"id":"rel_4vuoajtQ8BrzMM1E9U8eq","version":"v15.5.25","type":"feature","title":"v15.5.25","summary":"This follow-up release re-enables AVIF image optimization when newer versions of sharp are installed, fixing the regression from v15.5.24.","titleGenerated":"Next.js v15.5.25 re-enables AVIF image optimization with sharp","titleShort":"AVIF image optimization re-enabled with sharp","breaking":"none","importance":2,"content":"Follow-up release to [v15.5.24](https://github.com/vercel/next.js/releases/tag/v15.5.24) re-enabling AVIF Image Optimization when newer versions of `sharp` are installed ([#97954](https://github.com/vercel/next.js/pull/97954)).\r\n","publishedAt":"2026-08-31T20:02:11.000Z","fetchedAt":"2026-08-31T21:47:59.615Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.25","media":[],"coverageCount":0},{"id":"rel_szezifiwmX4wDfGw-5u1Z","version":"v16.3.3","type":"feature","title":"v16.3.3","summary":"This patch release fixes two critical security advisories: an unauthenticated remote code execution affecting Windows-hosted servers, and an unauthenticated remote code execution in the Image Optimization API when AVIF files are used. All deployments should upgrade.","titleGenerated":"Next.js v16.3.3 patches two critical unauthenticated RCE vulnerabilities","titleShort":"Critical RCE vulnerabilities patched; upgrade advised","breaking":"none","importance":4,"content":"This release contains security fixes for the following advisories:\r\n\r\nCritical:\r\n\r\n- [Unauthenticated Remote Code Execution on windows-hosted servers](https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36)\r\n- [Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used](https://github.com/vercel/next.js/security/advisories/GHSA-2xp9-vwfh-vxw4)\r\n","publishedAt":"2026-08-25T16:17:10.000Z","fetchedAt":"2026-08-25T16:39:42.740Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.3","media":[],"coverageCount":1},{"id":"rel_F3GlkcsCNgOheKhYkaGHQ","version":"v16.3.2","type":"feature","title":"v16.3.2","summary":"Catch-all index pages are no longer served for every other slug, and Turbopack worker chunk loading with asset prefixes is fixed. Also backported app-entry export validation, embedded WASM loader tracing, resolve request key conditions, and switched to OIDC-based Turborepo remote cache auth.","titleGenerated":"Next.js v16.3.2 backport fixes catch-all route serving every slug","titleShort":"Catch-all index page fix; Turbopack worker chunk loading patched","breaking":"none","importance":3,"content":"> [!NOTE]\r\n> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.\r\n\r\n### Core Changes\r\n\r\n- [backport] Scope app-entry export validation to files inside the app directory (#97357)\r\n- [backport] Fix catch-all index page being served for every other slug (#97416)\r\n- [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)\r\n- [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)\r\n- [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)\r\n- [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)\r\n\r\n### Credits\r\n\r\nHuge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!","publishedAt":"2026-08-21T09:36:39.000Z","fetchedAt":"2026-08-21T11:53:45.764Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.2","media":[],"coverageCount":0},{"id":"rel_fFHz9xq1ujbz32Hfuw3kb","version":"v16.3.1","type":"feature","title":"v16.3.1","summary":"Fixes preserve image responses after optimization and resolve optimistic routing bugs that caused repeated prefetch loops. Also restores the live `headers()` view, fixes styled-jsx styles in Pages Router SSR on adapter builds, and improves Turbopack HMR for dynamic imports from layouts.","titleGenerated":"Next.js v16.3.1 fixes image optimization, optimistic routing prefetch loops","titleShort":"Image optimization preserved; prefetch loops fixed","breaking":"none","importance":2,"content":"## What's Changed\r\n* [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in https://github.com/vercel/next.js/pull/96653\r\n* [16.x] [turbopack] Add `turbopack_ecmascript` and `turbopack_wasm`'s embeded FS to `internal_assets_conditions` by @lukesandberg in https://github.com/vercel/next.js/pull/96655\r\n* [16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in https://github.com/vercel/next.js/pull/96675\r\n* [16.x] fix(next/image): preserve image response after optimization by @styfle in https://github.com/vercel/next.js/pull/96733\r\n* [16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in https://github.com/vercel/next.js/pull/96900\r\n* [backport] Bump @swc/helpers by @mischnic in https://github.com/vercel/next.js/pull/96885\r\n* [backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in https://github.com/vercel/next.js/pull/97308\r\n* [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in https://github.com/vercel/next.js/pull/97302\r\n* [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in https://github.com/vercel/next.js/pull/97317\r\n* [backport] Restore the live `headers()` view of the incoming request by @unstubbable in https://github.com/vercel/next.js/pull/97311\r\n* [backport] Allow literal exports in `'use cache'` files by @unstubbable in https://github.com/vercel/next.js/pull/97312\r\n* [backport] Keep the dev validation worker alive across HMR updates by @unstubbable in https://github.com/vercel/next.js/pull/97315\r\n* [backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in https://github.com/vercel/next.js/pull/97314\r\n* [backport] Encode the cache item name built by `unstable_cache` by @unstubbable in https://github.com/vercel/next.js/pull/97313\r\n* [16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in https://github.com/vercel/next.js/pull/97258\r\n* [backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in https://github.com/vercel/next.js/pull/97328\r\n* [backport] Fix Nav Inspector request loop on repeat captures by @acdlite in https://github.com/vercel/next.js/pull/97326\r\n* [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in https://github.com/vercel/next.js/pull/97325\r\n* [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in https://github.com/vercel/next.js/pull/97304\r\n* [backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in https://github.com/vercel/next.js/pull/97330\r\n\r\n\r\n**Full Changelog**: https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1","publishedAt":"2026-08-13T22:48:45.000Z","fetchedAt":"2026-08-14T02:32:43.034Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.1","media":[],"coverageCount":0},{"id":"rel_wEfUpTppYHYxCw9P5HzfP","version":"v15.5.23","type":"feature","title":"v15.5.23","summary":"Ports ReplyServer traversal guards to the FlightClient transport layer, closing a potential security gap in the server request handling path.","titleGenerated":"Next.js v15.5.23 patches ReplyServer traversal guards","titleShort":"ReplyServer traversal guards ported to FlightClient","breaking":"none","importance":3,"content":"## What's Changed\r\n\r\n* [15.x] Port ReplyServer traversal guards to FlightClient @eps1lon in https://github.com/vercel/next.js/pull/96405\r\n\r\n\r\n**Full Changelog**: https://github.com/vercel/next.js/compare/v15.5.22...v15.5.23","publishedAt":"2026-08-07T09:57:33.000Z","fetchedAt":"2026-08-07T13:19:46.528Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.23","media":[],"coverageCount":0},{"id":"rel_JETtnEOpg36TkBLt4M9cg","version":"v16.3.0","type":"feature","title":"v16.3.0","summary":"### Core Changes\r\n- Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558\r\n- Fix invalid HTML response for route-level RSC requests in deplo...","titleGenerated":null,"titleShort":null,"breaking":"unknown","importance":null,"content":"### Core Changes\r\n- Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558\r\n- Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541\r\n- Normalize encoded dynamic placeholders in app routes: #91603\r\n- Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304\r\n- Update tokio from 1.43.0 to 1.47.3: #90945\r\n- [turbopack] Simplify snapshotting logic: #91178\r\n- Turbopack: enable server HMR for app route handlers: #91466\r\n- turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497\r\n- [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636\r\n- Skip loadBindings() Lightning CSS check during next start: #91538\r\n- turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461\r\n- Turbopack: Add importModule() support to webpack loaders: #89630\r\n- turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640\r\n- turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524\r\n- feat(node-streams): add config flag, define-env, and env precedence test: #90427\r\n- Rename /_next/webpack-hmr to /_next/hmr: #91415\r\n- Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610\r\n- Handle encoded params further: #91627\r\n- [turbopack] Respect `{eval:true}` in worker_threads constructors: #91666\r\n- Fix missing route in otel spans without base-server: #91665\r\n- [turbopack] Optimize compaction cpu usage: #91468\r\n- Fix layout segment optimization: move app-page imports to server-utility transition: #91701\r\n- Fix server actions in standalone mode with `cacheComponents`: #91711\r\n- turbo-persistence: remove Unmergeable mmap advice: #91713\r\n- turbopack: move \"compact database\" tracing span to backend layer: #91693\r\n- Turbopack: lazy require metadata and handle TLA: #91705\r\n- Fix adapter outputs for dynamic metadata routes: #91680\r\n- Turbopack: fix webpack loader runner layer: #91727\r\n- [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699\r\n- Add module count field to module graph tracing spans: #91697\r\n- turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657\r\n- Turbopack: pull in updated vercel/nft tests: #91651\r\n- [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477\r\n- [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320\r\n- [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438\r\n- Avoid deprecated TS node10 moduleResolution defaults: #91847\r\n- [turbopack] Rebuild the docker build scripts: #91799\r\n- Fix TS6 baseUrl deprecation for extended tsconfig: #91855\r\n- Add `next internal post-build` CLI command for Turbopack database compaction: #91336\r\n- Turbopack: Define `Effect` as a trait instead of a closure: #89080\r\n- Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133\r\n- turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742\r\n- Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832\r\n- Use charCodeAt for normalizePathTrailingSlash: #91380\r\n- Turbopack: Only patch lockfile when bindings fails to load: #91379\r\n- [create-next-app] Skip interactive prompts when CLI flags are provided: #91840\r\n- [devtools] Make instant navs panel draggable: #91914\r\n- [Segment Bundling] Bundle static prefetches based on size: #91439\r\n- turbo-tasks-backend: assert non-transient task_ids in track_modification: #91924\r\n- fix(turbopack): preserve resolveExtensions priority in read_matches fast path: #91856\r\n- turbopack: Remove Vc::resolve(), migrate all callsites to Vc::to_resolved(): #91725\r\n- turbo-tasks: add hashed cell mode for hash-based change detection without cell data: #91576\r\n- [cna] Upgrade to Biome 2.4 with Tailwind support: #86065\r\n- [devtools] Show `AggregateError.errors` in the error overlay: #91835\r\n- Narrow the opengraph-image function return type: #91893\r\n- [experiment] Add useOffline flag with offline retry behavior: #92011\r\n- adapters: remove unused suffix code: #91997\r\n- [experiment] Add useOffline hook to expose offline state to userland: #92012\r\n- [turbopack] Don't use turborepo to build the docker image: #92029\r\n- Use RcStr directly in napi(object) structs instead of converting to String: #92014\r\n- Rename SingleModuleReference::asset to SingleModuleReference::module: #92028\r\n- Revert \"turbo-tasks: add hashed cell mode for hash-based change detection without cell data\": #92103\r\n- [ftl] Include cause of route types: #92056\r\n- fix: handle file:// URLs from import.meta.resolve in cache handler path (fixes #73796): #90370\r\n- Turbopack: exclude metadata routes from server HMR: #92034\r\n- next.config.js: Accept an option for serverFastRefresh: #91968\r\n- TURBOPACK: support parse windows absolute path with single slash: #92076\r\n- Enable `varyParams` tracking for Cached Navigations: #92113\r\n- telemetry: set turboFlag correctly: #92149\r\n- Instant Validation: Allow unconfigured slots to render optionally: #92126\r\n- Turbopack: statically evaluate path.sep: #92150\r\n- Turbopack: use same hash for immutable-static-hashes.json: #92157\r\n- [turbopack] replace regex with indexof: #92023\r\n- Turbopack: createRequire(new URL(\"...\", import.meta.url)): #92153\r\n- Add PPR evals and fix env loading for agent-eval 0.9.5: #92063\r\n- Turbopack: support targeting even older browsers: #91563\r\n- Add rust-fingerprint task and SCCACHE passthrough env: #92167\r\n- Improve error message for deprecated `experimental.dynamicIO` config: #92081\r\n- [turbopack] Fix CSS HMR on Safari: #92123\r\n- simplify session dependent tasks and add TTL support: #91729\r\n- disable bmi2 in qfilter: #92177\r\n- Improve revalidateTag JSDoc to include guidance about required second parameter: #92176\r\n- fix: pin 19 actions to commit SHA, extract 7 expressions to env vars: #92016\r\n- partial fallbacks: adapter support for intermediate shells: #91902\r\n- Turbopack: trace fs.readdir calls: #92148\r\n- feat: add NEXT_HASH_SALT env var for content-hash filename salting: #91871\r\n- Fix DashMap read-write self-deadlock in task_cache causing hangs: #92210\r\n- [turbopack] use a single query parameter for cache busting: #92214\r\n- Generate a CLI warning if using Rosetta 2 on Apple Silicon: #92220\r\n- remove the loop from  StaticSortedFile::lookup: #91688\r\n- Add telemetry for adapterPath config usage: #92228\r\n- Node.js streams: First pass: #90500\r\n- fix: preserve HTTP access fallbacks during prerender recovery: #92231\r\n- Remove unnecessary ALS re-exports from `entry-base.ts`: #91527\r\n- Allow multi-level .localhost subdomains in dev origin check: #92262\r\n- turbo-tasks-backend: stability fixes for task cancellation and error handling: #92254\r\n- Add MCP `get_compilation_issues` tool and NAPI method: #92062\r\n- Add view transitions eval (agent-043): #92260\r\n- [turbopack] optimize RcStr parsing: #91773\r\n- Ensure app-page reports stale ISR revalidation errors via onRequestError: #92282\r\n- Move streamToUint8Array back to node-web-streams-helper.ts: #92263\r\n- Revert \"simplify session dependent tasks and add TTL support (#91729)\": #92320\r\n- fix: add @deprecated annotation to experimental.useCache: #92316\r\n- Improve existing dev server error message to suggest using it: #92317\r\n- Restart the `next dev` server if `.next` is deleted: #92135\r\n- Update Rust toolchain to nightly-2026-04-02: #92288\r\n- Turbopack: Remove FileSystemPath::value_to_string in favor of ValueToStringRef::to_string_ref: #92284\r\n- [turbopack] use zero copy qfilter deserialization: #90574\r\n- feat: add experimental.swcEnvOptions for SWC preset-env configuration: #92272\r\n- Turbopack: Dedupe our two filesystempath extension/extension_ref functions: #92048\r\n- turbo-tasks: replace async resolve fns with custom Future types (ResolveRawVcFuture, ResolveVcFuture, ToResolvedVcFuture): #91554\r\n- next-core: deduplicate output assets and detect content conflicts on emit: #92292\r\n- Handle edge runtime in places that import node:stream: #92354\r\n- Fix fallback route params case in app-page handler: #91737\r\n- use sorted inserts to improve builder performance: #91553\r\n- Allow for parsing app route strings with and without slot names.: #92327\r\n- fix(server-hmr): metadata routes overwrite page runtime HMR handler: #92273\r\n- turbo-persistence: optimize file syncing: #90542\r\n- Turbopack: Remove `turbo_tasks::apply_effects`, use `Effects::apply` instead: #91858\r\n- Turbopack: Add a check for node version before allowing workerThreads: #91614\r\n- turbo-persistence: skip BlockCache for uncompressed (mmap-backed) blocks: #92390\r\n- Include more context in macOS Rosetta 2 warning message: #92436\r\n- change the process name of builds: #92411\r\n- turbo-persistence: pin referenced BlockCache entries to prevent eviction: #92361\r\n- Fix styled-jsx race condition: styles lost due to concurrent rendering: #92459\r\n- turbo-tasks: fix hashed cell mode crash on task error (re-land #91576): #92108\r\n- Fix sst inspect tool to respect `CURRENT` and stale sst files: #92414\r\n- Optimize how we track data for persistence: #89370\r\n- [turbopack] add family name to many spans: #92415\r\n- Route Handlers: Fix devRequestTimingInternalsEnd and Turbopack server HMR: #92271\r\n- next-routing: middleware matching and app request URL normalization: #91859\r\n- turbo-persistence: Use AtomicBool for is_empty() to avoid lock contention: #92481\r\n- fix: mention params and searchParams in blocking-route error messages: #92360\r\n- CPU prof: Write profiles to .next-profiles instead of .next/cpu-profiles: #92078\r\n- Turbopack: Write trace file to .next-profiles: #92189\r\n- feat: generate root params types: #91019\r\n- fix: resolve function configs in unstable_getResponseFromNextConfig: #92501\r\n- Node.js streams: Fork points: #92252\r\n- Turbopack: Add --internal-trace cli flag: #92190\r\n- Fix `minimumReleaseAgeExclude` for React and friends: #92535\r\n- Add experimental unstable_io() API behind experimental.unstableIO flag: #92521\r\n- Update React from `74568e86-20260328` to `404b38c7-20260408`: #92536\r\n- Turbopack: switch from immutable token to path prefix: #92164\r\n- [build info]: distinguish between PPR and fully static routes in gSP: #92518\r\n- [build info]: omit symbol from top level gSP route: #92525\r\n- turbo-tasks-backend: prevent duplicate task restores with restoring bits: #92389\r\n- Add next internal upload-trace: #92191\r\n- Request logging: Fix generate-params time being included in next.js time: #91386\r\n- fix: scope \"Pages Router only\" comment to default export in next/error: #92566\r\n- Turbopack Build: Remove dev fouc from production bundle: #80935\r\n- Turbopack: Improve unable to resolve next error: #91394\r\n- fix(hmr): reconnect WebSocket after sleep/wake: #91416\r\n- Handle `target` option in React Compiler for Pages + React 18: #91500\r\n- Replace wasmer with wasmtime for SWC plugin WASM engine: #91533\r\n- turbopack: fix incremental build when module factories are restored from persistent cache: #92569\r\n- [turbopack] Rust dependency caching via sccache: #91873\r\n- trace: detect rage restarts and deleted .next dirs: #92489\r\n- [turbopack] fix a debug_assert failure: #92581\r\n- Don't swallow strings thrown in Server Components: #92592\r\n- Fix NextFontIssue IssueStage: CodeGen → Resolve: #92588\r\n- Node.js streams: Add forkpoint for CacheComponents: #92444\r\n- Resolve `compilerOptions.paths` in tsconfigs without `compilerOptions.baseUrl`: #92277\r\n- Turbopack: extract inline base64 decode helper to shared `@turbopack/base64` module: #92549\r\n- Add codemod command to middleware deprecation warning: #92532\r\n- turbopack: move CSS module composes validation from code generation to resolving: #92582\r\n- Drop turbo_tasks::function from ValueDebug trait items: #92593\r\n- [partial fallbacks]: enable by default: #92627\r\n- Turbopack: fix filesystem watcher config not applying follow_symlinks(false): #92631\r\n- Turbopack: cut number of client references in half: #92607\r\n- Remove a ton of turbo task functions from Issue trait items: #92623\r\n- feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution: #91338\r\n- feat(turbopack): change DiskFileSystem root to Vc<RcStr> for portable cache: #92603\r\n- Turbopack: remove unused ChunkableModules struct: #92606\r\n- Fix segment explorer file pill accessibility: #92608\r\n- Disable sccache temporarily: #92657\r\n- Delete some dead turbo task functions: #92596\r\n- Node.js streams: Add forkpoint for error recovery: #92457\r\n- turbo-tasks: Drop output_dependent on immutable task completion: #92683\r\n- Turbopack: properly remove unused TS enums with scope hoisting: #88205\r\n- fix(server-actions): skip type-only ExportNamed in pre-pass to prevent phantom registerServerReference: #92494\r\n- Turbopack: Add import.meta.glob support (Vite compat): #92640\r\n- turbo-tasks: Fix recomputation loop by allowing cell cleanup on error during recomputation: #92725\r\n- TURBOPACK: support crsossOriginLoading: #92070\r\n- Compiler: Support boolean and number primtives in next.config defines: #92731\r\n- Fix prefetch hints not being loaded during revalidation: #92625\r\n- Exclude trace files from directory deletion in builds: #92486\r\n- Switch segment prefetch cache miss response from 204 to 404: #92751\r\n- Ensure x-nextjs-data header is only set during resolve: #92752\r\n- feat(trace-server): add query CLI and MCP API to turbopack-trace-server: #92030\r\n- Improve error stacks for dynamic API usage in `\"use cache\"`: #92736\r\n- Node.js streams: Add forkpoint for continueDynamicHTMLResume: #92471\r\n- Node.js streams: Add forkpoint for generateDynamicFlightRenderResult: #92474\r\n- Node.js streams: Add forkpoint for generateStagedDynamicFlightRenderResult: #92509\r\n-  Add unstable_prefetch route segment config and decouple runtime prefetching from unstable_instant: #92754\r\n- feat(turbo-tasks-backend): gate prepare_tasks_with_callback trace span behind feature flag: #92779\r\n- Update next versions of internal apps: #92666\r\n- turbo-persistence: stop background persisting after unrecoverable failure: #92106\r\n- Stop using deprecated `downlevelIteration`: #92652\r\n- Disable build caches for production/staging/force-preview deploys: #92792\r\n- Fix turbo cache flag: use --force: #92796\r\n- Fix devlow-bench: tsconfig rootDir mismatch with package.json bin: #92800\r\n- Scope Safari ?ts= cache-buster to CSS/font assets only (Pages Router): #92580\r\n- Enable wasm plugins on windows arm: #92544\r\n- prefetchInlining: fix build crash on notFound() pages: #92806\r\n- turbopack: gate ValueDebugFormat and ValueDebug behind debug_assertions: #92628\r\n- Add TurboMalloc::thread_park() to flush and collect on thread park: #92804\r\n- Stop using deprecated `baseUrl`: #92653\r\n- Turbopack: Use FrozenMap for module export information: #92802\r\n- Turbopack: remove webpack chunk detection: #92773\r\n- Turbopack: refactor ESM codegen generation: #92777\r\n- Fix monorepo `@next/swc` binary postinstall: #92813\r\n- webpack: fix swcPlugins with relative paths: #92770\r\n- Turbopack: shorter error for ChunkGroupInfo::get_index_of: #92814\r\n- Turbopack: properly set NODE_ENV for SWC plugins: #92579\r\n- Node.js streams: Add forkpoint for logMessagesAndSendErrorsToBrowser: #92510\r\n- Node.js streams: Add forkpoint for createCombinedPayloadStream: #92511\r\n- Node.js streams: Add forkpoint for renderWithRestartOnCacheMissInValidation: #92512\r\n- Node.js streams: Add forkpoint for prerenderToStream: #92513\r\n- Turbopack: shorter error message for ModuleBatchesGraph::get_entry_index: #92828\r\n- Turbopack: refactor export analysis: #92781\r\n- fix(trace-server): default MCP port to --port + 1 to avoid conflicts: #92831\r\n- Revert \"Node.js streams: Add forkpoint for prerenderToStream\": #92845\r\n- Turbopack: remove StarImportAnalyzer: #92830\r\n- Turbopack: analyzer improvement followups: #92834\r\n- Turbopack: move assignment_scopes computation into ImportMap: #92835\r\n- Warn for non-deterministic `\"use cache\"` args during final prerender: #92820\r\n- Turbopack: Use lld again on ARM64 glibc Linux: #92860\r\n- turbopack: cache TransformPlugin in narrow-scoped turbo-tasks functions: #92842\r\n- Allow overriding outputHashSalt in modifyConfig: #92856\r\n- Support type cast expressions in page static info extractor: #92837\r\n- turbo-tasks: add info_span for blocking waits during task restore: #92878\r\n- Fix dev mode hydration failure when page is served from HTTP cache: #92892\r\n- [devtools] Preserve full code frames in browser overlay: #92621\r\n- Enable prefetchInlining by default: #92863\r\n- Turbopack: Use an async lock in the filesystem watcher: #92906\r\n- Replace deprecated `moduleResolution: \"node\"`: #92654\r\n- turbo-tasks: Reduce allocations on cache hits: #92756\r\n- fix(next/image): ensure `images.maximumResponseBody` applies to local images too: #92920\r\n- rename MagicAny: #92918\r\n- turbopack: reduce EffectStateStorage memory by storing u128 content hashes: #92902\r\n- turbo-trace-server: reduce allocation overhead when loading large trace files: #92896\r\n- Turbopack: optimize SelfTimeTree performance, memory usage, and fix range query boundaries: #92931\r\n- remove flag guarding `unstable_io`: #92923\r\n- Support more prefetch configuration options: #92859\r\n- Improve deduping of concurrent `'use cache'` invocations: #91830\r\n- [partial fallbacks]: include prefetch requests in shell upgrade handling: #92894\r\n- Redesign blocking route dev overlay and build errors: #92638\r\n- Switch to cargo-binstall and pre-built sccache binaries: #92911\r\n- Remove prefetch from instant config: #92761\r\n- Improve \"make root node\" trace attributes: #92941\r\n- Use existing commitId for tarball URL in stats action: #92899\r\n- Use OIDC for CodSpeed: #93059\r\n- Restore dev-mode cache-fill timeout for `'use cache'`: #93055\r\n- Make `'use cache'` fill timeout configurable: #93070\r\n- Strengthen _rsc cache-busting param: #92755\r\n- turbo-tasks: drop once_cell, const-init TRAIT_METHOD, ctor WORKER_TASKS: #93090\r\n- Patch setHeader for direct route handlers: #93101\r\n- [turbopack] Persistent last_successful_parse: #92852\r\n- [turbopack] Unify Cell Storage: #92974\r\n- fix(use-cache): remove awaiting revalidation: #92636\r\n- [turbopack] Fix max_level_hint to return most verbose per-target level: #93128\r\n- feat(turbopack): add NEXT_TURBOPACK_TRACING_PATH to control trace output location: #93084\r\n- Turbopack: move import_usage computation into ImportMap: #92891\r\n- Turbopack: unify ModuleGraph constructors: #93203\r\n- Turbopack: move get_inner_asset into ecmascript module: #93191\r\n- [turbopack] drop TransientState: #92853\r\n- instant(): Block out-of-band client fetches: #93099\r\n- [next/image] Stop using deprecated `url.parse`: #93208\r\n- Suspend dynamic route params in dev instant shell: #93108\r\n- Recognize `super(...)` messages in Error subclass constructors: #93182\r\n- [turbopack-trace-server] Performance improvements for span event handling: #93179\r\n- Preserve `__NEXT_ERROR_CODE` across the `/_error` page handoff: #93183\r\n- Reduce allocations in the next_debug_instant_stack transform: #93222\r\n- Apply sourcemaps by default during prerender in `next build`: #93280\r\n- Turbopack: compute exports without full analysis: #92823\r\n- Turbopack: cheaper check in map_next_dynamic: #93283\r\n- Fix route handler SWR blocking on Node runtime: #93189\r\n- [turbo-tasks-backend] Single-item optimization for lost follower operations: #93200\r\n- Fix `export * as X from './self'` in scope-hoisted modules: #93192\r\n- Turbopack: only compute module ids for included modules: #93276\r\n- Forward invalid dynamic usage errors on client-side navigations: #93184\r\n- HMR: debounce status indicator transitions to prevent flicker during bursts of changes: #93229\r\n- Turbopack: iter_reachable_modules: #93315\r\n- Turbopack: add failing test for cross-module side-effect inference: #93323\r\n- Turbopack: also add edge count to trace: #93314\r\n- Turbopack: pull in updated vercel/nft tests: #93321\r\n- [turbopack-trace-server] optimize loading: #93264\r\n- turbo-tasks: precompute trait-impl vtables at compile time: #93092\r\n- Honor the route-level `expire` value with blocking revalidation: #93211\r\n- Turbopack: add `experimental.turbopackWorkerAssetPrefix` to keep Workers same-origin when `assetPrefix` is a CDN: #93271\r\n- Report OS memory pressure in TurboMalloc and trace samples: #93333\r\n- Speed up native postinstall script: #93312\r\n- Turbopack: remove unused module references: #93335\r\n- Turbopack: remove ModuleResolveResultItem::OutputAsset: #93349\r\n- Turbopack: delete unused turbo-static crate: #93324\r\n- fix a snapshot encoding error that could happen under concurrent mutation and snapshotting: #92658\r\n- Enable server HMR for metadata routes (manifest.ts, robots.ts, etc.): #93110\r\n- [next/image] Only fire `onError` once: #93209\r\n- fix: handling of falsey values in error boundaries: #93134\r\n- Update upload trace url: #93350\r\n- enable validateRSCRequestHeaders by default: #93367\r\n- Deprecate edge runtime: #93369\r\n- Update 05-server-and-client-components.mdx: #93374\r\n- Only log partytown setup error once: #93378\r\n- Remove leftover Turbopack manifests: #93398\r\n- trace-server: shrink_to_fit LazySortedVec after sorting: #93361\r\n- Revert \"Revert \"Node.js streams: Add forkpoint for prerenderToStream\"\": #93376\r\n- feat(metadata): support non-standard directives in robots.ts via `other`: #93206\r\n- [turbo-trace-server] optimize loading even more: #93332\r\n- Fix streaming in draft mode for cache components: #93417\r\n- Drop once_cell from all direct crate deps: #93095\r\n- Replace Lazy<FxHashMap> static lookups with phf::Map: #93096\r\n- Include deployment id in `cacheHandlers` keys: #93453\r\n- fix(next/image): Improve error message for private IP (SSRF) rejections: #91686\r\n- turbo-tasks-backend: fix snapshot coordination races + extract SnapshotCoordinator: #93416\r\n- Fix dev mode reload and error on back navigation between Next.js pages: #93486\r\n- Fix double-encoding of URL pathname parts in client param parsing: #93491\r\n- Don't suppress usage of deprecated TypeScript `compilerOptions`: #93377\r\n- Turbopack: fix import_usage for functions behind member expressions: #93504\r\n- [turbopack] shrink the size of futures: #93474\r\n- [turbopack] Simplify local task tracking: #93478\r\n- [turbopack] correct a fencepost error in our inline string descision: #93524\r\n- Turbopack: make rcstr! macro expansion const: #93516\r\n- Turbopack: lazy aggregation optimize via persistent pending flag: #93454\r\n- Detect `'use cache'` module-scope deadlocks early in dev: #93500\r\n- Turbopack: really fix MAX_INLINE_LEN: #93531\r\n- Bundle the `'use cache'` deadlock probe worker: #93538\r\n- Support configuring a default instant validation level : #93301\r\n- Turbopack: simplify asset ident constructors: #93213\r\n- Disable instant validations in draft mode: #93472\r\n- Drop `ReferencedAsset::from_resolve_result` as a turbotask: #93297\r\n- Turbopack: Cache effect errors, replace the write_lock Mutex with a lazily created Notify instance: #93476\r\n- Order loader tree imports by tree depth: #93537\r\n- Turbopack: more strict vergen setup: #93541\r\n- [devtools] Force ANSI colors on overlay code frames regardless of TTY: #93550\r\n- turbo-rcstr: replace `rcstr!` macro_rules with proc macro: #93551\r\n- Turbopack: Fix middleware matcher suffix: #93590\r\n- Turbopack: Match proxy matchers with webpack implementation: #93594\r\n- Track `searchParams` access through a Proxy to catch missing-key reads: #93549\r\n- Turbopack: Change DynEffect::dyn_value to DynEffect::value_hash, a simple u128: #93552\r\n- Cherry-pick ghsa commits to canary: #93614\r\n- Hold `cacheSignal` across `unstable_cache` foreground revalidation: #93617\r\n- Encode non-ASCII characters in cache tags at construction: #93601\r\n- Stabilize `unstable_io`: #93621\r\n- Use Next.js version as Turbopack persistent cache versioning key: #93605\r\n- Trace-server: Fix bottom up, and reduce allocations in turbopack-trace-server bottom-up grouping: #93460\r\n- feat(turbopack): add chunkLoadingGlobal config option: #93488\r\n- turbopack: reschedule stale tasks with correct invalidation priority: #92897\r\n- fix(devtools): render nested error messages with HotlinkedText: #93620\r\n- Fix: Improved rewrite detection during optimistic routing: #93619\r\n- Fix \"type: module\" in project dir when using standalone or adapters: #93612\r\n- Instant Insights: favor reported errors over missing slots: #93709\r\n- Remove ineffective turbo-tasks: #91341\r\n- Remove redundant instant navigation prefetch header: #93713\r\n- Instant Insights: Favor reporting errors from all potential navigations over reporting a failed attempt to validate when a slot is missing: #93714\r\n- Proof of concept: task eviction after snapshot for turbo-tasks-backend: #91790\r\n- [turbopack] fix feature usage telemetry: #93100\r\n- Turbopack: don't generate next-server.js.nft.json with adapters: #93684\r\n- Add an info panel for the existing \"Cache disabled\" indicator: #93756\r\n- Extend instant error overlay to metadata, viewport, and sync IO errors: #93287\r\n- Turbopack: expose hashes of source files to adapters: #93539\r\n- bfcacheId: Opt out of state preservation: #93633\r\n- Honor Suspense-above-body opt-in for dynamic `generateViewport`: #93759\r\n- Turbopack: fix lock-order inversion between Storage::map and Storage::snapshots: #93788\r\n- [turbopack] Enforce `root` attribute for strongly consistent reads and collectibles: #93114\r\n- Add `next internal static-routes-info` CLI command: #93399\r\n- Craigandrews/ensure isr lru is written if requests collapsed: #93766\r\n- Fix Turbopack worker_threads URL resolution: #93432\r\n- Patch `playwright-core` to resolve `_finishedPromise` on `requestFailed`: #93802\r\n- Fix catch-all `router.query` corruption with `basePath` + `rewrites`: #93294\r\n- fix: GNU xargs warns about incompatible --replace/--max-args: #93821\r\n- fix: renumber non-sequential errors in errors.json: #93824\r\n- simplify session dependent tasks (#91729): #93227\r\n- Surface invalid dynamic usage errors via Flight in dev: #93706\r\n- Show inner `\"use cache\"` as cause of nested-dynamic cache error: #93707\r\n- fetch: respect HTTP Cache-Control headers with TTL-based invalidation (#91729): #93228\r\n- [CC] fix: cachedNavigations missing asyncApiPromises in resumes: #93827\r\n- Fix server action forwarding loop with middleware rewrites: #93792\r\n- Instant Insights: When unable to complete validation provide a filename for the unvalidated boundary: #93770\r\n- Fix `Date.now()` cause shadowing in sync IO error overlay: #93857\r\n- Instant Insights: only report non-validatable if dev render is error free: #93858\r\n- Remove partialFallbacks config flag: #93859\r\n- Fix warning in new apps caused by incorrect image dimensions: #93826\r\n- Trace middleware/proxy source files in webpack NFT pipeline: #93871\r\n- Redesign dev overlay: cleaner shell + instant fix-card guidance: #93755\r\n- turbo-tasks: prioritize recomputed tasks with Recomputation priority: #93876\r\n- [Turbopack] Add graph-based CSS chunking algorithm behind experimental.cssChunking: \"graph\": #93606\r\n- turbopack: emit assets before duplicate check in emit_assets: #93875\r\n- Pass projectDir to adapter modifyConfig: #93916\r\n- Distinguish in-navigation errors in the instant error overlay: #93843\r\n- Eval next.config export functions in the try catch: #93884\r\n- Rename TaskExecutionReason::Initial to Root: #93922\r\n- Use node streams for server inserted HTML: #93934\r\n- Add nextConfig.instrumentationClientInject: #93785\r\n- Remove vercel approvers: #93921\r\n- [otel] honor traceparent for verbose mode spans: #93874\r\n- Fix cross-param leak with `prefetch={true}` and `cachedNavigations`: #93940\r\n- Enable rootParams by default: #93863\r\n- devlow: add run sampling snapshots and comparison reports: #93833\r\n- Allow inspecting prerender worker again: #93947\r\n- make rcstrs on the heap/static slightly smaller: #93805\r\n- Add MCP `compile_route` tool: #93337\r\n- [turbopack-trace-server] Add memory samples to the mcp tool results: #93338\r\n- Stop pinning compiled chunk source on `EcmascriptBuildNodeChunkVersion`. : #93807\r\n- [turbopack] Add trace metadata about the persist size: #93339\r\n- Turbopack: fix subpath imports pointing to external packages: #93308\r\n- Turbopack: fix error reporting with crashing webpack loaders: #93926\r\n- Polish instant fix cards and validation messages: #93894\r\n- Add deployable tarballs to pack-next: #93963\r\n- fix(devtools): detect VS Code renamed macOS binary in launch-editor: #93971\r\n- turbo-tasks: task-storage memory wins: #93720\r\n- Turbopack: respect the module-sync export condition: #93970\r\n- devlow-bench: percentile-based comparison and run retries: #93950\r\n- Prerender HTTP access fallbacks with Cache Components semantics: #93988\r\n- Add experimental.appShells feature flag: #93997\r\n- Make `--debug-build-paths` work with `src/` directory projects: #94016\r\n- Revert \"Prerender HTTP access fallbacks with Cache Components semantics\": #94018\r\n- Respond to App Shell prefetches on the server: #93998\r\n- [turbopack] Disable ctor under RA: #94022\r\n- Turbopack: don't crash the dev server when node_modules/next is briefly unresolvable: #93877\r\n- Include PPR routes in dynamicRoutes regardless of revalidate time: #94025\r\n- Enable experimental.varyParams by default: #94010\r\n- Enable experimental.optimisticRouting by default: #94011\r\n- Enable experimental.cachedNavigations by default with cacheComponents: #94012\r\n- Revert \"Include PPR routes in dynamicRoutes regardless of revalidate time\": #94032\r\n- Prerender static metadata under dynamic segments to canonical pathname: #93873\r\n- Instant navs devtools revamp: #94027\r\n- Add Chromium-only Playwright image publisher: #94051\r\n- Replace next-ppr-optimizer with next-cache-components-optimizer: #94035\r\n- Fix errors.json merge driver to handle gaps in error codes: #93829\r\n- Turbopack: make available_modules an OperationVc and simplify merged module bookkeeping: #94055\r\n- Improve notFound recovery in error pathway: #94037\r\n- Turbopack: Fix unsound IntoIterator for ReadRef<T>: #94122\r\n- Fix Firefox refresh loop on initial load of streaming pages in dev mode: #94128\r\n- Prefetch App Shells on the client: #93999\r\n- ServerActionsGraph: pass ModuleGraphLayer as OperationVc: #94141\r\n- Bugfix: Incorrect search params stored in cache: #94144\r\n- Remove extra word: #94160\r\n- Fix default regex for `require.context` in Turbopack analyzer: #94162\r\n- Fix short circuit evaluation of AND / OR in the Turbopack analyzer for string & nullish-related methods: #94159\r\n- Turbopack: fix instrumentationClientInject with type:module: #94184\r\n- Align issue triage guidance with automated behavior: #94189\r\n- [CC] Streaming prerender: #94044\r\n- [CC] Avoid unnecessary conversions to a stream: #94192\r\n- Propagate adapter preferred regions: #94123\r\n- Consolidate Resume Data Caches and partially revert #88556: #94194\r\n- Fix `'use cache'` bail-out under `unstable_instant = false`: #94198\r\n- Turbopack: use module graph for NFT: #92901\r\n- Turbopack's analyzer: always treat promises as truth-y and non-nullish: #94186\r\n- Update `shortcircuit_if_known` to `eval_shortcircuit()`: #94163\r\n- Remove dead code from `JsValue::Binary` in `is_truthy`: #94165\r\n- Produce valid file URLs for `import.meta.url` on Windows in Turbopack: #94179\r\n- [turbopack] Store TaskDirtyCause in Dirtyness and pass to NativeFunction::span: #94057\r\n- Turbopack: cleanup ModuleHotReferenceAssetReference: #94206\r\n- Add Errors/Insights tab split to the instant error overlay: #94073\r\n- Replace VcStorage with real TurboTasks in tests/benches : #93955\r\n- Redesign the unrendered-segment instant validation overlay: #93879\r\n- turbopack tracing: add chunk_name to `get HMR events` span: #94061\r\n- Turbopack: reduce hmr chunk list subscriptions: #94062\r\n- [turbopack] Separate `JsValue` into it's own folder in the analyzer: #94208\r\n- feat(image-optimization): add experimental flag `imgOptOperationCache`: #94246\r\n- Exclude static metadata and viewport from error recovery prerender when cache-components is enabled: #94134\r\n- [turbopack] Shrink ReadRawVcFuture from 80 to 64 bytes: #94201\r\n- [turbopack] Move `WellKnownObjectKind` & `WellKnownFunctionKind` into `well_known/kinds.rs` in the analyzer: #94209\r\n- [turbopack] Move `require.context`-related code into a seperate file in the analyzer: #94210\r\n- Turbopack analyzer: analyze ternaries + promises in string & nullish methods: #94187\r\n- [turbopack] Break up `graph.rs` in the analyzer into smaller files: #94211\r\n- [turbopack] Add `explain()` methods to `WellKnownObjectKind` and `WellKnownFunctionKind`: #94217\r\n- [turbopack] Handle negative numbers as constants in the analyzer: #94218\r\n- [turbopack] Use `ast_path.kinds()` instead of mapping over `ast_path` in the analyzer: #94221\r\n- [CLI] Exit non-zero with a clear message when next typegen fails: #94241\r\n- Switch `TotalOrderF64` to `f64` in `ConstantNumber` to correctly handle `NaN === NaN` and `0 === -0` inside the Turbopack analyzer: #94172\r\n- Use `serde_json::Number` in `CompileTimeDefineValue` and remove `TotalOrderF64`: #94177\r\n- Update ctor from 0.10 to 1.0.6: #94045\r\n- Include `--port` in `next internal query-trace` startup hint and help example: #93961\r\n- Turbopack: refactor NFT to add Endpoint.traced_files: #94224\r\n- Turbopack: show codeframe when tracing too much: #94207\r\n- fix(instrumentation): await instrumentation in RouteModule.prepare: #94306\r\n- [turbopack] Function pointers are copy: #94273\r\n- DiskFileSystem: run write effects on a spawned task: #94140\r\n- Disable `default-case` ESLint rule for type-checked TypeScript files: #94316\r\n- Handle a purged browser cache on back navigation: #94317\r\n- Persist debug channel via `IndexedDB` without blocking hydration: #94243\r\n- Fix debug channel not closing on the client with Node streams: #94268\r\n- Avoid bundling HMR refresh reducer in production: #94305\r\n- Remove the instantNavigationDevToolsToggle flag: #94322\r\n- skip render dev overlay ux under private flag: #94346\r\n- Turbopack: fix bundle-analyzer for NFT change: #93363\r\n- Devirtualize the backend api inside of turbo_tasks and turbo-tasks-backend: #94007\r\n- Delay Node Fizz piping until after render task: #94347\r\n- Enable Node streams by default: #94311\r\n- Turbopack: support turbopackIgnore on more traced calls: #94361\r\n- [turbopack] Treat assignments to `module.exports` as side-effect free: #94293\r\n- instant: enable navigation validation by default: #94312\r\n- Turbopack: Move turbo-tasks/src/raw_vc.rs to turbo-tasks/src/vc/raw.rs: #94239\r\n- Turbopack: fix pages index normalization for --debug-build-paths: #94341\r\n- Deprecate undocumented custom server methods: #94348\r\n- Trace cacheHandler and cacheHandlers when using adapters: #94197\r\n- fix: build hangs if sync IO aborts before root chunk is flushed: #94365\r\n- DiskFileSystem: store Effect full_path as Arc<Path>: #94332\r\n- [CC] add shell stages: #94438\r\n- [turbopack] Add `BumpVec` (vector implementation that takes a `Bump`): #94296\r\n- Ensure aborting has the same inputs as render: #94436\r\n- [App Shells] App shells in runtime prefetches: #93801\r\n- [turbopack] Optimize TaskInput implementations: #94202\r\n- make `TaskInput::is_resolved` inlinable everywhere: #94213\r\n- [App Shells] staged shell rendering in cached navs: #94441\r\n- [App Shells] staged shell rendering during build: #94442\r\n- Keep the dev React debug channel on Node streams end to end: #94433\r\n- Revert \"Keep the dev React debug channel on Node streams end to end\": #94459\r\n- [turbopack] Only ship top-level async support in the runtime when needed: #94376\r\n- Allow `unstable_retry` from TS plugin check in Next.js Error APIs: #94460\r\n- [turbopack] Treat local `const` assignments as side-effect free: #94294\r\n- [turbopack] Remove worker helpers from the default runtime: #94372\r\n- Extract App Shell from static prefetches: #94095\r\n- Turbopack: refactor ServerActionManifestAsset to be lazy: #94377\r\n- Update vendored lodash to 4.18.1: #94473\r\n- Turbopack: Perform issue filtering without turbo-task functions: #93885\r\n- Keep Instant DevTools locked when opening error overlay: #94357\r\n- fix(deps): bump @vercel/nft@1.10.2: #93979\r\n- Simplify turbo-tasks-backend: collapse single-impl traits and remove redundant Arc layers: #93983\r\n- Turbopack: refactor to use `get_ecma_transform_rule`: #94485\r\n- Turbopack: fixup cache handler tracing: #94477\r\n- [turbopack] Remove turbotask functions from `trait ResolveOrigin`: #94324\r\n- Turbopack: remove EcmascriptParsable::parse_original: #94465\r\n- Turbopack: Add an experimental option for eviction: #94439\r\n- Specialize client hook prerender abort reasons: #94494\r\n- enable eviction on canary: #94451\r\n- Remove turbopackMemoryLimit it is dead: #94483\r\n- [turbopack] Enable Effects to be evicted: #94173\r\n- [turbopack] standardize chunk entry names for webpack and postcss loaders: #94256\r\n- Add global config to enable Partial Prefetching: #94448\r\n- Fix: Subtree hints not propagating correctly: #94489\r\n- Partial Prefetching: Default to App Shell only: #94510\r\n- Turbopack: refactor into `get_next_client_transforms_rules`: #94487\r\n- [cna] Use `allowBuilds` instead of `ignoredBuiltDependencies` when using PNPM 11+: #94544\r\n- Turbopack: content hash polyfill sourcemap file: #94548\r\n- Remove `experimental.useNodeStreams` flag as it's enabled: #93938\r\n- Remove dead cacheComponents web streams path: #93944\r\n- fix(dev-overlay): Tidy up issues/insight menu and tab overlay: #94549\r\n- [turbopack] Remove WebAssembly helpers from the default runtime: #94373\r\n- enable eviction by default: #94452\r\n- Rename prefetch option `force-runtime` to `allow-runtime`: #94568\r\n- [turbopack] Use an arena for `JSValue`s: #94297\r\n- Stabilize export const prefetch: #94571\r\n- Fix node:stream leak in webpack edge bundles: #94585\r\n- Stream Cache Components dev render instead of restarting on cache miss: #94457\r\n- Fix Navigation Inspector Continue Rendering with loading.tsx: #94355\r\n- [turbopack] add an extension to trace files: #94587\r\n- Make router-act ignore App Shell prefetch requests: #94580\r\n- Enable experimental.appShells by default with cacheComponents: #94516\r\n- [turbopack] Lazily allocate the BlockCaches: #94562\r\n- Stabilize catchError and retry by removing unstable_ prefix: #94610\r\n- Revert \"Stabilize catchError and retry by removing unstable_ prefix\": #94617\r\n- Stabilize `unstable_instant`: #94578\r\n- Reapply \"Stabilize catchError and retry by removing unstable_ prefix\": #94623\r\n- [turbopack] Enable turbopackFileSystemCacheForBuild by default in non-stable releases: #94616\r\n- Add a cold cache dev indicator: #94611\r\n- instant: build fix-card Copy AI prompt dynamically from title + link: #94637\r\n- Stage short-lived `'use cache'` entries correctly in dev: #94645\r\n- Call `register_assignment_scope()` in  `visit_export_default_expr()` and `visit_export_default_decl()`: #94581\r\n- fix: handle shell errors when resuming Node streams: #94668\r\n- [turbopack] Rename variables in `path_join` and add tests: #94625\r\n- Warn on prefetch={true} navigation without Partial Prefetching (dev): #94672\r\n- Serve stale `'use cache'` entries in the dev server until they expire: #94662\r\n- Re-fetch dynamic content on navigation with `partialPrefetching` enabled: #94655\r\n- Add Owner Stack to \"`prefetch={true}` navigation without Partial Prefetching\" warning: #94683\r\n- [tubopack] migrate rcstr! to use scattered collect: #94498\r\n- Strip internal dev request-id headers from userland `headers()`: #94703\r\n- Persist `'use cache: private'` entries in dev: #94694\r\n- [App Shells] refactor instant-validation to make adding new stages easier: #94711\r\n- migrate turbo-tasks to scattered collect: #94503\r\n- [CC] refactor staged rendering codepaths in params/searchParams: #94718\r\n- [App Shells] Track whether shell prefetch used session data: #94484\r\n- Treat empty resume bodies as dynamic render requests: #94729\r\n- [codemod] Write pnpm overrides to pnpm-workspace.yaml on pnpm v11+: #94690\r\n- [CC] Exclude caches with low stale from static prerenders: #94678\r\n- [CC] Rename shellStage to streamReleaseStage: #94749\r\n- [turbopack] Drop data while serializing in `next build`: #94561\r\n- [turbopack] Optimize cell_dependency representation: #94717\r\n- [turbopack] Use `final_read_hint` in top level turbo tasks: #94712\r\n- Allow root params in App Shell (client)\r\n- fix: this in edge sandbox setTimeout/setInterval: #94754\r\n- Avoid a premature Suspense fallback flash in the streaming dev render: #94783\r\n- Format submillisecond durations as milliseconds: #94813\r\n- Move `warnOnce` imports into statements guarded by `process.env.NODE_ENV === 'development'`: #94781\r\n- Expand signature rewriting to allow returning ResolvedVc from turbo task functions: #94772\r\n- Move `errorOnce` imports into statements guarded by `process.env.NODE_ENV === 'development'`: #94782\r\n- Turbopack: add experimental React compiler support: #94573\r\n- pass `--locked` to `cargo binstall`: #94834\r\n- [turbopack] Allocate `Effect`s in an arena: #94614\r\n- [turbo-tasks] Shrink RawVc to 8 bytes and CellId to 4 bytes: #94792\r\n- dev-overlay: polish error header layout and instant fix-card chip: #94790\r\n- Make `cacheMaxMemorySize: 0` and custom cache handlers fast in dev: #94784\r\n- Fix remaining OTEL issues in adapter: #94817\r\n- Turbopack: improve NFT warning message: #94854\r\n- Add experimental.useExperimentalReact to opt into React's experimental channel: #94861\r\n- Turbopack: improve issue printing colors: #94858\r\n- [turbopack] Update algebra in chunking algorithm: #94873\r\n- [CC] Fix accumulator flushing logic: #94857\r\n- trace-server: render read progress in place on a terminal: #94879\r\n- Turbopack: Add an OrdResolvedVc wrapper type: #94875\r\n- Turbopack: don't run NFT for output:export or Edge: #94862\r\n- react-compiler: don't emit diagnostics as issues: #94874\r\n- Turbopack: fix tracing of sharp@0.35: #94845\r\n- Support vary params rewinding: #94809\r\n- [App Shells] Allow root params in app shells: #94738\r\n- Rename experimental.useExperimentalReact to blockingSSR: #94869\r\n- Fix non-RSC router prefetch handling: #94553\r\n- Log partialPrefetching during startup: #94822\r\n- Avoid re-logging server-originated errors forwarded from the browser: #94917\r\n- Scope the Cold cache indicator in dev to shell cache misses: #94911\r\n- fix(dev-overlay): correct open-in-editor path when using a `src` directory: #94775\r\n- Fix repoRoot for adapters: #94478\r\n- Fix dev overlay hydration error ordering: #94555\r\n- [turbopack] Retry chunk loading on failure: #94918\r\n- [turbopack] Sort modules in chunks to reduce duplicates: #94961\r\n- router instrumentation: refactor client hook dispatch (1/7): #94755\r\n- [otel] Add more verbose-mode OTEL spans for App Router: #94894\r\n- Enforce route segment configs on metadata routes under Cache Components: #94962\r\n- typegen: default to Turbopack: #94952\r\n- router instrumentation: add transition start context (2/7): #94766\r\n- fix: after(callback) called after response end: #94974\r\n- fix: request APIs in promises passed to after() in actions/handlers: #94964\r\n- Remove embedded Claude Code plugin marketplace: #94877\r\n- [otel] Correctly set error code attributes for App API routes: #94979\r\n- Statically prerender metadata image routes under Cache Components: #94957\r\n- codemod: cache-components-instant-false + next-cache-components-adoption skill: #94941\r\n- Remove legacy PPR codepaths: #94955\r\n- Add a global opt-in for the runtime stage of Cached Navigations: #95064\r\n- [turbopack] Rename the edge runtime to the self-contained runtime: #94726\r\n- [turbopack] Sort modules in files by path not ID: #95065\r\n- Turbopack: Fix log box test on react 18: #95078\r\n- Turbopack: Avoid clone when sorting by module file path: #95079\r\n- Fix false-positive `export const dynamic` in Cache Components detection: #95083\r\n- Serve ISR fallback shells in response to prefetch requests: #94534\r\n- Insights: drop irrelevant fix cards from instant errors: #94926\r\n- Navigation inspector UI updates: #94959\r\n- Turbopack: Delete dead AttachedFileSystem type: #94960\r\n- Opt Partial Prefetching routes into the runtime stage of Cached Navs: #95097\r\n- Fix #95015 by pulling a fix to scattered-collect: #95098\r\n- Release the instant navs lock without clearing the whole cookie jar: #94947\r\n- Compute dev fallback params from the most-specific prerendered route: #95066\r\n- Consider merging chunks when `overlap == 1`: #95102\r\n- [turbopack] Add support for single-entry chunks: #94727\r\n- Turbopack: add TURBOPACK_DEBUG_CSS_CHUNKING env var: #95080\r\n- Keep the resolved cache life for `cacheMaxMemorySize: 0` caches in dev: #95100\r\n- Avoid mutating `req.headers` when stripping internal headers: #95116\r\n- Revert \"Remove legacy PPR codepaths\": #95113\r\n- dev-overlay: wire Link prefetch={true} Partial Prefetching warning into Insights: #94798\r\n- Add missing switch case: #95127\r\n- Revert \"Add missing switch case\": #95129\r\n- Fix Navigation Inspector styles in dark mode: #95126\r\n- Fix local fonts in statically prerendered `ImageResponse` metadata route: #95121\r\n- Surface an error for blocking routes under the Navigation Inspector: #95139\r\n- Suppress prefetch={true} warning when route opts out via instant = false: #95099\r\n- [turbopack] Create `ServiceWorkerChunkingContextOptions` in `next-core`: #94920\r\n- instant(): Only render shell, unless prefetch prop is set: #95150\r\n- [turbopack] Create `ServiceWorkerEntryModule` and `service_worker_chunk_filename`: #94921\r\n- [turbopack] Discover `ServiceWorkerEntryModule`s in `next-api` and compile + serve those service workers: #94922\r\n- [PP] Reveal after ShellRuntime when simulating a Shell Prefetch in dev: #95149\r\n- Replicate production prefetch shells for instant navigations in dev: #95067\r\n- [next-dev-loop] Fix some papercuts: #95153\r\n- Gate the dev Cold cache badge behind an experimental flag: #95169\r\n- [next-dev-loop] Fix cookies: #95177\r\n- Revert \"[turbopack] Use `final_read_hint` in top level turbo tasks (#94712)\": #95178\r\n- [dev overlay]: restructure Copy-as-prompt body into a step-by-step checklist: #95186\r\n- Hard-navigate to app routes shadowed by a pages dynamic route: #95185\r\n- next-dev-loop: require agent-browser >= 0.31.1: #95209\r\n- fix: preserve middleware rewrite query in Pages API routes: #94905\r\n- Don't track modifications to transient data stored in tasks: #95133\r\n- Record size metrics to our compaction and persistence spans: #94977\r\n- [turbopack] Support undoable modifications for many field types on TaskStorage: #95180\r\n- Turbopack: make hash_xxh3_hash128 return u128: #95232\r\n- Improve typing of `decodeReply`: #95263\r\n- fix: preserve repeated search params in client page segment cache keys: #94863\r\n- fix(turbopack): dedupe filename/exportedName in server-reference-manifest worker entries: #95242\r\n- Avoid bundling client-nodemodules used by `unstable_rethrow` in client-browser modules: #95196\r\n- Turbopack: replace cssChunking graph `moduleFactorCost` with `weightDistribution`: #95088\r\n- Fix: Update the URL when a client navigation redirects to a rewritten route: #95207\r\n- Enhance ESLint rule `no-location-assign-relative-destination`: #93057\r\n- [turbopack] Add an experimental `chunkingHeuristics` to `next.config.js`: #95019\r\n- [turbopack] Thread `chunkingHeuristics` through to chunk groups: #95020\r\n- [turbopack] Set `chunking_heuristics` on each `ChunkGroupInfo`: #95021\r\n- [turbopack] Use experimental chunking heuristics: #95026\r\n- [turbopack] Discover service workers in the Turbopack analyzer: #94923\r\n- Turbopack: This bool could've been an enum: #95288\r\n- log config evaluation time: #94811\r\n- Log content-free diagnostics when a postponed state fails to parse: #95216\r\n- Turbopack: constant evaluate `x in y`: #95286\r\n- Surface empty `generateStaticParams` as a redbox with a real stack: #95269\r\n- Render a code frame for build errors thrown collecting page data: #95270\r\n- fix: params/searchParams in client page crashing dev instant validation: #95289\r\n- Turbopack: compute code hash per `use cache` function: #94234\r\n- Fix workers on thread to not crash with napi-rs: #95281\r\n- codemod: non-interactive upgrade for agents and CI: #95312\r\n- [PP] Validate Shell prefetches (except gSP): #95151\r\n- [PP] Instant validation - error for unguarded static params: #94595\r\n- codemod: bump eslint alongside eslint-config-next: #95314\r\n- Rename Copy as prompt to Copy prompt, convert FixOption to FixCard: #95309\r\n- Fix Navigation Inspector in Safari: #95329\r\n- Fix early OTel proxy tracers in Cache Components prerenders: #95317\r\n- Re-query deploy-test build logs until id markers appear: #95243\r\n- Rename `DYNAMIC_EXPIRE` and `DYNAMIC_STALE` to describe what they gate: #95361\r\n- fix(turbopack): allow `#/` prefixed subpath import specifiers: #94461\r\n- Remove 'silence this warning' from instant validation fix output: #95187\r\n- Make `instant()` resilient to a leaked navigation-testing cookie: #95375\r\n- Await reused in-flight prefetch entries under Instant Navigation lock: #95301\r\n- Cache short-`expire` `'use cache'` values across dev reloads: #95362\r\n- Fix metadata title dropped on soft navigation with Cache Components: #95315\r\n- Prefetch links nearest the top of the document first: #95393\r\n- fix: handle prototype-colliding segment names in segment explorer trie: #95403\r\n- Clear a resurrected instant cookie on unlock so a hard reload recovers: #95398\r\n- Recover from blocking routes under Instant Navigation lock when deployed: #95227\r\n- fix(config): correctly validate cacheHandlers names: #95358\r\n- Fix history push getting treated like replace when followed by refresh: #95392\r\n- Skip saving `expire: 0` values in the default cache handler in prod: #95363\r\n- Fix false-positive nested-cache error for a short default profile: #95373\r\n- Fix navigation getting reverted when a Server Action is in flight: #95391\r\n- Ignore-list internal frames whose source maps chain to original sources: #95448\r\n- fix: work around SWC compress bug: #95457\r\n- Avoid unnecessary rendering for validation in dev: #95394\r\n- Add `serverComponentsHmrCancellation` experimental flag: #95462\r\n- Also rewrite requires in page templates with Webpack: #95446\r\n- Fix instrumentation hook awaiting for middleware with adapters: #95357\r\n- otel: Use correct parent span for Node.js middleware: #95306\r\n- [turbopack] Add E2E tests for service workers: #94924\r\n- trace-viewer: Support string span ids in nextjs trace backend: #95515\r\n- evals: fix false-negative regex checks with the agentic LLM judge: #95440\r\n- fix(dev-overlay): increase fix card grid row gap to clear floating Copy prompt button: #95526\r\n- [fragment-scroll] Enable new scroll handler by default: #95378\r\n- Abort superseded Server Components HMR requests on the client: #95463\r\n- turbo-persistence: skip directory fsync on Windows: #95497\r\n- Disable `supportsImmutableAssets` with `config.output`: #95521\r\n- Turbopack: add all keys to dynamic exports before sealing the object: #93334\r\n- Propagate maxDuration to edge adapter outputs: #95118\r\n- Run instrumentation for Node.js Middleware without Adapter: #95547\r\n- Fix/next info experimental analyze with graph css chunking: #95542\r\n- Cancel a superseded Server Components HMR refresh's server-side work: #95486\r\n- Turbopack: add more context to persistence file errors: #95318\r\n- [turbopack] Rename `rscEndpoint` to `rscHmrEndpoint`: #95538\r\n- [PP] Surface URL data during prefetching as an Instant insight with rule page: #95365\r\n- fix: log \"Partial Prefetching enabled\" during next build: #95593\r\n- [turbopack] Don't persist if there is little work to do: #95137\r\n- align dev and build output: #94916\r\n- [turbopack] Don't evict when there is little memory to save: #95213\r\n- Consistently gate navigation-testing-lock API on flag: #95582\r\n- Turbopack: enable `import with {type: 'text'}` by default: #95606\r\n- fix(create-next-app): pin both axes on Tailwind template logos to silence aspect-ratio warning: #95609\r\n- [turbopack] print Turbopack warnings after SSG: #95430\r\n- fix(create-next-app): render filenames in Geist Mono so the preloaded font is used: #95471\r\n- Normalize and validate `expire` and `revalidate` values to handle Infinity and surface mistakes early: #95493\r\n- Make the agent-rules block verifiable and self-upgrading: #95467\r\n- Convert agent-041's blocking-data check to the agentic LLM judge: #95630\r\n- Reduce the size of OperationVc from 8 bytes to 4: #95614\r\n- [turbopack] Output service workers to `/_next/static/`: #95554\r\n- [turbopack] Compile service workers registered from pages router pages: #95583\r\n- [turbopack] Simplify service worker e2e tests: #95672\r\n- Keep the request body a plain Readable after middleware so Readable.toWeb() doesn't hang: #95607\r\n- [PPF] Sync IO is only allowed in the dynamic stage: #95384\r\n- Fix support for `custom-media-queries` in LightningCSS: #95689\r\n- Turbopack tests: remove assertions that duplicate webpack results: #95688\r\n- request insights: record local framework spans (1/5): #93974\r\n- request insights: derive request history and fetch data (2/5): #93975\r\n- request insights: expose dev snapshots to tools and HMR (3/5): #93976\r\n- Fix duplicate static files in adapter: #95681\r\n- Fix Pages router 404 runtime rendering with Adapter: #95264\r\n- request insights: add agent diagnosis access (4/5): #93977\r\n- Fork navigation-testing-lock module: #95611\r\n- Turbopack: order CSS modules by chunk-group co-occurrence in linearize: #95579\r\n- Fix termination handling: #95692\r\n- [turbopack] Switch `make_production_chunks` to use floats: #95749\r\n- Improve the NFT error message and ignore comment handling: #95144\r\n- request insights: add DevTools request panel (5/5): #93978\r\n- [turbopack] Optimize the implementation of AutoMap/AutoSet : #95694\r\n- telemetry: add agentName to anonymous metadata: #95586\r\n- Respect NEXT_HASH_SALT for server side assetsHashes: #95738\r\n- Support metadata routes in --debug-build-paths: #95788\r\n- Only track pending imports for real promises: #95789\r\n- Fix cache warming and static params for metadata images with top-level await: #95790\r\n- Preserve init errors from async route modules: #95799\r\n- Fix Request Insights subscription initialization: #95794\r\n- Add more realistic bench fixtures: #95807\r\n- [Bench] Extend bench app to have realistic client chunk counts: #95814\r\n- Replay same-document traversals that happen before hydration: #95682\r\n- [turbopack] Tell agents not to mention next.config.js options: #95825\r\n- Exclude stale under 5 minutes from app shells: #95833\r\n- [turbopack] Generate component chunks for each merged group to increase cache hits: #95261\r\n- Turbopack: trace externals imported only by server actions: #95824\r\n- [turbopack] Create a shared asset with browser runtime code: #94586\r\n- [turbopack] Create a `chunk_group_bootstrap_params()` function: #94631\r\n- [turbopack] Add `inline_chunk_group_bootstrap` to `BrowserChunkingContext` and `chunk_group_bootstrap_params` to `ChunkGroupResult`: #94661\r\n- [turbopack] Add `registerEntry()` to handle inline bootstrapping: #94664\r\n- [turbopack] Add `chunk_group_bootstrap_params` and the chunk-loading global to the build manifest: #94663\r\n- [turbopack] Inline the chunk group bootstrap in Next.js to drop the per-route runtime: #94666\r\n- [turbopack] Only ship pages-router routes in the client chunk-group bootstrap manifest: #94671\r\n- Revert \"Replay same-document traversals that happen before hydration\": #95853\r\n- Fix Request Insights span collection: #95818\r\n- Unify appShells flag with Partial Prefetching: #95415\r\n- Fix repeated navigations while the Instant Navigation lock is held: #95864\r\n- fix(agent-rules): pad managed AGENTS.md block with blank lines: #95892\r\n- [turbopack] Don't SSR on pages only navigated to through a soft nav: #95539\r\n- [turbopack] Clean up `server_chunking_context`: #95908\r\n- Fix Rust doctest failures: #95909\r\n- [instant] Let dev-server requests bypass the fetch lock: #95761\r\n- Move immutable static assets config option out of experimental: #95351\r\n- Move outputHashSalt out of experimental: #95840\r\n- fix(cms-contentful): await draftMode() and use Promise<> params type: #95631\r\n- Turbopack: Simplify parent directory creation retry loop logic: #95835\r\n- [turbopack] Drop unused exports from a CJS module: #95716\r\n- [turbopack] Skip redundant top-level root updates: #95903\r\n- cna: use LayoutProps helper in TS layout templates: #95675\r\n- [turbopack] Rename `turbopackTreeShaking` to `turbopackModuleFragments`: #95978\r\n- Fix instant validation blocking navigations: #95939\r\n- Prevent unhandled rejections when a \"use cache\" cache handler errors: #95985\r\n- Insights: use a single Learn more link in console errors: #95967\r\n- Preserve basePath in redirect destinations: #95608\r\n- fix(next/image): improve performance of detectContentType() : #96006\r\n- Validate server reference IDs during manifest lookup: #96007\r\n- fix(incremental-cache): byte-exact fetch cache key for binary bodies: #96008\r\n- fix(fetch-cache): key fetch(Request, init) by the effective request: #96009\r\n- Ensure exotic rewrite param values are properly encoded: #96010\r\n- Set correct origin for internal redirects in custom server: #96011\r\n- Enforce `serverActions.bodySizeLimit` for Server Actions in Edge runtime: #96012\r\n- Improve performance of validating MPA form submissions: #96013\r\n- Fix Turbopack middleware matcher with i18n single locale: #96014\r\n- [turbopack] Tree-shake CJS exports that use the `Object.defineProperty` syntax: #95994\r\n- Turbopack: Use `Arc<PathBuf>` for keys in turbo-task-fs's per-path `MutexMap`: #95951\r\n- Revert \"[turbopack] Don't SSR on pages only navigated to through a soft nav (#95539)\": #96028\r\n- Turbopack: Fix missing canonicalization of paths and always use verbatim paths internally for Windows: #95668\r\n- Turbopack: Remove chunk group id from value of chunk groups map: #95142\r\n- Fix basePath fallback parameter parsing: #95966\r\n- Emit the static paths HMR update after updating the cache: #96019\r\n- Add a dedicated HMR message for static params changes: #96020\r\n- Fix stale dev `'use cache'` for cookieless requests and route handlers: #96022\r\n- fix: cache miss in App Shell for cached pages with gSP: #95665\r\n- Turbopack: stop copying sourcesContent into every serialized source map: #95934\r\n- [turbopack] Fix deployment skew protection for component chunks: #96079\r\n- Gate `partialFallback` behavior behind `partialPrefetching` flag: #96074\r\n- [Cache Components] Exclude dynamic params from prerenders when no generateStaticParams values is provided: #95872\r\n- Turbopack: Use `swc_core::ecma::utils::prop_name_eq` for a couple of the `next-custom-transforms`: #96035\r\n- Turbopack: Use Arc<PathMap> and Box<Path> to make InvalidatorMap slightly more efficient: #95987\r\n- Turbopack: Split up turbo-tasks-fs/src/lib.rs into smaller modules: #96030\r\n- [Bench] Add client-trace attribution pass and document metrics to render-pipeline: #95828\r\n- Rewrite edge server source map sources in Rust, drop JS fallback: #95980\r\n- fix(next/font/google): bound Google Fonts fetch timeout on Turbopack: #95981\r\n- Restore partial fallback shell upgrade coverage: #96096\r\n- Remove inert experimental.viewTransition flag: #96098\r\n- Turbopack: Refactor watcher event handling and batching logic: #96087\r\n- Turbopack: Very minor improvements for watcher loop: #96103\r\n- [turbopack] Track re-exports in `import_usage` inside of `compute_import_usage`: #95989\r\n- [RSC HMR] Fix a flurry of refetches when a editing component imported from many routes: #96102\r\n- Return plain text 404 for non-document requests to unknown paths: #95930\r\n- [turbopack] Track usage of modules imported with `require()`: #95717\r\n- [turbopack] Drop dead `require()` calls: #95718\r\n- [turbopack] Import Webpack's tests for tree-shaking: #95811\r\n- [ts-plugin] Preserve TypeScript quick info metadata: #95863\r\n- Optimize app page entry analysis: #96058\r\n- Include additional prerender metadata about build-time routes: #96080\r\n- Keep VaryPath monomorphic by making isRootParam required: #96122\r\n- Make reifyRouteTree object literals match the canonical RouteTree key order: #96162\r\n- Keep optimistic-route param handling monomorphic: #96169\r\n- [sourcemaps] Use file: sourcemaps for Turbopack to improve dev performance: #95946\r\n- Avoid quadratic HMR queue shifts: #96137\r\n- Optimize implicit cache tag derivation: #96120\r\n- Forward dev invalid dynamic usage errors from the render, not validation: #96148\r\n- [refactor] Model dev validation render outputs as a discriminated union: #96149\r\n- Add the `experimental.devValidationWorker` config flag: #96150\r\n- [refactor] Prepare dev validation for running on a worker thread: #96151\r\n- Run Cache Components dev validation on a worker thread: #96153\r\n- fix: release compression stream when client disconnects mid-response: #96173\r\n- [sourcemaps] Reuse source map payloads and consumers across stack frames: #96198\r\n- Pass fallback params to the dev validation worker as maps: #96210\r\n- Retry the source map lookup with a plain path: #96215\r\n- Read chunk source maps from disk in the dev validation worker: #96218\r\n- Run dev validation in process when using Webpack: #96219\r\n- Fix dev overlay symbolication for project paths needing percent-encoding: #96221\r\n- fix(sandbox): release one-shot timeout ids after they run: #96161\r\n- Turbopack: support import.meta.glob caseSensitive option: #96226\r\n- Add shell offset to static segment prefetches: #95963\r\n- [turbopack] Fix de-opt in getChunkRelativeUrl(): #96183\r\n- [turbopack] Tree-shake `module.exports = {...}` (CJS): #95996\r\n- Add Instant Insights request timing: #95958\r\n- Track whether runtime data is accessed during prefetch: #95964\r\n- Update vendored `@mswjs/interceptors` to 0.41.9: #96059\r\n- Replace vendored `http-proxy` with `httpxy`: #96060\r\n- Turbopack: Store watcher batch state with bitflags instead of 4 different sets: #96114\r\n- Turbopack: Only extend the watcher's batch window for unfiltered events: #96186\r\n- Serve cached misses from the filesystem route cache: #96230\r\n- Use a safe clock for Request Insights bookkeeping: #96274\r\n- Block prefetch task until sufficient response is received: #96017\r\n- Attempt static prefetch before resorting to runtime: #96095\r\n- Unify allow-runtime with Partial Prefetching: #96106\r\n- Add option to control dev memory threshold restarts: #96144\r\n- feat(turbopack): support import.meta.env: #96225\r\n- fix(next/image): improve test coverage for unsupported image types: #96301\r\n- Add local Request Insights span tracing: #96275\r\n- Add Instant Insights pipeline spans: #95961\r\n- Persist Request Insights display settings: #96277\r\n- [turbopack] Treat `Object.defineProperty(exports, …, { value: … })` as side-effect free: #96273\r\n- Fix Turbopack worker URL context lookup: #96307\r\n- Return 200 for client-handled Server Action redirects: #96310\r\n- Revert \"[turbopack] Track re-exports in `import_usage` inside of `compute_import_usage`\": #96311\r\n- Improve root detection to handle worktrees, more workspaces & stray lockfiles: #96159\r\n- Turbopack: aggregate server HMR into one subscription: #94948\r\n- Turbopack: extract chunk list version/update into turbopack-ecmascript: #95661\r\n- Turbopack HMR: extract deferring build messages and use it in server hmr: #95795\r\n- Turbopack server hmr: avoid complete `clear` on graph changes: #95546\r\n- [turbopack] Remove loader calls for dropped dynamic imports: #96284\r\n- Revert \"Revert \"[turbopack] Track re-exports in `import_usage` inside of `compute_import_usage`\"\": #96315\r\n- Restore comments dropped during a refactor: #96324\r\n- [turbopack] Tree shake w/ `bar['foo']` syntax for star imports: #96319\r\n- Cache immutable current task IDs outside the task-state lock: #96180\r\n- Gate partial fallback shell upgrades behind `partialPrefetching` for `next start`: #96297\r\n- Make retry stop when the time it was given is up: #96354\r\n- Share Ecmascript HMR chunk versioning, diffing, and merging between browser and node: #96325\r\n- Ensure unique resolved `headers()` value between render passes: #96085\r\n- Fix PPR rendering for configured HTML bots: #96364\r\n- [fragment-scroll] Stop blurring on navigations: #96113\r\n- [Instant] Point to first blocking await in validation: #96343\r\n- Skip reader task locking for immutable Turbo Tasks reads: #96179\r\n- Fix empty Fragment scroll ownership: #96342\r\n- fix(create-next-app): make AGENTS.md blue: #95432\r\n- fix: respect `htmlLimitedBots` in cache components without buffering the full response: #96367\r\n- Remove obsolete shouldWaitOnAllReady render option: #96401\r\n- Update Rust toolchain to nightly-2026-07-29: #96365\r\n- [turbopack] Keep track of components of the remainder chunk: #96409\r\n- [turbopack] Respect `sideEffects` in a `package.json` file with `optimizePackageImports`: #96383\r\n- Fix `isHeadPartial` when hydrating from a static fallback shell: #96400\r\n- [turbopack] add `experimental.turbopackChunking` config: #96398\r\n- Update @types/react and @types/react-dom to latest: #96419\r\n- Fix adapter outputs for not-found routes when used with cache components: #96390\r\n- Consolidate unhandled rejection logging into a single listener: #95999\r\n- Enable turbopackFileSystemCacheForBuild by default: #96395\r\n- [turbopack] Fix component chunks for workers: #96432\r\n- Fix hybrid Pages/App Router not-found rendering with adapters: #96392\r\n- Warn that `experimental.useCache` is deprecated: #96448\r\n- Enable Turbopack build filesystem cache by default: #96493\r\n- [Cache] Make caches error if called after prerender aborts: #96426\r\n- Fix App Router scroll padding visibility: #96308\r\n- Enable TypeScript CLI by default: #96497\r\n- fix: double fragment on navigation: #93132\r\n- Remove implicit Partial Prefetching opt-in from `instant`: #96539\r\n### Documentation Changes\r\n- docs: fix broken Activity Patterns demo link in preserving UI state guide: #91698\r\n- docs: post release amends: #91715\r\n- docs: use ErrorInfo type consistently in catchError docs: #91744\r\n- docs: add catchError benefits over userspace error boundaries: #91745\r\n- docs: platform portability and infrastructure documentation: #91237\r\n- docs: add verified adapters section: #91849\r\n- docs: document CSS decimal precision difference between Turbopack and webpack: #91909\r\n- [Docs] Rewrite agent rules to match bundled doc wording: #91995\r\n- docs: opengraph-image papercuts: #92018\r\n- Update revalidateTag examples to use the new two-argument signature: #92065\r\n- docs: clarify that `use cache` requires async functions: #92101\r\n- Move expanded adapters docs to API reference: #92115\r\n- docs: add middleware bypass note to CDN caching guide: #92132\r\n- docs: document revalidateTag's required second argument in upgrade guide: #92134\r\n- docs: local images referenced by remote source: #92178\r\n- docs: clarify id, filePath, and pathname in STATIC_FILE adapter output: #92227\r\n- Docs/adapters review: #92223\r\n- docs: vt demo guide: #92249\r\n- docs: Ask AI agents to self-identify themselves in PR descriptions: #92235\r\n- docs: add deploy tests documentation to contributing guide: #92388\r\n- docs: clarify that proxy/middleware matches static assets by default: #92441\r\n- docs: clarify serverless runtime behavior for use cache: #92232\r\n- docs: add note on React canary version to View transitions guide: #92315\r\n- docs: note PPR default in cacheComponents reference: #92378\r\n- docs: instant-navs draft, samples for build validation: #91850\r\n- docs: add middleware.mdx deprecation stub for discoverability: #92281\r\n- docs: improve blocking-route error page for params discoverability: #92359\r\n- docs: clarify cacheLife() cannot be called at module scope: #92326\r\n- docs: add note on installing `server-only` in data security guide: #92445\r\n- fix: replace docs/canary links with stable docs paths in error messages: #92528\r\n- docs: update details about `unstable_retry()` behavior: #91827\r\n- docs: link updateTag from cacheTag reference: #92379\r\n- Docs: Instant docs updates: #92515\r\n- docs: native db drivers with sync queries: #92572\r\n- docs: add Link transitionTypes version history: #92624\r\n- docs(cli): clarify that `--debug-build-paths` requires route group folders in paths: #92618\r\n- docs: fix broken bun.sh Nextjs documentation link: #92698\r\n- docs: add migration note for experimental cache flags to cacheComponents: #92318\r\n- docs: draftMode alignment: #92794\r\n- docs: restructure instant nav guide for clarity: #92684\r\n- docs: add documentation for no-typos ESLint rule: #92809\r\n- docs: amends to preserving-ui-state guide: #92270\r\n- docs: link Activity guide from Cache Components migration guide: #92571\r\n- docs: add guide for displaying dates without hydration flash: #92786\r\n- chore: remote apps/docs: #93041\r\n- Docs: add signed commit guidance: #93155\r\n- Turbopack: import.meta.glob docs + edge case support: #92729\r\n- docs: remove broken error-handling overlay screenshot: #93279\r\n- docs: clarify rendering flow in Server/Client interleaving example: #93381\r\n- docs: clarify proxy runtime history: #93467\r\n- Update `unstable_prefetch` and `unstable_instant` docs to reflect current API shape: #93514\r\n- docs: remove unreachable forms and mutations: #93509\r\n- docs: broken link from usePathname compat call out: #93528\r\n- docs: escape literal triple-backticks in contribution guide: #93584\r\n- docs: clarify cacheTag limit - it is per call: #93768\r\n- docs: devIndicators with usage example: #93784\r\n- docs: less aggressive AI agent hint for an experimental API: #93811\r\n- docs: fix typos and links: #92541\r\n- docs: less aggressive AI agent hint for an experimental API: #93814\r\n- docs: update agent test guidance: #93924\r\n- docs: instrumentationClientInject: #93913\r\n- docs: vocabulary-bridge rule for api-ref and guide skills: #94127\r\n- docs: rework dynamic segments intro section: #94126\r\n- docs: add next/root-params API reference: #93764\r\n- docs: ISR w/ Cache Components - `experimental.partialFallbacks`: #93299\r\n- docs: transpilePackages usage: #93602\r\n- docs: move isr cacheHandler callout to next steps: #94167\r\n- docs: fix code examples in getting-started guides: #93273\r\n- [feat] updated the documentation for deployment to point to new next.js Docker official guide.: #94185\r\n- docs: correct custom server optimization guidance: #94229\r\n- docs: bodySizeLimit measures raw HTTP body: #94137\r\n- docs: accuracy and pappercuts: #94299\r\n- doc: clarify rewrites execution order: #93765\r\n- docs: update draftMode guide: #94155\r\n- docs: cached functions from the client: #94301\r\n- docs: add GitHub SSH authentication guidance: #94360\r\n- docs: document Cache Components behavior for navigation hooks: #94387\r\n- instant: prompts on all fix cards, [group]-tagged CLI bullets, new docs slugs: #94017\r\n- docs: fix typos in `testing.md`: #94446\r\n- docs: fix typos in contribution guide: #94375\r\n- docs: correct wording and casing in turbopack tracing guide: #94469\r\n- docs: typos and errors outside docs, error, examples folders: #94472\r\n- docs: clarify next-env.d.ts regeneration: #94232\r\n- docs: add updateTag example to cacheTag page: #94508\r\n- docs: clarify use cache persistence across deploys: #93554\r\n- docs: fix onRequestError error type example: #94518\r\n- docs: move insight error pages from vercel/front to canary: #94564\r\n- [Docs] Remove unstable_instant agent hints; insights validate by default: #94577\r\n- docs: fix 'time zone' spelling in FOUC guide: #93244\r\n- docs: add pnpm installation step to module-not-found error page: #93773\r\n-  instant: polish client-hook overlay wording, cards, and docs links: #94496\r\n- docs: root-params highligth fixes: #94620\r\n- docs: remove unstable_disableValidation recommendations: #94608\r\n- doc: instant navs runtime story: #93204\r\n- docs: next/root-params references on i18n guide: #94629\r\n- docs: expand the Cache Components migration guide: #94649\r\n- docs: document non-streamed bot rendering and Cache Components: #94605\r\n- docs: Route Handlers to be supported later on: #94705\r\n- [agents-md] Index bundled docs instead of downloading into .next-docs: #94719\r\n- docs: add prefetchInlining config reference: #94650\r\n- docs: tighten Partial Prefetching API references and adoption guide: #94818\r\n- docs: server actions guide: #93553\r\n- docs: fix capitalization of Server and Client Components: #94891\r\n- docs: Fix broken link to Node.js Debugging Guide: #93958\r\n- docs: fix broken Node.js inspector URL in debugging guide: #94934\r\n- docs: clarify sequential data fetching example: #94930\r\n- docs: GtK, caching with fetch is opt-in - extended to any method or header included: #94899\r\n- docs: fix typo in slot-missing-default.mdx: #94531\r\n- docs: Cache components requires Node.js runtime: #94897\r\n- docs(authentication): add Auth and streaming, fix code fences and imports: #95056\r\n- docs: add Interactive Apps guide: #94020\r\n- docs(caching): clarify generateStaticParams prebuild and recommend max for CMS: #95081\r\n- docs(cache-components): clarify allow-runtime, sync-IO and instant=false, CLS fallback: #94997\r\n- Docs/partial prefetching: #94855\r\n- docs(root-params): generateStaticParams section and CC requirement: #95073\r\n- docs: server actions guide x-refs: #95143\r\n- docs: clarify /_not-found failures and <html> attribute reads under Cache Components: #95163\r\n- docs: expand io reference: #95147\r\n- docs: update instant navs guide: #95173\r\n- docs: fix preview message typo: #95050\r\n- docs(insights): restructure error pages and link to preview docs: #95193\r\n- docs(errors): reorder blocking-prerender-dynamic fixes to Stream, Cache, Block: #95198\r\n- Add docs for `experimental.turbopackRustReactCompiler`: #95280\r\n- docs: remove unnecessary async from rewrites/headers/redirects examples: #95148\r\n- docs: Activity bfcacheId and :has caveats: #95275\r\n- Instant Navs guide: Highlights fixes and Client Component Page option: #95313\r\n- docs: recommend explicit cacheLife and clarify overriding built-in cache profiles: #95311\r\n- docs: Update FormEvent to SubmitEvent in form handling example (deprecated in React 19.2.10+): #95453\r\n- docs: remove incorrect statement that force-cache is the default for …: #95235\r\n- docs: updates to Cache Components Caching: #95452\r\n- docs: Fix testing-adapters variable name: #95575\r\n- docs: update MCP guides for the thin next-devtools-mcp: #94859\r\n- docs(opengraph-image): load assets at module scope to keep route static under Cache Components: #95246\r\n- [docs] Update progressive web apps documentation for new service worker syntax: #95431\r\n- [docs] Update \"Handling a Custom `Service Worker`\" in the CRA migration docs: #95434\r\n- docs: Immutable static assets: #95348\r\n- docs: note default error/not-found UI follows OS color scheme, not app theme: #95673\r\n- docs: add incremental adoption path to Cache Components migration guide: #95325\r\n- docs: add Building guide: #94999\r\n- docs: runtime prefetching update: #95564\r\n- docs: useSearchParams example stray link: #95759\r\n- docs: Improve immutable static docs: #95752\r\n- docs: revalidateTag with expire zero, for route handlers: #95760\r\n- docs: add route-side URL data audit to the Partial Prefetching adoption guide: #95389\r\n- docs: cssChunking graph option: #95693\r\n- docs: remove experimental @next/routing note: #94903\r\n- docs: add 'Set up your editor' to the installation guide: #95928\r\n- docs: clarify layout.js nesting behavior in route groups: #95720\r\n- docs: note the `:has()` scaling limit in the Interactive apps guide: #95925\r\n- Include examples of static export tools & GitHub Pages template: #95929\r\n- docs: fix unstable_cache syntax error: #96002\r\n- docs: add upgrade section to installation and expand AI agents guide: #95861\r\n- docs: attribute App Shell prefetch to Partial Prefetching: #96003\r\n- docs: view transitions guide — skill section, source-audit fixes, flag-removal docs: #96097\r\n- docs(view-transitions): fix the skill install command: #96142\r\n- docs: reframe prefetching around automatic vs. controllable behavior: #95896\r\n- docs: navigation interrupts after streaming has started (notFound, forbidden, unauthorized): #95851\r\n- docs: expand and modernize the Single-Page Applications guide: #95860\r\n- docs(ai-agents): restructure as steps and close 16.2/16.3 coverage gaps: #96247\r\n- docs: document query-only href resolution and fix with-vercel-blob : #96280\r\n- doc: typegen for typedRoutes: #96296\r\n- docs: clarify instrumentation-client polyfill loading and hydration timing: #95988\r\n- docs(interactive-apps): update prefetching for unified runtime prefetching: #96302\r\n- docs: add guide and references for experimental.useOffline: #93218\r\n- docs: remove PPR adapter page from Pages Router: #96316\r\n- docs: Parallel routes, conditional rendering and auth: #96351\r\n- docs(preventing-flash): cover reconciling state : #96146\r\n- docs: modernize Next 16 upgrade AI guidance: #96314\r\n- Update PWA guide with enhanced offline support details and example links for serwist: #96360\r\n- docs: document the App Shell stale time threshold for cached content: #96312\r\n- [turbopack] Introduce documentation on `experimental.turbopackChunking`: #96437\r\n- docs: ISR with Cache Components and Partial Prefetching: #96526\r\n- docs: clarify first-party Skills workflows: #96495\r\n- docs: cover direct visits and client navigations in the instant() e2e example: #95803\r\n### Example Changes\r\n- chore(examples): remove `with-styletron` example: #81842\r\n- ci: remove deploy examples workflow from build-and-deploy: #92324\r\n- example: remove with-supertokens: #93212\r\n- [examples] migrate cloudinary to vercel-blob: #93762\r\n- examples/with-ably: update to App Router + Ably v2: #94600\r\n- fix: error handling and loading states in with-apollo-and-redux example: #91457\r\n- fix: remove deprecated url.parse() from custom-server example: #96105\r\n### Misc Changes\r\n- Add .claude/skills symlink: #91616\r\n- Update tokio from 1.43.0 to 1.47.3: #90945\r\n- Restructure pr-status-triage skill: merge command into skill files: #91514\r\n- [test] Unflake \"infinite streaming fetch\" test: #91645\r\n- [test] Unflake `deterministic build - changing deployment id` test: #91646\r\n- Skip CI for agent/editor config directory changes: #91622\r\n- refactor: extract build infra and alias changes: #90422\r\n- ci: add node-stream test coverage workflow: #89861\r\n- Update Rspack production test manifest: #91635\r\n- [test] Increase `retry` timeouts for two flaky `app-action` tests: #91647\r\n- Revert \"ci: add node-stream test coverage workflow (#89861)\"\r\n- [test] Fix flaky `url-hash` tests: #91649\r\n- Add instant validation tests for parallel slot config attribution: #91656\r\n- [test] Unflake rendering indicator test & skip building indicator tests: #91650\r\n- [test] Fix `edge-async-local-storage` deploy test timeout & race condition: #91643\r\n- Update Rspack development test manifest: #91695\r\n- [test] Unflake `use-node-streams-env-precedence` test: #91733\r\n- Update Rspack production test manifest: #91694\r\n- [test] Unflake app prefetch test: #91734\r\n- Upgrade React from `3f0b9e61-20260317` to `8b2e903a-20260320`: #91731\r\n- [ci] Allow \"rerun failed jobs\" to work up until 5 days: #91825\r\n- ci: upload adapter deploy test results: #91846\r\n- test: scope css data-url typing to fixture: #91877\r\n- ci: only upload adapter results for canary runs: #91881\r\n- Perf: Skip turning Set into Array: #91383\r\n- Perf: Move chunkloading instrumentation to separate function: #91382\r\n- Perf: Use headers object directly in checkIsOnDemandRevalidate: #91381\r\n- [test] Deflake instant-navs-devtools: #91912\r\n- test(typed-routes): fix flaky tests by increasing retry timeout: #91923\r\n- test(app-basepath): increase waitForElementByCss timeout for hard-nav test: #91920\r\n- test(interoperability): increase waitForElementByCss timeout for cross-router navigations: #91918\r\n- Upgrade React from `8b2e903a-20260320` to `3cb2c420-20260324`: #91905\r\n- Upgrade React from `3cb2c420-20260324` to `9627b5a1-20260327`: #92015\r\n- Upgrade React from `9627b5a1-20260327` to `74568e86-20260328`: #92109\r\n- ci: relax adapter results upload gate: #92127\r\n- [test] Skip `unstable_dynamicStaleTime` tests due to flakiness: #92162\r\n- [test] Skip flaky `segment-cache-refresh` suite: #92163\r\n- Add PPR evals and fix env loading for agent-eval 0.9.5: #92063\r\n- Update Rspack development test manifest: #92142\r\n- [test] Skip flaky `cached-navigations` tests: #92199\r\n- [test] Skip flaky `prefetch-layout-sharing` suite: #92198\r\n- Add internal header security guideline to AGENTS.md: #92128\r\n- Update Rspack production test manifest: #92143\r\n- [test] Deflake `allowed-dev-origins`: #92211\r\n- Reapply \"ci: add node-stream test coverage workflow (#89861)\": #91664\r\n- Fix pr-status.js: retry on API errors and report timed-out jobs: #92205\r\n- Add view transitions eval (agent-043): #92260\r\n- ci: fix stats action: #92325\r\n- ci: remove deploy examples workflow from build-and-deploy: #92324\r\n- Update Rust toolchain to nightly-2026-04-02: #92288\r\n- fix: add AGENTS.md at package root for agent discovery: #92376\r\n- [tests]: remove unnecessary skipDeployment flags: #92423\r\n- chore: Upgrade to pnpm 10.x: #92283\r\n- Bump turborepo from 2.8.11 to 2.9.4: #92425\r\n- [test] Skip flaky `client-cache.parallel-routes` in production and deploy: #92195\r\n- scripts/pr-status: add reply-and-resolve-thread command: #92450\r\n- [test] Regenerate checked-in tsconfig.json files: #92455\r\n- Adding more system info to the 'initialize project' trace: #92427\r\n- CI: Update and cleanup next-stats-action, force using pnpm 10.33.0: #92475\r\n- CI: Remove unused dependencies from next-stats-action dockerfile: #92485\r\n- Upgrade swc_core 57 -> 58, swc_sourcemap 9 -> 10, swc_plugin_runner 24 -> 25: #91532\r\n- perf: use whole_app_module_graph for get_compilation_issues MCP tool: #92473\r\n- Update Rspack development test manifest: #92502\r\n- Update Rspack production test manifest: #92503\r\n- CI: Use pnpm lockfile for next-stats-action: #92488\r\n- Bundle skills/ directory into next/dist/skills: #92493\r\n- CI: Use minimumReleaseAge in pnpm workspace files: #92480\r\n- CI: Fix issue with conflicting 'engines.pnpm' field in next-stats-action: #92533\r\n- Exclude use tests from react18 testing: #92542\r\n- Fix React18 tests for unstable_io: #92543\r\n- Perf: Add fast path to isAbsoluteUrl: #91389\r\n- Perf: Don't require watchpack in production: #91387\r\n- [test] Stop using deprecated `target: \"es5\"` TypeScript compiler option: #92458\r\n- Perf: Use charCodeAt in removeTrailingSlash: #91384\r\n- Perf: Cache regex in shouldServeStreamingMetadata: #91388\r\n- [test] Ensure incomplete minimum release age isn't propagated to fixture installs: #92568\r\n- test: skip .next and other build artifacts in writeFiles filter: #92578\r\n- CI: Another attempt to fix pnpm versions for next-stats-action on canary: #92550\r\n- test: reduce writeToDisk memory test iterations to fix CI timeout: #92586\r\n- Refactor effects system: dedup/conflict detection, simplified Effect trait: #92300\r\n- fix(ci): improve Docker image cache streaming throughput and arch-awareness: #92617\r\n- CI: Download and run self-contained datadog-ci instead of using pnpm dlx or npx: #92546\r\n- Bump swc to 63.1.1: #92604\r\n- chore(turbopack): upgrade qfiler to v0.3.0-alpha.4: #92558\r\n- refactor: write pages router export files directly to server/pages/: #90018\r\n- fix(ci): improve Docker image caching and native build skip optimization: #92633\r\n- Perf: Only instrument clientComponentLoadTimes when used: #91385\r\n- Update font data: #92704\r\n- [test] Stop using `baseUrl`: #92469\r\n- bench: improve render pipeline benchmark reliability: #92715\r\n- bench: add A/B branch comparison workflow to BENCHMARKING.md: #92721\r\n- test: use Turborepo pack task for test isolation: #92575\r\n- chore: Bump reqwest to 0.13.2: #92713\r\n- Upgrade React from `404b38c7-20260408` to `fef12a01-20260413`: #92728\r\n- Revert \"refactor: write pages router export files directly to server/pages/\": #92733\r\n- Re-enable sccache: #92746\r\n- chore: Use from_raw_parts for ResolvedVc::deref_vec and ResolvedVc::deref_slice: #92749\r\n- Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1: #92757\r\n- Fix swc wasm test on canary: #92738\r\n- Bump TypeScript to 6.0: #91257\r\n- test: Add tests for client reference side effects: #92774\r\n- refactor: remove ClientFileLogger, consolidate file logging into handleLog: #92329\r\n- pr-status: Show all participants in review thread overview: #92730\r\n- Perf: Fast path for trace() when opentelemetry is not enabled: #92678\r\n- Share native binaries via GitHub artifacts: #92758\r\n- [ci] Skip sccache on Windows runners: #92847\r\n- Update Rspack production test manifest: #92674\r\n- Update Rspack development test manifest: #92673\r\n- [ci]: add workflow to bump canary after backport: #92801\r\n- [ci] Skip Playwright system deps install on subsequent self-hosted runs: #92893\r\n- CI: Remove dead yarn support from next-stats-action: #92587\r\n- [ci] Cache passing test results so CI retries skip them: #92832\r\n- fix accidental test duplication: #92922\r\n- Refactor trace server sort to SortMode enum (execution order / value / name): #92873\r\n- Perf: Simplify static metadata handling: #92630\r\n- [ci]: fix backport sync script: #92942\r\n- Fix flake in rewrites-manual-href-as test: #92948\r\n- CI: Track SWC native binary size in PR stats comment: #92938\r\n- chore: Prune list of users in labeler json: #92984\r\n- [test] Deflake `shallow-routing`: #93006\r\n- New ESLint rule: `no-location-assign-relative-destination`: #92900\r\n- Upgrade React from `fef12a01-20260413` to `da9325b5-20260417`: #92945\r\n- [ci]: remove unused workflow: #93064\r\n- [ci]: remove publish token in favor of OIDC: #93065\r\n- Update Rspack development test manifest: #92959\r\n- [ci] Temporary disable of sccache: #93074\r\n- Auto-generate AGENTS.md / CLAUDE.md in next dev: #92910\r\n- [ci]: add environment to publishRelease flow: #93093\r\n- Adopt pnpm catalogs for devDependencies: #93071\r\n- rage-restart followup: #92591\r\n- Collapse pnpm test scripts into a single helper invocation: #93097\r\n- [tests]: fix cache-components.test.ts type error: #93113\r\n- [ci]: cleanup labeler: #93135\r\n- [ci]: switch to GitHub runners: #93164\r\n- [ci]: pin rust-musl-cross: #93176\r\n- [rust-deps] Update serde: #93196\r\n- [rust-deps] Update tracing: #93194\r\n- [ci] replace next-labeler-webhook with in-repo GitHub Action: #93080\r\n- [ci] Fix auto-label workflow: #93215\r\n- [test] Remove dead symlink: #93217\r\n- [ci] Populate GITHUB_TOKEN for auto-labeler: #93219\r\n- [ci]: move stats & CI status comment to workflow: #93220\r\n- [ci] Upload preview builds directly to Vercel Blob: #93207\r\n- [ci]: fix permissions on comment workflow: #93225\r\n- Revert \"Adopt pnpm catalogs for devDependencies\": #93226\r\n- [ci] Handle namespaced packages in preview builds: #93241\r\n- [ci] Create test summary comment if job immediately passes: #93236\r\n- [ci] Automatically start React sync when new `react@experimental` is available: #93235\r\n- [rust-deps] Update bytes, crc32fast, memchr, pin-project-lite, quote, rand, regex, ringmap, roaring: #93197\r\n- [ci]: app-based release workflow: #93245\r\n- [ci]: trigger signed release commit via API: #93285\r\n- [ci]: fix release script to not strip newlines: #93302\r\n- [ci]: Use macOS arm runner for intel builds: #93330\r\n- ci: Fix caching of test-cargo-unit: #93327\r\n- [rust-deps] Update tokio: #93195\r\n- [test] Suppress build when preparing next for cache hits: #93355\r\n- [test] Fix broken terminal output: #93357\r\n- chore: bump postcss to 8.5.10: #93288\r\n- fix a snapshot encoding error that could happen under concurrent mutation and snapshotting: #92658\r\n- Only log partytown setup error once: #93378\r\n- [test] Stop building fresh packages for every test: #93380\r\n- [test] Preserve Playwright traces on every failure: #93366\r\n- [ci] Add support for private preview builds: #93375\r\n- Fix deploy tests crashing under AI coding assistants: #93394\r\n- [ci]: remove PR creation from deploy test workflow: #93400\r\n- Upgrade to swc 65: #93325\r\n- Upgrade React from `da9325b5-20260417` to `f4e0d4ed-20260429`: #93457\r\n- Bump `@vercel/ncc`: #93459\r\n- [test] Ensure target page is compiled before navigation in instant-navs-devtools: #93365\r\n- [ci] Allow configuring the base URL for preview builds: #93464\r\n- [ci] Move Turbopack, Rspack and font data workflows off of `RELEASE_BOT_GITHUB_TOKEN`: #93455\r\n- [ci] Migrate React sync off of `RELEASE_BOT_GITHUB_TOKEN`: #93456\r\n- [ci] Create unique preview build versions for canary previews: #93490\r\n- [ci] Ensure pnpm store cache is only filled when pnpm install runs: #93508\r\n- [ci] Remove unused `setup-nextjs-build.yml` workflow: #93512\r\n- Refactor: Decouple request store creation from `req` / `res`: #93499\r\n- [ci] Clarify new preview build flow: #93540\r\n- Upgrade React from `f4e0d4ed-20260429` to `dd453071-20260506`: #93547\r\n- perf(ecmascript): shrink JsValue 64→32 bytes: #93106\r\n- [test] Pin package manager versions used: #93592\r\n- [ci] Ensure graphite_ci_optimizer fails open even if github fails to fetch the action: #93615\r\n- Cherry-pick ghsa commits to canary: #93614\r\n- [ci] Also pin first-party GH actions: #93609\r\n- CI speed improvements: #93411\r\n- Proof of concept: task eviction after snapshot for turbo-tasks-backend: #91790\r\n- Convert test/integration to isolated tests: #93247\r\n- Repo: Add gh stack skill: #93705\r\n- Fix React 18 tests: #93763\r\n- Convert tests using createNext -> nextTestSetup: #93767\r\n- Revert \"[test] Skip flaky `cached-navigations` tests\": #93798\r\n- Upgrade React from `dd453071-20260506` to `d5736f09-20260507`: #93702\r\n- Mark .agents/skills as internal so external `npx skills add` hides them: #93856\r\n- Convert more tests from createNext -> nextTestSetup: #93799\r\n- [test] split `og-api` test suite into default and standalone variants: #93915\r\n- Add create PR skill: #93937\r\n- Enable mimalloc in benchmarks: #93388\r\n- Fix Yarn berry tests: #93962\r\n- Polish instant fix cards and validation messages: #93894\r\n- Add backport PR skill: #93973\r\n- use the action cache for passing tests: #93954\r\n- @vercel/devlow-bench: 0.3.5 → 0.4.0: #93951\r\n- [test] Prerendering HTTP access fallback pages with Cache Components: #93987\r\n- [ci] Add an `TURBO_TASKS_AVAILABLE_PARALLELISM` environment variable that overrides `std::thread::available_parallelism` callsites: #93995\r\n- ci: run Linux Playwright jobs in prebuilt Microsoft container: #93794\r\n- Upgrade rustc to nightly-2026-05-15: #94021\r\n- Update font data: #94006\r\n- [ci] Set `TURBO_TASKS_AVAILABLE_PARALLELISM` to 4 in most e2e tests: #93996\r\n- Add next-dev-loop and next-ppr-optimizer skills: #93943\r\n- test: migrate webdriver callers to next.browser: #93941\r\n- Fix pr-status job pagination: #94049\r\n- [Skills] Mark backport-pr and create-pr as internal: #94076\r\n- [Skills] next-dev-loop: persist login state across loops: #94105\r\n- chore: release @next/rspack-core 1.0.3: #94116\r\n- Revert \"Revert \"refactor: write pages router export files directly to server/pages/\"\": #93409\r\n- [ci] Skip installing native binaries when fetching test timings: #93593\r\n- [ci] Reserve comments for stats and tests: #93240\r\n- [ci] Fix the playwright-chromium Dockerfile: #94064\r\n- Upgrade React from `d5736f09-20260507` to `75b0945b-20260526`: #94131\r\n- [ci] Add an AGENTS.md for GitHub Actions: #94056\r\n- [ci] Resize tiny jobs in integration_tests_reusable.yml to use smaller machines: #93886\r\n- [ci] Explicitly disable package-manager-cache for uses of actions/setup-node: #93953\r\n- Upgrade ast-grep: #94150\r\n- [Skills] next-cache-components-optimizer: clarify private-cache scope rule: #94113\r\n- [ci] Increase TEST_CONCURRENCY from 8 to 12: #94138\r\n- Upgrade React from `75b0945b-20260526` to `c0cd4d5d-20260527`: #94161\r\n- [ci] Give the build cache in cache in build_and_deploy a more obvious name, not just a hash and run number: #93957\r\n- [ci] Rename GRAPHITE_TOKEN to GRAPHITE_CI_OPTIMIZER_TOKEN: #94166\r\n- [ci] Use Turbopack in non-webpack-specific e2e test jobs: #94005\r\n- [test] Add test for static metadata files and `generateStaticParams`: #93465\r\n- test: skip flaky instant-nav-panel tests: #94196\r\n- test: fix next-after-app-static: #94195\r\n- [ci] Update all actions/* dependencies: #94174\r\n- Replace VcStorage with real TurboTasks in tests/benches : #93955\r\n- [cd] Stop fetching all tags when searching parent tag: #94302\r\n- chore: lint-language output only warnings and errors: #94261\r\n- Disable `default-case` ESLint rule for type-checked TypeScript files: #94316\r\n- refactor: use named arguments for StagedRenderingController: #94345\r\n- Devirtualize the backend api inside of turbo_tasks and turbo-tasks-backend: #94007\r\n- [tests] Use snapshots in debug-build-paths: #94352\r\n- Upgrade React from `c0cd4d5d-20260527` to `f0dfee38-20260529`: #94245\r\n- refactor: make stage advancing logic more generic: #94349\r\n- refactor: make early/late checks stricter: #94358\r\n- refactor: remove delayUntilRuntimeStage: #94350\r\n- refactor: indicate which stage is the last stage in staged prerenders: #94430\r\n- test: pin material-ui link fixture dependencies: #94354\r\n- Reland the debug channel on native Node streams, fixed for React 18: #94462\r\n- chore: reword cacheComponents jsDoc to lead with partial prerendering: #94474\r\n- Upgrade React from `f0dfee38-20260529` to `43bcbf80-20260603`: #94440\r\n- Revert \"ci: run Linux Playwright jobs in prebuilt Microsoft container (#93794)\": #94366\r\n- fix(deps): bump @vercel/nft@1.10.2: #93979\r\n- [ci] Switch release-next-rspack to a more explicit environment name: #94480\r\n- [ci] Set `persist-credentials: false` for all GH actions: #94214\r\n- Revert \"[ci] Increase TEST_CONCURRENCY from 8 to 12 (#94138)\": #94517\r\n- [ci] Disable on-call notification if manual deploy e2e tests failed: #94554\r\n- Reduce new test concurrency to five: #94552\r\n- disallow reads from .next-profiles: #94570\r\n- [ci] Remove dead playwright docker image creation logic: #94576\r\n- [cd] Ensure release can be triggered on old branches: #94596\r\n- [ci] Reduce usage of turborepo cache in `build_and_deploy.yml`: #94319\r\n- [ci] Download fnm directly from GitHub releases and validate checksum: #94579\r\n- [ci] Always upload canary tarballs from the canary branch: #94557\r\n- refactor: process streaming prerenders more efficiently: #94764\r\n- [ci] Allow \"rerun failed jobs\" to work up until 5 days for e2e deploy tests: #94812\r\n- Fix stale next data API test URL: #94815\r\n- Instruct agents to keep and commit the generated agent-rules block: #94725\r\n- Add a message to `AGENTS.md` about `super::` imports.: #94733\r\n- chore: upgrade next-rspack to rspack 2.0: #92222\r\n- [ci] Use node-version-file when we already have a repository checkout and reduce hardcoded references to node versions: #94780\r\n- rust react compiler: detect and build for react 18: #94836\r\n- [test] Unflake `metadata static routes cache` test: #94796\r\n- [test] Recover from a leftover build process on test retry: #94797\r\n- Properly set response-based OTEL attributes with adapters: #94603\r\n- Upgrade React from `43bcbf80-20260603` to `d9158919-20260615`: #94826\r\n- [ci] Clean up references to self-hosted runners: #94827\r\n- Upgrade React from `d9158919-20260615` to `ad78e251-20260616`: #94867\r\n- switch our test benchmark runs to release-with-assertions: #94538\r\n- [ci] Remove playwright stamp file logic: #94876\r\n- [cd] More robust publish pipeline: #94622\r\n- [cd] Continue release train if `@next/swc-wasm-*` fails to publish: #94912\r\n- Let LLMs create less noisy and more focused PR descriptions: #94896\r\n- [ci] Only install chromium-headless-shell and not chromium: #94882\r\n- Fix Instant Navs DevTools capture bugs and re-enable its test suite: #94866\r\n- [test] Enable `metadata-streaming-config` for Cache Components: #94936\r\n- Upgrade React from `ad78e251-20260616` to `b1786c31-20260618`: #94951\r\n- [ci] Update playwright to 1.61.0: #94871\r\n- [cd] reduce size of npm metadata on publish: #94953\r\n- Upgrade to swc 70: #94814\r\n- [test] Fix failing determinism test using adapter: #95051\r\n- [scripts] Write pnpm overrides for pnpm projects in pack/patch helpers: #94747\r\n- Upgrade React from `b1786c31-20260618` to `247fbb45-20260622`: #95063\r\n- skill(next-dev-loop): fix --session flag, agent-browser bootstrap, --headed daemon note: #95005\r\n- skill(next-cache-components-adoption): tune skill to mention app router requirement: #95069\r\n- [skills] Mark insight-error-page and next-rspack as internal: #95070\r\n- skill(next-cache-components-adoption): clarify prereqs: #95082\r\n- [cd] publish on release tags instead of branch push: #95085\r\n- [ci] Make preview tarballs available while new Canaries are being published: #95112\r\n- [cd] add ad-hoc preview release cut from canary: #95086\r\n- [test] Reorder `hmr-intercept-routes` test to avoid a reload/refresh race: #95134\r\n- [ci] Make automatic native binding install opt-in: #95114\r\n- Restore canary version 16.3.0-canary.66 after v16.3.0-preview.4 preview release\r\n- skill(cc-adoption): recommend next-dev-loop and add build-only path: #95122\r\n- [cd] Allow forcing a release without new commits: #95136\r\n- test: Remove unnecessary dynamic timestamp from instant-validation root layouts: #95105\r\n- Restore canary version 16.3.0-canary.67 after v16.3.0-preview.5 preview release\r\n- Bump Rust toolchain: #95205\r\n- next-dev-loop: require agent-browser >= 0.31.1: #95209\r\n- [ci] skip Datadog git metadata upload on junit upload: #95210\r\n- Return APP_PAGE instead of PAGES for production Instant Navigation tests: #95184\r\n- [ci] Display correct test commands when Cache Component test fail: #95267\r\n- skills(cc-adoption): tighten requires, sequencing, terminology: #95225\r\n- Upgrade React from `247fbb45-20260622` to `68631c04-20260626`: #95211\r\n- Enhance ESLint rule `no-location-assign-relative-destination`: #93057\r\n- test: fork select tests on partialPrefetching: #95279\r\n- [ci] update relay-compiler to 21.0.1: #95217\r\n- Increase the code frame width used when logging to a file.: #95283\r\n- [test] Give webpack server-action-period-hash tests a larger timeout: #95303\r\n- [test] Recover from a leftover build process on test retry in `build()`: #95304\r\n- [test] Unskip more Turbopack NFT unit tests: #95297\r\n- [test] Make `build-output-prerender` error ordering deterministic: #95308\r\n- [test] Retry the `.next` deletion to fix an `ENOTEMPTY` flake: #95307\r\n- [ci] Migrate build_and_test and pull_request_stats to use arm64 runners: #94870\r\n- [ci] Add support for auth based preview build registries: #95204\r\n- Upgrade React from `68631c04-20260626` to `92f4fda3-20260629`: #95282\r\n- [ci] Move some test suites back to x86-64 runners to reduce pressure on our currently-limited pool of arm runners: #95332\r\n- refactor: split out validateStaticShell: #95106\r\n- Revert \"[ci] Move some test suites back to x86-64 runners to reduce pressure on our currently-limited pool of arm runners (#95332)\": #95336\r\n- [ci] Add optimize-ci, changes, and fetch-test-timings jobs to the needs list for the tests-pass job: #95339\r\n- [ci] Migrate some CI jobs back to x86-64, build both arm and x86-64 native binaries, include both os and architecture in native artifact names: #95341\r\n- test: Improve immutable static asset tests: #95349\r\n- gitignore .next-profiles: #95256\r\n- Re-query deploy-test build logs until id markers appear: #95243\r\n- Upgrade React from `92f4fda3-20260629` to `ec0fca31-20260701`: #95368\r\n- [ci] Migrate Turbopack build_and_test jobs back to arm64, leave webpack jobs as x86-64: #95374\r\n- [ci] Avoid running full CI mid-stack for GH-native stacks, same as we do for Graphite: #95218\r\n- [test] Park the blocking-fallback segment on a withheld param: #95300\r\n- [test] Enable deploy tests for the Instant Navigation Testing API suite: #95236\r\n- [cd] Replace the release package with our own GitHub release creation: #95352\r\n- Make Instant Navigation Testing full-page loads work when deployed: #95222\r\n- [ci] Actually migrate Turbopack jobs back to ARM: #95386\r\n- Upgrade React from `ec0fca31-20260701` to `3508aee6-20260702`: #95410\r\n- [ci] Disable mid-stack PR optimization for native PR stacks: #95427\r\n- Collect modules with browser variants statically: #95200\r\n- Split typeof-window server requires into .browser variants: #95201\r\n- Type resolved `cacheLife` profiles, dropping runtime asserts: #95428\r\n- Update font data: #95441\r\n- [test] Unflake `cache-components-dev-streaming` test suite: #95466\r\n- evals: fix false-negative regex checks with the agentic LLM judge: #95440\r\n- Upgrade React from `3508aee6-20260702` to `23def8fd-20260706`: #95532\r\n- [ci] Add stats comment with partial stats: #95401\r\n- [skills] Update gh-stack skill: #95541\r\n- Upgrade to swc 72 and rust-react-compiler: #95536\r\n- test: Fix service worker error test: #95548\r\n- [ci] Skip apt-installed dependencies in playwright install step: #95535\r\n- ci: Bump withgraphite/graphite-ci-action: #95562\r\n- test: Disable service worker deploy tests for now: #95570\r\n- test: Use Turbopack for 'Test new and changed tests when deployed': #95552\r\n- [ci] Migrate webpack tests back to arm runners: #95549\r\n- test: Fix immutable static asset deployment tests: #95550\r\n- [ci] Split up large cache-components-dev-warmup test suite: #95553\r\n- [ci] Split up large create-next-app/templates/matrix test: #95555\r\n- Split remaining \"client-node\"-only modules into .browser variants: #95366\r\n- Upgrade React from `23def8fd-20260706` to `12a4baec-20260707`: #95581\r\n- test: Fix immutable static asset deployment tests for real: #95600\r\n- [ci] Pin typescript version in tests: #95619\r\n- [ci] Bump PR stats job timeout to 35 minutes: #95592\r\n- [ci] split up large cache-components-errors tests: #95623\r\n- [ci] Split up large rsc-build-errors development test: #95624\r\n- [ci] Split up large instant-validation tests: #95627\r\n- Refresh outdated agent-rules blocks on next dev and codemod upgrade: #95470\r\n- Make the agent-rules block verifiable and self-upgrading: #95467\r\n- Upgrade React from `12a4baec-20260707` to `df4bd1b4-20260708`: #95612\r\n- Convert agent-041's blocking-data check to the agentic LLM judge: #95630\r\n- Add attribute rendering benchmark: #95621\r\n- Upgrade React from `df4bd1b4-20260708` to `5123b063-20260708`: #95642\r\n- (TypeScript 7 Support) Add experimental TypeScript CLI backend: #95639\r\n- test: allow-runtime breaks Link's Server component child detection: #95596\r\n- test: skip redbox check in \"static prefetch - missing suspense around search params\": #95670\r\n- refactor: remove unnecessary switches from StagedRenderingController: #95383\r\n- Clarify AI-assisted contribution policy in PR template and AGENTS.md: #95629\r\n- [test] Disable middleware-rewrites deploy test for Turbopack with adapters: #95680\r\n- Update font data: #95725\r\n- [test] Disable i18n-api-support deploy test for Turbopack with adapters: #95739\r\n- Restore canary version 16.3.0-canary.84 after v16.3.0-preview.6 preview release\r\n- Upgrade to swc 73: #95731\r\n- Add React sync development skill: #95620\r\n- Upgrade React from `5123b063-20260708` to `7023f501-20260714`: #95782\r\n- Better support the CLI spinner when running the TSC CLI: #95753\r\n- Only track pending imports for real promises: #95789\r\n- Model async userland loading in app routes as a state machine: #95791\r\n- chore: Remove stale build warning: #95813\r\n- [ci] Allow running all deploy tests with builds from a private registry: #95784\r\n- Run more test suites under cacheComponents flag: #95878\r\n- Revert \"Run more test suites under cacheComponents flag\": #95884\r\n- fix(agent-rules): pad managed AGENTS.md block with blank lines: #95892\r\n- Back/forward set the Nav Inspector back to pending: #95865\r\n- [ci] Avoid apt-get in the next-stats-action Docker image: #95847\r\n- Package skills/ as a Claude Code plugin: #95907\r\n- Upgrade React from `7023f501-20260714` to `172742b4-20260716`: #95901\r\n- Run Rust doctests in CI: #95911\r\n- [ci] Share a single browser instance across all test suites in a single job: #95589\r\n- [test] Add coverage for throwing custom \"use cache\" cache handler: #95984\r\n- Refine development validation signal handling: #95998\r\n- [ci] Skip passed-tests cache steps for jobs that never run tests: #96001\r\n- Upgrade React from `172742b4-20260716` to `81e442ea-20260721`: #96016\r\n- Restore canary version 16.3.0-canary.92 after v16.3.0-preview.7 preview release\r\n- chore(deps): bump sharp@0.35.3: #95507\r\n- [ci] Enforce minimumReleaseAge in e2e tests that install external dependencies: #95628\r\n- Rewrite next-cache-components-optimizer around a test-driven instant() loop: #94721\r\n- Always consult `npm_config_user_agent` first: #95879\r\n- Restore canary version 16.3.0-canary.93 after v16.3.0-preview.8 preview release\r\n- [test] Add source-mapping coverage of React's fake stack frame scripts in `use cache`: #95945\r\n- [test] Add failing tests for stale route handler and page cached data: #96021\r\n- [test] Move the dev-only `use cache` test suite to `test/development`: #96023\r\n- Refine Cache Components and Partial Prefetching adoption skills: #95817\r\n- skill(cc-adoption): add dev-only validation sweep reference: #96057\r\n- Upgrade React from `81e442ea-20260721` to `711c445b-20260722`: #96066\r\n- Restore canary version 16.3.0-canary.94 after v16.3.0-preview.9 preview release\r\n- Throw when generateStaticParams returns invalid values: #95968\r\n- Throw for empty or incomplete generateStaticParams results with output: export: #95969\r\n- Upgrade React from `711c445b-20260722` to `28cd4bb0-20260723`: #96100\r\n- Store RouteTree slots in a Map to keep slot access monomorphic: #96168\r\n- Give RouteCacheEntry a single hidden class across its lifecycle: #96164\r\n- [test] Unflake the `enabled-features-trace` test suite: #96175\r\n- Add a benchmark for dev Cache Components validation on a worker thread: #96152\r\n- [internal] Add a skill for benching changes in a sandbox: #95943\r\n- [test] Unflake a prefetch-related race: #96222\r\n- [test] Run more test suites under cacheComponents flag, again: #96196\r\n- [test] Run the navigation e2e suite under cacheComponents: #95877\r\n- [test] Unflake more tests: #96081\r\n- Upgrade React from `28cd4bb0-20260723` to `756fdd47-20260727`: #96270\r\n- Micro-optimization for string format: #95774\r\n- Count URL key length in the filesystem route cache LRU: #96229\r\n- Count key length in remaining byte-budgeted LRUs: #96231\r\n- Restore canary version 16.3.0-canary.99 after v16.3.0-preview.10 preview release\r\n- Isolate local Request Insights spans from OpenTelemetry: #96276\r\n- Classify Instant Insights as internal in Request Insights: #96147\r\n- Upgrade React from `756fdd47-20260727` to `96fcba90-20260728`: #96306\r\n- [ci] Install Node.js from the official tarball in the native-builder image: #96298\r\n- [cd] Send Slack notification if publish fails: #96304\r\n- Bump @types/node to 20.17.7 to fix findSourceMap type: #96321\r\n- [ci] Background some steps in build_reusable to reduce setup overhead, remove unneeded lld installation: #96195\r\n- Update skills for Partial Prefetching: #96299\r\n- Added cache copying support for worktrees: #95646\r\n- Bump postcss to 8.5.23: #96107\r\n- [ci] Match the test job summary style to the PR test report comment: #95882\r\n- test: reproduce empty parallel route scroll regression: #96323\r\n- Upgrade React from `96fcba90-20260728` to `1724e9ce-20260729`: #96355\r\n- Upgrade React from `1724e9ce-20260729` to `6cb4322d-20260729`: #96389\r\n- [bench skill] Bench Edge builds of React too: #96234\r\n- test: expand Cache Components metadata streaming coverage: #96366\r\n- Upgrade React from `6cb4322d-20260729` to `0f42eac2-20260730`: #96402\r\n- Update Rust toolchain to nightly-2026-07-29: #96365\r\n- Upgrade React from `0f42eac2-20260730` to `cbb046ab-20260731`: #96434\r\n- [ci] Run new/changed deploy tests asap: #96438\r\n- [react-sync] Enable auto-merge on PRs: #96442\r\n- Add automated code review workflow: #96359\r\n- test: stabilize after() deploy revalidation checks: #96428\r\n- [turbotrace] bump test version of sharp: #96386\r\n- [ci] Wait for the preview tarballs before running the deploy tests: #96527\r\n- test: skip hybrid not-found coverage for the legacy builder: #96534\r\n- Flag newly disabled deploy tests: #96505\r\n- Fix deploy test TypeScript exclusions: #96545\r\n- [turbopack / next.js] Add an end-to-end test for new root detection: #96544\r\n- Edits to turbopackFileSystemCache: #96531\r\n### Credits\r\nHuge thanks to @denesbeck, @ztanner, @ijjk, @lllomh, @devjiwonchoi, @lukesandberg, @wbinnssmith, @sokra, @unstubbable, @timneutkens, @feedthejim, @gnoff, @abhishekmardiya, @icyJoseph, @mischnic, @mmastrac, @acdlite, @eps1lon, @JamBalaya56562, @bgw, @gaojude, @bgub, @remcohaszing, @aurorascharff, @VedantMadane, @fireairforce, @dagecko, @ctate, @banchichen, @andrewimm, @wwenrr, @TooTallNate, @hamidrezahanafi, @hamedniroomand, @sleitor, @Badbird5907, @MukundaKatta, @styfle, @SukkaW, @awo00, @christopherkindl, @GuinsooRocky, @maximecolin, @lubieowoce, @zana-abdi2002, @samselikoff, @rishishanbhag, @armando-andre, @tim123abc, @publictheta, @unclebay143, @yavorpunchev, @kakadiadarpan, @SyMind, @igorbabko, @sampoder, @StanislavKozachenko, @kristiyan-velkov, @huozhi, @RazinShafayet2007, @SJvaca30, @danyalahmed1995, @karlhorky, @MikhailStn, @ifer47, @niketchandivade, @gilest, @jahanzaib-iqbal-dev, @owenpearson, @davidgg, @fhfournier, @parkhojeong, @gaearon, @TariqulislamTuhin, @thsid, @jimmyhmiller, @Partha-Shankar, @M4cM4rco, @chippleh1392, @Pranav18M, @marcoshernanz, @manoraj, @ankurdotio, @WildChargerTV, @ZaforAbdullah, @wasim-builds, @petehunt, @DavidIlie, and @adhamfayrouzamf for helping!","publishedAt":"2026-08-03T21:03:18.000Z","fetchedAt":"2026-08-04T00:41:11.022Z","url":"https://github.com/vercel/next.js/releases/tag/v16.3.0","media":[],"coverageCount":0},{"id":"rel_n1qIHhCdYT9NPw7PBBbfl","version":"v16.2.12","type":"feature","title":"v16.2.12","summary":"Fixed issues to support TypeScript 7, along with documentation fixes.","titleGenerated":"Next.js v16.2.12 adds TypeScript 7 support and fixes docs","titleShort":"TypeScript 7 support; docs fixes","breaking":"none","importance":2,"content":"## What's Changed\r\n* Backport/docs fixes 16.2 - July round by @icyJoseph in https://github.com/vercel/next.js/pull/96031\r\n* [Backport] Fixes to support TypeScript 7 by @lukesandberg in https://github.com/vercel/next.js/pull/95831\r\n\r\n\r\n**Full Changelog**: https://github.com/vercel/next.js/compare/v16.2.11...v16.2.12","publishedAt":"2026-07-25T23:55:42.000Z","fetchedAt":"2026-07-26T03:03:42.668Z","url":"https://github.com/vercel/next.js/releases/tag/v16.2.12","media":[],"coverageCount":0},{"id":"rel_STFHkKgYWdm2Qx2dwmgH4","version":"v15.5.22","type":"feature","title":"v15.5.22","summary":"Next.js now rejects TypeScript 7.0 and above with an actionable error message, preventing unexpected failures from an incompatible version.","titleGenerated":"Next.js v15.5.22 rejects TypeScript 7.0 with actionable error","titleShort":"TypeScript 7.0 now rejected with actionable error","breaking":"minor","importance":3,"content":"## What's Changed\r\n* [15.5] Reject TypeScript >= 7.0 with an actionable error by @lukesandberg in https://github.com/vercel/next.js/pull/96110\r\n\r\n\r\n**Full Changelog**: https://github.com/vercel/next.js/compare/v15.5.21...v15.5.22","publishedAt":"2026-07-25T23:54:59.000Z","fetchedAt":"2026-07-26T03:03:42.668Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.22","media":[],"coverageCount":0},{"id":"rel_o9NeJTd9V-4U4e5yZt-Mq","version":"v16.2.11","type":"feature","title":"v16.2.11","summary":"Four high-severity vulnerabilities fixed: Denial of Service in App Router Server Actions, middleware/proxy bypass in Turbopack single-locale apps, SSRF in rewrites and Server Actions on custom servers. Also includes five moderate-severity fixes for cache confusion, Image Optimization DoS via SVG, unauthenticated function endpoint disclosure, and unbounded Edge Runtime payload.","titleGenerated":"Next.js v16.2.11 patches high-severity SSRF, DoS, and middleware bypass","titleShort":"Four high-severity CVEs patched; all deployments should upgrade","breaking":"none","importance":4,"content":"This release contains security fixes for the following advisories:\r\n\r\nHigh:\r\n\r\n- [Denial of Service in App Router using Server Actions](https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj)\r\n- [Middleware / Proxy bypass in App Router applications using Turbopack and single locale](https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24)\r\n- [Server-Side Request Forgery in rewrites via attacker-controlled destination hostname](https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4)\r\n- [Server-Side Request Forgery in Server Actions on custom servers](https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x)\r\n\r\n\r\nModerate: \r\n\r\n- [Cache confusion of response bodies for requests with bodies](https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742)\r\n- [Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences](https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q)\r\n- [Denial of Service in the Image Optimization API using SVGs](https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch)\r\n- [Unauthenticated disclosure of internal Server Function endpoints](https://github.com/vercel/next.js/security/advisories/GHSA-955p-x3mx-jcvp)\r\n- [Unbounded Server Action payload in Edge runtime](https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3)\r\n","publishedAt":"2026-07-21T16:58:28.000Z","fetchedAt":"2026-07-21T18:15:51.217Z","url":"https://github.com/vercel/next.js/releases/tag/v16.2.11","media":[],"coverageCount":0},{"id":"rel_x3urtEfPxuCbjFmkvHM85","version":"v15.5.21","type":"feature","title":"v15.5.21","summary":"Patches four high-severity advisories: denial of service via Server Actions, middleware/proxy bypass in Turbopack single-locale apps, SSRF in rewrites, and SSRF in Server Actions on custom servers. Also fixes five moderate-severity issues including cache confusion, DoS via SVG image optimization, and unauthenticated endpoint disclosure.","titleGenerated":"Next.js v15.5.21 patches high-severity SSRF, DoS, and middleware bypass vulnerabilities","titleShort":"Four high-severity security flaws patched","breaking":"none","importance":4,"content":"This release contains security fixes for the following advisories:\r\n\r\nHigh:\r\n\r\n- [Denial of Service in App Router using Server Actions](https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj)\r\n- [Middleware / Proxy bypass in App Router applications using Turbopack and single locale](https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24)\r\n- [Server-Side Request Forgery in rewrites via attacker-controlled destination hostname](https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4)\r\n- [Server-Side Request Forgery in Server Actions on custom servers](https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x)\r\n\r\n\r\nModerate: \r\n\r\n- [Cache confusion of response bodies for requests with bodies](https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742)\r\n- [Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences](https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q)\r\n- [Denial of Service in the Image Optimization API using SVGs](https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch)\r\n- [Unauthenticated disclosure of internal Server Function endpoints](https://github.com/vercel/next.js/security/advisories/GHSA-955p-x3mx-jcvp)\r\n- [Unbounded Server Action payload in Edge runtime](https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3)\r\n","publishedAt":"2026-07-21T16:58:17.000Z","fetchedAt":"2026-07-21T18:15:51.217Z","url":"https://github.com/vercel/next.js/releases/tag/v15.5.21","media":[],"coverageCount":0}],"pagination":{"nextCursor":"2026-07-21T16:58:17.000Z|2026-07-21T18:15:51.217Z|rel_x3urtEfPxuCbjFmkvHM85","limit":20},"summaries":{"rolling":{"windowDays":90,"summary":"Next.js oscillated between rapid canary iterations and selective backports during this 90-day window, revealing a shift from stability consolidation toward infrastructure evolution. The major thrust across releases centered on three threads: adapters and deployment-time optimization (moving adapterPath into stable config, handling deployment IDs in asset URLs, enabling segment-specific caching strategies), experimental instant navigation and cached navigations (validation in dev, testing APIs, runtime prefetch handling), and Turbopack hardening (server HMR, persistent caching tuning, workspace-relative asset handling). A notable security update in mid-January patched HTTP request smuggling in rewrites; separately, v16.2.0 shipped with proper Pages Router export handling and partial fallbacks gating. By late January, the 16.2.0 line began with PPR fallback fixes and React upgrades, then pivoted toward segment cache decoupling and prefetch optimizations before stabilizing at v16.2.4 with Windows Arm64 fixes and filesystem watcher config corrections.","releaseCount":175,"generatedAt":"2026-04-16T15:06:19.641Z"},"monthly":[{"year":2026,"month":3,"summary":"March shipped improvements to deployment adapters, dev experience with Turbopack HMR, and stability fixes. Adapters gained proper handling of dynamic metadata routes and expanded documentation, while Turbopack's server HMR for app route handlers and CSS HMR on Safari made development more reliable. The month also addressed several security concerns and shipped breaking changes for TypeScript v6 deprecations around `baseUrl` and `moduleResolution`.","releaseCount":55,"generatedAt":"2026-04-16T15:06:22.208Z"},{"year":2026,"month":2,"summary":"The month focused on stabilizing Instant Navigation and refactoring Turbopack's runtime infrastructure. Work landed on validation for the new `instant()` config in dev mode, a testing API for instant navigations, and restructuring how Turbopack manages HMR and server communication—including infrastructure for server HMR and runtime file reorganization. Alongside this, the team shipped deployment ID handling across multiple asset types (fonts, CSS URLs, images), improved error handling for deeper causal chains, and continued upgrading React daily builds.","releaseCount":46,"generatedAt":"2026-03-31T14:04:23.763Z"}]}}