Next.js

Next.js has released a security-focused update for the September 2026 cycle. This release addresses identified vulnerabilities within the framework's core codebase.

Vercel released Next.js 15, enabling the Rust-based Turbopack bundler by default for local development with up to 96% faster code startup.

Next.js has scheduled a security-focused software release for September 30, 2026. This update will address identified vulnerabilities within the framework's codebase.

Next.js released an out-of-band security patch on September 22, 2026. This update addresses a critical vulnerability originating from an upstream dependency.

Next.js versions 16.3.6 and 15.5.26 are scheduled for release on September 22, 2026. These releases address a critical vulnerability originating from an upstream dependency.

The Next.js team deployed an autonomous AI agent to triage, verify, and resolve 1,500 legacy GitHub issues. This process utilized automated research to validate the status of long-standing backlog items.

Next.js 16.3 introduces experimental features specifically designed to optimize Turbopack's JavaScript chunking mechanism. These updates enable more efficient code sharing across pages to reduce initial page load times.

Next.js has released a security-focused update for the August 2026 cycle. This release addresses undisclosed vulnerabilities within the framework's core codebase.

The scheduled August security release for Next.js has been rescheduled to August 25, 2026. This adjustment shifts the deployment timeline for the upcoming security patches.

Next.js has scheduled a security-focused update for release on August 26, 2026. This release is intended to address vulnerabilities within the framework's codebase.

Next.js 16.3 introduces native support for Instant Navigations and optimistic updates. The release enables persistent live client state management alongside server-rendered data.