note: die Zusammenfassung und die Release Notes sind auf Englisch
note: keine Zusammenfassung für dieses digest-Release
digest-Releases werden ohne Zusammenfassung gelistet. Die originalen Release Notes dieser Version stehen hier unten.
release-notesgithub.com/vercel/next.js · 15 Zeilen
- > [!NOTE]
- > This release is backporting bug fixes. It does **not** include all pending features/changes on canary.
- ### Core Changes
- - [Cache Components] Prevent streaming fetch calls from hanging in dev (#89194)
- - Apply server actions transform to node_modules in route handlers (#89380)
- - ensure `maxPostponedStateSize` is always respected (See: [CVE-2026-27979](https://github.com/vercel/next.js/security/advisories/GHSA-h27x-g6w4-24gq))
- - feat(next/image): add lru disk cache and `images.maximumDiskCacheSize` (See: [CVE-2026-27980](https://github.com/vercel/next.js/security/advisories/GHSA-3x4c-7xq6-9pq8))
- - Allow blocking cross-site dev-only websocket connections from privacy-sensitive origins (See: [CVE-2026-27977](https://github.com/vercel/next.js/security/advisories/GHSA-jcc7-9wpm-mj36))
- - Disallow Server Action submissions from privacy-sensitive contexts by default (See: [CVE-2026-27978](https://github.com/vercel/next.js/security/advisories/GHSA-mq59-m269-xvcx))
- - fix: patch http-proxy to prevent request smuggling in rewrites (See: [CVE-2026-29057](https://github.com/vercel/next.js/security/advisories/GHSA-ggv3-7p47-pfv8))
- ### Credits
- Huge thanks to @unstubbable, @styfle, @eps1lon, and @ztanner for helping!