BetaWeekly digests are a beta — we're trying something new. Feedback welcome.
Application Platforms weekly digests
- Week of October 12, 2026Next.js patches critical RCEs as Vercel opens its platform to Python, daemons, and persistent storage
Next.js shipped emergency patches for two critical unauthenticated remote code execution flaws in use cache and the Image Optimization API, while Vercel's platform week brought Python support, Daemons, Bring Your Own Cloud, and persistent Drives to general availability.
- Week of October 5, 2026Deno hands the runtime to Cloudflare as platform SDKs broaden
The Deno team is joining Cloudflare, with the Deno runtime moving to maintenance-only for a year and Deno Deploy shutting down in six months. Elsewhere Cloudflare shipped its One clients to general availability and Vercel expanded AI Gateway's model roster.
- Week of September 28, 2026Cloudflare opens the agent stack while Next.js patches cache poisoning
Cloudflare shipped a broad expansion of its agent and data platform this week — a Web Search API, the first in-house Workers AI models, Git-backed Artifacts, and a Sandbox SDK that hands sandboxes to your own Durable Objects — while Next.js issued security patches for a high-severity SSRF bug and cache poisoning in SSG and ISR pages.
- Week of September 21, 2026Platforms push isolation, observability, and API migrations
Cloudflare shipped production-like Worker Previews for pull-request testing and took its MCP server portals to general availability, while the AI SDK migrated Perplexity language generation to the Agent API ahead of a hard deprecation deadline.
- Week of September 14, 2026Cloudflare opens up account and network plumbing as Vercel floods AI Gateway with models
Cloudflare made Unified Routing generally available across WAN and Magic Transit and opened self-serve Free account creation, while Vercel spent the week stocking AI Gateway with new models and exposing deployment costs down to the CPU minute.
- Week of September 7, 2026Cloudflare patches a Magento zero-day while its developer tooling gets a v5 reset
Cloudflare's WAF pushed an emergency managed rule for an actively exploited Adobe Commerce and Magento remote code execution flaw, while Miniflare v5 reshaped local Workers configuration and the AI SDK added GitHub Copilot as a harness target.
- Week of August 31, 2026Cloudflare opens up the edge while Vercel floods the gateway with models
Cloudflare removed the compressed size ceiling on Workers deploys and gave Python Workers real web-framework support, while Vercel's AI Gateway added six more models and the AI SDK reworked file handling across providers.
- Week of August 24, 2026Critical Next.js RCE patches land as Vercel opens its agent stack
Next.js shipped emergency patches for two critical unauthenticated remote code execution flaws, Cloudflare's WAF raced out matching detections, and Vercel took its agent connectivity layer and agent builder to general availability.
- Week of August 3, 2026Agent foundations: gateways, sandboxes, and observable debugging
Cloudflare unified Workers AI and AI Gateway access while launching Kitesurf, a stateless agent browser; Railway's CLI matured Postgres operations; and the AI SDK ecosystem tightened video retry and embedding performance. Cloudflare also made local Worker debugging agent-friendly with automatic traces.
- Week of July 27, 2026Miniflare 5.0.0-alpha reshapes local development, Vercel Passport hits GA
Cloudflare shipped Miniflare 5.0.0-alpha with a major consolidation of persistence options, while Vercel made Passport generally available for deployment protection. Wrangler gained startup profiling, and Workers AI restricted three models to paid plans.
- Week of July 20, 2026Security patches and local observability reshape the platform week
Next.js patches four high-severity vulnerabilities, Cloudflare Workers gains local-dev tracing, and Vercel CLI adds AI Gateway budgets and Python rewrite visibility.
- Week of June 29, 2026Cloudflare Workers Types gets a major simplification
Cloudflare shipped a major version bump for `@cloudflare/workers-types` that strips away years of compatibility baggage, while Vercel expanded its Sandbox with FUSE support and Turborepo added interactive task selection in the TUI.
- Week of June 22, 2026Agents get a voice, a CLI console, and a seat at the table
Vercel's AI Gateway now supports realtime voice and audio models, while the CLI gains a universal `metrics` command for Speed Insights and Web Analytics. Cloudflare added service token support for MCP portals and a US data residency jurisdiction for Durable Objects.
- Week of June 15, 2026R2 SQL goes analytical, Vercel goes realtime
Cloudflare R2 SQL gained window functions, set operations, and analytical aggregates, while Vercel launched WebSocket support for Functions in public beta, and the Vercel CLI added signed blob URLs.
- Week of June 8, 2026Security hardening week across the AI SDK and Workers edge
Vercel's AI SDK received coordinated security patches for SSRF, credential exfiltration, and prototype pollution vulnerabilities across a dozen provider packages, while Cloudflare shipped new WAF rules for Ghost CMS SQL injection and threat intelligence integration.
- Week of June 1, 2026Actionable threat intelligence and deeper platform control
Cloudflare turned threat indicators into instant WAF rules, Workflows gained saga-style rollbacks, and Workers traffic can now be filtered through Gateway policies. Vercel shipped experimental realtime voice support in the AI SDK and persistent drives for sandboxes.
- Week of May 25, 2026AI SDKs converge on agent tools while platforms harden builds and sandboxes
AI SDK providers across Vercel, Cloudflare, and Google Vertex standardized on agent-style tool use for web search, while Vercel made build memory failures a thing of the past and Cloudflare expanded sandbox previews and D1 migration layouts.
- Week of May 18, 2026Deno 2.8, Vercel's AI provider expansion, and Cloudflare's developer experience refinements
Deno shipped its v2.8 release with six new CLI subcommands, import defer syntax, and 3.66x faster npm installs — while Vercel expanded its AI SDK with a new AWS provider for Anthropic models and Cloudflare added tunnel QR codes to its Vite plugin.
- Week of May 11, 2026Local dev sharing and CLI-growing surfaces
Cloudflare made local Workers development shareable via public tunnel URLs, and Wrangler gained first-class CLI commands for the new Artifacts system. Vercel redesigned its Next.js dev overlay and made `vercel connect` available by default.