Security patches and local observability reshape the platform week

Security patches across the framework

The story of the week begins with a coordinated security release from Vercel. Next.js v16.2.11 and the corresponding v15.5.21 patch four high-severity advisories covering denial of service via Server Actions, a middleware/proxy bypass in Turbopack single-locale apps, and two Server-Side Request Forgery vectors — one in rewrites and another in Server Actions on custom servers. Five moderate-severity fixes accompany them, addressing cache confusion, image optimization DoS, and unauthenticated endpoint disclosure. Any team running Next.js in production should prioritize this upgrade. A follow-up v15.5.22 rejects TypeScript 7.0 with an actionable error, a small but welcome guardrail.

Local observability lands in Workers

Cloudflare shipped a major improvement to the local development experience. Wrangler v4.114.0 and the Workers Vite Plugin v1.47.0 now capture full traces for every local Worker invocation — spans, logs, and console.* output — explorable through a new Observability tab or a read-only SQL endpoint. The Miniflare runtime also recovers from crashes instead of going silent, automatically restarting workerd and Vite. For teams debugging cross-worker or Durable Object interactions, this fills a real gap in the local feedback loop.

TLS optimization and WAF expansion

Cloudflare rolled out automatic TLS 1.3 key exchange for all origins, predicting the preferred key agreement algorithm and sending its key share in the first ClientHello to avoid a round trip. The feature, described in Application Performance, is on by default for new zones and prefers the post-quantum X25519MLKEM768 hybrid when supported. On the security side, Cloudflare WAF added rules blocking Adobe ColdFusion path traversal, WordPress SQL injection and RCE, and expanded SSRF and LFI detections to default Block.

Vercel Connect expands and AI Gateway gains new models

Vercel Connect now ships with 90+ preset connectors, significantly reducing integration setup friction. The AI Gateway added Gemini 3.6 Flash and 3.5 Flash-Lite, and service tiers for flexible usage management. The AI SDK Anthropic provider now supports Claude Opus 5, mid-conversation tool changes, and a safety classifier fallback mode — additions mirrored across the v3 and v4 provider lines. The OpenAI provider added Responses programmatic tool calling with hosted program tools and structured output schemas.

Vercel CLI and Python improvements

Vercel CLI 57.0.0 exposes resolved rewrite destinations to Python framework applications, alerting affected projects about the behavior change. The Python builder @vercel/python@6.52.0 reduces bytecode compilation work and collects FastAPI static files for CDN serving. The CLI also added AI Gateway budgets commands and a vercel flags evaluations command for per-variant evaluation charts. A new native binary trampoline gates behind explicit opt-in, preserving stability for teams that don't need it.

Cloudflare agents and config evolution

The Cloudflare Agents SDK now supports AI SDK v6 and v7 across its agent, chat, codemode, and think packages, letting teams upgrade independently. The SDK also reduces MCP schema conversion overhead and adds includeMcpTools for opt-out. Workers config v0.3.0 moves account-level settings to a dedicated settings export, and Wrangler 4.113.0 reconciles Email Routing rules on deploy with automatic resource provisioning now GA for Queue, Dispatch Namespace, and Flagship bindings.

Housekeeping across the ecosystem

The Cloudflare One Client for Windows and macOS fixed a DNS-over-TCP query regression, and the Account Roles API is deprecated in favor of Permission Groups. On the AI SDK side, the Amazon Bedrock provider now passes S3 image URLs directly to Converse, uses native structured output for Claude models, and omits rejected fields for Bedrock compatibility. The tool approval HMAC fix uses injective JSON serialization, and a media-type sniffing regression in the AI SDK core is now bounded to O(1).