BetaWeekly digests are a beta — we're trying something new. Feedback welcome.
Frontend Frameworks weekly digests
- Week of October 12, 2026Next.js races to patch critical RCEs as Expo SDK 58 arrives
Next.js shipped emergency patches for two critical unauthenticated remote code execution flaws, while Expo released SDK 58 with day-one iOS 27 support, App Intents, and React Native 0.88.
- Week of October 5, 2026Next.js 16.4 lands as Turbopack, GC, and crash reporting harden the stack
Next.js shipped its 16.4 stable release alongside a rapid canary burst that enables garbage collection by default, Nuxt rolled out a rebuilt interactive dev terminal with its CLI v4, and Expo's EAS Observe began capturing native crashes on Android and iOS.
- Week of September 28, 2026Next.js patches critical SSRF and cache flaws as SvelteKit 3 lands
Security took center stage this week as Next.js patched a high-severity server-side request forgery in Image Optimization alongside a range of cache-poisoning fixes across two release lines, while SvelteKit shipped its long-awaited 3.0 major with a coordinated wave of rewritten adapters.
- Week of September 21, 2026Next.js patches a remote code execution bug as SvelteKit 3 nears release
Next.js shipped a security release fixing a remote code execution vulnerability in its OG image renderer, alongside a batch of canary work on Turbopack and upgrade tooling. SvelteKit's 3.0 prereleases kept cutting breaking changes through the adapters, and EAS CLI added Supabase advisor checks and App Store Connect API key support.
- Week of September 14, 2026Expo lays groundwork for iOS 27 as Next.js canaries keep landing small fixes
Expo opened the SDK 58 beta, built on React Native 0.88 RC with iOS 27 support, Siri and Apple Intelligence intents exposed to JavaScript, and a UIKit scene-based life cycle that will require AppDelegate migrations. Elsewhere, EAS CLI dropped Node 18 and hardened simulator networking, while Next.js shipped a steady stream of canary fixes.
- Week of September 7, 2026Expo pairs EAS with PostHog as SvelteKit 3 reshapes adapters
Expo shipped a one-command PostHog integration and a breaking EAS CLI overhaul of its observability commands, while SvelteKit's 3.0 prerelease reworked how every adapter boots a server and Next.js kept iterating on cache and Turbopack internals.
- Week of August 31, 2026Next.js hardens Turbopack while Expo tightens its development loop
Next.js spent the week refining Turbopack's cache and dev server behavior ahead of 16.4, while Expo made login mandatory for running projects in Expo Go and gave EAS CLI remote SSH access to workflow jobs.
- Week of August 24, 2026Next.js patches two critical RCEs as its canary line rebuilds caching and bundling
Next.js shipped emergency patches for two unauthenticated remote code execution flaws across its 16.x and 15.x lines, while its canary branch reworked caching, Turbopack resolution, and image handling. Svelte and the Expo EAS CLI also landed notable feature work.
- Week of August 3, 2026SvelteKit 3 tightens its foundation while Next.js and EAS broaden reach
SvelteKit 3.0 pre-releases introduced major breaking changes this week, including a requirement for Node 22, synchronous request handling, and a full migration to Vite 8 with stable Rolldown. Meanwhile, Next.js restored a security patch on its 15.x line and enabled Turbopack's build filesystem cache by default, and EAS CLI shipped new submission management commands.
- Week of July 27, 2026Nuxt security patches, SvelteKit 3 nears stable, and Next.js sharpens turbopack
Nuxt shipped emergency security releases for both v3 and v4 fixing server-side RCE and other critical vulnerabilities, while SvelteKit 3 previews continue rolling toward a stable release and Next.js published a steady stream of turbopack and runtime improvements.
- Week of July 20, 2026Security patches and platform shifts across the frameworks
Next.js issued urgent security patches for both v15 and v16 fixing high-severity SSRF, DoS, and middleware bypass vulnerabilities, while Expo wound down its Agent product and moved EAS Observe to GA.
- Week of July 13, 2026EAS CLI v21 rewrites onboarding while Nuxt 4.5 and SvelteKit 3 prepare for major transitions
EAS CLI v21.0.0 strips the legacy onboarding command and revamps workflow creation, while Nuxt 4.5 ships Vite 8 and Rspack 2 support, and SvelteKit 3.0.0-next.8-11 land breaking changes that reshape how SvelteKit projects handle environments, aliases, and routing.
- Week of July 6, 2026SvelteKit 3.0 enters breaking-change territory while Vite 8 goes stable
This week SvelteKit dropped three consecutive 3.0 pre-releases that remove $app/stores, $app/paths, and require Vite 8 with Rolldown 1.0.0, while Next.js gradually ships Request Insights and an experimental TypeScript CLI.
- Week of June 29, 2026Expo SDK 57 lands with a promise of simpler upgrades
Expo SDK 57 ships with React Native 0.86 in a release designed to have zero breaking changes, while Next.js continues its canary cadence with Server Action fixes and HMR improvements. Svelte's July update previews a simpler project config model.
- Week of June 22, 2026Next.js previews bring instant navigation and prerendering fixes
Next.js shipped four preview and canary releases advancing instant navigation and ImageResponse prerendering, while SvelteKit added a prerendering safety net for invalid URLs and Expo Orbit gained physical iPhone support on Windows and Linux.
- Week of June 15, 2026Next.js resilience work edges out SvelteKit quality-of-life improvements
Next.js canary releases this week focused on reliability — chunk loading retries, tighter after() callback timing, and improved dev-overlay error handling — while SvelteKit shipped smarter prerendering and form validation warnings alongside adapter fixes.
- Week of June 8, 2026SvelteKit query composition and Next.js prefetch stability
SvelteKit 2.65.0 and 3.0.0-next shipped a system for queries to refresh other queries, while Next.js stabilized its prefetch API and enabled Turbopack's filesystem cache by default in canary and preview releases.
- Week of June 1, 2026SvelteKit 3 goes alpha with bundler shifts and tougher requirements
SvelteKit’s first 3.0 alpha drops alongside major adapter rewrites that migrate from Rollup to Rolldown, while Nuxt ships emergency security patches across both its v3 and v4 lines.
- Week of May 25, 2026Svelte unleashes template declarations, Expo opens MCP to all
Svelte 5.56 added the ability to write declarations directly in templates, SvelteKit introduced a real-time query function for live data, and Expo dropped the Expo MCP Server onto the Free plan, making AI-assisted development accessible without a paid account.
- Week of May 18, 2026Expo SDK 56 leads a week of routing refinements and framework upgrades
Expo shipped SDK 56 with production-ready native UI layers on both platforms, while SvelteKit simplified its remote query API and Next.js continued its canary progression with default routing optimizations and a new CSS chunking algorithm.
- Week of May 11, 2026Developer experience upgrades and platform hardening
Next.js redesigned its dev overlay with actionable fix-card guidance, SvelteKit added validation warnings for form remotes, and Expo restricted project loading in Expo Go while EAS CLI gained navigation metrics and Convex integration.