Next.js

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM ...

A release to correct the npm latest tag, which was incorrectly pointing to a prerelease version.

Fixed a bug where FormData entries were being dropped.

Fixed a dev mode hydration failure when pages are served from HTTP cache, catch-all router.query corruption with basePath and rewrites, and server action forwarding loops with middleware rewrites. Also fixed FormData entry dropping, playwright-core promise resolution, non-ASCII cache tag encoding, and type module support in standalone/adapter deployments.

This release contains security fixes for the following advisories:

High:

• [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https:/...

This release contains security fixes for the following advisories:

High:

• [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https:/...

This release contains security fixes for the following advisories:

High:

• [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https:/...

This release contains security fixes for the following advisories:

High:

• [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https:/...

Core Changes

• chore: Bu...

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summary-of-cve-2026-23869

Core Changes

• backport:...

Core Changes

• docs: post ...

Core Changes

• feat(next/i...

Core Changes

• U...

Core Changes

• fix: patch ...

Core Changes

• [Cache Comp...

• fix unlock in publish-native ...

Core Changes

• Tracing: Fi...

Core Changes

• Upgrade to ...