The Image Optimization RCE only closes once sharp resolves to 0.35.5 or later — upgrading Next.js isn't enough, so verify the version in your running build.
The pre-announced Next.js security release landed on schedule, fixing nine vulnerabilities — one critical, two high, five medium, one low — spanning SSRF, an authentication bypass, and denial of service.
The out-of-band release flagged earlier this week landed Tuesday, fixing two critical remote-code-execution holes and a denial-of-service bug across the active and maintenance LTS lines.
The pre-announced Next.js security release landed on schedule, fixing nine vulnerabilities — one critical, two high, five medium, one low — spanning SSRF, an authentication bypass, and denial of service.
Running `npx shadcn init` now scaffolds new projects on Base UI instead of Radix, following data showing new projects picked Base UI over Radix two-to-one.
React 19.0.7, 19.1.8, and 19.2.7 all shipped June 1 with a same-day fix for a FormData regression in Server Actions introduced by the previous patch on each branch.
The August stable build ends Manifest V2 support for good, adds a set of media-state and color CSS features, and is the last Chrome to ship on the four-week cadence.
Safari Technology Preview 250 lands full Explicit Resource Management, so JavaScript's `using` and `await using` now run natively in every major engine.
TypeScript 7.0 lands with a compiler rewritten in Go, delivering around 10x faster builds through shared-memory parallelism across parsing, type-checking, and emit phases.
Visual Studio 2026 18.6 Insiders 3 ships with the Go-rewritten TypeScript 7 Beta on by default, giving Windows devs their first integrated look at the 10x faster native type-checker.
SvelteKit shipped versions 2.62.0 through 2.68.0 this month, previewing several Kit 3 configuration changes and adding explicit environment variable support, remote query refresh, and smarter form handling.
The Svelte May 2026 roundup brings SvelteKit TypeScript 6.0 compatibility, a new form-field default-value API, motion-type exports in Svelte 5.55, and the sv CLI's first stable community add-ons feature — alongside several breaking changes to query lifecycle.