Netlify Release notes and new features

Security Update: Multiple vulnerabilities in Next.js (November 2026)

The Next.js team has disclosed seven security vulnerabilities in Next.js, patched on November 3, 2026 in 16.4.5 and 15.5.29. The issues span cached data leaking between users, exposure of HttpOnly cookies, cache poisoning, and cross-client response injection. Several of them do not affect apps hosted on Netlify. Here's what Netlify customers need to know.

Meta’s Muse Models Are Now Available in Agent Runners

You can now power your Netlify Agent Runners runs with Meta’s Muse family of AI models. Choose Muse for your next run and pick the model that fits the task, from Meta’s most capable Muse Wonder 1.0 for complex software engineering and long-horizon agentic work to Muse Spark 1.3, tuned for agentic workflows and coding.

GPT-6.1 Terra now available in AI Gateway and Agent Runners

Netlify has added support for OpenAI's GPT-6.1 Terra model across its AI Gateway and Agent Runners, enabling usage without manual API key management.

TypeSafe Jev 1.14.0 Now Available in AI Gateway

TypeSafe’s Jev 1.14.0 model is now available through Netlify’s AI Gateway with zero configuration required. Install @typesafe-ai/sdk and use it directly in your Netlify Functions without managing API keys or authentication. AI Gateway handles credentials automatically, and usage is billed to your Netlify credits.

• TypeSafe Jev 1.14.0 Now Available in AI Gateway
• Introducing the Support Hub

Security Update: Next.js and React vulnerabilities (October 2026)

The Next.js and React teams have disclosed three security vulnerabilities (two critical, one high), released on October 14, 2026: a remote code execution (RCE) in SVG image processing, an RCE in use cache (Cache Components), and a denial of service (DoS) in App Router Server Actions. Here's what Netlify customers need to know.

TanStack Start 1.0 deploys on Netlify

TanStack Start is now 1.0, and Start apps deploy on Netlify. SSR, server routes, server functions, and middleware run on Netlify Functions. It's also what new Agent Runners projects start with by default.

• Mistral Large 4 now available in Agent Runners
• Google Gemini 4 Argon now available in AI Gateway and Agent Runners
• TanStack Start 1.0 deploys on Netlify

Meta Models Now Available in AI Gateway

Meta’s Muse Spark and Muse Wonder models are now available through Netlify’s AI Gateway with zero configuration required. Choose muse-spark-1.1 for coding, computer use, and multimodal perception; muse-spark-1.2 for coding-optimized agentic workflows; muse-spark-1.3 for long-horizon coding and agentic work with cleaner code and fewer tokens; or...

Google’s Gemini Nano Banana 2.1 now available in AI Gateway

Google’s Gemini Nano Banana 2.1 is now available through Netlify AI Gateway. You can call this image generation model from Netlify Functions without configuring API keys; AI Gateway provides the connection to Google for you. Use the Google Gen AI SDK with the model ID gemini-nano-banana-2.1.

• Comment on specific lines of code in Agent Runners
• Google’s Gemini Nano Banana 2.1 now available in AI Gateway

SvelteKit 3 just works on Netlify

SvelteKit 3 is out today, and it just works on Netlify on day one. To upgrade, run: npx sv migrate sveltekit-3 The migration tool handles most of the mechanical changes for you, including moving your config and updating imports. You can also check out the official migration guide.

Security Update: Cross-site scripting in TanStack Start

The TanStack team has disclosed a critical cross-site scripting (XSS) vulnerability in TanStack Start. A crafted URL can cause an affected app to return attacker-controlled HTML from its own origin, which may run attacker-supplied JavaScript in a visitor's browser. Here's what Netlify customers need to know.

• Security Update: Cross-site scripting in TanStack Start
• Security Update: Multiple vulnerabilities in Next.js
• Trust Center is now in the Netlify Dashboard

Claude Opus 5.5 now available in AI Gateway and Agent Runners

Anthropic’s Claude Opus 5.5 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. AI Gateway handles everything automatically.

• Claude Opus 5.5 now available in AI Gateway and Agent Runners
• GPT-6 Sol and GPT-6 Luna now available in AI Gateway and Agent Runners
• Security Update: Critical Next.js vulnerability in ImageResponse

TypeSafe Jev now available in AI Gateway

TypeSafe’s Jev model is now available through Netlify’s AI Gateway with zero configuration required. Install @typesafe-ai/sdk and use it directly in your Netlify Functions , no API keys to create, no provider config, no base URLs to wire up.

DeepSeek V4.1 Flash now available in AI Gateway

DeepSeek V4.1 Flash is now available through OpenRouter on Netlify’s AI Gateway with zero configuration required. Use the OpenRouter SDK directly in your Netlify Functions without managing API keys or authentication. AI Gateway handles everything automatically.

Social media share buttons

Sharing your Netlify projects is now faster with built-in social media share buttons. When you’re ready to show off what you’ve built, you can share your project directly to X, LinkedIn, Reddit, Facebook, or Bluesky.

ChatGPT Images 2.5 now available in AI Gateway and Agent Runners

OpenAI’s ChatGPT Images 2.5 models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use gpt-image-2.5-flare or gpt-image-2.5-sunburst to generate images for your applications. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication.

Google Gemini 3.8 Flash now available in AI Gateway and Agent Runners

Google’s Gemini 3.8 Flash model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Claude Fable 5.1 now available in AI Gateway and Agent Runners

Anthropic’s Claude Fable 5.1 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Security Update: Two critical Next.js vulnerabilities

The Next.js team has disclosed two critical severity vulnerabilities, both of which can lead to unauthenticated remote code execution. Both are patched in 15.5.24 and 16.3.3. Netlify-hosted sites are not affected by the Windows issue, and do not run the Next.js code path affected by the image issue. We still recommend upgrading.

Agent Runners can now ask clarifying questions

Agent Runners can now ask you clarifying questions before they start building. When a few details could significantly improve the result, the agent pauses and asks instead of guessing. The clarifying questions UI in an Agent Runners session, asking: What should the tracker dashboard keep track of?

• Agent Runners can now ask clarifying questions
• Pre-launch toolbar and the Powered by Netlify badge

Google Gemini 3.7 Flash now available in AI Gateway and Agent Runners

Google’s Gemini 3.7 Flash model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Manage your team invitations from your Netlify dashboard

Invitations to join an existing team now show up within your Netlify dashboard, where you can accept or decline them directly without checking your email inbox. Previously, the invitation email was the only way in.

• Manage your team invitations from your Netlify dashboard
• Pay for Netlify with Apple Pay and Google Pay
• Simplified single sign-on (SSO) process

Keep projects private by default with project visibility

Teams on a Free, Personal, or Pro plan now have project visibility settings to ensure that all of your project stay private until you decide to make them public. More people are shipping prototypes, internal tools, early client work, and projects built with agents. A deploy is often a work in progress, not a publication.

Netlify Drop updates

Netlify Drop has a refreshed look, with even more support for your questions and guidance on what’s next after you drop your latest site or app. We first launched Netlify Drop 13 years ago when we introduced the web to a simpler way to deploy your web project and get a custom link for it.

• Netlify Drop updates
• Security Update: Multiple vulnerabilities in Nuxt

Claude Opus 5 Now Available in AI Gateway and Agent Runners

Anthropic’s Claude Opus 5 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Security Update: Multiple vulnerabilities in React Router

The React Router team has disclosed five security vulnerabilities affecting React Router. These issues are patched in React Router 7.18.0 (one issue was patched earlier, in 7.13.0). Here’s what Netlify customers need to know.

Google Gemini 3.6 Flash and Gemini 3.5 Flash-Lite Now Available in AI Gateway and Agent Runners

Google’s Gemini 3.6 Flash and Gemini 3.5 Flash-Lite models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

• Google Gemini 3.6 Flash and Gemini 3.5 Flash-Lite Now Available in AI Gateway and Agent Runners
• Security Update: Multiple vulnerabilities in Next.js

Invite Developers and Internal Builders without assigning a project

You can now invite a Developer or Internal Builder to your team without assigning them to an existing project. Previously, the UI required every new Developer or Internal Builder to be given access to at least one existing project before you could add them.

Set AI usage limits for individual team members

Team Owners on Pro plans can now limit Agent Runners spend for individual members in your team, giving you finer control over how AI credits are used across your team. Set a single credit limit that applies to every member, then customize it with overrides for specific people who need more (or less) room to work.

OpenAI GPT-5.6 Sol, Luna, and Terra Now Available in AI Gateway and Agent Runners

OpenAI’s GPT-5.6 Sol, Luna, and Terra models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Node.js 24 is now the default for Builds and Functions on new sites

New sites created on Netlify now use Node.js 24 by default for both builds and Netlify Functions. Existing sites aren’t affected , they keep using whatever Node.js version they’re currently pinned to, whether that’s set via a NODE_VERSION environment variable, an .nvmrc/.node-version file, or the engines.node field in package.json.

Claude Fable 5 reactivated in AI Gateway

Anthropic’s Claude Fable 5 model is once again available through Netlify’s AI Gateway with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Nano Banana 2 Lite (Gemini 3.1 Flash-Lite Image) is now available in AI Gateway

Google's Nano Banana 2 Lite (Gemini 3.1 Flash-Lite Image) is now available through AI Gateway. You can call this lightweight image generation model from Netlify Functions without configuring API keys; the AI Gateway provides the connection to Google for you.

• Claude Sonnet 5 now available in AI Gateway and Agent Runners
• Nano Banana 2 Lite (Gemini 3.1 Flash-Lite Image) is now available in AI Gateway

Functions redesigned for agents

We have redesigned Netlify functions for an improved agent experience. With these updates, functions are more discoverable, easier to autocomplete, update, and manage for people and agents alike.

React Router 8 is now supported on Netlify

React Router 8 was just released and is already supported on Netlify. The breaking changes are largely limited to these new minimums: Node.js 22.22.0+ React 19.2.7+ Vite 7+ How to upgrade To upgrade your existing Netlify project follow the React Router 8 upgrade guide and upgrade the Netlify React Router Vite plugin to v4.0.0+: npm i...

Environment variable size limit removed for Serverless Functions

You can now use as many environment variables as your Serverless Functions need. The 4KB total size limit on environment variables no longer applies to functions running on the current Netlify Functions runtime. This limit was a common source of friction.

• Environment variable size limit removed for Serverless Functions
• Project labels are now available on Pro

Claude Fable 5 now available in AI Gateway

Update , June 13, 2026 Anthropic has suspended access to Claude Fable 5. Requests to claude-fable-5 through Netlify AI Gateway will fail until access is restored. Anthropic's Claude Fable 5 model is now available through Netlify's AI Gateway with zero configuration required.

• Claude Fable 5 now available in AI Gateway
• Netlify is now in the Cursor marketplace

Angular v22 is now supported

Angular v22 was released today and it is supported on Netlify on day one. To upgrade, follow the Angular upgrade steps and update @netlify/angular-runtime to v4.0.0 or later. Notable changes Minimum Node.js version: Angular v22 requires Node.js 22.12.0 or later. Make sure your Netlify site is configured to use a supported Node.js version .

Security update: multiple vulnerabilities in React Router

The React Router team has disclosed seven security vulnerabilities. Here’s what Netlify customers need to know. Vulnerabilities Vulnerability: GHSA-8x6r-g9mw-2r78 , DoS via __manifest endpoint Package: react-router Affected versions: 7.0.0–7.14.x Fixed in: 7.15.0 Vulnerability: GHSA-rxv8-25v2-qmq8 , DoS via single-fetch request body Package: react-router...

Claude Opus 4.8 now available in AI Gateway and Agent Runners

Anthropic’s Claude Opus 4.8 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

Gemini 3.5 Flash now available in Agent Runners

Google's Gemini 3.5 Flash model is now available through Netlify's Agent Runners with zero configuration required. Learn more in the Agent Runners documentation.

Gemini 3.5 Flash now available in AI Gateway

Google's Gemini 3.5 Flash model is now available through Netlify’s AI Gateway with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.

• Gemini 3.5 Flash now available in AI Gateway
• Security update: multiple vulnerabilities in Nuxt

Agent Runners workflow improvements

We're making it easier to use Agent Runners in the existing workflows you have. Now you can do the following in a more seamless way: Prompt new changes using Agent Runners more quickly from a GitHub pull request link Copy output from Agent Runners faster so you can get back to what you're doing Track pull request ownership so you can understand who is doing...

Block project transfers out of your team

Team Owners can now guarantee that projects stay within the team to meet compliance or ownership requirements by blocking every project from being transferred to another team.

• Block project transfers out of your team
• Security Update: Multiple vulnerabilities in Next.js and React

OpenAI GPT-5.5 Instant now available in AI Gateway

OpenAI’s GPT-5.5 Instant model is now available through Netlify’s AI Gateway with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.