Netlify Identity package update: CSRF protection with new `verifyRequestOrigin` helper
@netlify/identity 1.1.0 introduces a new verifyRequestOrigin helper to make it easier for developers and AI agents to add CSRF (Cross-Site Request Forgery) protection when running authentication on the server. You can call login(), signup(), or logout() from a Netlify Function or Edge Function to handle authentication entirely on the server.
More from NetlifyEvery Netlify release →
New `netlify logs` CLI command
The Netlify CLI now includes a netlify logs command, giving you a powerful and flexible way to access logs for your projects whether you're a developer debugging locally or an AI agent processing structured output. Filter by source Use --source to pull logs from functions, edge functions, deploys, or any combination of them together.
OpenAI GPT-5.5 Instant now available in AI Gateway
OpenAI’s GPT-5.5 Instant model is now available through Netlify’s AI Gateway with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Deploy to Netlify with Stripe Projects
You can now deploy projects to Netlify using Stripe Projects, a tool that helps you manage all the services your site needs from a single CLI without context switching between dashboards. Learn more about this update and what it means for your workflow and working with AI agents in our blog post Agent experience moves upstream.
Netlify Database is now generally available
Netlify Database is launching today as a serverless Postgres database that's deeply integrated into the Netlify workflow and upgraded from the beta experience to a full Netlify primitive. Netlify Database is designed to provide strong guardrails out-of-the-box when collaborating with team members and AI agents.
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Block project transfers out of your team
Team Owners can now guarantee that projects stay within the team to meet compliance or ownership requirements by blocking every project from being transferred to another team.
Security Update: Multiple vulnerabilities in Next.js and React
The Next.js and React teams have disclosed twelve security vulnerabilities: one in React Server Components and eleven in Next.js, all patched on May 6, 2026, plus a follow-up advisory on May 7. The issues span middleware/proxy bypass, cross-site scripting (XSS), server-side request forgery (SSRF), cache poisoning, and denial of service (DoS).
OpenAI GPT-5.5 and GPT-5.5 Pro now available in AI Gateway and Agent Runners
OpenAI’s GPT-5.5 and GPT-5.5 Pro models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.