Releasesby GlyphGemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Also shipped May 7, 2026Netlify in May 2026 →
Security Center 2.0: Act on vulnerabilities in bulk across all your apps
Replit updated its Security Center to allow users to view and remediate vulnerabilities across all projects in bulk. Users can now identify and fix critical CVEs on published projects from a centralized dashboard.
Consistent Web Search and Fetch Across Every Model
OpenRouter now enables tool-calling models to perform web searches and fetch page content. Users can choose from multiple search and fetch engines to integrate these capabilities into their workflows.
Prisma 8: A Call for Extension Authors
Prisma 8 features a modular core that allows developers to build and integrate extensions for specific databases, vector search, and JSON-with-schema.
Monitors & Alerts , Now Generally Available
We’ve updated how you build alerts - separated now into Monitors and Alerts - to give you more control over what you track and how your team gets notified.
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel...
- Data exports from Dives: Dives can now include export buttons that deliver CSV, JSON, Parquet, or Excel files, both in the MotherDuck UI and in embedded Dives . Wire up exports from your Dive code with the new exportAs and useExport hooks from @motherduck/react-sql-query .
Workers, WAF - WAF and framework adapter mitigations for React and Next.js vulnerabilities
Multiple security vulnerabilities were disclosed by the React team and Vercel affecting React Server Components and Next.js. These include denial of service, middleware and proxy bypass, server-side request forgery, cross-site scripting, and cache poisoning issues across a range of severity levels.
More from NetlifyEvery Netlify release →
Block project transfers out of your team
Team Owners can now guarantee that projects stay within the team to meet compliance or ownership requirements by blocking every project from being transferred to another team.
Security Update: Multiple vulnerabilities in Next.js and React
The Next.js and React teams have disclosed twelve security vulnerabilities: one in React Server Components and eleven in Next.js, all patched on May 6, 2026, plus a follow-up advisory on May 7. The issues span middleware/proxy bypass, cross-site scripting (XSS), server-side request forgery (SSRF), cache poisoning, and denial of service (DoS).
OpenAI GPT-5.5 Instant now available in AI Gateway
OpenAI’s GPT-5.5 Instant model is now available through Netlify’s AI Gateway with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Netlify Identity package update: CSRF protection with new `verifyRequestOrigin` helper
@netlify/identity 1.1.0 introduces a new verifyRequestOrigin helper to make it easier for developers and AI agents to add CSRF (Cross-Site Request Forgery) protection when running authentication on the server. You can call login(), signup(), or logout() from a Netlify Function or Edge Function to handle authentication entirely on the server.
Agent Runners workflow improvements
We're making it easier to use Agent Runners in the existing workflows you have. Now you can do the following in a more seamless way: Prompt new changes using Agent Runners more quickly from a GitHub pull request link Copy output from Agent Runners faster so you can get back to what you're doing Track pull request ownership so you can understand who is doing...
New `netlify logs` CLI command
The Netlify CLI now includes a netlify logs command, giving you a powerful and flexible way to access logs for your projects whether you're a developer debugging locally or an AI agent processing structured output. Filter by source Use --source to pull logs from functions, edge functions, deploys, or any combination of them together.
Deploy to Netlify with Stripe Projects
You can now deploy projects to Netlify using Stripe Projects, a tool that helps you manage all the services your site needs from a single CLI without context switching between dashboards. Learn more about this update and what it means for your workflow and working with AI agents in our blog post Agent experience moves upstream.
Netlify Database is now generally available
Netlify Database is launching today as a serverless Postgres database that's deeply integrated into the Netlify workflow and upgraded from the beta experience to a full Netlify primitive. Netlify Database is designed to provide strong guardrails out-of-the-box when collaborating with team members and AI agents.