Releasesby GlyphSecurity Update: Multiple vulnerabilities in Next.js and React
The Next.js and React teams have disclosed twelve security vulnerabilities: one in React Server Components and eleven in Next.js, all patched on May 6, 2026, plus a follow-up advisory on May 7. The issues span middleware/proxy bypass, cross-site scripting (XSS), server-side request forgery (SSRF), cache poisoning, and denial of service (DoS).
Also shipped May 8, 2026Netlify in May 2026 →
Supabase Is Now an Official ChatGPT App
Supabase is now available as an official ChatGPT app, allowing users to connect their projects to ChatGPT to manage database infrastructure through natural language commands.
Human-in-the-Loop Tools for the Agent SDK
The OpenRouter Agent SDK now includes tools that allow agents to auto-resolve routine decisions while pausing for human input on high-stakes tasks. This implementation requires no loop-management code.
Faster writes with full-page writes disabled, snapshot pricing in effect, organization-wide two-factor authentication release - May 08, 2026
Faster writes on Neon. Neon now delivers significantly faster writes across all projects. For write heavy workloads, this optimization delivers up to a 5x perfo...
Workers AI - Planned model deprecations on Workers AI
We are refreshing the Workers AI model catalog to make room for newer releases. Please update your apps to remove references to the models listed below before the deprecation date. Recommended replacements @cf/zai-org/glm-4.7-flash , fast multilingual model with multi-turn tool calling and coding capabilities.
Target discounts to specific markets
We've introduced markets as a new option in DiscountContextInput , enabling you to target discounts to specific regional markets, retail locations, or B2B company locations. This option can be used alongside existing eligibility options such as all , customerSegments , and customers .
Zed 1.1.7
- Fixed local zeta2 edit predictions using the wrong prompt format. ( #56192 ) Fixed an issue where broken symlinks, permission errors, or other fs errors in watched directories could cause excessive CPU usage ( #56175 ) Fixed a rare panic when invoking helix motions on an editor that had not yet been laid out.
More from NetlifyEvery Netlify release →
Block project transfers out of your team
Team Owners can now guarantee that projects stay within the team to meet compliance or ownership requirements by blocking every project from being transferred to another team.
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
OpenAI GPT-5.5 Instant now available in AI Gateway
OpenAI’s GPT-5.5 Instant model is now available through Netlify’s AI Gateway with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Agent Runners workflow improvements
We're making it easier to use Agent Runners in the existing workflows you have. Now you can do the following in a more seamless way: Prompt new changes using Agent Runners more quickly from a GitHub pull request link Copy output from Agent Runners faster so you can get back to what you're doing Track pull request ownership so you can understand who is doing...
Netlify Identity package update: CSRF protection with new `verifyRequestOrigin` helper
@netlify/identity 1.1.0 introduces a new verifyRequestOrigin helper to make it easier for developers and AI agents to add CSRF (Cross-Site Request Forgery) protection when running authentication on the server. You can call login(), signup(), or logout() from a Netlify Function or Edge Function to handle authentication entirely on the server.
New `netlify logs` CLI command
The Netlify CLI now includes a netlify logs command, giving you a powerful and flexible way to access logs for your projects whether you're a developer debugging locally or an AI agent processing structured output. Filter by source Use --source to pull logs from functions, edge functions, deploys, or any combination of them together.
Deploy to Netlify with Stripe Projects
You can now deploy projects to Netlify using Stripe Projects, a tool that helps you manage all the services your site needs from a single CLI without context switching between dashboards. Learn more about this update and what it means for your workflow and working with AI agents in our blog post Agent experience moves upstream.
Netlify Database is now generally available
Netlify Database is launching today as a serverless Postgres database that's deeply integrated into the Netlify workflow and upgraded from the beta experience to a full Netlify primitive. Netlify Database is designed to provide strong guardrails out-of-the-box when collaborating with team members and AI agents.