Releasesby GlyphSecurity update: multiple vulnerabilities in Nuxt
The Nuxt team has disclosed four security vulnerabilities. Here’s what Netlify customers need to know. Vulnerabilities CVE-2026-47200 : Route middleware bypass via island page endpoints (nuxt 3.11.0–3.21.5, 4.0.0-alpha.1–4.4.5) CVE-2026-46342 : Island response not validated against request props (nuxt 3.1.0–3.21.5, 4.0.0-alpha.1–4.4.5) CVE-2026-45670 : Dev...
Also shipped May 19, 2026Netlify in May 2026 →
Gemini 3.1 Flash Lite Now Available
gemini-3.1-flash-lite is now available as a managed Google LLM in the Voice Agent API. This Standard tier model replaces the preview version. Set the model in your agent configuration: { "agent": { "think": { "provider": { "type": "google", "model": "gemini-3.1-flash-lite", "temperature": 0.5 } } } }
Deprecations
- gemini-3.1-flash-lite-preview is deprecated and will be removed on May 26, 2025. Migrate to gemini-3.1-flash-lite . For more details on Gemini model deprecations, see Google's Gemini deprecations page . For the full list of supported models and pricing tiers, see the Voice Agent LLM Models documentation .
DigitalOcean Kubernetes (DOKS) now supports single sign-on (SSO) with OIDC in public preview
DigitalOcean Kubernetes (DOKS) now supports single sign-on (SSO) with OIDC in public preview. You can authenticate users to your Kubernetes clusters through an identity provider like Auth0, JumpCloud, Keycloak, or Okta, instead of using …
Screenshot thumbnails for browser checks in Synthetic Monitoring Timepoint Explorer
When debugging browser check failures like “timeout waiting for a selector”, you previously had to rely on text logs alone to understand what the browser rendered. Now, with screenshot thumbnails in the Timepoint Explorer and ad-hoc test panel, you can see exactly what the page looked like at the moment the check ran.
Search volume for AI Visibility [Beta]
Description: AI Visibility now includes Search Volume so you can prioritize topics and prompts based on real demand, not just where your brand appears. Use it to identify high-volume content opportunities and focus optimization where it matters most. Where: Access via AI Visibility → Prompts tab, Topic-level visibility, and When: Open beta, available now.
Cog 0.20.0
New features cog run command. The cog predict command has been renamed to cog run with full backward compatibility. cog predict still works as an alias. ( #3015 ) Model refs for cog push and weights commands. You can now reference models by name (e.g., r8.im/user/model ) instead of full image URLs when pushing or managing weights.
More from NetlifyEvery Netlify release →
Gemini 3.5 Flash now available in AI Gateway
Google's Gemini 3.5 Flash model is now available through Netlify’s AI Gateway with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Gemini 3.5 Flash now available in Agent Runners
Google's Gemini 3.5 Flash model is now available through Netlify's Agent Runners with zero configuration required. Learn more in the Agent Runners documentation.
Build Plugins: End of support for Node.js 18 + Node.js 20
The following versions of Node.js have reached their official end of life: Node.js v18 on April 30, 2025 Node.js v20 on April 30, 2026 Now it’s time to say goodbye to Node.js versions 18 and 20 in our build plugins. This change will allow us to use...
Agent Runners workflow improvements
We're making it easier to use Agent Runners in the existing workflows you have. Now you can do the following in a more seamless way: Prompt new changes using Agent Runners more quickly from a GitHub pull request link Copy output from Agent Runners faster so you can get back to what you're doing Track pull request ownership so you can understand who is doing...
Claude Opus 4.8 now available in AI Gateway and Agent Runners
Anthropic’s Claude Opus 4.8 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Block project transfers out of your team
Team Owners can now guarantee that projects stay within the team to meet compliance or ownership requirements by blocking every project from being transferred to another team.
Security Update: Multiple vulnerabilities in Next.js and React
The Next.js and React teams have disclosed twelve security vulnerabilities: one in React Server Components and eleven in Next.js, all patched on May 6, 2026, plus a follow-up advisory on May 7. The issues span middleware/proxy bypass, cross-site scripting (XSS), server-side request forgery (SSRF), cache poisoning, and denial of service (DoS).
Gemini 3.1 Flash-Lite now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite model is now available through Netlify’s AI Gateway with zero configuration required. The Preview version of this model was available as of March 3, 2026. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.