Security Update: Multiple vulnerabilities in React Router
The React Router team has disclosed five security vulnerabilities affecting React Router. These issues are patched in React Router 7.18.0 (one issue was patched earlier, in 7.13.0). Here’s what Netlify customers need to know.
Also shipped Jul 23, 2026Netlify in July 2026 →
SQL environment variable and private Git package support for dbt Projects on Snowflake
Environment variable support for dbt Projects on Snowflake is now generally available. Manage per-developer schemas, dynamic runtime values, secrets, and multiple environments in a single, Git-versioned env.yml file that Snowflake resolves before each run.
SERVICE_AGENT user type (General availability)
With this release, the SERVICE_AGENT user type is generally available. Use this user type for automated AI agents that interact with Snowflake using their own identity and privileges.
SHOW CORTEX BASE MODELS command (General availability)
With this release, we are pleased to announce the general availability of the SHOW CORTEX BASE MODELS command. Use this command to list the Cortex Base Models available in your account, along with each model’s lifecycle status, regional availability, legacy date, and end-of-life date.
C++ SDK for the Zerobus Ingest connector is now available in Beta
A C++ SDK for the Zerobus Ingest connector in Lakeflow Connect is now available in Beta. The SDK provides a high-throughput gRPC client for ingesting records directly into Unity Catalog Delta tables, with support for JSON and Protocol Buffers. See Use Zerobus Ingest .
Genie Code scheduled tasks are in Beta
You can now schedule Genie Code to run a prompt on a recurring schedule. Each run executes your prompt as a full Genie Code session and produces a continuable Genie chat with the results, so you can turn recurring analysis into an unattended background task. Create a scheduled task by asking Genie Code in chat or by filling in the create form manually.
Databricks Runtime 19 and Databricks Runtime 19 for Machine Learning are now generally available
Databricks Runtime 19 and Databricks Runtime 19 for Machine Learning are now generally available (GA), powered by Apache Spark 4.2.0. For release notes, see Databricks Runtime 19 and Databricks Runtime 19 for Machine Learning .
More from NetlifyEvery Netlify release →
Claude Opus 5 Now Available in AI Gateway and Agent Runners
Anthropic’s Claude Opus 5 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Security Update: Multiple vulnerabilities in Next.js
The Next.js team has disclosed nine security vulnerabilities, all patched in 15.5.21 and 16.2.11. The issues span server-side request forgery (SSRF), a middleware authorization bypass, denial of service (DoS), and cache/identifier disclosure. Here's what Netlify customers need to know.
Google Gemini 3.6 Flash and Gemini 3.5 Flash-Lite Now Available in AI Gateway and Agent Runners
Google’s Gemini 3.6 Flash and Gemini 3.5 Flash-Lite models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Invite Developers and Internal Builders without assigning a project
You can now invite a Developer or Internal Builder to your team without assigning them to an existing project. Previously, the UI required every new Developer or Internal Builder to be given access to at least one existing project before you could add them.
Netlify Drop updates
Netlify Drop has a refreshed look, with even more support for your questions and guidance on what’s next after you drop your latest site or app. We first launched Netlify Drop 13 years ago when we introduced the web to a simpler way to deploy your web project and get a custom link for it.
Security Update: Multiple vulnerabilities in Nuxt
The Nuxt team has disclosed several security vulnerabilities fixed in Nuxt 4.5.1 and 3.21.10, ranging from a high-severity server-side remote code execution (under specific conditions) to lower-severity and development-only issues. Here’s what Netlify customers need to know.
Keep projects private by default with project visibility
Teams on a Free, Personal, or Pro plan now have project visibility settings to ensure that all of your project stay private until you decide to make them public. More people are shipping prototypes, internal tools, early client work, and projects built with agents. A deploy is often a work in progress, not a publication.
Ask mode for Agent Runners
Netlify Agent Runners now have a mode selector. Pick Ask and the agent reads, investigates, and answers questions about your project. Build is still the default and works exactly as before. Ask mode is strictly read-only. The agent can’t edit files, run commands, deploy, or change settings.