Releasesby GlyphSecurity Update: Multiple vulnerabilities in Nuxt
The Nuxt team has disclosed several security vulnerabilities fixed in Nuxt 4.5.1 and 3.21.10, ranging from a high-severity server-side remote code execution (under specific conditions) to lower-severity and development-only issues. Here’s what Netlify customers need to know.
Also shipped Jul 27, 2026Netlify in July 2026 →
You can discover commercial BigQuery sharing listings on Google Cloud Marketplace with the Marketplace filter
You can discover commercial BigQuery sharing listings on Google Cloud Marketplace with the Marketplace filter. For more information, see Subscribe to a Cloud Marketplace-integrated listing . This feature is generally available (GA).
BigQuery APPENDS and CHANGES change history functions are GA
The APPENDS and CHANGES functions return the rows appended to or changed in a table over a time range, useful for incremental processing and auditing.
Google-developed ODBC driver for BigQuery is generally available
Applications can connect to BigQuery using the Google-developed Open Database Connectivity (ODBC) driver, now generally available.
BigQuery dataset insights is generally available (GA)
BigQuery dataset insights is generally available (GA). BigQuery dataset insights helps you discover and visualize relationships between tables and automatically generate cross-table queries.
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (Preview)
With this preview release, AI_EXTRACT and AI_PARSE_DOCUMENT support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:
Custom incremental dynamic tables (General availability)
Custom incremental dynamic tables are now generally available. For more information, see Custom incrementalization .
More from NetlifyEvery Netlify release →
Netlify Drop updates
Netlify Drop has a refreshed look, with even more support for your questions and guidance on what’s next after you drop your latest site or app. We first launched Netlify Drop 13 years ago when we introduced the web to a simpler way to deploy your web project and get a custom link for it.
Keep projects private by default with project visibility
Teams on a Free, Personal, or Pro plan now have project visibility settings to ensure that all of your project stay private until you decide to make them public. More people are shipping prototypes, internal tools, early client work, and projects built with agents. A deploy is often a work in progress, not a publication.
Ask mode for Agent Runners
Netlify Agent Runners now have a mode selector. Pick Ask and the agent reads, investigates, and answers questions about your project. Build is still the default and works exactly as before. Ask mode is strictly read-only. The agent can’t edit files, run commands, deploy, or change settings.
GPT-5.6 Luna and Terra price reduction on AI Gateway
GPT-5.6 Luna now costs 80% less and GPT-5.6 Terra is 20% less through Netlify AI Gateway, making both models more cost-efficient for production AI workloads. These reductions improve the price-performance tradeoff across the GPT-5.6 model family, giving teams more flexibility to choose the right balance of capability and cost for each workload.
Claude Opus 5 Now Available in AI Gateway and Agent Runners
Anthropic’s Claude Opus 5 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Security Update: Multiple vulnerabilities in React Router
The React Router team has disclosed five security vulnerabilities affecting React Router. These issues are patched in React Router 7.18.0 (one issue was patched earlier, in 7.13.0). Here’s what Netlify customers need to know.
Security Update: Multiple vulnerabilities in Next.js
The Next.js team has disclosed nine security vulnerabilities, all patched in 15.5.21 and 16.2.11. The issues span server-side request forgery (SSRF), a middleware authorization bypass, denial of service (DoS), and cache/identifier disclosure. Here's what Netlify customers need to know.
Google Gemini 3.6 Flash and Gemini 3.5 Flash-Lite Now Available in AI Gateway and Agent Runners
Google’s Gemini 3.6 Flash and Gemini 3.5 Flash-Lite models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Google GenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.