Next.js

We used a coding agent with Next.js 16.4's new prefetching controls and Skill to improve v0's navigation experience at no added cost. The loop: • Capture navigation with 𝚒𝚗𝚜𝚝𝚊𝚗𝚝() • Define the target UI in the test • Refactor until it passes nextjs.org/blog/improv...

The Next.js site has a new look! We've redesigned the homepage, /docs, /blog, and more, with a consistent design that keeps the focus on the content. nextjs.org A few highlights ↓

The Next.js Blog has a redesigned index for browsing posts and updated article layouts that make longer reads more comfortable. nextjs.org/blog

The Next.js site has a new look! We've redesigned the homepage, /docs, /blog, and more, with a consistent design that keeps the focus on the content. nextjs.org A few highlights ↓

An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices ↓

We'll continue making Next.js more secure and publish notices on our security blog: nextjs.org/blog/security Routine updates won't be posted on social media unless there's something specific to call out. To follow future updates, subscribe via RSS: nextjs.org/feed/securi...

Next.js 16.4 • Cache Components by default in new apps • Static output guarantees and more control over prefetching • Agent-guided upgrades and feedback • 20–25% smaller Turbopack disk cache • Faster development and smaller bundles nextjs.org/blog/next-16-4

Turbopack Bundle Analyzer now surfaces large client routes, snapshot diffs, and critical render-path modules. Use the 𝚗𝚎𝚡𝚝-𝚋𝚞𝚗𝚍𝚕𝚎-𝚘𝚙𝚝𝚒𝚖𝚒𝚣𝚎𝚛 skill with your coding agent to reduce what reaches the browser. skills.sh/vercel/next...

Next.js 16.4 • Cache Components by default in new apps • Static output guarantees and more control over prefetching • Agent-guided upgrades and feedback • 20–25% smaller Turbopack disk cache • Faster development and smaller bundles nextjs.org/blog/next-16-4

Coding agents encounter framework errors and workarounds we may not otherwise see. The experimental 𝚊𝚐𝚎𝚗𝚝𝙵𝚎𝚎𝚍𝚋𝚊𝚌𝚔 workflow drafts reports for you to review before sending, helping us improve Next.js based on the problems coding agents encounter.

Next.js 16.4 • Cache Components by default in new apps • Static output guarantees and more control over prefetching • Agent-guided upgrades and feedback • 20–25% smaller Turbopack disk cache • Faster development and smaller bundles nextjs.org/blog/next-16-4

The new 𝚗𝚊𝚟𝚒𝚐𝚊𝚝𝚒𝚘𝚗() API lets you exclude parts of a page from being rendered during a prefetch. Use it to prerender only the most meaningful UI ahead of time, and defer more expensive secondary content until an actual user navigation.

Next.js 16.4 • Cache Components by default in new apps • Static output guarantees and more control over prefetching • Agent-guided upgrades and feedback • 20–25% smaller Turbopack disk cache • Faster development and smaller bundles nextjs.org/blog/next-16-4

Starting with Next.js 16.4, we're excited to recommend Cache Components as the best choice for every Next.js application. All new apps made with 𝚌𝚛𝚎𝚊𝚝𝚎-𝚗𝚎𝚡𝚝-𝚊𝚙𝚙 have Cache Components enabled by default.

The September Next.js security release is now available. It addresses seven vulnerabilities, including one high-severity issue. Upgrade now: ▲ ~/ npm install next@16.3.8 ▲ ~/ npm install next@15.5.27 nextjs.org/blog/septem...

We work with researchers through Vercel’s Open Source Bug Bounty to secure Next.js and other open source frameworks. To participate: hackerone.com/vercel

The September Next.js security release is now available. It addresses seven vulnerabilities, including one high-severity issue. Upgrade now: ▲ ~/ npm install next@16.3.8 ▲ ~/ npm install next@15.5.27 nextjs.org/blog/septem...

The Next.js September security release is planned for September 30, 2026. It will address nine vulnerabilities, including one critical and two high-severity issues, with fixes in 16.3.7 and 15.5.27. Upgrade once they are available. nextjs.org/blog/upcomi...

The September 22 out-of-band Next.js security update is now available. It addresses a critical upstream issue affecting Next.js 16. Next.js 15 is not affected, but 15.5.26 adds hardening. ▲ ~/ npm install next@16.3.6 ▲ ~/ npm install next@15.5.26 nextjs.org/blog/nextjs...

An out-of-band Next.js security update is planned for September 22, 2026. It addresses a critical issue in an upstream dependency. Upgrade to Next.js 16.3.6 or 15.5.26 as soon as they are available. nextjs.org/blog/upcomi...

The August Next.js security release is now available one day ahead of schedule to include a fix for a newly disclosed vulnerability in an upstream dependency. ▲ ~/ npm install next@16.3.3 ▲ ~/ npm install next@15.5.24 nextjs.org/blog/august...

We’ve moved the scheduled August Next.js security release forward to today, August 25, to include a fix for an additional critical severity vulnerability. Next.js 16.3.3 and 15.5.24 will include fixes for both vulnerabilities. Upgrade once they are available. nextjs.org/blog/nextjs...

In July, we began announcing Next.js security releases ahead of time. The next security release is planned for August 26, 2026. It will address one critical severity vulnerability with fixes in 16.3.2 and 15.5.24, so upgrade once they are available. nextjs.org/blog/upcomi...

Navigations in v0 got ~3.5× faster with Next.js 16.3. An agent ran this loop on each slow nav: 1. Write a failing 𝚒𝚗𝚜𝚝𝚊𝚗𝚝() test 2. Apply a fix from the Skill 3. Re-run the test 4. Repeat 2–3 until it passes nextjs.org/blog/making...