2 posts tagged with "Next.js"

Next.js plans an out-of-band security update on Wednesday, October 14, 2026, for three vulnerabilities in upstream dependencies: two Critical and one High. Out-of-band means outside the regular release schedule. The affected versions arrive only with the update, so my call is to prepare now: list every Next.js app, name an owner, dry-run a dependency-only deploy and write the smoke test before the advisory is published.

Most build regressions get reported as "it feels slower", long after the commit that caused them. I built a small Node CLI that benchmarks next@16.1.6 builds under cold and warm cache, compares the result with a baseline, and writes JSON that CI can diff. A run is flagged when its mean build time rises past a threshold you set.