Industry News

The Flags SDK adapter for OpenFeature allows using any Node.js OpenFeature provider with the Flags SDK. Pick from a wide range of flag providers, while benefiting from the Flag SDK's tight integration into Next.js and SvelteKit. OpenFeature is an open specification that provides a vendor-agnostic, community-driven API for feature flagging that works with your favorite feature flag management tool or in-house solution. OpenFeature exposes various providers through a unified API. The Flags SDK sits between your application and the source of your flags, helping you follow best practices and keep your website fast. Use the Flags SDK OpenFeature adapter in your application to load feature flags from all compatible Node.js OpenFeature...

The AI SDK is an open-source toolkit for building AI applications with JavaScript and TypeScript. Its unified provider API allows you to use any language model and enables powerful UI integrations into leading web frameworks such as Next.js and Svelte. Read more Continue reading...

A security vulnerability in Next.js was responsibly disclosed, which allows malicious actors to bypass authorization in Middleware when targeting the x-middleware-subrequest header. Vercel customers are not affected. We still recommend updating to the patched versions. Learn more about CVE-2025-29927. Read more Continue reading...

The Vercel Firewall now supports using an OR operator to link condition groups within a custom WAF rule. Previously, customers could only use an AND operator to join condition groups. This update now supports AND or OR , allowing customers to create more complex WAF actions. Learn more about the Vercel Firewall or navigate to your Firewall tab to customize rules. Read more Continue reading...

Vercel Observability now includes an overview page that provides a high-level view of your application's performance. This new dashboard aggregates key metrics from Edge Requests, Fast Data Transfer, and Vercel Functions, giving you instant insights into request and data transfer volumes, as well as function performance. Each metric also serves as a starting point for deeper analysis, with one-click access to their dedicated dashboards for more detailed insights. Try it in your Observability dashboard. Read more Continue reading...

We've increased Image Optimization included usage for Hobby teams: Image Transformations: from 3K to 5K per month Image Cache Reads: from 180K to 300K per month Image Cache Writes: from 60K to 100K per month Learn more about Image Optimization pricing and its recent recent price reduction. Read more Continue reading...

Personalization works best when it’s intentional. Rushing into it without the right approach can lead to higher costs, slower performance, and poor user experience. The key is to implement incrementally, with the right tools, while maintaining performance. When personalization is implemented effectively, it drives real business results, returning $20 for every $1 spent and driving 40% more revenue. Let's look at what personalization is, how to implement it correctly, and why Next.js and Vercel achieve optimal outcomes. Read more Continue reading...

Metrics on the Usage dashboard now offer one-click access to corresponding Vercel Observability dashboards, making it easier to dive deeper into team and project usage. This new linking is available today for: Vercel Functions Edge Network Image Optimization Incremental Static Regeneration Builds (when viewing per project) Try it from your Usage dashboard and learn more about Vercel Observability. Read more Continue reading...

Vercel now supports glob patterns (like testing-*) in the git.deploymentEnabled field, giving you more control over branch deployments. Previously, you could disable deployments for specific branches by explicitly naming them. Now, you can use patterns to match multiple branches at once. For example, the configuration below prevents deployments on Vercel if the branch begins with internal-. Learn more about Git configuration. Read more Continue reading...

Middleware support for the Node.js runtime is now available, providing full Node.js support for authentication, personalization, and more—using familiar APIs. Middleware continues to be deployed globally on Vercel, regardless of the runtime used. We are first releasing support for Node.js Middleware in Next.js 15.2. This experimental feature requires the Next.js canary channel. Upgrade to next@canary and enable the nodejs experimental flag in your config to use it: You must also specify the Node.js runtime in your middleware file: Deploy now with Next.js 15.2. Read more Continue reading...

External rewrites between projects within the same team now use Fast Data Transfer only for the destination request. This change makes Fast Data Transfer for the original request free. Commonly used as a reverse proxy or for microfrontend architectures, rewrites can be configured in vercel.json, middleware, or next.config.ts to route requests between the same or separate Vercel projects without changing the URL shown to the user. Usage for external rewrites to the same team: Fast Data Transfer for the original and destination request have been optimized and consolidated into a single stream, reducing overall transfer. Each external rewrite triggers a full request lifecycle, including routing and Web Application Firewall checks...

The Vercel Marketplace now has an Experimentation category to allow developers to work with feature flagging and experimentation providers in Vercel projects. Statsig—a modern feature management, experimentation, and analytics platform—is now available as a first-party integration in this new category, so users can: Connect Statsig with your Vercel projects directly from the Vercel Marketplace Leverage integrated billing through Vercel Sync your Statsig experiments into Edge Config for ultra-low latency Manage and roll out features progressively, run A/B tests, and track real-time results Additionally, you can use the Flags SDK to load experiments and flags from Statsig using the newly released @flags-sdk/statsig...

The Vercel Firewall dashboard now displays enriched IP address data, including the autonomous system (AS) name, AS number (ASN), and geolocation on hover. This information helps identify the origin of an attack, determine the owner of an IP address, and create targeted custom rules to block malicious traffic. Learn more about the Vercel Firewall. Read more Continue reading...

Vercel now supports pnpm v10. New projects with a pnpm-lock.yaml file with lockfileVersion: '9.0' will automatically use pnpm v10 for Install and Build Commands. Existing projects will continue to use pnpm v9 for backwards compatibility, since pnpm v9 also uses lockfileVersion: '9.0'. Check your build logs to see which version a deployment uses. If you'd like to manually upgrade or downgrade your version, use Corepack. Visit the package managers documentation to learn more. Read more Continue reading...

System bypass rules allow Pro and Enterprise customers to configure firewall rules to skip Vercel system mitigations, including DDoS protection, for specific IPs and CIDR ranges. Although we strongly recommend against disabling protections, customers—particularly ones that deploy a proxy in front of Vercel—may experience traffic issues that can be mitigated by deploying system bypass rules. Improvements to the system bypass rules give customers additional control over how the rules are deployed, including: Expanded support beyond production domains to preview domains Added support for single domain rules for preview deployment URLs and aliases Expanded project-scoped bypass rules to include all domains connected to a project...

Sitecore—a leading digital experience platform—wanted to create a transformative AI tool that would help marketers connect more deeply with their brand assets, driving both consistency and creativity. Using the AI SDK, they lunched Sitecore Stream—a dynamic, AI-powered brand assistant that empowers marketers to interact with their brand content in visually interactive and conversational way. Read more Continue reading...

Fluid compute is Vercel’s next-generation compute model designed to handle modern workloads with real-time scaling, cost efficiency, and minimal overhead. Traditional serverless architectures optimize for fast execution, but struggle with requests that spend significant time waiting on external models or APIs, leading to wasted compute. To address these inefficiencies, Fluid compute dynamically adjusts to traffic demands, reusing existing resources before provisioning new ones. At the center of Fluid is Vercel Functions router, which orchestrates function execution to minimize cold starts, maximize concurrency, and optimize resource usage. It dynamically routes invocations to pre-warmed or active instances, ensuring low-latency...

We’ve updated our list of supported Top-Level Domains (TLDs) registrations, adding new options and removing select ones as we refine our domain offerings. Newly supported TLD registrations We now support 66 additional TLDs, including: - Generic domains (e.g. .page, .food, and .hosting) - Professional domains like (e.g. .lawyer, .phd, and .inc) - Lifestyle domains (e.g. .beauty, .living, and .lifestyle) - Interest-based domains (e.g. .guitars, .yachts, and .watches) TLD registrations no longer supported We have removed registration support for select TLDs, including: - Various country-code TLDs (ccTLDs, e.g. .at, .lu, .ma) - Regional TLDs (e.g. .berlin, .wales, .istanbul) - Multiple compound TLDs (e.g. .com.co, .org.pl, .co.nz)...

Every second, Vercel blocks attacks before they reach your applications—keeping businesses online and developers focused on shipping, not security incidents. Vercel’s security capabilities combine real-time DDoS mitigation, a powerful Web Application Firewall (WAF), and seamless SIEM integrations to provide always-on protection without added complexity. Here’s what happened in the last quarter. Read more Continue reading...

We’ve expanded the Edge Request dashboard in Vercel Observability to show additional request data by: User agent IP address JA4 Referrer Hostname Available on all plans, these insights help you monitor traffic patterns and identify potential threats, which you can address using Vercel Firewall. Route-level data is available to Observability Plus customers. View your Edge Request dashboard and learn more about Vercel Observability. Read more Continue reading...