Who contributed to Vercel on May 25, 2026?

1 developer shipped this update, including anthonyshew.

What were the notable Vercel updates?

fix: Preserve pnpm injected peer package entries, feat: Add heap allocation profiling, and fix: Use build-scale OTel duration buckets.

@vercel

Next.js + the Vercel platform - frontend infrastructure for the web

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

TURBOREPO FIXES PNPM LOCKFILE BREAKAGE, ADDS HEAP PROFILING

By RepoJournal · Filed 06:00 UTC on May 25, 2026 · About Vercel

1 person shipped this

anthonyshew @anthonyshew 3 cited

Turborepo 2.9 now preserves pnpm injected peer dependencies during prune operations, fixing a critical lockfile corruption bug that broke frozen installs in Docker builds.

The pnpm fix [1] addresses a silent failure where turbo prune would drop base package entries needed to resolve peer-variant snapshot keys, leaving pruned lockfiles unable to install with --frozen-lockfile. This one's especially dangerous because it only surfaces at deploy time. In parallel, heap allocation profiling [2] shipped opt-in DHAT support to the Rust CLI, giving you a repeatable way to find and validate memory hotspots without custom instrumentation. The profiler outputs raw JSON plus ranked summaries by bytes and allocation count. On the observability front, OTel duration histograms got Turborepo-specific bucket boundaries [3] that actually cover real build durations instead of maxing out at 10 seconds, making P50/P95 queries and Grafana heatmaps usable again.

Action items

→ Upgrade turborepo to 2.9.15+ before next Docker build if using pnpm with workspace dependencies vercel/turborepo [immediate]
→ Test heap profiling with --heap flag on your next optimization pass vercel/turborepo [plan]
→ Monitor OTel duration metrics for improved observability across your CI pipelines vercel/turborepo [monitor]

References

[1] fix: Preserve pnpm injected peer package entries ↗ vercel/turborepo
[2] feat: Add heap allocation profiling ↗ vercel/turborepo
[3] fix: Use build-scale OTel duration buckets ↗ vercel/turborepo

Quick answers

What shipped in Vercel on May 25, 2026?: Turborepo 2.9 now preserves pnpm injected peer dependencies during prune operations, fixing a critical lockfile corruption bug that broke frozen installs in Docker builds. In total, 4 commits and 4 pull requests landed.
Who contributed to Vercel on May 25, 2026?: 1 developer shipped this update, including anthonyshew.
What were the notable Vercel updates?: fix: Preserve pnpm injected peer package entries, feat: Add heap allocation profiling, and fix: Use build-scale OTel duration buckets.

NEXT.JS OPTIMIZES APP ROUTING ENTRY POINTS WHILE WORKFLOW CUTS STREAM LATENCY 20 PERCENT

Next.js extracted invariant app-page handlers into shared runtime modules while Workflow's stream write batching moves into core, eliminating per-token round trips on idle producers.

+11

javascript 126 shipped 2-min read

@vercel 1 day ago

TWO CRITICAL SECURITY PATCHES LAND IN WORKFLOW AND EVE OVERNIGHT

Next 16.2.11 and PostCSS 8.5.12 patches ship across workflow to seal CVE vulnerabilities, while Eve locks down workflow failure visibility.

javascript 153 shipped 1-min read

@vercel 2 days ago

WORKFLOW 5.0 BETA ARRIVES WITH HOOK TOKEN RETENTION, AI SDK FIXES GEMINI AND BEDROCK HALLUCINATIONS

Workflow shipped its most ambitious beta yet with experimental token retention, while the AI SDK shipped five critical fixes across Gemini, Bedrock, and dynamic tool validation in a single push.

javascript 132 shipped 2-min read

@vercel 3 days ago

NEXT.JS PATCHES FIVE SECURITY HOLES OVERNIGHT WHILE VERCEL CLI GAINS AI GATEWAY BUDGET CONTROLS

Five security advisories dropped across Next.js in the last 24 hours, ranging from origin validation on internal redirects to fetch cache key collisions that could leak cached responses between requests.

+12

javascript 145 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.