Who contributed to Vercel on May 28, 2026?

5 developers shipped this update, including luismeyer, TooTallNate, Melkeydev, jeffsee55, and dancer.

What were the notable Vercel updates?

[oidc] add edge-light export, [node] support useWebApi in static config, and [CLI] adding version and auto update fixes.

@vercel

Next.js + the Vercel platform - frontend infrastructure for the web

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

EDGE RUNTIME OIDC NOW WORKS, NODE.JS GETS WEB API FLEXIBILITY

By RepoJournal · Filed 06:00 UTC on May 28, 2026 · About Vercel

5 people shipped this

dancer @dancer 3 cited

luismeyer @luismeyer 1 cited

TooTallNate @TooTallNate 1 cited

Melkeydev @Melkeydev 1 cited

jeffsee55 @jeffsee55 1 cited

Vercel shipped the fixes that unblock edge functions authenticating with OIDC tokens and let Node.js developers opt into the Web API handler pattern without middleware overhead.

The edge runtime's OIDC implementation was broken because it tried to use the browser export, which resolves tokens to empty strings [1]. A new edge-light export with split sync and refresh modules fixes this and unblocks the entire serverless OIDC story. Separately, Node.js Serverless Functions now support opting into the Web API handler interface (Request → Response) via a static config export, giving developers the flexibility to write modern handler code without forcing it on middleware [2]. The CLI got native build fixes too: the native installer no longer prompts for updates, version flags now show (native) in human output, and standalone prebuilt deploys in pnpm/Turborepo monorepos stop failing on external symlinks [3][4]. Over in the AI stack, Vercel standardized on onEnd over onFinish for lifecycle callbacks across generateText, streamText, agents, and workflows [5], while Gemini 3 now auto-injects the skip_thought_signature_validator sentinel for replayed tool calls that lost their signature [6]. OpenAI's Responses API forwarding expanded to include web_search_call.action.queries [8], and telemetry moved from experimental to stable in v7 [7]. The Chat adapter ecosystem grew fast: low-level Slack helpers ship for custom runtimes that own their own routing [9][11], and Twilio got its first-class SMS, MMS, and voice adapter with runtime-light subpaths [10].

Action items

→ Deploy edge functions with OIDC authentication - this was broken until now vercel/vercel [immediate]
→ Review Web API handler adoption for Node.js functions - useWebApi config is now stable vercel/vercel [plan]
→ Update onFinish to onEnd in AI SDK implementations before v7 goes stable vercel/ai [plan]
→ Upgrade ncc if you support Node.js 24+; Node.js 20 is now unsupported vercel/ncc [monitor]

References

[1] [oidc] add edge-light export ↗ vercel/vercel
[2] [node] support useWebApi in static config ↗ vercel/vercel
[3] [CLI] adding version and auto update fixes ↗ vercel/vercel
[4] fix(cli): skip external symlinks in standalone prebuilt deploys (PIPE-6621) ↗ vercel/vercel
[5] fix: rename onFinish to onEnd (#15245) vercel/ai
[6] fix(google): auto-inject skip_thought_signature_validator on Gemini 3 replays (#15560) vercel/ai
[7] docs: remove experimental telemetry warning (#15611) vercel/ai
[8] feat(openai): forward web_search_call.action.queries from Responses API (#15656) vercel/ai
[9] feat(slack): add low-level interaction helpers ↗ vercel/chat
[10] feat(twilio): add sms, mms, and voice helpers ↗ vercel/chat
[11] docs(slack): document low-level api subpaths ↗ vercel/chat

Quick answers

What shipped in Vercel on May 28, 2026?: Vercel shipped the fixes that unblock edge functions authenticating with OIDC tokens and let Node.js developers opt into the Web API handler pattern without middleware overhead. In total, 78 commits, 64 pull requests, and 20 releases landed.
Who contributed to Vercel on May 28, 2026?: 5 developers shipped this update, including luismeyer, TooTallNate, Melkeydev, jeffsee55, and dancer.
What were the notable Vercel updates?: [oidc] add edge-light export, [node] support useWebApi in static config, and [CLI] adding version and auto update fixes.

NEXT.JS OPTIMIZES APP ROUTING ENTRY POINTS WHILE WORKFLOW CUTS STREAM LATENCY 20 PERCENT

Next.js extracted invariant app-page handlers into shared runtime modules while Workflow's stream write batching moves into core, eliminating per-token round trips on idle producers.

+11

javascript 126 shipped 2-min read

@vercel 1 day ago

TWO CRITICAL SECURITY PATCHES LAND IN WORKFLOW AND EVE OVERNIGHT

Next 16.2.11 and PostCSS 8.5.12 patches ship across workflow to seal CVE vulnerabilities, while Eve locks down workflow failure visibility.

javascript 153 shipped 1-min read

@vercel 2 days ago

WORKFLOW 5.0 BETA ARRIVES WITH HOOK TOKEN RETENTION, AI SDK FIXES GEMINI AND BEDROCK HALLUCINATIONS

Workflow shipped its most ambitious beta yet with experimental token retention, while the AI SDK shipped five critical fixes across Gemini, Bedrock, and dynamic tool validation in a single push.

javascript 132 shipped 2-min read

@vercel 3 days ago

NEXT.JS PATCHES FIVE SECURITY HOLES OVERNIGHT WHILE VERCEL CLI GAINS AI GATEWAY BUDGET CONTROLS

Five security advisories dropped across Next.js in the last 24 hours, ranging from origin validation on internal redirects to fetch cache key collisions that could leak cached responses between requests.

+12

javascript 145 shipped 2-min read

Elsewhere on the wire

AI Agents about 10 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 10 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.