RepoJournal
Vercel

@vercel

Next.js + the Vercel platform — frontend infrastructure for the web

Pick a date

  1. Thu 11 jun
  2. Fri 12 jun
  3. Sat 13 jun
  4. Sun 14 jun
  5. Mon 15 jun
  6. Tue 16 jun
  7. Wed 17 jun
  8. Thu 18 jun
  9. Fri 19 jun
  10. Sat 27 jun
  11. Sun 28 jun
  12. Mon 29 jun
  13. Tue 30 jun
  14. Wed 1 jul
  15. Thu 2 jul
  16. Fri 3 jul
  17. Sat 4 jul
  18. Sun 5 jul
  19. Mon 6 jul
  20. Tue 7 jul
  21. Wed 8 jul
  22. Thu 9 jul
  23. Fri 10 jul
  24. Sat 11 jul
  25. Mon 13 jul
  26. Tue 14 jul
  27. Wed 15 jul
  28. Thu 16 jul
  29. Fri 17 jul
  30. Today 18 jul
Topics: JavaScript Full archive →

The Wire · Showcase

EVE SHIPS HITL FIXES AND EXTENSION DISTRIBUTIONS; NEXT.JS TURBOPACK OPTIMIZES SSR

By RepoJournal · Filed · About Vercel

ctgowrie Lars Grammel ruiconti AndrewBarba allenzhou101 quuu sampoder
16 people shipped this
ctgowrie @ctgowrie 3 cited Lars Grammel @lgrammel 2 cited ruiconti @ruiconti 1 cited AndrewBarba @AndrewBarba 1 cited allenzhou101 @allenzhou101 1 cited quuu @quuu 1 cited sampoder @sampoder 1 cited acdlite @acdlite 1 cited Samarth Chitgopekar @http-samc Jude Gao @gaojude Sebastian "Sebbie" Silbermann @eps1lon marcoshernanz @marcoshernanz mitul-s @mitul-s VaguelySerious @VaguelySerious NathanColosimo @NathanColosimo Aayush Kapoor @aayush-kapoor

Eve fixed a critical bug where user approval controls submitted after request resolution were misdirected to newer pending requests, and shipped source-backed extension distributions that let packages publish agent-shaped JavaScript without turning Eve's internals into a public ABI.

The Eve team landed five major fixes and features overnight that ship the framework's extension model forward [1][2][3]. Most critical: a HITL state bug that treated pending user responses as a single boolean now matches submitted responses to their original request batch by ID, preventing late approvals from hijacking unrelated requests [1]. Extension dependencies now resolve correctly in dev mode by pulling from the package's real location instead of the registry store layout [2]. Eve also published source-backed extension distributions [3], letting packages declare separate source and dist roots without coupling Eve's internal compiled definitions to a public ABI. Tool validation unified under one Eve-owned ToolSchema boundary [4], and workspace extensions now hot reload during dev with source file watching [5]. Over in the Vercel monorepo, Connect bumped its Eve test dependency from 0.6.0-beta.1 to 0.24.3 [6], and Passport got a new `verifyIdentity` helper for server-to-server token verification [7]. Next.js Turbopack shipped an optimization that skips SSR for pages only navigated to through soft navigation [8], and the Nav Inspector now correctly handles back/forward cache navigation as pending state rather than captured navigation [9]. The AI SDK fixed UI message chunk schemas across all 28 variants to accept newer optional fields without breaking older cached clients [10], and tightened cancellation handling in `generateText` to prevent partial results when multi-step tool loops abort [11].

Action items

References

  1. [1] fix(eve): deliver stale HITL responses as follow-ups ↗ vercel/eve
  2. [2] fix(eve): resolve source-backed extension dependencies from the package's real location ↗ vercel/eve
  3. [3] feat(eve): add source-backed extension distributions ↗ vercel/eve
  4. [4] fix(eve): tool validation - unify schemas on one eve-owned ToolSchema boundary ↗ vercel/eve
  5. [5] feat(eve): hot reload workspace extensions ↗ vercel/eve
  6. [6] [connect] Update Eve test dependency ↗ vercel/vercel
  7. [7] [passport] add verifyIdentity helper ↗ vercel/vercel
  8. [8] [turbopack] Don't SSR on pages only navigated to through a soft nav ↗ vercel/next.js
  9. [9] Back/forward set the Nav Inspector back to pending ↗ vercel/next.js
  10. [10] fix: prevent newer fields on known UI message chunks from breaking older clients (#17010) vercel/ai
  11. [11] fix: prevent generateText from returning partial results after cancellation in multi-step tool loops (#17461) vercel/ai

Quick answers

What shipped in Vercel on July 18, 2026?
Eve fixed a critical bug where user approval controls submitted after request resolution were misdirected to newer pending requests, and shipped source-backed extension distributions that let packages publish agent-shaped JavaScript without turning Eve's internals into a public ABI. In total, 43 commits, 45 pull requests, and 13 releases landed.
Who contributed to Vercel on July 18, 2026?
16 developers shipped this update, including ruiconti, ctgowrie, AndrewBarba, Samarth Chitgopekar, allenzhou101, quuu, sampoder, and acdlite, and 8 more.
What were the notable Vercel updates?
fix(eve): deliver stale HITL responses as follow-ups, fix(eve): resolve source-backed extension dependencies from the package's real location, and feat(eve): add source-backed extension distributions.

More from @vercel

Vercel @vercel

AI SDK 6 BREAKING CHANGE SURFACES WHILE TURBOPACK INLINES RUNTIME BOOTSTRAPPING

AI SDK 6's removal of the `name` parameter from function tool definitions is now documented after breaking upgraders, while Next.js Turbopack merges runtime optimization PRs that eliminate per-route overhead.

Lars Grammel Nick Oates Walter Korman Greg Schofield +9
javascript 120 shipped 2-min read
Vercel @vercel

VERCEL CLI HARDENS TEAM SCOPING WHILE AI SDK SHIPS OPENAI COMPUTER USE

A critical security fix closes a domain mutation vulnerability that could route team-scoped operations to the wrong account, while the AI SDK gains OpenAI's computer-use tool and Mistral voice support in the same cycle.

Mukund Sarma Greg Schofield chriswdmr Melkeydev +12
javascript 168 shipped 2-min read
Vercel @vercel

WORKFLOW SHIPS OPTIMISTIC CONCURRENCY GUARD, CHAT ADAPTERS FIX AUTH AND STREAMING

Workflow's replay-context event creation now guards against stale snapshots with a precondition check, while Google Chat and Teams adapters close critical auth and streaming gaps.

VaguelySerious NathanColosimo karthikscale3 mdnanocom +12
javascript 107 shipped 2-min read
Vercel @vercel

NEXT.JS TURBOPACK CSS CHUNKING CUTS LOAD TIMES, CLI GOES NATIVE

Next.js shipped a measurable performance win for CSS module ordering while the Vercel CLI prepares its first native binary layer, and AI SDK closes critical URL validation gaps across provider responses.

lukesandberg sokra eps1lon icyJoseph +9
javascript 140 shipped 2-min read

Daily updates, in your inbox

Follow Vercel

Next.js + the Vercel platform — frontend infrastructure for the web We'll email you a link to confirm first.

Free. Confirm via email. Unsubscribe in one click.

— or follow the whole beat:

Elsewhere on the wire

CachyOS @cachyos

PACKAGE UPDATES ROLL ACROSS AUR DERIVED AND PROTON CACHYOS

Claude Desktop jumped to 1.22209.0, Zen Browser patched to 1.21.8b, and documentation fixes landed across the stack overnight.

Pete Viri Piotr Gorski Matias Peter Jung +2
infra 43 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ELIXIR CUTS EXPONENTIAL GROWTH IN BDD INTERSECTIONS, PHOENIX LIVE VIEW SKIPS CLONES ON STABLE LISTS

The compiler just got smarter about preventing exponential blowup in type intersection logic, while Phoenix Live View stops wastefully copying keyed comprehensions that aren't moving.

José Valim Alexander Gubarev preciz SteffenDE
elixir 16 shipped 1-min read
.NET @dotnet

ASPNETCORE TIGHTENS AUTHORIZATION METADATA EVERYWHERE, BLAZOR DEBUGGING EXITS

Authorization policies now work consistently across all routing paths, not just endpoint middleware, while Blazor templates drop their deprecated WebAssembly debugging hook.

Javier Calvarro Nelson Copilot MayaKirova ilonatommy +4
dotnet 58 shipped 2-min read
Spring @spring-projects

SPRING FRAMEWORK TIGHTENS RESOURCE SECURITY, NEO4J FIXES CONVERSION LOGIC

Spring Framework reinstated critical resource location validation checks that prevent unauthorized static resource resolution in sensitive directories.

dependabot Brian Clozel ilgrosso
java 4 shipped 1-min read