115 wires and counting

$ follow Vercel

Keep up with Vercel in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-05
stories 91

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

httpx2 migration revived, workflow payloads encrypted in vercel-py

By RepoJournal · Filed · About Vercel

vercel-py is porting to httpx2 and encrypting workflow payload writes, while chat fixes its stalled release pipeline and a CSS sourcemap bug lands in Turbopack.

vercel-py revived its migration to httpx2 [1], which stalled because respx does not support httpx2 yet. The fix vendors respx 0.23.1 and search-and-replaces it to httpx2, avoiding runtime monkeypatching or typing stubs. Separately, workflow payload writes are now encrypted and external hook resumes are sealed to the run's public key [2]; streamed data is not encrypted yet. The change also publishes a synthetic workflowCoreVersion, which the JS SDK uses (improperly) for capability detection.

The chat release pipeline has failed on every run since Sep 3 [3], so no package version has been published since then. The cause is a dependency mismatch from a Dependabot bump: the Changesets GitHub Action went from v1.9.0 to v2.1.1 but @changesets/cli stayed on v2. The fix restores releasing. chat also added button tooltips and a card width hint [4]; Teams renders them, and every other adapter leaves the card unchanged.

In next.js, Turbopack CSS sourcemaps always used index 0 for all source file references [5], producing misleading mappings when CSS comes from multiple sources. The fix corrects the source field. On the runtime side, dynamic access tracking was incomplete in final runtime prerenders [6]; the fix from #95665 only fired dynamicAccessAbortSignal during the prospective prerender, not the final one, so cache-key encoding missed dynamic accesses. The new change tracks them in both phases.

Quick answers

What shipped in Vercel on September 5, 2026?
vercel-py is porting to httpx2 and encrypting workflow payload writes, while chat fixes its stalled release pipeline and a CSS sourcemap bug lands in Turbopack. In total, 39 commits, 40 pull requests, and 12 releases landed.
Who contributed to Vercel on September 5, 2026?
11 developers shipped this update, including elprans, fantix, Mohammed Mansoor Ahmed, Hiroki Osame, Camden Amata, Xanaado, icyJoseph, and lubieowoce, and 3 more.
What were the notable Vercel updates?
Port to httpx2, workflow: write encrypted payloads, and ci: fix release pipeline for changesets action v2 (#902).