Find published research by company, product, platform or technology.
Showing 1–6 of 6 dossiers
Next.js is giving builders advance notice of a critical security patch on August 26. The affected weakness is not yet disclosed, so teams on 16.3 or 15.5 should prepare an expedited upgrade and validation path rather than wait for the advisory to land.
Next.js 16.3 separates two kinds of improvement: default Turbopack memory/build changes that existing apps can gain from an upgrade, and opt-in Cache Components/Instant Navigations that change how route shells, prefetching and blocking data are designed. Teams should evaluate those migrations independently.
Cursor is moving its cloud agents beyond manually started coding tasks. Event subscriptions can now trigger work from pull requests, Slack and schedules; agents can retain a goal across runs and delegate to isolated subagents. Cursor is also beta-testing Origin, its own code-hosting layer, tightening the loop between repository events and autonomous coding work.
Vercel KMS moves asymmetric signing into a managed service with per-environment grants, claim constraints and public JWKS endpoints, reducing secret-handling risk for apps issuing JWTs from serverless code.
Vercel KMS gives Functions OIDC-authenticated access to managed RSA, ECDSA and EdDSA signing keys. Builders can scope grants by project and environment, constrain JWT claims with JSON Schema, rotate keys centrally and publish standard OIDC/JWKS metadata for verification outside Vercel.
Vercel Agent can now investigate production issues, reason over logs and deployments, and take approved actions such as opening a PR or rolling back a deployment.