Next.js: Cache Security and Turbopack Performance

Next.js merged 14 pull requests on May 5th, addressing cache security vulnerabilities, fixing URL encoding bugs, and optimizing Turbopack performance. Key changes include deployment ID inclusion in cache handlers and CI workflow improvements.

Duration: PT1M57S

Episode overview

This episode is a short developer briefing from Next.js.

It explains recent repository work in plain language.

  • Show: Next.js
  • Published: 2026-05-05T00:00:00Z
  • Audio duration: PT1M57S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, this is your Next.js development briefing for May 5th, 2026.

The team merged several critical fixes today. gnoff merged a cache security update, backporting deployment ID inclusion in cache handlers to prevent cache key collisions between different deployments. This addresses a vulnerability where development builds always used the same cache key.

unstubbable resolved a double-encoding bug in URL pathname parsing that was causing cache misses and unnecessary server requests when navigating to routes with encoded characters like slashes. A separate fix addressed dev mode reload errors during back navigation between Next.js pages by implementing per-document…

On the Turbopack front, mischnic fixed a regression causing "ReferenceError: foo is not defined" errors for imports behind member expressions. lukesandberg optimized Turbopack futures, reducing memory usage by up to 99% for synchronous tasks by moving expensive operations out of per-task futures.

eps1lon led several CI infrastructure improvements, migrating multiple workflows away from deprecated authentication tokens and implementing signed commit utilities for automated updates. The React sync, font data, and…

Additi…

Nearby episodes from Next.js

  1. Optimistic Routing and Performance Improvements
  2. Cache System Overhaul and Turbopack Improvements
  3. React 19 Upgrade and Turbopack Performance Gains
  4. Cache Fixes and Performance Wins
  5. Core Infrastructure Updates and React Upgrade
  6. Weekly Recap - Error Handling & Runtime Evolution
  7. Weekly Recap - Turbo Engine & Developer Experience Upgrades
  8. Signed Commit Requirements Added