--- title: "Changelog | Netlify" description: "Stay updated with the latest features, fixes, and improvements. Realize the speed, agility and performance of a scalable, composable web architecture with Netlify. Explore the composable web platform now!" source: "https://www.netlify.com/changelog/page/10/" last_updated: "2026-08-05T11:41:15.000Z" --- # Changelog All Tags Agent-runners AI Ai-gateway Angular Astro AX Build CLI Database Design Devtools Domains E-commerce Extensions Forms Framework Functions Logs Next.js Nuxt.js Remix SDK Security Updates Workflow [Subscribe to feed](https://www.netlify.com/changelog/feed.xml) - [ ## Security Update: Multiple vulnerabilities in SvelteKit ](/changelog/2026-01-15-sveltekit-security-vulnerabilities/) January 15, 2026 - [security](/changelog/tag/security/) - [framework](/changelog/tag/framework/) The Svelte team has disclosed [five CVEs affecting the Svelte and SvelteKit ecosystem](https://svelte.dev/blog/cves-affecting-the-svelte-ecosystem). Here’s what Netlify customers need to know. ## Vulnerabilities - [**CVE-2026-22775**](https://www.cve.org/CVERecord?id=CVE-2026-22775): Memory/CPU exhaustion in `devalue` (5.1.0–5.6.1) - [**CVE-2026-22774**](https://www.cve.org/CVERecord?id=CVE-2026-22774): Memory exhaustion in `devalue` (5.3.0–5.6.1) - [**CVE-2026-22803**](https://www.cve.org/CVERecord?id=CVE-2026-22803): Server crash in `@sveltejs/kit` (2.49.0–2.49.4) - [**CVE-2025-67647**](https://www.cve.org/CVERecord?id=CVE-2025-67647): Server crash and SSRF in `@sveltejs/kit` (2.44.0–2.49.4) and `@sveltejs/adapter-node` (2.19.0–2.49.4) - [**CVE-2025-15265**](https://www.cve.org/CVERecord?id=CVE-2025-15265): XSS in `svelte` (5.46.0–5.46.3) ## Impact on Netlify ### CVE-2026-22775, CVE-2026-22774, and CVE-2026-22803 These are server-side denial-of-service (DoS) vulnerabilities. **On Netlify, these have minimal impact**: our autoscaling serverless architecture means that a malicious request resulting in a crashed or hung function does not affect other requests. However, active exploitation could increase your function costs. In addition, note that only sites using the experimental [Remote Functions](https://svelte.dev/docs/kit/remote-functions) feature are affected. ### CVE-2025-67647 As above, this DoS vulnerability involves intentionally “crashing” a server. **On Netlify, this has minimal impact.** The SSRF vulnerability affects a `@sveltejs/adapter-node`, which is not used by apps deployed to Netlify. ### CVE-2025-15265 This is a client-side cross-site scripting (XSS) vulnerability. **Regardless of hosting provider, all apps using the experimental `hydratable` with unsanitized user-controlled keys are vulnerable**. ## What should I do? Although the impact to Netlify sites is limited in this case, we always strongly recommend upgrading as soon as possible to patched releases: - `devalue` 5.6.2 or later - `@sveltejs/kit` 2.49.5 or later - `@sveltejs/adapter-node` 5.5.1 or later - `svelte` 5.46.4 or later ## Resources - [Svelte team disclosure](https://svelte.dev/blog/cves-affecting-the-svelte-ecosystem) [Permalink to Security Update: Multiple vulnerabilities in SvelteKit Permalink](/changelog/2026-01-15-sveltekit-security-vulnerabilities/) - [ ## GPT-5.2-Codex Now Available in AI Gateway and Agent Runners ](/changelog/gpt-5-2-codex-ai-gateway/) January 14, 2026 - [ai gateway](/changelog/tag/ai-gateway/) - [agent runners](/changelog/tag/agent-runners/) OpenAI’s GPT-5.2-Codex model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically. Here’s an example using the GPT-5.2-Codex model: ``` import OpenAI from 'openai'; export default async () => { const openai = new OpenAI(); const response = await openai.responses.create({ model: 'gpt-5.2-codex', input: 'How does AI work?' }); return new Response(JSON.stringify(response), { headers: { 'Content-Type': 'application/json' } });}; ``` GPT-5.2-Codex is available across Background Functions, Scheduled Functions, and Agent Runners. You get automatic access to Netlify’s caching, rate limiting, and authentication infrastructure. Learn more in the [AI Gateway documentation](https://docs.netlify.com/build/ai-gateway/overview/) and [Agent Runners documentation](https://docs.netlify.com/build/build-with-ai/agent-runners/overview/). [Permalink to GPT-5.2-Codex Now Available in AI Gateway and Agent Runners Permalink](/changelog/gpt-5-2-codex-ai-gateway/) - [ ## Prerender.io support available as new extension ](/changelog/2026-01-08-prerenderio-support-updates/) January 8, 2026 - [extensions](/changelog/tag/extensions/) The third-party Prerender.io service for advanced prerendering is now available as an extension for all Netlify customers. Previously, you needed a Netlify Pro plan or higher to set up Prerender.io with Netlify’s legacy in-app prerendering feature. Prerender.io offers advanced configuration options and the Prerender.io dashboard. Learn more about the [Prerender.io extension](https://app.netlify.com/extensions/prerenderio) from the extension details page. If you previously set up Prerender.io using Netlify’s legacy in-app prerendering feature, you need to update your configuration to continue using it this year. [Learn more](#configuration-updates-required-for-existing-users) about your next steps and how to check if you need to update your configuration. To check if your project still needs prerendering, see our [prerendering needs checker](https://docs.netlify.com/build/post-processing/prerendering/#check-prerendering-needs) documentation. ## Configuration updates required for existing users If you have a Netlify Pro plan and you set up the Prerender.io service with Netlify’s legacy prerendering feature (most likely before January 6, 2026), you’ll need to update your configuration to continue using it this year. To check if your project is using Netlify’s legacy in-app prerendering feature, go to **Project configuration > Build & deploy > Post processing > Prerendering** from your Netlify project dashboard to see if the legacy prerendering feature is enabled. Updates are required because Prerender.io no longer relies on Netlify’s legacy in-app prerendering feature, which is being deprecated and will stop working later this year. Follow our [migration steps](https://answers.netlify.com/t/legacy-prerendering-migration-guide/158938) to update your configuration before these key dates: Date Impacted plans February 17, 2026 The feature will be disabled for customers on Personal or Pro plans (legacy or credit-based) March 17, 2026 The feature will be disabled for Enterprise and all other specialized plans. Learn more about this migration process in this [migration post](https://answers.netlify.com/t/legacy-prerendering-migration-guide/158938). You can also reach out to [Netlify Support](https://www.netlify.com/support/) for help. [Permalink to Prerender.io support available as new extension Permalink](/changelog/2026-01-08-prerenderio-support-updates/) - [ ## Play Games While Agent Runners Do the Work ](/changelog/2026-01-08-agent-runner-games/) January 8, 2026 - [agent runners](/changelog/tag/agent-runners/) While Agent Runners take care of tasks on your site, you can now play games right in the UI. We’ve brought the same beloved build-time games to the Agent Runner page, so you can flip tiles, plan snake, install other games, or even create your own while your agent runs in the background. A little delight, now everywhere you wait. ![Play a game while you wait modal showing a Match the Pairs game on the Agent Runner page](/images/changelog/netlify-agent-runners-games.webp) Learn more about the [Netlify Entertainment System](https://www.netlify.com/blog/netlify-entertainment-system/). [Permalink to Play Games While Agent Runners Do the Work Permalink](/changelog/2026-01-08-agent-runner-games/) - [ ## Gemini 3 Flash Preview now available in AI Gateway ](/changelog/gemini-3-flash-preview-ai-gateway/) December 17, 2025 - [ai gateway](/changelog/tag/ai-gateway/) Google’s Gemini 3 Flash Preview is now available through AI Gateway. You can call this model from Netlify Functions without configuring API keys; the AI Gateway provides the connection to Google for you. Example usage in a Function: ``` import { GoogleGenAI } from '@google/genai'; export default async (request: Request, context: Context) => { const ai = new GoogleGenAI({}); const response = await ai.models.generateContent({ model: 'gemini-3-flash-preview', contents: 'How does AI work?' }); return new Response(JSON.stringify({ answer: response.text }), { headers: { 'Content-Type': 'application/json' } });}; ``` This model works across any function type and is compatible with other Netlify primitives such as caching and rate limiting, giving you control over request behavior across your site. See the [AI Gateway documentation](https://docs.netlify.com/build/ai-gateway/overview/) for details. [Permalink to Gemini 3 Flash Preview now available in AI Gateway Permalink](/changelog/gemini-3-flash-preview-ai-gateway/) - [ ## GPT-image-1.5 now available in AI Gateway ](/changelog/gpt-image-1-5-ai-gateway/) December 17, 2025 - [ai gateway](/changelog/tag/ai-gateway/) OpenAI’s GPT-image-1.5 is now available through AI Gateway. You can call this model from Netlify Functions without configuring API keys; the AI Gateway provides the connection to OpenAI for you. Example usage in a Function: ``` import OpenAI from 'openai';const ai = new OpenAI(); export default async (req, context) => { const response = await ai.images.generate({ model: 'gpt-image-1.5', prompt: 'Generate a realistic image of a golden retriever working in an office', n: 1, size: '1024x1024', quality: 'low', output_format: 'jpeg', output_compression: 80 }); const imageBase64 = response.data[0].b64_json; const imageBuffer = Uint8Array.from(atob(imageBase64), c => c.charCodeAt(0)); return new Response(imageBuffer, { status: 200, headers: { 'content-type': 'image/jpeg', 'cache-control': 'no-store' } });} ``` This model works across any function type and is compatible with other Netlify primitives such as caching and rate limiting, giving you control over request behavior across your site. See the [AI Gateway documentation](https://docs.netlify.com/build/ai-gateway/overview/) for details. [Permalink to GPT-image-1.5 now available in AI Gateway Permalink](/changelog/gpt-image-1-5-ai-gateway/) - [ ## AI Gateway now Generally Available ](/changelog/2025-12-16-ai-gateway-ga/) December 16, 2025 - [ai gateway](/changelog/tag/ai-gateway/) - [ai](/changelog/tag/ai/) [AI Gateway](https://docs.netlify.com/build/ai-gateway/overview/) is now generally available (GA) for all Netlify users. Build AI-powered apps with confidence using our fully managed gateway that handles AI model keys, setup, and monitoring automatically. For a deeper dive into AI Gateway capabilities, check out our [latest blog post](https://www.netlify.com/blog/ai-gateway-is-now-generally-available/). For a video overview of how the AI Gateway works with a fun demo project, check out our [AI Gateway gameshow demo](https://www.youtube.com/watch?v=9CqxH7IFbds). For other AI Gateway example projects, check out these videos: - [AI agent generates blog post images](https://www.youtube.com/watch?v=R7J-pSkdh0o) - [AI agent summarizes form submissions](https://www.youtube.com/watch?v=Fe33sf-pHm8) Learn more in our [AI Gateway documentation](https://docs.netlify.com/build/ai-gateway/overview/). ## Availability To use AI Gateway, you must have a Credit-based plan or an enabled Enterprise plan. Learn more about [pricing for AI features](https://docs.netlify.com/manage/accounts-and-billing/billing/billing-for-credit-based-plans/pricing-for-ai-features/#pricing-for-ai-gateway) and [monitoring their usage](https://docs.netlify.com/manage/accounts-and-billing/billing/billing-for-credit-based-plans/monitor-usage-for-credit-based-plans/#ai-inference-usage). To request access to the AI Gateway for an Enterprise plan, reach out to your Netlify account manager. [Permalink to AI Gateway now Generally Available Permalink](/changelog/2025-12-16-ai-gateway-ga/) - [ ## Observability is here ](/changelog/2025-12-16-observability/) December 16, 2025 - [logs](/changelog/tag/logs/) - [functions](/changelog/tag/functions/) Netlify Observability offers real-time visibility into your project’s production performance and resource usage. Monitor requests, bandwidth, runtime behavior, functions, and Edge Functions to understand how your web project operates in production, fix errors, and optimize web performance. Get a deep feature tour from our [Observability blog post](https://www.netlify.com/blog/introducing-observability-stop-guessing-what-s-happening/). ## Try Observability From your project overview, select **Logs & metrics** > **Observability**. To expand details for a request, select a request. ![Observability dashboard](/images/changelog/observability-dashboard.png) ## Availability Observability is available for Credit-based plans and Enterprise plans. If you have a Legacy pricing plan, you can get a sneak peek at your observability data by checking out the widget from your Project Overview. ![Observability widget on project overview showing past hour of request data](/images/changelog/observability-widget-past-hour.png) Credit-based plan Time filter available Free Past 24 hours Personal Past 7 days Pro Past 30 days Enterprise plan Time filter available Any opted-in Enterprise plan Past 30 days Note that if you have a Credit-based plan or have Observability enabled for an Enterprise plan, then Function Metrics will no longer be available to you as it is replaced by Observability. If you do not have Observability, then Function Metrics will continue to be available to you. Learn more in our [Function metrics](https://docs.netlify.com/manage/monitoring/function-metrics/) docs. ## Other monitoring updates As part of monitoring updates, we have also updated the names of some of our monitoring features. Old name New name Real User Metrics Real User Monitoring Project analytics (formerly site analytics) Web analytics ## Further info To learn more, check out [Observability docs](https://docs.netlify.com/manage/monitoring/observability/overview). [Permalink to Observability is here Permalink](/changelog/2025-12-16-observability/) - [ ## New Prerender extension ](/changelog/2025-12-16-prerender-extension-ga/) December 16, 2025 - [extensions](/changelog/tag/extensions/) The [Prerender extension](https://docs.netlify.com/build/post-processing/prerendering/#prerender-extension) is now generally available (GA) for all Netlify users. The legacy prerendering feature is now deprecated with [limited support](#deprecating-the-legacy-prerendering-feature). Once set up, this extension automatically serves pre-rendered HTML to crawlers, agents, and preview services, while regular site visitors continue to receive your standard JavaScript application. Prerendering ensures your app’s content is discoverable to AI agents, SEO crawlers, and preview services, such as for social media previews. Prerendering is designed for apps that use JavaScript to generate page content instead of serving most or all content in HTML, such as for single-page applications (SPAs) built with frameworks like React, Vue, or Angular. For a deeper dive on prerendering and the new extension, check out our [latest blog post](https://www.netlify.com/blog/prerendering-an-old-trick-new-again/). ## Does my project need prerendering? Not sure if your web project needs prerendering? Find out using our [prerendering checker tool](https://do-you-need-prerender.netlify.app/) and your project URL. ## Set up the Prerender extension To try out the Prerender extension, install it from the [Netlify extensions library](https://app.netlify.com/extensions/prerender). If you have the legacy prerendering feature enabled, disable it in your site’s settings. Learn more about setting up this extension from our [Prerender extension documentation](https://docs.netlify.com/build/post-processing/prerendering/). ## Deprecating the legacy prerendering feature The legacy built-in prerendering feature is now deprecated and will gradually shut down and stop working. Here is the deprecation timeline: Date Impacted plans January 20, 2026 The feature will be disabled for customers on Free plans (either legacy or credit-based) or the legacy Starter plan. February 17, 2026 The feature will be disabled for customers on the Personal plan or the Pro plans (legacy or credit-based) March 17, 2026 The feature will be disabled for Enterprise and all other specialized plans. Note: Some customers on paid plans have a customized setup in which the legacy feature acted as a [proxy to external prerendering vendors](https://docs.netlify.com/build/post-processing/prerendering/#external-services). Please reach out to [Netlify Support](https://www.netlify.com/support/) for help on your next options. [Permalink to New Prerender extension Permalink](/changelog/2025-12-16-prerender-extension-ga/) [Previous page](/changelog/page/9) [Next page](/changelog/page/11)