🚀 vercel/next.js - Release Notes

### Core Changes

- Ignore an existing HMR refresh hash cookie with `next start`: #77714
- Turbopack build: Replace process.env.TURBOPACK usage: #77783

### Misc Changes

- doc: onNavigate: #77647
- Update bundler production test manifest: #77764
- doc: useLinkStatus doc follow-up: #77790
- Update Turbopack development test manifest: #77766
- [ci] remove needs build-native for lint job: #77787
- test(examples): update turbopack manifest: #75092

### Credits 

Huge thanks to @gaojude, @unstubbable, @huozhi, @JamBalaya56562, and @timneutkens for helping!

### Core Changes

- [dev-overlay] remove text wrap for terminal: #76953
- Upgrade React from `63779030-20250328` to `040f8286-20250402`: #77742
- Optimize server runtime bundles: #77723
- Turbopack Build: Remove cases of process.env.TURBOPACK: #77757
- [dev-overlay] Fix unactionable `useLayoutEffect` warning if React 18 is used: #77737
- [dev-tools] Fix flashing of disabled state on indicator: #77727
- Webpack build: Add compiled in x seconds in missing places: #77751

### Misc Changes

- chore(turbo-tasks): Audit all remaining uses of `Vc` in a struct: #77756
- docs: `instrumentation-client` follow up: #77752
- [test] Get rid of unrelated "Invalid hook call" error from tests using `styled-components`: #77736
- Turbopack: keep side-effect-full imports: #76545
- Docs: Recommend inline `use server` and update examples: #77770
- Revert "Docs: Recommend inline `use server` and update examples": #77771
- doc: useLinkStatus: #77648
- Update Turbopack production test manifest: #77767
- Update bundler development test manifest: #77765
- [docs] fix lint issue in use link status doc: #77785

### Credits 

Huge thanks to @bgw, @leerob, @devjiwonchoi, @unstubbable, @timneutkens, @eps1lon, @raunofreiberg, @mischnic, @delbaoliveira, @gaojude, and @huozhi for helping!

### Core Changes

- Reapply "Turbopack: layout segment optimization for Pages" (#77339): #77696
- feat(next/image): support `new URL()` for `images.remotePatterns`: #77692

### Misc Changes

- Update bundler production test manifest: #77707

### Credits 

Huge thanks to @huozhi and @styfle for helping!

### Core Changes

- [dev-overlay] Harden types when handling hydration mismatches: #77334
- [dev-overlay] Fix ref warning when Pages Router with React 18 is used: #77726
- add support for cssmodules-pure-no-check to allow global CSS features like View Transitions: #77321
- [dev-overlay] Only warn once per invalid sourcemap: #77444
- [dynamicIO] only abort once per prerender: #77747
- Turbopack build: Move Turbopack marker to SERVER_FILES_MANIFEST: #77711

### Example Changes

- chore(examples): remove examples that can be v0'd: #77349
- Alternate bundler example: use `canary` version: #77754

### Misc Changes

- chore(turbopack): Make TaskInputs use ResolvedVc: #77700
- Getting Started Docs: Add `Metadata and OG images` page: #74077
- Getting Started Docs: Add `Upgrade` page: #77717
- Docs IA 2.0: Rename `Examples` to `Guides`: #77722
- build: Update `swc_core` to `v19.0.0`: #77669
- Add Josh to Turbopack team for created-by label: #77738
- Turbopack: use better ident for worker chunk group: #77731
- chore(turbo-tasks): Remove redundant ast-grep lint rule: #77701
- fix(docs): update error type in notFound function description: #77503
- Update bundler development test manifest: #77706
- Update Turbopack production test manifest: #77709
- Turbopack: refactor resolve_url_reference to avoid chunk_path: #77732
- Update Turbopack development test manifest: #77708
- Port "app-document" test to e2e: #77748
- [ci]: skip build-windows job for docs only change: #77743

### Credits 

Huge thanks to @bgw, @eps1lon, @delbaoliveira, @jantimon, @kdy1, @padmaia, @sokra, @Bernardoow, @gnoff, @samcx, @mischnic, @huozhi, @wbinnssmith, and @timneutkens for helping!

### Core Changes

- legacyBehavior deprecation error should only trigger once: #77687
- Pass only required props to NonIndex: #77685
- Revert "fix: make sure body can be read using `nodejs` runtime in middleware": #77690

### Misc Changes

- pack-next: use default `--js-build` as option instead of `--no-js-build`: #77686
- Turbopack: Allow overriding tsconfig path via next-config: #77563
- Scripts: migrate unpack-next to TypeScript: #77538

### Credits 

Huge thanks to @ztanner, @iamkd, @huozhi, and @wbinnssmith for helping!

### Core Changes

- Revert "Remove useSyncExternalStore from useIsDevRendering (#77651)": #77672
- Upgrade React from `313332d1-20250326` to `63779030-20250328`: #77643
- Turbopack build: Add marker for when a build used Turbopack: #77674
- feat(images): use experimental `isrFlushToDisk` option to prevent writing optimized images to cache: #70645
- doc: instrumentation-client: #77649
- Alternate bundler: use equivalent native plugins for built-in plugins: #77355
- Resolve Viewport separately from Metadata: #77427
- fix(turbopack): Suppress logging for short no-op turbopack HMRs: #76924
- Turbopack build: Fix node-file-trace test: #77641
- Turbopack build: Implement error when using next start without --turbopack: #77678

### Misc Changes

- Turbopack: add tracing for fetch calls: #77673
- [test] Update stale snapshots: #77680
- Turbopack: fix bug in handling of module batches: #77638

### Credits 

Huge thanks to @acdlite, @sokra, @eps1lon, @timneutkens, @isBatak, @gaojude, @wbinnssmith, @gnoff, and @bgw for helping!

### Core Changes

- Turbopack build: Fix urlencoding test: #77622
- [og] fix vercel og build issue on windows: #77650
- [Segment Cache] Add "client-only" option: #77655
- Remove useSyncExternalStore from useIsDevRendering: #77651
- Track navigation timestamp on CacheNode: #77251
- Upgrade @playwright/test and cleanup internal APIs: #77659
- Refactor: move `"use cache"` revalidation logic out of incremental cache: #77577
- Remove obsolete update of implicit tags expiration after server action: #77595

### Misc Changes

- Update pnpm swc-build-native's file path: #77623
- fix: Use standard PostCSS configuration in create-next-app format for ecosystem compatibility: #77376
- Turbopack build: Fix basepath test: #77630
- Turbopack: disable pages dir css test cases: #77380
- Update bundler development test manifest: #77627
- Update Turbopack development test manifest: #77628
- Update bundler production test manifest: #77626
- refactor(turbo-tasks): Make TraceRawVcs a supertrait of TaskInput: #77397
- refactor(turbo-tasks): Make TraceRawVcs a supertrait of MagicAny: #77596
- fix(turbopack): Recognize urls starting with // as external: #77526
- Update CI build caching docs to include `bun` and other package manager: #77633
- fix(turbopack): Fix panic while tree shaking optimization: #77492
- fix(turbopack): Prevent duplicate in tree shaking: #77491
- Turbopack: Skip ssr processing when next/dynamic ssr: false: #77636
- Turbopack Build: CSR bailout test skip check for file path: #77639
- Turbopack: fix side effects optimization bug: #77640

### Credits 

Huge thanks to @wbinnssmith, @timneutkens, @kasperpeulen, @sokra, @bgw, @Cy-Tek, @huozhi, @acdlite, @dvoytenko, @husseinraoouf, @kdy1, and @unstubbable for helping!

### Core Changes

- Turbopack build: fix deterministic build test: #77618

### Misc Changes

- Turbopack build: Fix symbolic-file-links test: #77615

### Credits 

Huge thanks to @timneutkens for helping!

### Core Changes

- Do not call `expireTags`/`getExpiration` unnecessarily: #77570
- fix(jest): stricter regex for 'server-only' in default config: #77588
- Fix: RESTORE_ACTION should not be thenable: #77582
- Use `NEXT_PRIVATE_DEBUG_CACHE` env variable for cache handler debug logs: #77585
- fix: make sure body can be read using `nodejs` runtime in middleware: #77553
- Update alternate bundler and pass more tests : #77579
- Refactor build scripts and rewrite pack-next in TypeScript: #77536
- fix isCsrfOriginAllowed handling for localhost: #77594

### Misc Changes

- Update mappings in `launch.json` to improve debugging in VSCode: #76559
- chore(ci): Configure codspeed: #76884
- Update bundler production test manifest: #77602
- Update bundler development test manifest: #77603
- Update Turbopack development test manifest: #77605
- Update Turbopack production test manifest: #77604

### Credits 

Huge thanks to @unstubbable, @sbougerel, @gaojude, @kevva, @ahabhgk, @wbinnssmith, @kdy1, and @ztanner for helping!

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Lock swc binaries version

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Lock swc binaries version

### Core Changes

- Upgrade React from `740a4f7a-20250325` to `313332d1-20250326`: #77527

### Misc Changes

- fix(turbopack): Use strongly consistent reads for sourcemaps in napi FFI boundary: #77511

### Credits 

Huge thanks to @bgw for helping!

### Core Changes

- [dynamicIO] Avoid memory leak warning for hanging promises: #77480
- [dev-overlay] Remove "Unhandled Runtime Error" label: #77484
- Upgrade React from `db7dfe05-20250319` to `740a4f7a-20250325`: #77507

### Misc Changes

- docs: fix typo: #77483
- Update `swc_core` to `v16.10.0`: #77489

### Credits 

Huge thanks to @leerob, @gnoff, @kdy1, and @eps1lon for helping!

### Core Changes

- Turbopack: Add --turbopack for next start: #77442
- Update README: #77464
- Remove unnecessary indirections around dispatch-related methods: #77423
- Lift public router instance to module level : #77426
- directly import param resolver in metadata: #77401
- [metadata] always serve streaming metadata in build: #77437
- directly import search param resolver in metadata: #77402
- Remove forwardRef from Link in App Router: #77471
- Match subrequest handling for edge and node: #77474
- Add deprecation warning for legacyBehavior prop: #77473
- feat: useLinkStatus: #77300

### Misc Changes

- fix(turbopack-bench): Limit `copy_dir` concurrency to avoid running out of file descriptors: #77468

### Credits 

Huge thanks to @timneutkens, @jackwilson323, @acdlite, @gnoff, @huozhi, @ijjk, @bgw, and @gaojude for helping!

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Match subrequest handling for edge and node (#77474)
- exclude images and static media from dev origin check (#77417)
- ensure /__next middleware URLs are included in the origin check (#77416)
- remove direct ip/port bypass in dev origin check (#77414)
- switch development origin verification to be opt-in rather than opt-out (#77395)

### Credits

Huge thanks to @ijjk and @ztanner for helping!

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Match subrequest handling for edge and node (#77476)

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Match subrequest handling for edge and node 

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.

### Core Changes

- Match subrequest handling for edge and node
- Update publish-native

### Core Changes

- remove direct ip/port bypass in dev origin check: #77414
- ensure /__next middleware URLs are included in the origin check: #77416
- exclude images and static media from dev origin check: #77417
- Refactor metadata and viewport preloading: #77400
- [dev-overlay] Remove unused fields from unhandled error action event: #77333

### Misc Changes

- docs: clarify middleware use cases: #77438

### Credits 

Huge thanks to @ztanner, @leerob, @gnoff, and @eps1lon for helping!

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.
> This release contains a security patch for [CVE-2025-29927](https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw).

### Core Changes

- [backport] middleware subrequest patch (#77424)

### Core Changes

- switch development origin verification to be opt-in rather than opt-out: #77395

### Credits 

Huge thanks to @ztanner for helping!

> [!NOTE]  
> This release is backporting bug fixes. It does **not** include all pending features/changes on canary.
> This release contains a security patch for [CVE-2025-29927](https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw).

### Core Changes

- [backport] middleware subrequest patch (#77418)

### Core Changes

- Turbopack: implement optimized css production chunking: #77284
- only log when instrumentation client takes too long: #77378

### Misc Changes

- Update Turbopack production test manifest: #77366
- Update Turbopack development test manifest: #77365
- Turbopack: ignore static asset imports for Edge: #77382
- Update bundler development test manifest: #77364

### Credits 

Huge thanks to @sokra, @mischnic, and @gaojude for helping!

### Core Changes

- clean up useReducer code re dev indicator: #77354
- test: ensure that router identity stays stable when navigating: #77356
- [dev-overlay] Remove unused fields from hydration error state: #77332

### Credits 

Huge thanks to @gaojude, @lubieowoce, and @eps1lon for helping!

### Core Changes

- [dev-overlay] Make footer sticky without side effects: #77327
- Alternate bundler: show state in app info message: #77259
- Revert "Turbopack: layout segment optimization for Pages": #77339
- [metadata] add Yeti to html limited bots: #77335
- [dev-overlay] Remove unused code from pages: #77325
- [metadata] remove dead code of metadata routes handling: #77336
- Alternate bundler: pass more tests and update to 1.3.0-beta: #77269
- [metadata] fix the metadata route like pages and refactor utils: #77264
- fix: absolute assetPrefix url with path: #77256

### Misc Changes

- fix(CI build_and_deploy): Use a larger fetch-depth for build-native job: #77307
- chore(turbopack): Fix a few syntactic nits: #77310
- Update bundler development test manifest: #77315
- Turbopack: refactor CssEmbed to avoid creating a chunk item: #77303
- fix: Update `swc_core` and use `rayon` instead of `chili`: #77338
- Fix chakra link: #77280

### Credits 

Huge thanks to @raunofreiberg, @bgw, @wbinnssmith, @huozhi, @sokra, @eps1lon, @kdy1, @ahabhgk, @Amirroid, and @Netail for helping!

### Core Changes

- Upgrade React from `c69a5fc5-20250318` to `db7dfe05-20250319`: #77295
- Turbopack: layout segment optimization for Pages: #74815

### Misc Changes

- Update Turbopack production test manifest: #77316
- Update Turbopack development test manifest: #77317
- Update bundler production test manifest: #77314
- fix(turbopack): Call `.minify()` of lightningcss `StyleSheet`: #77313

### Credits 

Huge thanks to @kdy1 and @mischnic for helping!

### Core Changes

- Upgrade React from `5398b711-20250314` to `c69a5fc5-20250318`: #77249
- [ppr] Handle failed resume data cache entries: #77258
- Bypass `"use cache"` caches when Draft Mode is enabled: #77141
- chore(HMR clients): Clean up tryApplyUpdates, reduce differences between app/pages versions: #77219

### Misc Changes

- devlow-bench: wait for complete ready for server startup event: #77217
- fix(CI): Re-enable retries for bundler integration tests: #77265
- Turbopack: handle non chunkable modules in module batches: #77282
- Update Turbopack development test manifest: #77276
- Update Turbopack production test manifest: #77275
- Turbopack: avoid single css chunks when there is only a single chunk item: #77283
- Update bundler development test manifest: #77272
- Update bundler production test manifest: #77273
- Turbopack: compute ordered entries in module batches: #77294

### Credits 

Huge thanks to @wbinnssmith, @bgw, @sokra, @wyattjoh, and @unstubbable for helping!

### Core Changes

- chore(HMR clients): Fix a bunch of typescript errors by including the appropriate webpack type declarations: #77207
- Update cache handler interface: #76687
- Turbopack: don't include AMP optimizer in NFT: #77242
- Server actions should not read stale data after calling `revalidate*`: #76885
- [dev-overlay] Blur fader for scrollable container: #77196
- Make `revalidate*` work when followed by a redirect in a route handler: #77090
- feat: onNavigate for link: #77209
- fix: pass telemetry plugin rspack tests: #77257
- feat(eslint-plugin): add minimal built-in flat presets: #73873
- [perf] skip loading client manifest for static metadata routes: #77260

### Misc Changes

- fix(test/e2e/prerender): Remove race condition in test: #77222
- Update Turbopack production test manifest: #77228
- Update Turbopack development test manifest: #77227
- [Turbopack] basic production chunking for CSS: #75049
- docs: optimizing local dev: #77140
- Update bundler production test manifest: #77225

### Credits 

Huge thanks to @bgw, @sokra, @unstubbable, @leerob, @mischnic, @raunofreiberg, @gaojude, @ScriptedAlchemy, @SukkaW, and @huozhi for helping!

### Core Changes

- chore(react-dev-overlay): Remove confusingly underscored variables in `useErrorOverlayReducer`: #77205
- Update middleware request header: #77201
- Update default allowed origins list: #77212
- Ensure deploymentId is used for CSS preloads: #77210

### Example Changes

- with-polyfills example: only link to specific browsers: #77211
- Add example for alternate bundler: #77057

### Misc Changes

- Turbopack: more tracing: #75351
- Update bundler development test manifest: #77180
- Better failure tracking for middleware-custom-matchers-i18n: #76974
- Update bundler production test manifest: #77179

### Credits 

Huge thanks to @mischnic, @bgw, @ijjk, and @wbinnssmith for helping!