Weekly OSS Releases: Nuxt Security Patch, vLLM 0.26, Terraform 1.16 Beta

Frameworks

• nuxt/nuxt, v3.21.10 and v4.5.1 -- ⚠ Breaking: Both are emergency security releases fixing server-side RCE via server island props, a route rule authorization bypass, server component DoS, and dev server path disclosure; v4.5.1 additionally fixes cross-user payload disclosure on cached pages. Upgrade immediately with npx nuxt upgrade --dedupe and purge any CDN or edge cache if you use cache, swr, or isr route rules. v3.21.10 / v4.5.1
• withastro/astro, astro@7.1.4 -- Fixes duplicate CSS files in mixed prerender/SSR builds, restores scoped styles inside client:only islands, adds the missing background prop type to <Image /> and <Picture />, and stops session errors from being silently swallowed. Release
• withastro/astro, @astrojs/markdoc@2.0.5 -- Fixes custom transform functions being dropped when a tag specifies a custom render component, including tags with bracket-notation names like side-note. Release
• withastro/astro, @astrojs/cloudflare@14.1.5 -- Fixes a bug where cache: { enabled: false } in wrangler config was silently overridden to true. Release
• vercel/next.js, v15.5.22 -- Adds an actionable error when TypeScript 7.0 or later is detected, since it is not yet supported. Release
• sveltejs/svelte, svelte@5.56.8 -- Fixes onerror callback behavior during hydration of a failed boundary and preserves <select> value when spread attributes omit the value key. Release

Infra

• hashicorp/terraform, v1.16.0-beta1 -- Adds a store block on terraform_data for ephemeral and sensitive values across plan and apply, supports import blocks inside modules, introduces on_failure modes for resource action triggers, and ships a Linux s390x binary. Release
• kubernetes/kubernetes, v1.36.3, v1.35.7, v1.34.10 -- Patch releases across three supported minor versions; see the per-version changelogs for bug details. v1.36.3

Data

• ClickHouse/ClickHouse, v26.7.1.1315-stable -- First stable of the 26.7 series. Release
• prisma/prisma, 7.9.1 -- Patch resolving a security advisory in a transitive dependency of Prisma CLI; no direct code impact but recommended to avoid false positives in security scanners. Release

AI

• vllm-project/vllm, v0.26.0 -- Major release from 212 contributors: adds the Inkling model family with full LoRA and speculative decoding support, ships a specialized DeepSeek-V4 routing kernel for 2.94% TPOT improvement, enables per-KV-cache-group attention backend selection, and matures KV offloading with object-store secondary tiers. Release
• anthropics/anthropic-sdk-typescript, sdk-v0.115.0 -- Adds the claude-opus-5 model, tool addition/removal blocks, tool_change events, and server-side fallback credit token options. Release
• openai/openai-python, v2.49.0 -- ⚠ Breaking: Drops support for Python versions below 3.10 and automates future version reviews. Release
• openai/openai-python, v2.48.0 -- Adds spend limit admin APIs and accepts None for prompt_cache_key and safety_identifier. Release

Runtime

• denoland/deno, v2.9.4 -- Upgrades V8 to 150.2.0, enables --hmr for React Router desktop apps, adds raw ChaCha20 cipher support in Node.js crypto compatibility, and implements worker_threads.locks via Web Locks. Release

Devtools

• neovim/neovim, v0.13.0-dev-1141 -- Nightly prerelease continuing the 0.13 development cycle with ongoing fixes and features tracked in :help news. Release

The week's most urgent signal is the Nuxt double security release covering RCE and authorization vulnerabilities, a reminder that server-rendering frameworks carry a larger attack surface than static builds. Alongside that, the maturation of vLLM's KV offloading and Terraform's ephemeral state primitives points to a broader industry shift toward treating memory and state management as first-class infrastructure concerns.