OSS Releases Week of Aug 4 2026: Next.js, LiteLLM, Vite and More

Frameworks

• vercel/next.js v16.3.0 patches CVE-2025-13465 via a vendored lodash update, fixes invalid HTML for route-level RSC requests, and renames /_next/webpack-hmr to /_next/hmr. ⚠ Breaking: The HMR endpoint rename will break any hardcoded references to /_next/webpack-hmr in proxies or monitoring configs. Turbopack gains importModule() support for webpack loaders and server HMR for app route handlers. Release

• vitejs/vite v8.2.0 ships new features tracked in the project changelog. Release

• withastro/astro astro@7.1.6 fixes concurrent static builds failing to generate i18n rewrite fallbacks, resolves stale dev CSS after editing component style blocks, and adds configurable chunk sizes for experimental.collectionStorage. Release

• withastro/astro @astrojs/cloudflare@14.1.7 fixes a bug where chunked collection storage failed to load in Cloudflare deployments. Release

Infra

• grafana/grafana v13.0.5 is a stable patch release. Release

• hashicorp/terraform v1.17.0-alpha20260729 (alpha) enriches init log messages with provider versions and fixes panics in pow and log functions when results are not a number. Experimental deferred actions and a new test cleanup command are also included but remain alpha-only. Release

Data

• ClickHouse/ClickHouse v26.7.2.59-stable and v26.5.6.113-stable are stable maintenance drops with no published changelogs. 26.7 Release

• supabase/supabase self-hosted/v0.7.1 adds update.sh to support in-place self-hosted upgrades without manual file replacement. Release

AI

• openai/openai-python v2.53.0 adds gpt-5.5 and tool name/namespace fields to Responses types. v2.52.0 introduced content provenance checks and correct Retry-After handling up to two minutes. v2.51.0 added a fast inference tier. v2.50.0 updated transcription models. v2.53.0 Release

• BerriAI/litellm v1.95.0 tracks prompt-compression token savings in daily spend aggregates and routes native Anthropic /messages calls through a new Rust backend, enabled via LITELLM_RUST env var. Earlier v1.94.0 added a working Test Connection UI for the complexity auto-router. v1.95.0 Release

• langchain-ai/langchain langchain-core==1.5.3 adds LANGSMITH_API_KEY support for gateway integrations. Release

Devtools

• microsoft/vscode 1.131.0 is the July 2026 stable release with details documented at the VS Code update page. Release

Runtime

• vercel/turborepo v2.10.8 adds mouse-wheel scrolling to the TUI task list, makes releases resumable, and consolidates package graph traversal under a new authoritative package knowledge layer. v2.10.7 fixed pnpm root and aliased dependency preservation during prune and added support for multiple macOS file watch roots. v2.10.8 Release

• cloudflare/workerd shipped daily builds from v1.20260729.1 through v1.20260804.1 with no individual changelogs published beyond diff links. Latest Release

The dominant theme this week is AI infrastructure maturity: the OpenAI SDK is expanding model coverage faster than ever, and LiteLLM is betting on Rust for performance-critical routing paths. On the framework side, Next.js 16.3 signals that security hardening and Turbopack stabilization are now moving in lockstep.