OSS Release Recap: Bun 1.4, Next.js 16.3, Astro 7.2, and More

Frameworks

• oven-sh/bun v1.4.0 - Major feature release with community contributions across Node.js compatibility, bundler improvements, and performance; see the blog post for the full changelog.
• vercel/next.js v16.3.2 - Backport-only release fixing catch-all index page routing, Turbopack WASM loader tracing, asset-prefix chunk loading, and OIDC-based Turborepo remote cache auth replacing a static PAT. Release
• withastro/astro astro@7.2.6 - Fixes FetchState(request) failure in dev when server dependencies are optimized. Release
• withastro/astro astro@7.2.5 - Fixes Cloudflare adapter font URL rejection, session ID UUID validation, --background flag dropping, content-module stale entries, and Accept-Language quality value parsing per RFC 7231. Release
• withastro/astro @astrojs/vercel@11.0.8 - Fixes Vercel NFT file tracing silently dropping all dependency files when outDir is outside root, which caused deployed functions to crash with ERR_MODULE_NOT_FOUND. Release
• withastro/astro @astrojs/netlify@8.2.4 - Fixes Netlify Image CDN allowlist incorrectly accepting remote URLs that contain an allowed origin only in their path or query string. Release
• withastro/astro @astrojs/cloudflare@14.2.4 - Fixes dep-scanning failure when .astro frontmatter contains regex literals with quote characters. Release
• withastro/astro @astrojs/mdx@7.0.8 - Fixes build errors showing wrong file location and missing line/col info when a plugin error is wrapped by Vite. Release
• withastro/astro create-astro@5.2.4 - Pre-approves esbuild in package.json before npm install to silence npm v11+ warnings about install scripts. Release
• sveltejs/svelte svelte@5.56.10 - Broad patch: fixes CSS escape sequences, :nth-child parsing, SSR $derived double-calling, custom element async props, and effect teardown value ordering, among others. Release
• vitejs/vite create-vite@9.2.0 - Adds nub package manager support and updates ESLint-React plugin links in generated READMEs. Release

Infra

• kubernetes/kubernetes v1.36.4 - Patch maintenance release for the 1.36 line. Release
• kubernetes/kubernetes v1.35.8 - Patch maintenance release for the 1.35 line. Release
• kubernetes/kubernetes v1.34.11 - Patch maintenance release for the 1.34 line. Release

Data

• ClickHouse/ClickHouse v26.9.1.1 - New stable patch on the 26.9 line. Release
• ClickHouse/ClickHouse v26.7.5.10-stable and v26.3.21.7-lts and v25.8.32.4-lts - Maintenance patches across stable and LTS tracks. Releases

AI

• vllm-project/vllm v0.28.0 - Stable release; ARM64 build pins Cython below 3.3 to fix sdist packaging on that architecture. Release
• BerriAI/litellm v1.98.0 - Drops toolSpec.strict for Claude Sonnet 5 on Bedrock Converse, scopes file-list pagination cursors to the caller, and skips Prisma-dependent hooks when no database is attached. Release
• langchain-ai/langchain langchain-fireworks@1.6.0 - Adds service_tier support and several model-compatibility fixes. Release

Runtime

• cloudflare/workerd v1.20260825.1 - Restores WebSocket auto-response preservation (with fix after earlier revert), adds TypeScript-backed compression streams, retains async context frames across scopes, and upgrades libc++ linkage preparation. Release
• cloudflare/workerd v1.20260822.1 - Adds Pyodide 314.0.5, accepts WebAssembly.Module in the dynamic worker loader, upgrades SQLite to 3.53.4, and implements jsrpc serialization for TypeScript web streams. Release

Devtools

• neovim/neovim v0.12.5 - Stable maintenance release; now the tagged stable build. Release

This week's releases reflect two converging pressures: the edge runtime layer (workerd, Bun 1.4) is aggressively expanding Web API surface and standards conformance, while mature frameworks (Astro, Next.js, Svelte) are in a quality-consolidation mode, shipping dense batches of correctness fixes ahead of what look to be significant version bumps on the horizon.