CVE-2025-48985: Input Validation Bypass on AI SDKA low severity vulnerability of input validation bypass on Vercel AI SDK has been mitigated and fixedAaron Brown, Gregor Martynus
Skew Protection max age now supports the full deployment lifetimeYou can now configure skew protection max age to any value less than or equal to your deployment retention. Previously this was limited to 12 hours for Pro and 7 days for Enterprise.Steven SalatSoftware Engineer
Edge Config reads and writes now billed per unitVercel changes Edge Config Reads and Writes to granular usage based billing for increased flexibility and scalability Blake Mealey, Casey O'Keefe, and 1 other
Free Vercel BotID Deep Analysis through January 15BotID is Vercel's most advanced bot solution, and will be free for all pro and enterprise customers during the Black Friday Cyber Monday/ the holidays.Andrew Qu, Liz Hurder
Route build traffic through Static IPsYou can now choose whether build traffic, such as calls to external APIs or CMS data sources during the build process, routes through your Static IPs.Yanick Bélanger, Miroslav Simulcik, and 1 other
Redirects and rewrites now available in ObservabilityImproved observability of redirects and rewrites are now generally available under the Observability tab on Vercel's Dashboard. Redirect and rewrite request logs are now drainable to any configured Drainz0oks, Mark Knichel, and 1 other
Zero-configuration support for FastifyVercel now detects and deploys Fastify, a fast and low overhead web framework, with zero configuration.Austin Merrick, Jeff See, and 1 other
Microfrontends now generally availableMicrofrontends now generally available, enabling you to split large applications into smaller units that render as one cohesive experience for users.Mark Knichel, Kit Foster