Next.js Daily: Cache Optimization and Security Updates
Next.js merged 19 pull requests on January 28th, featuring significant improvements to LRU caching for minimal mode, security limits for server actions, and multiple Turbopack backports.
Duration: PT1M50S
Transcript
Good morning, this is Next.js Daily for January 28th, 2026.
The team merged 19 pull requests yesterday with substantial performance and security improvements.
Zack Tanner merged two major caching updates. The first implements LRU cache with invocation ID scoping for minimal mode response cache, adding over 1,700 lines of code across 11 files. A follow-up PR tweaks the LRU sentinel cache key to correctly handle TTL-mode entries.
Hendrik Liebau merged a security fix limiting server action arguments to 1,000, preventing stack overflow errors from malicious payloads. The change adds proper error handling and test coverage.
Multiple Turbopack improvements landed through backports by mischnic. These include NFT tracing fixes addressing issues 84155 and 85323, support for pattern exports fields, CSS validation performance improvements, and an upgrade to SWC version 54.
Tobias Koppers contributed Turbopack optimizations for SST files, allowing variable hash lengths and avoiding storage waste for short keys. He also improved import type handling through the condition system.
Brooke Mosby merged prebuilt skew protection features, adding automatic deployment ID configuration with validation and routes manifest integration.
Sebastian Silbermann improved CI workflows by making GitHub auth status optional during release triggers and enabling pnpm dependency caching for e2e deploy tests.
Documentation updates include fixes to code highlighting in the data fetching guide and a new public static pages guide.
What's next: Watch for additional caching optimizations and continued Turbopack performance improvements as the team focuses on build speed enhancements.
That's your Next.js update for today. We'll be back tomorrow with the latest developments.