Next.js Daily: Turbopack Security & Image Optimization
Next.js merged 20 pull requests on February 20th, focusing on Turbopack's Subresource Integrity support, a new LRU disk cache for image optimization, and improvements to the experimental instant navigation feature.
Duration: PT1M47S
Transcript
Good morning. This is Next.js Daily for February 21st, 2026.
The development team merged 20 pull requests yesterday with significant infrastructure improvements. Niklas Mischkulnig merged Turbopack support for Subresource Integrity, adding security hash validation for static assets. Steven merged a new LRU disk cache system for the Image Optimization API with a configurable `images.maximumDiskCacheSize` setting that defaults to 50% of available disk space.
Several instant navigation improvements landed. Sebastian Silbermann merged better declaration pattern handling for instant configs and improved error message display in dev tools by omitting empty error messages. Andrew Clark merged a dev tools toggle for Instant Navigation Mode, gated behind the experimental flag. The team also merged better TypeScript support by exporting the Instant config type.
Josh Story merged metadata validation improvements that now check sync IO based on a page's prefetchable status rather than generic rules. The team also cleaned up parameter handling by removing workStore threading through metadata resolution functions.
Zack Tanner reverted a popstate handler change that was causing MPA navigations during hash fragment updates. The team upgraded React from build 2ba30655 to ab18f33d, incorporating upstream changes from Facebook.
Additional work included fixes for static asset skew protection in edge runtime and prerenders, runtime prefetch byte stripping resilience for deployed environments, and better test timeout error stacks.
What's next: Turbopack continues advancing toward production readiness with security features. The instant navigation API is stabilizing with better tooling support.
That's your Next.js update for today.