chore(deps): update dependency vercel to v54#3886
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
6af7e3c to
dfdf9da
Compare
dfdf9da to
28433f5
Compare
28433f5 to
6de8e59
Compare
6de8e59 to
5032281
Compare
5032281 to
ba27cd3
Compare
ba27cd3 to
785bbd1
Compare
785bbd1 to
d8def02
Compare
d8def02 to
e2fb959
Compare
e2fb959 to
606611e
Compare
606611e to
48b6759
Compare
48b6759 to
efbb544
Compare
efbb544 to
2e01ee1
Compare
2e01ee1 to
930382b
Compare
930382b to
2a7309f
Compare
84ff597 to
531e634
Compare
531e634 to
9768c8b
Compare
9768c8b to
f652f03
Compare
f652f03 to
6fe914d
Compare
6fe914d to
765894f
Compare
765894f to
a449f5d
Compare
a449f5d to
681807e
Compare
681807e to
3669e80
Compare
3669e80 to
8bfc30d
Compare
8bfc30d to
6c80bc4
Compare
6c80bc4 to
5c6c9c5
Compare
5c6c9c5 to
eba3e48
Compare
eba3e48 to
713ee04
Compare
713ee04 to
eb69eb2
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
51.8.0→54.17.3Release Notes
vercel/vercel (vercel)
v54.17.3Compare Source
Patch Changes
f76b357: Improvevercel domains add: skip project/deployment configuration guidance when no project is provided, return a specific error explaining only apex domains can be added without a project, treat a domain already assigned to the requested project as a success instead of failing with an "assigned to another project" error, and point users tovercel domains verify <domain>for DNS configuration instead of printing hardcoded DNS records.4b90a10]34b2c4c]v54.17.2Compare Source
Patch Changes
6eb572e: Addvercel edge-config backupsfor listing, inspecting, and restoring Edge Config backups.Examples:
vercel edge-config backups my-storevercel edge-config backups my-store --backup-version <backup-version-id> --format jsonvercel edge-config backups my-store --restore <backup-version-id> --yes7cecf55: Make hand-written service-targeted route/rewritedestinationconfig less repetitive and verbose by making thetypediscriminator optional.{ "rewrites": [{ - "type": "service", "service": "my_backend", "path": "/api/$1" }] }The explicit
{ "type": "service", "service": NAME }format continues tovalidate. Normalized route output continues to include
"type": "service", somachine-facing config remains canonical.
5d37c78: Handle deployments containing very large files without crashing. Files larger than Node'sfs.readFilelimit (~2 GiB) are now hashed and uploaded by streaming instead of being read into a single Buffer (which threwERR_FS_FILE_TOO_LARGE— "File size ... is greater than 2 GiB"), and the CLI upload progress no longer assumes every file is held in memory. When a file still exceeds the server's per-request upload limit (HTTP 413), the CLI now suggests--archive=tgz, which uploads the deployment in smaller chunks.v54.17.1Compare Source
Patch Changes
2f85145: Expose ordering controls, returned ordering metadata, and a--prodshortcut for metrics queries, and update Speed Insights metric examples.aeb8bf1:vc buildnow writesexperimentalServicesV2services into the Build Output APIconfig.jsonservicesarray (previously onlyexperimentalServiceswere included), so V2 services are recorded on the deployment.d538795]v54.17.0Compare Source
Minor Changes
222d43b: Fix websocket upgrade events for services V2.Patch Changes
96e9513: Addvercel deploy --dryto inspect the detected framework preset and local deployment file set without uploading or creating a deployment, with complete JSON output for non-TTY consumers.801b8e2: [vc dev] Remove the trailing slash from service binding URL env vars injected byvercel dev.82bda7d: Fix the deploy size-limit warning so it prints the skipped file and plan upgrade link instead of crashing.3f0488d: Surface theaction/link(and newerctaLabel/ctaUrl) fields onrepo_links_exceeded_limiterrors fromvercel git connectinstead of dropping them, so users hitting the projects-per-repository limit see the relevant next step and URL.8dc4702: Fixvercel devfor standalone Node servers, including projects without apackage.json, and reuse the server process between requests.09743c6]03fbb1c]8dc4702]v54.16.0Compare Source
Minor Changes
9fb2976: Addservicesas the canonical multi-service project configuration and keepexperimentalServicesV2as a deprecated backwards-compatible alias.260b0be: Support the VQS idempotency key header in the local development server.Patch Changes
6a43bf2: Adding 2 additional headers to Vercel API calls186014d: Fixvc deverroring with "Project framework is set to 'services', but noservices are declared" for
experimentalServicesV2(services) projects. Whenthe dev server already has resolved services, it now skips zero-config builder
detection and lets the services orchestrator build and run them. Previously
detectBuildersran with the remoteframework: "services"setting but noservice config threaded in, which failed even though detection had succeeded.
186014d: Add an experimental container service runtime. A service withruntime: "container"either builds itsDockerfile/Containerfileand pushesthe resulting OCI image to the Vercel Container Registry (VCR), or passes a
prebuilt image reference through as build output.
@vercel/container(new builder): authenticates to VCR with the project'sVERCEL_OIDC_TOKEN, ensures the repository exists, builds and pushes theimage, and emits a digest-pinned reference in
handler(container functionsare
type: "Lambda"withruntime: "container"; the platform surfaceshandleras the image downstream). Usesdockeron developer machines andbuildah(daemonless) in the Vercel build container behind a sharedContainerEngineinterface. Supportsvc devviastartDevServer(localbuild/run, env parity, log forwarding) and
prepareCachefor buildah layerreuse between builds. Build flow is instrumented with tracing spans
(non-secret diagnostics) and debug logging gated on
BUILDER_DEBUG.@vercel/build-utils: add theContainerImagebuild-output type.@vercel/fs-detectors: resolve container services fromvercel.json(the
servicesconfig and its deprecatedexperimentalServices/experimentalServicesV2aliases). ADockerfile,Containerfile, or*.dockerfileentrypoint triggers a build; any other entrypoint is treated asa prebuilt OCI image reference.
vercel: wire container output intovercel buildresult writing andconfig validation.
Buildah specifics in the build container: host networking for
RUNsteps,native
overlaystorage on the XFS/vercelvolume (deferring to the image'sstorage.conf), zstd push compression, and registry credentials read from theprovisioned auth file when present. Several knobs are available for debugging:
VERCEL_CONTAINER_ENGINE,VERCEL_VCR_STRICT_STORAGE,VERCEL_VCR_DISABLE_LAYER_CACHE, andVERCEL_VCR_FORCE_LOGIN.007af8f: Deduplicate the team billing settings URL into a sharedgetTeamBillingUrlhelper.edb7256: [vc dev] Apply routetransformsundervercel dev.1c5d3b3: Fixed scope resolution for Northstar accounts whose username collides with the slug of their default team.vc whoamishowing "Active team: my-user") while requests were sent with noteamId, silently scoping to the resource-less personal account. This caused commands likevc projects lsto report "No projects found" even though the team has projects.--scope <name>now resolves against the user's teams before falling back to personal-account handling. A team whose slug matches the user's username (e.g. a Northstar default team) can now be selected by name instead of being rejected with "You cannot set your Personal Account as the scope."ded2d92: RefreshVERCEL_OIDC_TOKENaftervercel linkwithout overwriting othervariables or formatting in an existing
.env.localfile.Updated dependencies [
fdb6121]Updated dependencies [
9fb2976]Updated dependencies [
186014d]Updated dependencies [
186014d]Updated dependencies [
186014d]Updated dependencies [
e6759d0]Updated dependencies [
68ed45c]Updated dependencies [
cb0988f]v54.15.1Compare Source
Patch Changes
b14be80:vercel inspectnow supports Vercel dashboard URLs and deployment IDs without prefixes.2158ab6: [vc dev] Add support toexperimentalServicesV2for bindings invc dev2158ab6]v54.15.0Compare Source
Minor Changes
8dec9ea: Add deploy-manifest as an extension of project manifest.d99dbf8: Addvercel domains verify <domain>for DNS misconfiguration feedback. The command checks the domain's DNS configuration, reports dashboard-aligned configuration and project-verification states, triggers a verification re-check when needed, and lists actionable fixes: recommended A/CNAME records, Vercel nameservers, conflicting records, DNSSEC guidance, and the TXT ownership challenge. Domains eligible for automatic configuration also receive a Domain Connect URL, with manual DNS guidance as a fallback. Supports--project,--strict, and--format json; non-interactive runs emit structured status, simultaneous issue details, automatic-configuration metadata, and shell-safe, context-preserving next commands. Human and structured output share one diagnosis so status, remediation, and exit behavior stay consistent. The command exits non-zero when action is required so scripts and agents can gate on it.a5245fd: Addvercel flags segmentscommands for listing, inspecting, creating, updating, and deleting feature flag segments.Examples:
Patch Changes
970b82b: Fix Windows standalone binary builds with the custom Node.js 24 small-ICU runtime and a compatible Windows toolchain.c4afec8: [routing-utils] supportrequest.pathtransforms on routes and high-level rewrites, lowering path-to-regexp parameters such as/:path*to low-level capture references such as/$1[config] support request path transforms in the router builder
[cli] preserve request path transform syntax and environment metadata across AI/manual route edits
300af0d: Increase Connex setup polling timeout to 115 minutes.4253eaa: Avoid applying the current Git branch to explicitly selected projects invc logs, and follow the latest READY production deployment when using--project --follow.a19feac: Rename theganttvalue forvercel traces get --viewtowaterfall.8dec9ea]95d8879]82b3c3c]3afdb18]96e3137]f5fe588]04f830c]f076559]v54.14.5Compare Source
Patch Changes
d1e1d69: Stop prompting to install the Vercel plugin after login and link commands.7aa52be: Show bounded progress while upgrading native and package-installed CLIs, andreport when no newer version is available without running the installer.
e2043e6: Build standalone Vercel CLI binaries with Node.js 24.14.1.94671a4]d4547af]bc6f22f]f530cd5]v54.14.2Compare Source
Patch Changes
8e56ad5: Add experimental shim to enable Next.js WebSocket upgrade support invc dev.07d3fe2: [cli] Addtraces createas an alias forcurl --tracev54.14.1Compare Source
Patch Changes
3d6f057: [cli] Makevercel blobstore commands work non-interactively for agents28dda45: Update Claude Code Vercel plugin prompts and remember accepted plugin updates for future automatic updates.d55310f: Add CLI UX guidance and improve CLI output consistency.b341a19: Improve CLI version output: the native binary now printsVercel CLI <version>without the Node.js suffix, andvercel upgradereports the version it upgraded to and says "No upgrade available" when already on the latest version.7f5f0f2: Fix telemetry flushing when running the CLI as a native binary.7866d3d: Allowvercel buy addon customEnvironment <quantity>by addingcustomEnvironmentto the CLI add-on allowlist and help examples.b7fbaec: Improvevc metrics: source groupable dimensions from the metric schema instead of a hardcoded list, preserve the requested time bounds so the query endpoint owns bucket rounding, and add an optional--bucket-timezoneflag for calendar bucket alignment (it only affects bucket boundaries, not the--since/--untilrange or output timestamps).e9aa6f5: Remove hidden--functions-beta/--no-functions-betadeploy flags and the size-limit hint messagingfd26487: Remove deprecatedpublicfrom deployment test fixtures and helpers, and stop the CLI from sending the removedpublicfield on deploy (including the--publicflag).5ed337e: Allowvercel metricsto combine repeated--filter/-fvalues with ODataand.aeea9f2: Render the ▲ gutter once per deploy summary: on the Aliased row, falling back to the Production row when no Aliased row will print (--no-wait,--skip-domain)e9aa6f5]v54.14.0Compare Source
Minor Changes
210748e: [cli] Addvercel ai-gateway rulesadd/list/edit/remove commandsPatch Changes
d712d41]dbb31fc]f7f0003]v54.13.0Compare Source
Minor Changes
128ad88: Add--category/-cfilter tovercel integration discoverand a newvercel integration categoriessubcommand. The filter scopes marketplace integrations to a single category (e.g.storage,ai,monitoring) — filtering happens server-side. The newcategoriessubcommand lists the valid slugs (Slug | Titletable or--jsonfor scripts/agents).Patch Changes
c453e66]v54.12.2Compare Source
Patch Changes
4421ad9]v54.12.1Compare Source
Patch Changes
800286e:vercel connect create --datanow accepts@<path>to read the JSON from a file and@-to read it from stdin, so non-managed connector credentials (e.g. client secrets) no longer have to be passed inline where they leak into shell history and process listings. Inline--datastill works but now warns when it looks like it contains a secret.800286e: Strip ANSI escape sequences from team-controlled connector names, UIDs, and project names in allvercel connectcommand output (attach,detach,remove,revoke-tokens, and thelisttable's type/projects cells), not just thelistUID/name cells. Prevents terminal escape injection from maliciously-named connectors visible across a team.1e64d1f: Addedvc api --spec-url <url>for loading endpoints from a custom OpenAPI spec instead of the default public Vercel spec. Custom specs are fetched fresh, can use the current CLI token to pass Vercel deployment protection via the SSO handshake, and replace the public spec entirely for listing, interactive selection, and tag/operation resolution.52f005f]2d2aad9]01e18e8]v54.12.0Compare Source
Minor Changes
5757bca: [services] add support tovc devforexperimentalServicesV2.Patch Changes
663307f: Fix CLI self-upgrade failing withEUNSUPPORTEDPROTOCOLinside pnpm/yarn workspaces32a730e: Elevate maximum maxDuration to 1800s4637f0a]32a730e]c5d53d7]a5034c1]0c4ea01]v54.11.1Compare Source
Patch Changes
8d8e871: Evaluate themaxDurationupper bound at validation time soVERCEL_CLI_SKIP_MAX_DURATION_LIMITworks regardless of import order.The gate was read when
@vercel/build-utils'functionsSchemawas constructed and when the CLI compiled itsvercel.jsonvalidator — both at module load. Any process that imports these modules before setting the env var baked in the default 900-second maximum and ignored the flag, failing withInvalid vercel.json - functions[...].maxDuration should be <= 900.@vercel/build-utilsnow exposesgetFunctionsSchema(), which reads the limit at call time (the existingfunctionsSchemaconst is kept but deprecated). The CLI builds and compiles its config validator lazily, caching one validator per resolved limit, so setting the variable after import takes effect. Default behavior is unchanged — the 900s maximum, the lower bound, and the integer check are all still enforced when the variable is unset.Updated dependencies [
8d8e871]v54.11.0Compare Source
Minor Changes
fc7b557: Ensure project manifest includes framework for non-service builds.Patch Changes
bc8dc95: Fix the darwin-arm64 native CLI binary crashing with SIGSEGV on most commands. The custom Noderuntime was stripped with bare
strip, which removes the exportednapi_*symbols that nativeaddons (
@napi-rs/keyring) bind against at dlopen time. The runtime is now stripped withstrip -SXx, which keeps exported symbols. Also makes the@vercel/vc-nativebin shim launchthe platform binary directly when the postinstall script did not run (pnpm blocks dependency
build scripts by default), instead of always failing.
bc8dc95: Fixvercel upgradecrashing withENOENT: no such file or directory, realpath '…/.pkg-staging/pkg.js'in the native binary. The command tried to
realpathprocess.argv[1], which points into the binary'svirtual filesystem snapshot. Native installs now detect the package manager (npm, pnpm, or yarn) from
the binary's real install location and suggest the matching global upgrade command.
v54.10.3Compare Source
Patch Changes
4f82914: Bump the embeddedsandboxCLI to 3.1.2 (@vercel/sandbox2.1.1) to fixvc sandboxcommands crashing with a segmentation fault.v54.10.2Compare Source
Patch Changes
0f7844c: Fix the native CLI binary crashing on auth commands (login,whoami,logout, and anycommand that reads config) with
ERR_MODULE_NOT_FOUND: '@​vercel/cli-auth'. The package is nowstaged into the binary. The binary release is also hardened with a real command smoke test and a
build-time check that every statically-imported dependency is bundled, so a binary missing a
required package can no longer be released.
78e5d4f]v54.10.1Compare Source
Patch Changes
4e849dd]v54.10.0Compare Source
Minor Changes
0774460: Bump @vercel/prepare-flags-definitionsPatch Changes
f6a6e55: Only offer the Claude Code plugin in projects that have actually been used with Claude Code. Previously the prompt could appear in any directory as long as a~/.claudedirectory existed on disk. The CLI now checks whether the current project (walking up from the working directory) appears in Claude Code's per-project history before offering the plugin.a4f7dc9: CLI help and command-schema cleanups from the docs audit:blob: remove orphanaddStoreSubcommand,removeStoreSubcommand, andgetStoreSubcommandexports that duplicated the wiredcreate-store/delete-store/get-storespecs. Handlers and telemetry now import the actual wired subcommand definitions.dns list: the<domain>argument is now declaredrequired: falseto match the runtime, which already supports listing every domain's records when no argument is given.routes delete: declare the<name-or-id>argument asmultiple: trueso the help synopsis and schema match the variadic behavior already supported by the handler and shown in the existing examples.init: fix the "Initialize example project into specified directory" help example, which was missing theinitliteral (vercel <example> <dir>→vercel init <example> <dir>).promote statusandrollback status: declare--timeouton thestatussubcommand options so--helpmatches the examples (promote status --timeout 30s,rollback status --timeout 30s). The flag is also kept on the parent command, where parsing actually happens.33efa25: Added non-managed Connex connector creation with--dataand optional--connector-type.3a2d61e: Addvercel domains search <query>for client-side Domain Discovery with fast bulk availability and registrar pricing, renewal pricing,--availableand exact TLD filters, ordering, candidate windows of up to 200 domains, and JSON output.c5eeb30: Gate the client-side 900-secondmaxDurationupper bound behind theVERCEL_CLI_SKIP_MAX_DURATION_LIMITenvironment variable. The limit is now owned by a single helper in@vercel/build-utilsinstead of being hardcoded in multiple validators. When the variable is set to1, the client-side maximum is skipped and validation defers to the server. Default behavior is unchanged — the maximum, the lower bound, and the integer check are all still enforced when the variable is unset.9f9eed3: Nest Build Output API files forexperimentalServicesV2under.vercel/output/services/<name>.fb30b76: Strip ANSI escape sequences from connector UID and name cells inconnect listtable output.Updated dependencies [
c5eeb30]Updated dependencies [
09c39af]v54.9.1Compare Source
Patch Changes
f5ab607: [evals] Shrink eval result uploads and fix run discoveryThe eval ingest transform (
transform-agent-eval-to-canonical.js) now excludes raw transcripts (transcript-raw.jsonl) from the--upload-artifacts allpath, roughly halving each ingest payload. The parsedtranscript.jsonis still uploaded and still read forresolvedModelsmetadata.It also normalizes provider-prefixed model paths before upload. Models that resolve to
provider/model(e.g.openai/gpt-5.5-pro) write results one directory deeper, pushing the timestamp past theexperiment/model/timestampshape the ingest endpoint discovers runs from, which previously failed withCould not discover any experiment/model/timestamp runs. The model is now collapsed to a single segment (openai-gpt-5.5-pro) so discovery succeeds.2b31813: Fixvc build --standalonefailing to zip Lambdas when run from a monoreposubdirectory. When dependencies are hoisted to the monorepo root (e.g. pnpm's
node_modules/.pnpm/...), the recorded function file paths could escape thefunction root (
../../node_modules/...), which later caused zipping to failwith
invalid relative path: ../../node_modules/.... These paths are nowre-anchored inside the function so the standalone output is self-contained.
252c6eb: [cli] Showclaiminvercel integration resource --helpThe
claimsubcommand was missing fromresourceSubcommand.subcommands, sovercel integration resource --helponly listedconnect,disconnect,remove, andcreate-threshold. The legacyvercel integration-resource --helpand the dispatcher's runtime resolution both already includedclaim— this was purely a help/discoverability gap on the canonical nested path. AddsclaimSubcommandto the subcommand list and updates the parent description accordingly.0a170fd: [services] wireexperimentalServicesV2intofs-detectors.Updated dependencies [
aeb5bfa]Updated dependencies [
0a170fd]v54.9.0Compare Source
Minor Changes
fb4fb2d: Add support for claiming sandbox marketplace resources (Stripe, Shopify) from the CLI.integration listshows a newClaimcolumn,integration-resource claim <name>opens the provider claim URL in the browser and polls until completion, andintegration addoffers to claim sandbox resources after provisioning with new--claim/--no-claimflags.Patch Changes
338cc35: Add isPackageInstalled util for detecting dependencies during build.Fix Vercel Flags dependency detection for emitting datafiles during builds with OIDC tokens.
338cc35]Configuration
📅 Schedule: (in timezone UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.