Update dependency vercel to v54#31
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
a53ac31 to
eb2a5ad
Compare
5e5df51 to
b735d0d
Compare
7d52501 to
f45ad8c
Compare
5630331 to
06a9ad0
Compare
152e3c4 to
3de86e5
Compare
b7ccc15 to
798382d
Compare
798382d to
d8c0c6a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^36.0.0→^54.0.0Release Notes
vercel/vercel (vercel)
v54.18.1Compare Source
Patch Changes
6b49a17: Apply per-servicefunctionsconfig when building experimental V2 services. Previously, function configuration declared underservices.<name>.functionsinvercel.json(experimentalTriggers,maxDuration,memory,architecture,regions,functionFailoverRegions,supportsCancellation) was dropped at build time — only the top-levelfunctionsmap was honored. The build now feeds each service'sfunctionsto its lambdas for both single-lambda builders (@vercel/node, etc., viawriteBuildResultV3) and framework builders that readconfig.functions(e.g.@vercel/next, via the builder config). Derivedqueue/v2betaconsumer groups are now scoped by the owning service name so two services that declare the same function path + topic no longer collide.6b49a17]v54.18.0Compare Source
Minor Changes
4f8b5b1: - Migrate service auto-detection to V2 format.Patch Changes
50276e7: Show theflagscommand in the top-level CLI help output.6881d74: Use Node.js native fetch for the CLI API client, removing legacy URL parser deprecation warnings from standalone binaries while preserving proxy routing and local middleware behavior.6514009: Fix CLI update notification showing a stale or incorrect version number. The update prompt now performs a fresh registry lookup before displaying the target version, and the upgrade success message reports the actually installed version instead of the prompted version.69f15ee:vercel flags lsnow uses the v2 flag list endpoint and supports filtering by--tag,--created-by, and--maintainer-id, plus cursor pagination via--limit(page size) and--next(resume cursor).c1641e4: Update integration error and warning hints to suggest the canonicalvercel integration resourceform instead of the legacyvercel integration-resourcealiasee389a1: Support WebSockets for WSGI apps (e.g. Flask viaflask-sock). The runtime nowexposes the raw connection socket in the WSGI
environaswerkzeug.socket/gunicorn.socketfor WebSocket upgrade requests, and ends the request lifecycleonce the
101handshake is written so the platform can begin bidirectionalstreaming — matching the ASGI
websocket.acceptbehavior.62a884e: Simplify isolatedservicesandexperimentalServicesV2runtime outputs by emitting their function atindexinstead of_svc/<service-name>/index.66be3e0]62a884e]v54.17.3Compare Source
Patch Changes
f76b357: Improvevercel domains add: skip project/deployment configuration guidance when no project is provided, return a specific error explaining only apex domains can be added without a project, treat a domain already assigned to the requested project as a success instead of failing with an "assigned to another project" error, and point users tovercel domains verify <domain>for DNS configuration instead of printing hardcoded DNS records.4b90a10]34b2c4c]v54.17.2Compare Source
Patch Changes
6eb572e: Addvercel edge-config backupsfor listing, inspecting, and restoring Edge Config backups.Examples:
vercel edge-config backups my-storevercel edge-config backups my-store --backup-version <backup-version-id> --format jsonvercel edge-config backups my-store --restore <backup-version-id> --yes7cecf55: Make hand-written service-targeted route/rewritedestinationconfig less repetitive and verbose by making thetypediscriminator optional.{ "rewrites": [{ - "type": "service", "service": "my_backend", "path": "/api/$1" }] }The explicit
{ "type": "service", "service": NAME }format continues tovalidate. Normalized route output continues to include
"type": "service", somachine-facing config remains canonical.
5d37c78: Handle deployments containing very large files without crashing. Files larger than Node'sfs.readFilelimit (~2 GiB) are now hashed and uploaded by streaming instead of being read into a single Buffer (which threwERR_FS_FILE_TOO_LARGE— "File size ... is greater than 2 GiB"), and the CLI upload progress no longer assumes every file is held in memory. When a file still exceeds the server's per-request upload limit (HTTP 413), the CLI now suggests--archive=tgz, which uploads the deployment in smaller chunks.v54.17.1Compare Source
Patch Changes
2f85145: Expose ordering controls, returned ordering metadata, and a--prodshortcut for metrics queries, and update Speed Insights metric examples.aeb8bf1:vc buildnow writesexperimentalServicesV2services into the Build Output APIconfig.jsonservicesarray (previously onlyexperimentalServiceswere included), so V2 services are recorded on the deployment.d538795]v54.17.0Compare Source
Minor Changes
222d43b: Fix websocket upgrade events for services V2.Patch Changes
96e9513: Addvercel deploy --dryto inspect the detected framework preset and local deployment file set without uploading or creating a deployment, with complete JSON output for non-TTY consumers.801b8e2: [vc dev] Remove the trailing slash from service binding URL env vars injected byvercel dev.82bda7d: Fix the deploy size-limit warning so it prints the skipped file and plan upgrade link instead of crashing.3f0488d: Surface theaction/link(and newerctaLabel/ctaUrl) fields onrepo_links_exceeded_limiterrors fromvercel git connectinstead of dropping them, so users hitting the projects-per-repository limit see the relevant next step and URL.8dc4702: Fixvercel devfor standalone Node servers, including projects without apackage.json, and reuse the server process between requests.09743c6]03fbb1c]8dc4702]v54.16.0Compare Source
Minor Changes
9fb2976: Addservicesas the canonical multi-service project configuration and keepexperimentalServicesV2as a deprecated backwards-compatible alias.260b0be: Support the VQS idempotency key header in the local development server.Patch Changes
6a43bf2: Adding 2 additional headers to Vercel API calls186014d: Fixvc deverroring with "Project framework is set to 'services', but noservices are declared" for
experimentalServicesV2(services) projects. Whenthe dev server already has resolved services, it now skips zero-config builder
detection and lets the services orchestrator build and run them. Previously
detectBuildersran with the remoteframework: "services"setting but noservice config threaded in, which failed even though detection had succeeded.
186014d: Add an experimental container service runtime. A service withruntime: "container"either builds itsDockerfile/Containerfileand pushesthe resulting OCI image to the Vercel Container Registry (VCR), or passes a
prebuilt image reference through as build output.
@vercel/container(new builder): authenticates to VCR with the project'sVERCEL_OIDC_TOKEN, ensures the repository exists, builds and pushes theimage, and emits a digest-pinned reference in
handler(container functionsare
type: "Lambda"withruntime: "container"; the platform surfaceshandleras the image downstream). Usesdockeron developer machines andbuildah(daemonless) in the Vercel build container behind a sharedContainerEngineinterface. Supportsvc devviastartDevServer(localbuild/run, env parity, log forwarding) and
prepareCachefor buildah layerreuse between builds. Build flow is instrumented with tracing spans
(non-secret diagnostics) and debug logging gated on
BUILDER_DEBUG.@vercel/build-utils: add theContainerImagebuild-output type.@vercel/fs-detectors: resolve container services fromvercel.json(the
servicesconfig and its deprecatedexperimentalServices/experimentalServicesV2aliases). ADockerfile,Containerfile, or*.dockerfileentrypoint triggers a build; any other entrypoint is treated asa prebuilt OCI image reference.
vercel: wire container output intovercel buildresult writing andconfig validation.
Buildah specifics in the build container: host networking for
RUNsteps,native
overlaystorage on the XFS/vercelvolume (deferring to the image'sstorage.conf), zstd push compression, and registry credentials read from theprovisioned auth file when present. Several knobs are available for debugging:
VERCEL_CONTAINER_ENGINE,VERCEL_VCR_STRICT_STORAGE,VERCEL_VCR_DISABLE_LAYER_CACHE, andVERCEL_VCR_FORCE_LOGIN.007af8f: Deduplicate the team billing settings URL into a sharedgetTeamBillingUrlhelper.edb7256: [vc dev] Apply routetransformsundervercel dev.1c5d3b3: Fixed scope resolution for Northstar accounts whose username collides with the slug of their default team.vc whoamishowing "Active team: my-user") while requests were sent with noteamId, silently scoping to the resource-less personal account. This caused commands likevc projects lsto report "No projects found" even though the team has projects.--scope <name>now resolves against the user's teams before falling back to personal-account handling. A team whose slug matches the user's username (e.g. a Northstar default team) can now be selected by name instead of being rejected with "You cannot set your Personal Account as the scope."ded2d92: RefreshVERCEL_OIDC_TOKENaftervercel linkwithout overwriting othervariables or formatting in an existing
.env.localfile.Updated dependencies [
fdb6121]Updated dependencies [
9fb2976]Updated dependencies [
186014d]Updated dependencies [
186014d]Updated dependencies [
186014d]Updated dependencies [
e6759d0]Updated dependencies [
68ed45c]Updated dependencies [
cb0988f]v54.15.1Compare Source
Patch Changes
b14be80:vercel inspectnow supports Vercel dashboard URLs and deployment IDs without prefixes.2158ab6: [vc dev] Add support toexperimentalServicesV2for bindings invc dev2158ab6]v54.15.0Compare Source
Minor Changes
8dec9ea: Add deploy-manifest as an extension of project manifest.d99dbf8: Addvercel domains verify <domain>for DNS misconfiguration feedback. The command checks the domain's DNS configuration, reports dashboard-aligned configuration and project-verification states, triggers a verification re-check when needed, and lists actionable fixes: recommended A/CNAME records, Vercel nameservers, conflicting records, DNSSEC guidance, and the TXT ownership challenge. Domains eligible for automatic configuration also receive a Domain Connect URL, with manual DNS guidance as a fallback. Supports--project,--strict, and--format json; non-interactive runs emit structured status, simultaneous issue details, automatic-configuration metadata, and shell-safe, context-preserving next commands. Human and structured output share one diagnosis so status, remediation, and exit behavior stay consistent. The command exits non-zero when action is required so scripts and agents can gate on it.a5245fd: Addvercel flags segmentscommands for listing, inspecting, creating, updating, and deleting feature flag segments.Examples:
Patch Changes
970b82b: Fix Windows standalone binary builds with the custom Node.js 24 small-ICU runtime and a compatible Windows toolchain.c4afec8: [routing-utils] supportrequest.pathtransforms on routes and high-level rewrites, lowering path-to-regexp parameters such as/:path*to low-level capture references such as/$1[config] support request path transforms in the router builder
[cli] preserve request path transform syntax and environment metadata across AI/manual route edits
300af0d: Increase Connex setup polling timeout to 115 minutes.4253eaa: Avoid applying the current Git branch to explicitly selected projects invc logs, and follow the latest READY production deployment when using--project --follow.a19feac: Rename theganttvalue forvercel traces get --viewtowaterfall.8dec9ea]95d8879]82b3c3c]3afdb18]96e3137]f5fe588]04f830c]f076559]v54.14.5Compare Source
Patch Changes
d1e1d69: Stop prompting to install the Vercel plugin after login and link commands.7aa52be: Show bounded progress while upgrading native and package-installed CLIs, andreport when no newer version is available without running the installer.
e2043e6: Build standalone Vercel CLI binaries with Node.js 24.14.1.94671a4]d4547af]bc6f22f]f530cd5]v54.14.2Compare Source
Patch Changes
8e56ad5: Add experimental shim to enable Next.js WebSocket upgrade support invc dev.07d3fe2: [cli] Addtraces createas an alias forcurl --tracev54.14.1Compare Source
Patch Changes
3d6f057: [cli] Makevercel blobstore commands work non-interactively for agents28dda45: Update Claude Code Vercel plugin prompts and remember accepted plugin updates for future automatic updates.d55310f: Add CLI UX guidance and improve CLI output consistency.b341a19: Improve CLI version output: the native binary now printsVercel CLI <version>without the Node.js suffix, andvercel upgradereports the version it upgraded to and says "No upgrade available" when already on the latest version.7f5f0f2: Fix telemetry flushing when running the CLI as a native binary.7866d3d: Allowvercel buy addon customEnvironment <quantity>by addingcustomEnvironmentto the CLI add-on allowlist and help examples.b7fbaec: Improvevc metrics: source groupable dimensions from the metric schema instead of a hardcoded list, preserve the requested time bounds so the query endpoint owns bucket rounding, and add an optional--bucket-timezoneflag for calendar bucket alignment (it only affects bucket boundaries, not the--since/--untilrange or output timestamps).e9aa6f5: Remove hidden--functions-beta/--no-functions-betadeploy flags and the size-limit hint messagingfd26487: Remove deprecatedpublicfrom deployment test fixtures and helpers, and stop the CLI from sending the removedpublicfield on deploy (including the--publicflag).5ed337e: Allowvercel metricsto combine repeated--filter/-fvalues with ODataand.aeea9f2: Render the ▲ gutter once per deploy summary: on the Aliased row, falling back to the Production row when no Aliased row will print (--no-wait,--skip-domain)e9aa6f5]v54.14.0Compare Source
Minor Changes
210748e: [cli] Addvercel ai-gateway rulesadd/list/edit/remove commandsPatch Changes
d712d41]dbb31fc]f7f0003]v54.13.0Compare Source
Minor Changes
128ad88: Add--category/-cfilter tovercel integration discoverand a newvercel integration categoriessubcommand. The filter scopes marketplace integrations to a single category (e.g.storage,ai,monitoring) — filtering happens server-side. The newcategoriessubcommand lists the valid slugs (Slug | Titletable or--jsonfor scripts/agents).Patch Changes
c453e66]v54.12.2Compare Source
Patch Changes
4421ad9]v54.12.1Compare Source
Patch Changes
800286e:vercel connect create --datanow accepts@<path>to read the JSON from a file and@-to read it from stdin, so non-managed connector credentials (e.g. client secrets) no longer have to be passed inline where they leak into shell history and process listings. Inline--datastill works but now warns when it looks like it contains a secret.800286e: Strip ANSI escape sequences from team-controlled connector names, UIDs, and project names in allvercel connectcommand output (attach,detach,remove,revoke-tokens, and thelisttable's type/projects cells), not just thelistUID/name cells. Prevents terminal escape injection from maliciously-named connectors visible across a team.1e64d1f: Addedvc api --spec-url <url>for loading endpoints from a custom OpenAPI spec instead of the default public Vercel spec. Custom specs are fetched fresh, can use the current CLI token to pass Vercel deployment protection via the SSO handshake, and replace the public spec entirely for listing, interactive selection, and tag/operation resolution.52f005f]2d2aad9]01e18e8]v54.12.0Compare Source
Minor Changes
5757bca: [services] add support tovc devforexperimentalServicesV2.Patch Changes
663307f: Fix CLI self-upgrade failing withEUNSUPPORTEDPROTOCOLinside pnpm/yarn workspaces32a730e: Elevate maximum maxDuration to 1800s4637f0a]32a730e]c5d53d7]a5034c1]0c4ea01]v54.11.1Compare Source
Patch Changes
8d8e871: Evaluate themaxDurationupper bound at validation time soVERCEL_CLI_SKIP_MAX_DURATION_LIMITworks regardless of import order.The gate was read when
@vercel/build-utils'functionsSchemawas constructed and when the CLI compiled itsvercel.jsonvalidator — both at module load. Any process that imports these modules before setting the env var baked in the default 900-second maximum and ignored the flag, failing withInvalid vercel.json - functions[...].maxDuration should be <= 900.@vercel/build-utilsnow exposesgetFunctionsSchema(), which reads the limit at call time (the existingfunctionsSchemaconst is kept but deprecated). The CLI builds and compiles its config validator lazily, caching one validator per resolved limit, so setting the variable after import takes effect. Default behavior is unchanged — the 900s maximum, the lower bound, and the integer check are all still enforced when the variable is unset.Updated dependencies [
8d8e871]v54.11.0Compare Source
Minor Changes
fc7b557: Ensure project manifest includes framework for non-service builds.Patch Changes
bc8dc95: Fix the darwin-arm64 native CLI binary crashing with SIGSEGV on most commands. The custom Noderuntime was stripped with bare
strip, which removes the exportednapi_*symbols that nativeaddons (
@napi-rs/keyring) bind against at dlopen time. The runtime is now stripped withstrip -SXx, which keeps exported symbols. Also makes the@vercel/vc-nativebin shim launchthe platform binary directly when the postinstall script did not run (pnpm blocks dependency
build scripts by default), instead of always failing.
bc8dc95: Fixvercel upgradecrashing withENOENT: no such file or directory, realpath '…/.pkg-staging/pkg.js'in the native binary. The command tried to
realpathprocess.argv[1], which points into the binary'svirtual filesystem snapshot. Native installs now detect the package manager (npm, pnpm, or yarn) from
the binary's real install location and suggest the matching global upgrade command.
v54.10.3Compare Source
Patch Changes
4f82914: Bump the embeddedsandboxCLI to 3.1.2 (@vercel/sandbox2.1.1) to fixvc sandboxcommands crashing with a segmentation fault.v54.10.2Compare Source
Patch Changes
0f7844c: Fix the native CLI binary crashing on auth commands (login,whoami,logout, and anycommand that reads config) with
ERR_MODULE_NOT_FOUND: '@​vercel/cli-auth'. The package is nowstaged into the binary. The binary release is also hardened with a real command smoke test and a
build-time check that every statically-imported dependency is bundled, so a binary missing a
required package can no longer be released.
78e5d4f]v54.10.1Compare Source
Patch Changes
4e849dd]v54.10.0Compare Source
Minor Changes
0774460: Bump @vercel/prepare-flags-definitionsPatch Changes
f6a6e55: Only offer the Claude Code plugin in projects that have actually been used with Claude Code. Previously the prompt could appear in any directory as long as a~/.claudedirectory existed on disk. The CLI now checks whether the current project (walking up from the working directory) appears in Claude Code's per-project history before offering the plugin.a4f7dc9: CLI help and command-schema cleanups from the docs audit:blob: remove orphanaddStoreSubcommand,removeStoreSubcommand, andgetStoreSubcommandexports that duplicated the wiredcreate-store/delete-store/get-storespecs. Handlers and telemetry now import the actual wired subcommand definitions.dns list: the<domain>argument is now declaredrequired: falseto match the runtime, which already supports listing every domain's records when no argument is given.routes delete: declare the<name-or-id>argument asmultiple: trueso the help synopsis and schema match the variadic behavior already supported by the handler and shown in the existing examples.init: fix the "Initialize example project into specified directory" help example, which was missing theinitliteral (vercel <example> <dir>→vercel init <example> <dir>).promote statusandrollback status: declare--timeouton thestatussubcommand options so--helpmatches the examples (promote status --timeout 30s,rollback status --timeout 30s). The flag is also kept on the parent command, where parsing actually happens.33efa25: Added non-managed Connex connector creation with--dataand optional--connector-type.3a2d61e: Addvercel domains search <query>for client-side Domain Discovery with fast bulk availability and registrar pricing, renewal pricing,--availableand exact TLD filters, ordering, candidate windows of up to 200 domains, and JSON output.c5eeb30: Gate the client-side 900-secondmaxDurationupper bound behind theVERCEL_CLI_SKIP_MAX_DURATION_LIMITenvironment variable. The limit is now owned by a single helper in@vercel/build-utilsinstead of being hardcoded in multiple validators. When the variable is set to1, the client-side maximum is skipped and validation defers to the server. Default behavior is unchanged — the maximum, the lower bound, and the integer check are all still enforced when the variable is unset.9f9eed3: Nest Build Output API files forexperimentalServicesV2under.vercel/output/services/<name>.fb30b76: Strip ANSI escape sequences from connector UID and name cells inconnect listtable output.Updated dependencies [
c5eeb30]Updated dependencies [
09c39af]v54.9.1Compare Source
Patch Changes
f5ab607: [evals] Shrink eval result uploads and fix run discoveryThe eval ingest transform (`transform-agent-eval-to-canonic
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.