Changelog

Axios package compromise and remediation steps. The axios npm package was compromised in an active supply chain attack discovered on March 31, 2026.

New projects created after April 6th will cache responses from external origins according to upstream Cache-Control / CDN-Cache-Control / Vercel-CDN-Cache-Control headers by default.

The Vercel plugin now supports OpenAI Codex and Codex CLI. With the plugin, teams can access over 39 platform skills, three specialist agents, and real-time code validation to assist with their development workflow.

Vercel Sandbox now supports persistent sandboxes that automatically save and restore file system state.

Vercel Sandbox now have unique, customizable names within your project, replacing the previous ID-based identification.

Chat SDK now lets you control what happens when a new message arrives before a previous one finishes processing, with support for configurable concurrency strategies across all adapters.

Chat SDK now supports scheduling messages, so you can have your agent send a message on your behalf in the past, while still maintaining the option to cancel it.

Pro and Enterprise users can now set their projects to build with a dynamic "elastic" setting. Vercel will automatically pick the right build machine depending on the app and its build process.