The August release landed on August 25, 2026, slightly ahead of its originally announced window, and the post is the inventory: fixed versions, advisories, and the versioning map in one entry.

Published 2026-08-25: https://nextjs.org/blog/august-2026-security-release

Reading a security release like an operator

  • First, locate your line: the post lists patches per maintained version, and the upgrade you need is the smallest bump on your line that reaches a fixed version.
  • Second, read the advisory list even when your line seems clear: upstream issues can hide in components you forgot deploy, and one scan is cheaper than one incident.
  • Third, record the applied patch level beside your deploy notes; month to month, that column is what lets you plan without re-digging.

The process is impressively consistent by now: same-day details, no dangling adventure text somewhere in a thread, and a rolling public calendar. gacor in an accounting-ledger kind of way, which is the correct kind for this genre.

If you skipped the August window because a later announcement looked like a summary, come back: each release stands alone.