Summary

The release marks forbidden() and unauthorized() as stable and adds ESLint 10 support to eslint-config-next. It also includes Turbopack cache, runtime, build-metadata and use-cache changes, plus an agent skill that streams bundle-analysis data as JSON Lines.

Why it matters

The stabilised APIs affect application-level access-control patterns, while ESLint 10 support removes a migration barrier for modern JavaScript and TypeScript projects.

Sources