Dev Release Radar — September 6, 2026: Better Auth Ships v1.7.3, Fastify and Hono Patch Security Holes, Docker 29.8 Lands

The stack moved fast this week. Today's roundup covers everything that shipped, patched, or broke across containers, identity, frameworks, databases, and messaging systems through September 6, 2026, with a focus on security fixes worth prioritizing and breaking changes worth planning around.

Executive Summary

• Better Auth v1.7.3 ships today with a built-in Cloudflare social provider, an isPasswordCompromised helper backed by Have I Been Pwned, and schema validation enabled by default.
• Fastify v5.12.3 and Hono v4.13.7 both shipped security patches this week — a schema-coercion bypass in Fastify and an unescaped-JSX XSS gap in Hono.
• Docker Engine v29.8.0 and Compose v5.5.1 landed September 3, while Podman v6.1.1 and Docker Desktop both patched the same archive-extraction flaw, CVE-2026-17106.
• Redis 8.10.1 is a security release fixing a heap out-of-bounds write (CVE-2026-62356) and a TLS certificate authentication bypass.
• Cloudflare raised the Worker size limit to 64 MiB across all plans and shipped WSGI/ASGI support for Python Workers, while D1's free-tier limits are now enforced.
• Astro v7.3.1, shadcn/ui CLI v4.21.0 (a standalone cn package), ClickHouse v26.3.31.5-lts, Prisma 8.0.0-rc.13, and Supabase-js 2.115.0 all shipped within the last three days.
• Keycloak 26.7.3 closes 21 vulnerabilities and Authentik 2026.8.1 hardens OAuth2/SCIM flows — both worth an out-of-cycle upgrade if you run self-hosted IAM.
• BullMQ 6.3.4 patches a Rust croner cron-parsing vulnerability, and a five-month-old Temporal auth-bypass advisory (CVE-2026-5724) is still worth checking if you run replication across clusters.

Containers, Edge & Infrastructure

Docker Engine 29.8.0 and Compose 5.5.1

Docker shipped Engine v29.8.0 and Compose v5.5.1 on September 3. Engine adds a --umask flag for container umask configuration, CloudWatch logging improvements, and AppArmor profile customization, plus fixes for Swarm service-discovery networking and hardening against AF_VSOCK socket misuse. RootlessKit moves to v3.1.0 with pesto port-driver support. Compose 5.5.1 focuses on lifecycle-hook output capture, OpenTelemetry shutdown-error tracing under --debug, and fixes for symlinked-directory file sync and Windows TTY progress rendering.

docker version --format '{{.Server.Version}}'
docker compose version

Podman 6.1.1 and Docker Desktop share a CVE

Podman v6.1.1 and Docker Desktop both patched CVE-2026-17106, where a crafted tar archive could write outside the extraction directory via malicious links during image or docker container cp operations. Docker Desktop also closed CVE-2026-8936, a VM panic caused by unbounded recursion in grpcfuse when nested directories are created on a bind mount. See the Docker Desktop release notes for the full patch list. If you extract untrusted tar archives in CI, pull the update before your next build.

Cloudflare: bigger Workers, Python support, D1 limits

Cloudflare had a busy week. On September 4 it raised the Worker size limit to 64 MiB across every plan, up from the old 3 MB free / 10 MB paid compressed-size caps. Two days earlier, Python Workers gained WSGI/ASGI support, so Django, Flask, FastAPI, and Starlette apps can now run on the platform with far less rewiring. And since September 1, D1's free-tier daily row read/write limits are enforced — queries fail once you hit the cap until the UTC midnight reset, so check your usage dashboard if you're running D1 on the free plan. Full history is in the Cloudflare changelog.

Vercel, Railway, Render, Kubernetes, AWS

Vercel's rolling changelog added new AI Gateway models and Cursor Cloud Agents running on Vercel Sandbox this week, plus low-cost "Basic" 2 vCPU/8 GB build machines for Pro and Enterprise plans. Railway shipped changelog #0306 on September 4 with Postgres management from the Railway CLI and a hosted MCP server for connecting agents. Render's dashboard picked up a new Deploys page with rollout status and separate Builds/Runs views for cron jobs. Kubernetes v1.37.0 "Garhwal" remains the newest minor (released August 26); if you're on 1.34.x, note its end-of-life lands October 27. On the security side, AWS published bulletin 2026-096 for CVE-2026-85028, a local-privilege-escalation flaw in the AWS FPGA Developer Kit below 2.3.4.

Identity & Authentication (IAM)

Better Auth v1.7.3 ships today

Better Auth v1.7.3 published today restores v1.6 account-schema compatibility so upgraders avoid a disruptive migration, adds Cloudflare as a built-in social provider with client-secret and PKCE support, and turns on schema validation by default at init — mismatched auth requests are now rejected instead of silently passed through. It also ships a new isPasswordCompromised helper that checks passwords against Have I Been Pwned, plus OAuth discovery resilience and TOTP re-enrollment fixes.

import { betterAuth } from "better-auth";
import { cloudflare } from "better-auth/social-providers";

export const auth = betterAuth({
  socialProviders: {
    cloudflare: {
      clientId: process.env.CLOUDFLARE_CLIENT_ID!,
      clientSecret: process.env.CLOUDFLARE_CLIENT_SECRET!,
    },
  },
});

Keycloak 26.7.3 and Authentik 2026.8.1 close CVEs

Keycloak 26.7.3 fixes 21 vulnerabilities, including an LDAP certificate-verification bypass (CVE-2026-35563), an unsigned-JWT assertion-policy bypass (CVE-2026-16093), and an organization-manager privilege-escalation bug (CVE-2026-16072). Authentik 2026.8.1 patches an OAuth2 dynamic-client-registration CSRF exemption, a token-exchange bug, and a SCIM group-membership-removal issue, and now terminates sessions automatically on user deactivation. If you self-host either, this is worth an out-of-cycle upgrade rather than waiting for your next maintenance window.

Clerk and Auth0 had no dated release this week — Clerk's most recent milestone remains Core 3 and Auth0's latest changelog entries center on Flexible Password Policy and Cross App Access for MCP servers. Auth.js/NextAuth also had no clear version bump surfaced this cycle; it's now organizationally under Better Auth, and the team is steering new projects toward Better Auth unless they specifically need Auth.js's stateless, no-database session model — check the Auth.js releases page directly if you need a hard version number.

Meta-Frameworks & Core Web Standards

Astro 7.3.1 patches a startup regression

Astro v7.3.1 (September 3) fixes a bug that could stop astro:assets projects from starting or building. The same-day 7.3.0 release added --ignore-lock for astro preview and Cloudflare incremental-build concurrency.

Next.js, React, Nuxt, Vue, SvelteKit, Svelte

Next.js v16.3.4 is the current stable, following the August 2026 security release that patched two critical unauthenticated-RCE flaws — a Windows path-traversal bug and an AVIF heap overflow via libheif — so if you haven't updated past 16.3.2 yet, do it now. React v19.2.8 is a minor Server Components decoding improvement. Nuxt v4.5.2 follows a security release that closed an RCE via server-island props and a route-rule auth bypass — Nuxt 3 also reached end-of-life on July 31. Vue v3.5.42 is stable while 3.6's Vapor Mode rewrite continues in release candidate. SvelteKit v2.70.3 is current stable with SvelteKit 3 in RC, and Svelte v5.57.0 added new SvelteMap helpers and <select defaultValue> support.

Backend Frameworks & Runtimes

Fastify and Hono both close security gaps

Fastify v5.12.3 (September 4) fixes CVE-2026-18504, where root-level primitive body schemas could expose the raw, un-coerced value to route handlers instead of the validated one, and CVE-2026-16732, an X-Forwarded-* spoofing issue under trustProxy hop-count configs. Hono v4.13.7 (also September 4) patches an XSS gap where plain strings passed as children of Suspense, ErrorBoundary, and Context.Provider in JSX rendering were emitted without HTML escaping. Upgrade both if you render user-provided strings through either framework.

npm install [email protected]
npm install [email protected]

NestJS, Node.js, ElysiaJS, Django, Laravel

NestJS @nestjs/core v12.0.1 follows the 12.0.0 line that moved all core packages to ESM and added Standard Schema (Zod/Valibot) support in @Body()/@Query() — it now requires Node 20.19+/22.12+. Node.js v26.8.1 is current, with LTS v24.20.0 "Krypton" also shipping; Node 26 enables the Temporal API by default and moves to V8 14.6. ElysiaJS v1.4.30 is security-only while the team finishes Elysia 2.0 — recent patches closed a cookie-config code-injection bug and a prototype-pollution issue in mergeDeep. Django v6.1.1 is a bugfix release (not a security release) resolving a QuerySet .distinct().order_by() crash among 11 other fixes. Laravel v13.30.1 adds an Eloquent insertOrIgnoreReturning() method and a dropVectorIndex() schema helper.

UI Systems, Styling & Motion

shadcn/ui CLI 4.21.0 splits out its own cn package

shadcn's CLI v4.21.0 (September 4) makes cn its own installable package, replacing the common clsx + tailwind-merge combo — init now generates export { cn } from "cn" in lib/utils. Base UI became shadcn's default component library back in July (Radix remains fully supported).

Motion, Radix, Tailwind, MUI

Motion v13.2.0 shipped September 2; framer-motion is now a deprecated install-time alias, so import from motion/react going forward. Radix UI's unified radix-ui package sits at v1.6.7 with recent fixes to Dialog ARIA references, Slider's onValueCommit, and Tooltip DOM mounting. Tailwind CSS v4.3.3 added CLI --watch --poll support with no breaking changes. Material UI v9.4.0 adds an opt-in theme.focusVisible ring and fixes Tooltip on disabled buttons.

Databases, Caching & Vector Search

Redis 8.10.1 is a security release

Redis 8.10.1 (August 17) fixes CVE-2026-62356, a miscalculated buffer size in CMSketch RDB loading that leads to a heap out-of-bounds write, plus a TLS pending-data-list use-after-free, a TLS certificate-authentication bypass via embedded NUL bytes in Common Names, and vector-set HNSW race conditions between background VSIM and VREM operations. If you're loading untrusted RDB files or terminating TLS at Redis, prioritize this update.

PostgreSQL, pgvector, MongoDB, ClickHouse, DuckDB

PostgreSQL's cumulative update (18.6 / 17.11 / 16.15 / 15.19 / 14.24) fixes 28 security vulnerabilities and 110+ bugs — note that 18.5 was skipped entirely after a post-wrap regression. pgvector v0.8.6 is a routine bump. MongoDB's 8.3.8 patch line has addressed several CVEs — verify the exact patch-to-CVE mapping on the official changelog before treating any single version as the fix. ClickHouse v26.3.31.5-lts shipped September 5 as part of its usual multiple-releases-per-week cadence — the native Arrow implementation is now the only one, with old settings deprecated. DuckDB v1.5.5 backports out-of-bounds-read security fixes in JSON path processing, string casting, and dictionary decompression.

Database Tools, ORMs & BaaS

Prisma's npm latest tag now points to 8.0.0-rc.13 (September 4), though the team's recommended production version is still 7.10.0. Prisma 8 renames pagination from .take/.skip to .limit/.offset and adds migration-safety guard rails — plan your upgrade path before pulling latest in production. Drizzle's stable tag is still 0.45.2 while 1.0.0-rc.5 brings a codec system and an MCP server for AI agents. Supabase-js 2.115.0 shipped September 3; separately, read replicas moved under Project Settings → Infrastructure, and the Management API's logs.all endpoint retires September 23 in favor of a ClickHouse-backed logs endpoint. Firebase's usage-based Remote Config pricing started September 1, and Imagen APIs were fully removed from Firebase AI Logic SDKs in favor of Gemini image models.

Background Jobs, Messaging & Task Queues

BullMQ 6.3.4 updates the Rust croner crate to v4 to close a security issue in cron-expression parsing. RabbitMQ 4.3.5 (August 17) has no specific CVE attached; note community support for the 4.3.x line ends November 30. Kafka 4.3.1 fixes a Kafka Streams RocksDB native memory leak. And if you run Temporal with replication across clusters, revisit CVE-2026-5724 — a moderate-severity auth bypass in the AdminService/StreamWorkflowReplicationMessages gRPC interceptor that accepted unauthenticated requests even with a ClaimMapper/Authorizer configured. It's patched in server versions 1.28.4, 1.29.6, and 1.30.4 — worth confirming you're past those floors even though the advisory itself is several months old.

What to Patch Today

• Redis → 8.10.1 (heap OOB write + TLS auth bypass, CVE-2026-62356)
• Fastify → 5.12.3 and Hono → 4.13.7 (schema-coercion bypass / unescaped JSX XSS)
• Docker Desktop / Podman → latest (shared archive-extraction CVE-2026-17106)
• Keycloak → 26.7.3 and Authentik → 2026.8.1 (21 and multiple CVEs respectively)
• Next.js → past 16.3.2 if you haven't already (critical RCE flaws from the August security release)
• Better Auth → 1.7.3 for the new HIBP password check and default schema validation

That's the stack as of September 6, 2026. Check back tomorrow for the next edition of the Dev Release Radar.