v1.20.1 @lingo.dev/_compiler@0.12.13
kubernetes-sigs/agent-sandboxAug 18, 2026 → Aug 19, 20261 day between releases
What's New
Newer tag is an unrelated Next.js devDependency security bump, not a follow-up to v1.20.1.
Improvements
- Bumped the `next` devDependency to 16.2.11, closing four high and five medium advisories.
- Change is build-time only, with no runtime dependency or public API surface affected.
Bug Fixes
- Addressed Next.js middleware/proxy bypass advisories.
- Addressed SSRF issues in Server Actions and rewrites.
- Addressed a Server Action denial-of-service advisory.
- Addressed an Image Optimization SVG denial-of-service advisory.
Upgrade Notes
The two releases come from different projects (agent-sandbox/MediaMTX vs. the lingo.dev compiler package), so this is not a valid upgrade path and no migration applies. If you consume the compiler package, simply rebuild to pull the patched Next.js; if you run agent-sandbox v1.20.1, look for a matching newer tag in that repository instead.
The Two Releases
v1.20.1
Aug 18, 2026· 2 months ago
A patch release addressing critical bugs such as deadlocks during configuration changes and race conditions in stream creation, alongside security enhancements like password redaction in API responses and improved MoQ QUIC stream management.
Full release notes@lingo.dev/_compiler@0.12.13
Aug 19, 2026· 2 months ago
A minimal patch release consisting solely of dependency updates to address security vulnerabilities in the Next.js package.
Full release notes