Vercel added routing rules to Python projects, evaluated at the CDN before the app runs.

FastAPI, Django and Flask apps can now set response headers or rewrite requests to internal paths through routing rules, applied without a new deployment (Vercel). That last detail is the useful one for anyone whose deploy cycle also flushes an in-memory cache. Separately, the Security Dashboard went GA on all plans, surfacing team members without 2FA, long-lived credentials replaceable with OIDC, public preview deployments and stale environment variables, with the same checks available from vercel security check and a --findings flag built so a coding agent can read findings, fix them and re-verify (Vercel).