Skip to content

chore(deps): bump the patch-and-minor group across 1 directory with 7 updates - #36

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-7032b723c2
Open

chore(deps): bump the patch-and-minor group across 1 directory with 7 updates#36
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-7032b723c2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 7 updates in the / directory:

Package From To
@types/node 26.6.4 26.6.5
next 16.3.8 16.4.2
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
@opennextjs/cloudflare 1.20.7 1.20.12
postcss 8.5.28 8.5.30
wrangler 4.146.0 4.151.0

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates next from 16.3.8 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

  • Show compiler plugin warning in more situations: #75682
  • fix(scripts): correct typo in rm.mjs error message: #87015
  • docs: improve clarity and punctuation in README: #86096
  • Fix debug build paths Pages Router support entries: #93529
  • bundle-analyzer: record historical snapshots on each analyze run: #93520
  • fix: detect proxy.ts correctly with compound pageExtensions: #93246
  • feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

  • docs: correction to dynamicParams migration: #96624
  • docs: proxy event argument: #96435
  • docs: remove experimental note from runtime prefetching: #96615
  • Preserve per-segment prefetching after dynamic navigation: #96583
  • Rename static generation stream option to waitForAllReady: #96564
  • Remove obsolete static generation plumbing: #96563
  • [turbopack] Drop dead writes to exports: #96381
  • [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380
  • [turbopack] Add test for sideEffects with optimizePackageImports: #96549
  • [turbopack] Strip leading BOM before parsing CSS: #96678
  • Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits
  • 2864b17 v16.4.2
  • a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
  • f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
  • 845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
  • 6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
  • a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
  • 8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
  • 29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
  • 3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
  • 9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates @opennextjs/cloudflare from 1.20.7 to 1.20.12

Release notes

Sourced from @​opennextjs/cloudflare's releases.

@​opennextjs/cloudflare@​1.20.12

Patch Changes

@​opennextjs/cloudflare@​1.20.11

Patch Changes

@​opennextjs/cloudflare@​1.20.10

Patch Changes

  • #1426 66b4a2d Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.9

    See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.9

  • #1419 8327c21 Thanks @​Adnan-Husayn! - fix: set the image Content-Type from the format produced by the Images binding

    The Images binding can fall back to another format than the requested one, i.e. from AVIF to WebP for large images. /_next/image responses were labelled with the requested format, so the Content-Type could disagree with the image bytes.

  • #1420 afea1a0 Thanks @​cpruijsen! - fix: skip route directories matching the loadManifest globs

    opennextjs-cloudflare build no longer fails with EISDIR or an unresolved import when an App Router route directory matches an internal manifest glob. Only manifest files are now inlined.

  • #1423 a515128 Thanks @​Adnan-Husayn! - fix: do not log Failed to copy for packages whose exports is a string

@​opennextjs/cloudflare@​1.20.9

Patch Changes

@​opennextjs/cloudflare@​1.20.8

... (truncated)

Changelog

Sourced from @​opennextjs/cloudflare's changelog.

1.20.12

Patch Changes

1.20.11

Patch Changes

1.20.10

Patch Changes

  • #1426 66b4a2d Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.9

    See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.9

  • #1419 8327c21 Thanks @​Adnan-Husayn! - fix: set the image Content-Type from the format produced by the Images binding

    The Images binding can fall back to another format than the requested one, i.e. from AVIF to WebP for large images. /_next/image responses were labelled with the requested format, so the Content-Type could disagree with the image bytes.

  • #1420 afea1a0 Thanks @​cpruijsen! - fix: skip route directories matching the loadManifest globs

    opennextjs-cloudflare build no longer fails with EISDIR or an unresolved import when an App Router route directory matches an internal manifest glob. Only manifest files are now inlined.

  • #1423 a515128 Thanks @​Adnan-Husayn! - fix: do not log Failed to copy for packages whose exports is a string

1.20.9

Patch Changes

... (truncated)

Commits
  • 71c0c56 Version Packages (#1452)
  • 5d8c5bc chore: bump @opennextjs/aws to 4.1.11 (#1453)
  • f993c8c fix(patches): include preview-props.json in loadManifest glob for Next.js 16....
  • 2c37a8a Version Packages (#1447)
  • a6893b8 chore: bump @opennextjs/aws to 4.1.10 (#1451)
  • 6be5daf fix: do not bundle @vercel/og into the Node.js middleware when it is not us...
  • 37ede26 Version Packages (#1421)
  • 66b4a2d chore: bump @opennextjs/aws to 4.1.9 (#1426)
  • 82486c8 refactor: write next-env.mjs in a single call (#1422)
  • a515128 fix: do not log Failed to copy for packages whose exports is a string (#1...
  • Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).

8.5.29

Changelog

Sourced from postcss's changelog.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).

8.5.29

Commits
  • f1aca7e Release 8.5.30 version
  • 9d83445 Update dependencies
  • 6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
  • 1fd8f88 Add missed changes in changelog
  • a7a1f34 Release 8.5.29 version
  • b55a36d Update dependencies
  • 7647a81 Escape </style> in output of non-Root nodes (#2163)
  • 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
  • ebffa97 Add postcss-smooth-corners plugin
  • 57d6401 Speed up source map cleaning
  • Additional commits viewable in compare view

Updates wrangler from 4.146.0 to 4.151.0

Release notes

Sourced from wrangler's releases.

wrangler@4.151.0

Minor Changes

  • #16245 d6b1c82 Thanks @​WalshyDev! - Include source maps by default in wrangler build --experimental-cf-build-output

    Build Output now matches wrangler deploy and wrangler versions upload, which upload source maps by default, so Workers built for tools like cf get stack traces that point at the original source. Source maps that can't be resolved are skipped rather than failing the build. Set upload_source_maps = false to opt out.

Patch Changes

  • #16220 97b2fb1 Thanks @​FlorentCollin! - Support local D1 queries through the experimental d1_binding_jsrpc compatibility flag

    Local D1 bindings now implement the RPC query backend used by D1Database.query() and prepared-statement methods when the flag is enabled. Queries reuse local SQLite execution, including transactional batches, execution metadata, and session bookmarks, while bindings without the flag continue to use HTTP. Update the bundled workerd runtime to 1.20261012.1 and align the default compatibility date with that release.

  • Updated dependencies [f360829, 97b2fb1, 97b2fb1, acd2822]:

wrangler@4.150.0

Minor Changes

  • #16231 091e5ec Thanks @​WalshyDev! - Upload source maps by default for wrangler deploy, wrangler versions upload and wrangler preview

    When upload_source_maps isn't set in config or via --upload-source-maps, Wrangler now generates and uploads source maps so stack traces in logs and wrangler tail point at your original source without extra setup. In this default mode, source maps that can't be resolved (for example inline data: maps or missing .map files from a custom build) are skipped rather than failing the upload. Setting upload_source_maps = true keeps the existing strict behaviour, and upload_source_maps = false (or --no-upload-source-maps for deploy and versions upload) opts out.

    wrangler build --experimental-cf-build-output is unchanged and still only includes source maps when upload_source_maps = true.

  • #16128 daae435 Thanks @​redsteadz! - Stop wrangler deploy, wrangler versions upload and wrangler preview in projects that build for the Cloudflare CLI (cf)

    If your project builds through cf, deploying it with Wrangler reads a different configuration, so it could update the wrong Worker or fail without explaining why. These commands now stop before uploading anything, name the .cloudflare/output directory they found, and tell you to run cf deploy instead. If that directory is just left over from an earlier build, deleting it restores the Wrangler workflow.

    Ordinary Wrangler projects are unaffected, and --dry-run still works on deploy and versions upload. This is a new guard for the experimental Build Output Specification rather than a fix, and it gives three stable commands a failure mode they did not have before, so it is a minor.

Patch Changes

  • #16161 fcf625d Thanks @​dario-piotrowicz! - Clarify the Worker not found error during CI deploy validation

    Wrangler now reports that the configured Worker could not be found in the account instead of incorrectly describing the failure as a name mismatch.

  • #16156 18f061c Thanks @​armancharan! - Ignore .wrangler writes in the dev assets watcher

    wrangler dev reloaded in a loop when assets.directory was the project root, because the assets watcher treated wrangler's own writes under .wrangler as asset changes and dropped in-flight requests. The watcher now ignores the project's .wrangler directory and dev.persist, except when that path is the assets directory.

  • #16025 61e07fd Thanks @​kohjunhao! - Fix optional Docker lookups printing Docker CLI errors during successful builds

    cf build looks for Container images left behind by earlier builds so it can remove them. This lookup is best effort, but when Docker could not be reached it still printed errors such as Cannot connect to the Docker daemon, even when the build succeeded and no image needed Docker. Docker commands whose output Wrangler reads no longer forward the Docker CLI's error output to the terminal. If one of these commands fails in a way that stops the command, the error message still includes the Docker CLI's output.

  • #16151 cafd3f9 Thanks @​DevVettel! - Time out the OAuth token request instead of waiting indefinitely

    The request that exchanges an authorization code or refresh token for an access token had no timeout, so a stalled connection (for example behind an HTTP proxy) could leave wrangler login hanging silently for many minutes after the browser step had succeeded. The request now gives up after 30 seconds and reports that the Cloudflare auth server could not be reached.

  • #15517 ea64ec4 Thanks @​xgame92! - Preserve binding options when provisioning resources through a redirected config

... (truncated)

Commits
  • b81efbc Version Packages (#16241)
  • d6b1c82 Generate source maps by default for Vite plugin Workers and Build Output (#16...
  • fb3d9c8 Version Packages (#16162)
  • 091e5ec [wrangler] Upload source maps by default (#16231)
  • ea64ec4 [wrangler] Preserve D1 migration paths during redirected provisioning (#15517)
  • d232454 [wrangler] Preserve public HTTPS response URLs behind TLS-terminating proxies...
  • 18f061c [wrangler] Ignore .wrangler writes in the dev assets watcher (#16156)
  • fdd4b53 [wrangler] Fix preview URL warning E2E snapshot (#16213)
  • fcf625d Clarify the Worker not found error during CI deploy validation (#16161)
  • 794855c [ci] Shorten test critical path and expose flaky retries (#16179)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the patch-and-minor group across 1 directory with 7…
af98d26 
… updates

Bumps the patch-and-minor group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [@opennextjs/cloudflare](https://github.com/opennextjs/opennextjs-cloudflare/tree/HEAD/packages/cloudflare) | `1.20.7` | `1.20.12` |
| [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.30` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.146.0` | `4.151.0` |



Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `next` from 16.3.8 to 16.4.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.8...v16.4.2)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@opennextjs/cloudflare` from 1.20.7 to 1.20.12
- [Release notes](https://github.com/opennextjs/opennextjs-cloudflare/releases)
- [Changelog](https://github.com/opennextjs/opennextjs-cloudflare/blob/main/packages/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/opennextjs/opennextjs-cloudflare/commits/@opennextjs/cloudflare@1.20.12/packages/cloudflare)

Updates `postcss` from 8.5.28 to 8.5.30
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.28...8.5.30)

Updates `wrangler` from 4.146.0 to 4.151.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.151.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: next
  dependency-version: 16.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@opennextjs/cloudflare"
  dependency-version: 1.20.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: postcss
  dependency-version: 8.5.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: wrangler
  dependency-version: 4.151.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants