[dependabot]

Bumps the npm-minor-patch group with 5 updates:

Package	From	To
@next/mdx	16.4.2	16.4.3
@next/third-parties	16.4.2	16.4.3
next	16.4.2	16.4.3
@opennextjs/cloudflare	1.20.12	1.20.13
wrangler	4.151.1	4.152.0

Updates @next/mdx from 16.4.2 to 16.4.3

Release notes

Sourced from @​next/mdx's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• v16.4.2
• [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
• [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
• [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
• [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
• [lts-active] test: Pin react-virtualized (#100545)
• [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
• [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
• [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits

• 29bbeab v16.4.3
• See full diff in compare view

Updates @next/third-parties from 16.4.2 to 16.4.3

Release notes

Sourced from @​next/third-parties's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• v16.4.2
• [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
• [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
• [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
• [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
• [lts-active] test: Pin react-virtualized (#100545)
• [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
• [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
• [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits

• 29bbeab v16.4.3
• See full diff in compare view

Updates next from 16.4.2 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• v16.4.2
• [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
• [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
• [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
• [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
• [lts-active] test: Pin react-virtualized (#100545)
• [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
• [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
• [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

Commits

• 29bbeab v16.4.3
• 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
• 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
• cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
• 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
• f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
• c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
• f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
• f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
• See full diff in compare view

Updates @opennextjs/cloudflare from 1.20.12 to 1.20.13

Release notes

Sourced from @​opennextjs/cloudflare's releases.

@​opennextjs/cloudflare@​1.20.13

Patch Changes

• #1460 8e60ded Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.12

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.12

  • Fix Next.js 15 builds failing with "Next.js version 15.x.x is not supported by the Next.js team" now that Next.js 15 is 2 years old. A major version stays supported until the second next major (Next.js 17) is released.

• #1414 15f4c9e Thanks @​allangreatsoftwares! - fix: render server action redirects for the host of the request

• #1439 1ebbc55 Thanks @​mathurshubham! - fix: inline named webpack chunks (webpackChunkName) in the server runtime

  Apps built with webpack returned a 500 with Error: Unknown chunk N when the server code loaded a chunk named with /* webpackChunkName: "..." */, i.e. from a next/dynamic or import() in the app or in a dependency. Named chunks are now bundled into the Worker and load correctly.

Changelog

Sourced from @​opennextjs/cloudflare's changelog.

1.20.13

Patch Changes

• #1460 8e60ded Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.12

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.12

  • Fix Next.js 15 builds failing with "Next.js version 15.x.x is not supported by the Next.js team" now that Next.js 15 is 2 years old. A major version stays supported until the second next major (Next.js 17) is released.

• #1414 15f4c9e Thanks @​allangreatsoftwares! - fix: render server action redirects for the host of the request

• #1439 1ebbc55 Thanks @​mathurshubham! - fix: inline named webpack chunks (webpackChunkName) in the server runtime

  Apps built with webpack returned a 500 with Error: Unknown chunk N when the server code loaded a chunk named with /* webpackChunkName: "..." */, i.e. from a next/dynamic or import() in the app or in a dependency. Named chunks are now bundled into the Worker and load correctly.

Commits

• adb4f68 Version Packages (#1457)
• 8e60ded chore: bump @opennextjs/aws to 4.1.12 (#1460)
• 15f4c9e fix: render server action redirects for the host of the request (#1414)
• 1ebbc55 fix: inline named webpack chunks (webpackChunkName) in the server runtime (...
• See full diff in compare view

Updates wrangler from 4.151.1 to 4.152.0

Release notes

Sourced from wrangler's releases.

[email protected]

Patch Changes

• #15611 4508172 Thanks @​taylorlee! - Allow wrangler dev to start module Workers without a default export

  Previously, wrangler dev failed to start module Workers that exported only named entrypoints, such as RPC services, unless an unused default export was added. These Workers now start normally in local development without that workaround.

• #16370 61fc739 Thanks @​WalshyDev! - Fetch the remote config diff from the configured compliance region

  When a Worker was last deployed from the dashboard, wrangler deploy and wrangler versions upload download its remote configuration to compare with the local one. These requests ignored the compliance_region field in the Wrangler configuration file and only honoured the CLOUDFLARE_COMPLIANCE_REGION environment variable. A FedRAMP High Worker configured through the config file would send them to api.cloudflare.com instead of api.fed.cloudflare.com, and the deploy would fail with authentication errors. They now use the same compliance region as the rest of the deploy.

• #15846 a88cac4 Thanks @​oddharsh! - Fail with an error instead of hanging when local dev requests can't work under Bun

  Bun's fetch() ignores the undici dispatcheroven-sh/bun#39247createTestHarness()'s server.fetch() and server.getWorker()'s fetch(), email() and scheduled() now throw a UserError, requests to the dev server URL get a 503 naming the cause, and starting remote bindings throws a UserError. Each of these used to hang with no error. server.getWorker().getEnv() and getExport() keep working under Bun.

• #16359 262021d Thanks @​tw4! - Stop --strict deploys and version uploads from aborting when the API omits optional binding fields

  Previously, wrangler deploy --strict and wrangler versions upload --strict could report a destructive change for an unchanged configuration, for example an R2 bucket in the default jurisdiction, because a field the API left out was compared as removed. Missing and unset optional fields are now treated as equal, so these commands proceed when the local configuration matches the deployed Worker.

• Updated dependencies [3464abc]:

  • [email protected]

[email protected]

Patch Changes

• #16307 37ab91c Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261006.1	^5.20261016.1
  workerd	1.20261012.1	1.20261016.1

• #16352 0ae7926 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261016.1	^5.20261019.1
  workerd	1.20261016.1	1.20261019.1

• Updated dependencies [37ab91c, 0ae7926]:

  • [email protected]

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.