-
Notifications
You must be signed in to change notification settings - Fork 0
Update dependency @opennextjs/cloudflare to v1.16.4 #14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the
Comment |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
web4 | 2c2fe69 | Feb 10 2026, 07:10 PM |
Vulnerable Libraries (2)
More info on how to fix Vulnerable Libraries in JavaScript. 👉 Go to the dashboard for detailed results. 📥 Happy? Share your feedback with us. |
Update dependency @opennextjs/cloudflare to v1.16.1
🚨 Report Summary
For more details view the full report in OpenZeppelin Code Inspector |
a343c05 to
860ee11
Compare
|
860ee11 to
6188618
Compare
76d837a to
39a2640
Compare
39a2640 to
390c8ad
Compare
390c8ad to
71b5f2a
Compare
71b5f2a to
e66cbb3
Compare
e66cbb3 to
b341db1
Compare
a9e6634 to
5fee50c
Compare
5fee50c to
217f2b2
Compare
217f2b2 to
4da8f57
Compare
|
4da8f57 to
83a6790
Compare
792d860 to
acbbfd3
Compare
acbbfd3 to
e0a72eb
Compare
e0a72eb to
fd6e9c3
Compare
fd6e9c3 to
260c38d
Compare
260c38d to
2be7d0c
Compare
2be7d0c to
19efe81
Compare
19efe81 to
7fe668d
Compare
7fe668d to
45896b3
Compare
package.json
Outdated
| }, | ||
| "dependencies": { | ||
| "@opennextjs/cloudflare": "1.3.1", | ||
| "@opennextjs/cloudflare": "1.15.1", |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
45896b3 to
520f665
Compare
package.json
Outdated
| }, | ||
| "dependencies": { | ||
| "@opennextjs/cloudflare": "1.3.1", | ||
| "@opennextjs/cloudflare": "1.16.0", |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
520f665 to
ce15371
Compare
ce15371 to
270364b
Compare
270364b to
44f8cd1
Compare
44f8cd1 to
2c2fe69
Compare
|



This PR contains the following updates:
1.3.1→1.16.4Release Notes
opennextjs/opennextjs-cloudflare (@opennextjs/cloudflare)
v1.16.4Compare Source
Patch Changes
#1122
6c94a4aThanks @dario-piotrowicz! - Inmigratecommand, avoid adding unnecessary newlines when creating files#1122
6c94a4aThanks @dario-piotrowicz! - fixmigratecommand incorrectly erroring if the target application doesn't have apublicdirectory#1122
6c94a4aThanks @dario-piotrowicz! - Bump@opennextjs/awsto 3.9.16migratecommand not updating Next.js config filesSee details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.16
#1097
fea645fThanks @dario-piotrowicz! - Add--helpand--versionto theopennextjs-cloudflareCLIImprove the
opennextjs-cloudflareCLI by:opennextjs-cloudflare foo) display a clear and helpful error message-h|--helpflag to display the CLI's help message-v|--versionflag to display the package's versionv1.16.3Compare Source
Patch Changes
#1113
09c41f1Thanks @anonrig! - bump@opennextjs/awsto 3.9.15See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.15
v1.16.2Compare Source
Patch Changes
e6938a0Thanks @vicb! - allow using a regional cache with KVv1.16.1Compare Source
Patch Changes
8676c78Thanks @vicb! - EmptyNextNodeServer#handleNextImageRequestto avoid pulling unneeded deps (in #1098)v1.16.0Compare Source
Minor Changes
#1083
b062597Thanks @dario-piotrowicz! - feature: addmigratecommand to set up OpenNext for Cloudflare adapterThis command helps users migrate existing Next.js applications to the OpenNext Cloudflare adapter by automatically setting up all necessary configuration files, dependencies, and scripts.
To use the command simply run:
npx opennextjs-cloudflare migratePatch Changes
#1092
4279043Thanks @vicb! - Check for supported Next versionThe build will now error for unsupported Next version which may contain unpatched security vulnerabilities.
You can bypass the check using the
--dangerouslyUseUnsupportedNextVersionflag.v1.15.1Compare Source
Patch Changes
74302ecThanks @vicb! - fix the detection of the runtime (webpack vs turbopack)v1.15.0Compare Source
Minor Changes
ae3d43dThanks @vicb! - Next 16 is now supportedPatch Changes
#1076
c99eefdThanks @vicb! - fix: do not bundle og when not usedThis saves ~500kB when og is not used
#1079
6ac789aThanks @vicb! - fix: use the correct runtime (i.e. webpack or turbopack)#1078
249f738Thanks @vicb! - drop unused react-dom modulesThis saves ~500kB on the output bundle
v1.14.10Compare Source
Patch Changes
#1071
886c742Thanks @vicb! - fix: patch Next config for missing fields.There was a regression in Next 16.1.0 (vercel/next.js#86830) and some fields were missing in the config.
The Next team fixed that in 16.1.4 (vercel/next.js#88733).
This PR introduce a patch for 16.1.0-16.1.3
v1.14.9Compare Source
Patch Changes
#1070
f7c6b3aThanks @vicb! - bump@opennextjs/awsto 3.9.8See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.8
#1057
0230cbeThanks @vicb! - Do not inject setImmediate/clearImmediate in the global scope#1069
4ee4ba3Thanks @vicb! - Check that wrangler is >= 4.59.2 when building Next 16.1+.To ensure
workerdhas a required fix tosetImmediatev1.14.8Compare Source
Patch Changes
9222070Thanks @vicb! - fix r2 bulk put to respect bucket jurisdictionv1.14.7Compare Source
Patch Changes
d447125Thanks @vicb! - Support composable cache in Next 16v1.14.6Compare Source
Patch Changes
#1043
c83cb83Thanks @vicb! - fix for CVE-2025-67779See https://nextjs.org/blog/security-update-2025-12-11
v1.14.5Compare Source
Patch Changes
#1042
763c4ecThanks @vicb! - Bump Next, React, and @opennextjs/aws to fix vulnerabilities (CVE-2025-55184 and CVE-2025-55183)See https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
See https://nextjs.org/blog/security-update-2025-12-11
See https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.5
#1034
721bff0Thanks @james-elicx! - output more wrangler command logs when the command fails#1023
a4a2f02Thanks @dario-piotrowicz! - When runningwrangler deployadd aOPEN_NEXT_DEPLOYenvironment variable to let wrangler know that it is being run by open-nextv1.14.4Compare Source
Patch Changes
#1020
07919d8Thanks @dario-piotrowicz! - Add missing WORKER_SELF_REFERENCE service binding in the wrangler.jsonc that the CLI creates#1032
1de4899Thanks @vicb! - fix(images): allow any local path when no localPatterns are specifiedv1.14.3Compare Source
Patch Changes
#1025
c3aba94Thanks @vicb! - bump@opennextjs/awsto 3.9.4See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.4
#1025
c3aba94Thanks @vicb! - Bump Nextv1.14.2Compare Source
Patch Changes
#1021
250aba2Thanks @vicb! - bump@opennextjs/awsto 3.9.3See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.3
#1021
250aba2Thanks @vicb! - Bump Nextv1.14.1Compare Source
Patch Changes
#1016
2200b4bThanks @vicb! - Update e2e tests to Next 16 (webpack)#1015
e8971cdThanks @vicb! - memory queue: retrieve the preview ID fromprocess.env#1012
5f6c0a6Thanks @pilcrowonpaper! - Add image binding to Wrangler configuration template file#1017
a6904a4Thanks @vicb! - fix:response.validatewith the turbo pages runtime#1014
f4b53b9Thanks @vicb! - bump@opennextjs/awsto 3.9.1See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.1
#1019
2a3ee86Thanks @vicb! - awaitheaders()v1.14.0Compare Source
Minor Changes
50d7427Thanks @pilcrowonpaper! - feat: support image optimization using the image bindingv1.13.1Compare Source
Patch Changes
#1001
fdf61b4Thanks @vicb! - Bump wrangler to ^4.49.1#998
f69787cThanks @vicb! - Warn when using Next 16v1.13.0Compare Source
Minor Changes
b95e7caThanks @vicb! - usewrangler r2 bulk putfor R2 cache populationPatch Changes
#994
ab2d805Thanks @vicb! - bump@opennextjs/awsto 3.9.0See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.0
v1.12.0Compare Source
Minor Changes
#973
8cb7669Thanks @petebacondarwin! - Add standard Next template generated from create-next-app that will be used by create-cloudflare going forward#983
68aed26Thanks @vicb! - feat: turbopack supportv1.11.1Compare Source
Patch Changes
#968
ddb0589Thanks @rgembalik! - fix: Compiled config is now imported usingpathToFileURLto avoid crashes on Windows.#958
7edf91cThanks @vicb! - fix: add missingawaits#978
d7ad53eThanks @vicb! - error early when a node middleware is detected#976
93f4c8aThanks @rgembalik! - fix: shell quoting on windows machines to avoid upload errors for routes with[...path]segmentsv1.11.0Compare Source
Minor Changes
#925
62fee71Thanks @krzysztof-palka-monogo! - feature: optional batch upload for faster R2 cache populationThis update adds optional batch upload support for R2 cache population, significantly improving upload performance for large caches when enabled via .env or environment variables.
Key Changes:
Optional Batch Upload: Configure R2 credentials via .env or environment variables to enable faster batch uploads:
R2_ACCESS_KEY_IDR2_SECRET_ACCESS_KEYCF_ACCOUNT_IDAutomatic Detection: When credentials are detected, batch upload is automatically used for better performance
Smart Fallback: If credentials are not configured, the CLI falls back to standard Wrangler uploads with a helpful message about enabling batch upload for better performance
All deployment commands support batch upload:
populateCache- Explicit cache populationdeploy- Deploy with cache populationupload- Upload version with cache populationpreview- Preview with cache populationPerformance Benefits (when batch upload is enabled):
Usage:
Add the credentials in a
.env/.dev.varsfile in your project root:You can also set the environment variables for CI builds.
Note:
You can follow documentation https://developers.cloudflare.com/r2/api/tokens/ for creating API tokens with appropriate permissions for R2 access.
Patch Changes
#951
e3aba83Thanks @vicb! - bump@opennextjs/awsto 3.8.5See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.8.5
#948
0c655c3Thanks @vicb! - refactor: do not create a wrangler config when a custom one is passedv1.10.1Compare Source
Patch Changes
#945
f73ac0fThanks @vicb! - bump@opennextjs/awsto 3.8.4See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.8.4
v1.10.0Compare Source
Minor Changes
#937
32ba91aThanks @vicb! - feat: retrieve CLI environment variables fromprocess.envand.env*filesRecommended usage on CI:
process.env(i.e.CF_ACCOUNT_ID)wrangler.jsonc(i.e.R2_CACHE_PREFIX_ENV_NAME)Recommended usage for local dev:
.dev.vars*or.env*file (i.e.CF_ACCOUNT_ID)wrangler.jsonc(i.e.R2_CACHE_PREFIX_ENV_NAME)Patch Changes
#941
59f52e0Thanks @vicb! - bump@opennextjs/awsto 3.8.2See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.8.2
#939
54c47e5Thanks @vicb! - perf: low-hanging fruitsv1.9.2Compare Source
Patch Changes
#932
0c7d1aeThanks @vicb! - bump@opennextjs/awsto 3.8.1See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.8.1
v1.9.1Compare Source
Patch Changes
#918
eeb18bbThanks @vicb! - refactor: account for empty tag list in tag cache#921
07487a4Thanks @vicb! - bump@opennextjs/awsto 3.8.0See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.8.0
v1.9.0Compare Source
Minor Changes
dcc864dThanks @vicb! - feat: add an experimental KV based tag cachePatch Changes
ba4cac5Thanks @vicb! - refactor: only try to purge the cache when invalidation is configuredv1.8.5Compare Source
Patch Changes
#901
17a4beaThanks @vicb! - chore: bump wrangler to ^4.38.0#903
7fced0fThanks @vicb! - fix: enable using workerd process v2process v2 is an updated version of
node:processactive by default after 2025-09-15v1.8.4Compare Source
Patch Changes
#888
51322a8Thanks @james-elicx! - fix: remote flag not working for preview command's cache populationPreviously, passing the
--remoteflag when runningopennextjs-cloudflare preview --remotewould not result in the remote preview binding being populated, and would throw errors due to a missing preview flag when populating Workers KV. The remote flag is now supported for the cache popoulation step when running the preview command.opennextjs-cloudflare preview --remotewill populate the remote binding for the preview ID specified in your Wrangler config.opennextjs-cloudflare previewwill continue to populate the local binding in your Wrangler config.v1.8.3Compare Source
Patch Changes
#892
1ee505fThanks @vicb! - Bump @opennextjs/aws to 3.7.7See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.7.7
v1.8.2Compare Source
Patch Changes
bf1a6f6Thanks @vicb! - fix: type error during buildv1.8.1Compare Source
Patch Changes
#878
23b67ceThanks @sommeeeer! - fix: Respect trailing slash config for _next/image route in worker#882
a6283afThanks @vicb! - perf: skip lazy update on cache hit when cache purge is enabled#881
9a746d2Thanks @vicb! - fix: detection of cache purgev1.8.0Compare Source
Minor Changes
728ad99Thanks @james-elicx! - feat: support for a custom OpenNext config path with the--openNextConfigPathflagPatch Changes
#872
dc76d6eThanks @alex-all3dp! - Fix check for missing CACHE_PURGE_ZONE_ID#862
728ad99Thanks @james-elicx! - refactor: deprecate usage of the--configPathflag for the Wrangler config, in favour of the--configflag.v1.7.1Compare Source
Patch Changes
#865
f1e9457Thanks @sommeeeer! - fix: Ensure request.url reflects the actual host protocol in route handlers#867
2c1de0bThanks @vicb! - Log cache purge errors as errorsv1.7.0Compare Source
Minor Changes
#848
f80c801Thanks @sommeeeer! - Ensure that the initial request.signal is passed to the wrapperrequest.signal.onabortis now supported in route handlers. It requires that the signal from the original worker's request is passed to the handler. It will then pass along thatAbortSignalthrough thestreamCreatorin the wrapper. This signal will destroy the response sent to NextServer when a client aborts, thus triggering the signal in the route handler.See the changelog in Cloudflare here.
Note:
If you have a custom worker, you must update your code to pass the original
request.signalto the handler. You also need to enable the compatibility flagenable_request_signalto use this feature.For example:
#850
ce5c7b4Thanks @dario-piotrowicz! - Add option for regional cache to skip tagCache on cache hitsWhen the tag regional cache finds a value in the incremental cache, checking such value in the tagCache can be skipped, this helps reducing response times at the tradeoff that the user needs to either use the automatic cache purging or manually purge the cache when appropriate. For this the
bypassTagCacheOnCacheHitoption is being added to theRegionalCacheclass.Example:
Patch Changes
#858
7233c03Thanks @vicb! - bump @opennextjs/aws to 3.7.6See the changes at opennextjs/opennextjs-aws@v3.7.4...v3.7.6
#857
b8b38eeThanks @vicb! - Clean output directory beforenext buildv1.6.5Compare Source
Patch Changes
10fc603Thanks @vicb! - perf: drop the babel dependencyv1.6.4Compare Source
Patch Changes
#838
90f451dThanks @conico974! - bump @opennextjs/aws to 3.7.4See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.7.4
#833
c9705e5Thanks @sommeeeer! - Update the patches to support Next.js 15.4"v1.6.3Compare Source
Patch Changes
#828
d00b3a1Thanks @vicb! - bump @opennextjs/aws to 3.7.2See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.7.2
#830
daf36faThanks @vicb! - detect more image typesSync of vercel/next.js#82118
#832
67e71b9Thanks @vicb! - fix: --noMinify stop minifying the bundlev1.6.2Compare Source
Patch Changes
#820
c202302Thanks @conico974! - Fix regional cache for the DOShardedTagCache#818
be6a492Thanks @dario-piotrowicz! - fixdeployanduploadcommands not taking into account environment variables#825
3de7962Thanks @conico974! - Add an option to persist missing tags in the regional tag cache#816
c46eeeeThanks @vicb! - bump @opennextjs/aws to 3.7.1See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.7.1
v1.6.1Compare Source
Patch Changes
89ce96bThanks @james-elicx! - fix: wrangler config not passed to cache populationv1.6.0Compare Source
Minor Changes
b158e8bThanks @james-elicx! - refactor: use yargs for the cliPatch Changes
fdfa5afThanks @vicb! - fix skew protection handling of POST requestsv1.5.3Compare Source
Patch Changes
72d8d5bThanks @alex-all3dp! - Fix missing SQL parameter bindings in D1NextModeTagCache.getLastRevalidated()v1.5.2Compare Source
Patch Changes
#785
e0f39b6Thanks @vicb! - Cancel the unused stream (body)#789
040731cThanks @vicb! - cancel the body stream when unconsumed#795
d18cd9dThanks @sommeeeer! - fix(patches): Update patchInstrumentation and loadManifest to work with Next 15.4#800
a3e7551Thanks @vicb! - wrangler should not load .env filesv1.5.1Compare Source
Patch Changes
#781
e984e8fThanks @vicb! - fallback to the upstream image content-type header#779
224a2f0Thanks @petebacondarwin! - Ensure that thecloudflarelibrary is available at runtimePreviously it was only a
devDependencywhich meant it was missing in real life installations of the tool.The error looked like:
v1.5.0Compare Source
Minor Changes
#768
40f7e72Thanks @vicb! - Add an asset resolver to supportrun_worker_first=true#746
6d020feThanks @vicb! - feat: add support for experimental skew protectionPatch Changes
bd448a8Thanks @vicb! - Add support for images CSP, disposition, and allow SVGv1.4.0Compare Source
Minor Changes
#764
af963f0Thanks @vicb! - Update @opennextjs/aws to 3.7.03.7.0 Release notes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
This change is