chore(deps): update docs - minor revisions#923
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
Documentation Preview
You're seeing this because the docs/samples were updated. |
ae1db8f to
bf05dfc
Compare
2692235 to
3484f90
Compare
446c045 to
0a3be8b
Compare
kawaijoe
approved these changes
Mar 19, 2026
kawaijoe
requested changes
Mar 19, 2026
kawaijoe
added a commit
that referenced
this pull request
Mar 19, 2026
Combine Renovate PRs #923 (minor dependency updates) and #926 (eslint major bump): - Upgrade Next.js from 16.1.7 to 16.2.0 and related packages - Update fumadocs (core/mdx/ui) to latest patch versions - Bump Tailwind CSS 4.1.18 → 4.2.2 with supporting packages - Update React 19.2.3 → 19.2.4 and related dependencies - Update utilities: prettier, postcss, zod, wrangler, and others Note: Skipped eslint 9 → 10 major bump due to upstream compatibility issues with @typescript-eslint/utils (used by eslint-config-next). Will wait for typescript-eslint 9.x. Verified: pnpm lint and Next.js build (all 144 pages generated successfully).
kawaijoe
added a commit
that referenced
this pull request
Mar 19, 2026
* chore(docs): upgrade dependencies from PRs #923 and #926 Combine Renovate PRs #923 (minor dependency updates) and #926 (eslint major bump): - Upgrade Next.js from 16.1.7 to 16.2.0 and related packages - Update fumadocs (core/mdx/ui) to latest patch versions - Bump Tailwind CSS 4.1.18 → 4.2.2 with supporting packages - Update React 19.2.3 → 19.2.4 and related dependencies - Update utilities: prettier, postcss, zod, wrangler, and others Note: Skipped eslint 9 → 10 major bump due to upstream compatibility issues with @typescript-eslint/utils (used by eslint-config-next). Will wait for typescript-eslint 9.x. Verified: pnpm lint and Next.js build (all 144 pages generated successfully). * chore(docs): revert next 16.2.0, keep other upgrades Revert Next.js to 16.1.7 — @opennextjs/cloudflare doesn't handle the new prefetch-hints.json manifest from Next.js 16.2, causing 500 errors on Cloudflare Workers. Also reverts eslint-config-next and @next/third-parties to match.
0a3be8b to
e632607
Compare
Contributor
|
Update of nextjs is blocked by: opennextjs/opennextjs-cloudflare#1157 Upgrading other smaller dependencies in a separate pr for the time being: #931 |
e632607 to
0b540a7
Compare
3874dcf to
318bdc9
Compare
Pante
pushed a commit
that referenced
this pull request
Mar 21, 2026
* chore(docs): upgrade dependencies from PRs #923 and #926 Combine Renovate PRs #923 (minor dependency updates) and #926 (eslint major bump): - Upgrade Next.js from 16.1.7 to 16.2.0 and related packages - Update fumadocs (core/mdx/ui) to latest patch versions - Bump Tailwind CSS 4.1.18 → 4.2.2 with supporting packages - Update React 19.2.3 → 19.2.4 and related dependencies - Update utilities: prettier, postcss, zod, wrangler, and others Note: Skipped eslint 9 → 10 major bump due to upstream compatibility issues with @typescript-eslint/utils (used by eslint-config-next). Will wait for typescript-eslint 9.x. Verified: pnpm lint and Next.js build (all 144 pages generated successfully). * chore(docs): revert next 16.2.0, keep other upgrades Revert Next.js to 16.1.7 — @opennextjs/cloudflare doesn't handle the new prefetch-hints.json manifest from Next.js 16.2, causing 500 errors on Cloudflare Workers. Also reverts eslint-config-next and @next/third-parties to match.
dbdeb26 to
7eaf04a
Compare
8c3b387 to
9ac8bcc
Compare
9ac8bcc to
e128ed7
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
16.2.0→16.2.11.17.1→1.18.016.1.6→16.2.116.6.17→16.7.714.2.10→14.2.1116.6.17→16.7.716.1.7→16.2.14.7.3→4.8.04.75.0→4.78.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
vercel/next.js (@next/third-parties)
v16.2.1Compare Source
Core Changes
cacheComponents(#91711){eval:true}in worker_threads constructors (#91666)Credits
Huge thanks to @icyJoseph, @abhishekmardiya, @ijjk, @mischnic, @unstubbable, @sokra, and @lukesandberg for helping!
opennextjs/opennextjs-cloudflare (@opennextjs/cloudflare)
v1.18.0Compare Source
Minor Changes
#1159
75f5f0aThanks @edmundhung! - Use remote dev for R2 cache populationUsing remote dev is not subject to the Cloudflare API rate limit of 1,200 requests per 5 minutes that caused failures for large applications with thousands of prerendered pages.
v1.17.3Compare Source
Patch Changes
#1160
161e726Thanks @matthewvolk! - fix(patches): includeprefetch-hints.jsonin loadManifest build-time inliningNext.js 16.2.0 introduced
prefetch-hints.jsonas a new server manifest loaded unconditionallyby
NextNodeServer.getPrefetchHints(). The file exists in the build output but wasn't matched bythe glob pattern
*-manifest.json, causing the patchedloadManifest()to throw at runtime.v1.17.2Compare Source
Patch Changes
#1151
a143282Thanks @nathanschram! - fix: handle known optional manifests gracefully in loadManifest/evalManifest patchesNext.js loads certain manifests with
handleMissing: true(returning{}when the file doesn'texist). The adapter's build-time glob scan doesn't find these files when they're conditionally
generated, so the patched function threw at runtime, crashing dynamic routes with 500.
Instead of a blanket catch-all, handle only the specific optional manifests from Next.js
route-module.ts:react-loadable-manifest(Turbopack per-route, not all routes have dynamic imports)subresource-integrity-manifest(only whenexperimental.sriconfigured)server-reference-manifest(App Router only)dynamic-css-manifest(Pages Router + Webpack only)fallback-build-manifest(only for/_errorpage)prefetch-hints(new in Next.js 16.2)_client-reference-manifest.js(optional for static metadata routes, evalManifest)Manifest matching strips
.jsonbefore comparison since some Next.js constants omitthe extension (
SUBRESOURCE_INTEGRITY_MANIFEST,DYNAMIC_CSS_MANIFEST, etc.).Unknown manifests still throw to surface genuine errors.
Fixes #1141.
fuma-nama/fumadocs (fumadocs-core)
v16.7.7Compare Source
Patch Changes
9eb3c84: fix TOC line offset0f39a9f: Improve TOC rendering for steps0a6507b]v16.7.6Compare Source
Patch Changes
6849807: Fixshiki.csspaddingv16.7.5Compare Source
Patch Changes
55479b3: Improve TOC detection logicf9e6367: auto-close TOC popover55479b3]v16.7.4Compare Source
Patch Changes
57c83a5: fix tocv16.7.3Compare Source
Patch Changes
v16.7.2Compare Source
Patch Changes
652c725: Simplify internal typesv16.7.1Compare Source
Patch Changes
11b8691: hotfix75b0b94: Refactor TOC slotv16.7.0Compare Source
Minor Changes
8bdee70: Implement renderer API for replacing layout components, deprecate old optionsbdffeba: ImproveddefineI18nUI()usage: allow language translations to be defined at root config.f45d703: stablize Shiki factory APIPatch Changes
3d17757: Improve<GithubInfo />componentf45d703]45aa454]vercel/next.js (next)
v16.2.1Compare Source
v16.2.0Compare Source
bvaughn/react-resizable-panels (react-resizable-panels)
v4.8.0Compare Source
useDefaultLayouthook automatically migrates legacy layouts to version 4 format; see issue 605 for details on how this works.v4.7.6Compare Source
Panelaria-disabledattribute withdata-disabledv4.7.5Compare Source
defaultSizepropv4.7.4Compare Source
cloudflare/workers-sdk (wrangler)
v4.78.0Compare Source
Minor Changes
#13031
eeaa473Thanks @WalshyDev! - Add support for Cloudflare Access Service Token authentication via environment variablesWhen running
wrangler devwith remote bindings behind a Cloudflare Access-protected domain, Wrangler previously requiredcloudflared access loginwhich opens a browser for interactive authentication. This does not work in CI/CD environments.You can now set the
CLOUDFLARE_ACCESS_CLIENT_IDandCLOUDFLARE_ACCESS_CLIENT_SECRETenvironment variables to authenticate using an Access Service Token instead:Additionally, when running in a non-interactive environment (CI) without these credentials, Wrangler now throws a clear, actionable error instead of hanging on
cloudflared access login.#13027
9fcdfcaThanks @G4brym! - feat: Addai_search_namespacesandai_searchbinding typesTwo new binding types for AI Search:
ai_search_namespaces: Namespace binding —namespaceis required and auto-provisioned at deploy time if it doesn't exist (like R2 buckets)ai_search: Single instance binding bound directly to a pre-existing instance in the default namespaceBoth are remote-only in local dev.
#12874
53ed15aThanks @xortive! - Add Workers VPC service support for Hyperdrive originsHyperdrive configs can now connect to databases through Workers VPC services using the
--service-idoption:This enables Hyperdrive to connect to databases hosted in private networks that are accessible through Workers VPC TCP services.
#12852
6b50bfaThanks @Carolx715! - Add interactive data catalog validation to R2 object and lifecycle commands.When performing R2 operations that could affect data catalog state (object put, object delete, lifecycle add, lifecycle set), Wrangler now validates with the API and prompts users for confirmation if a conflict is detected. For bulk put operations, Wrangler prompts upfront before starting the batch. Users can bypass prompts with
--force(-y). In non-interactive/CI environments, the operation proceeds automatically.#13030
0386553Thanks @natewong1313! - Add local mode support for Stream bindingsMiniflare and
wrangler devnow support using Cloudflare Stream bindings locally.Supported operations:
upload()— upload video via URLvideo(id).details(),.update(),.delete(),.generateToken()videos.list()captions.generate(),.list(),.delete()downloads.generate(),.get(),.delete()watermarks.generate(),.list(),.get(),.delete()The following are not yet supported in local mode and will throw:
createDirectUpload()FileFileData is persisted across restarts by default. You must set
streamPersist: falsein Miniflare options to disable persistence.#12874
53ed15aThanks @xortive! - Add--cert-verification-modeoption towrangler vpc service createandwrangler vpc service updateYou can now configure the TLS certificate verification mode when creating or updating a VPC connectivity service. This controls how the connection to the origin server verifies TLS certificates.
Available modes:
verify_full(default) -- verify certificate chain and hostnameverify_ca-- verify certificate chain only, skip hostname checkdisabled-- do not verify the server certificate at allThis applies to both TCP and HTTP VPC service types. When omitted, the default
verify_fullbehavior is used.#12874
53ed15aThanks @xortive! - Add TCP service type support for Workers VPCYou can now create TCP services in Workers VPC using the
--type tcpoption:This enables exposing TCP-based services like PostgreSQL, MySQL, and other database servers through Workers VPC.
Patch Changes
#13039
bc24ec8Thanks @petebacondarwin! - fix: Angular auto-config now correctly handles projects without SSR configuredPreviously, running
wrangler deploy(orwrangler setup) on a plain Angular SPA (created withng newwithout--ssr) would crash withCannot set properties of undefined (setting 'experimentalPlatform'), because the auto-config code unconditionally assumed SSR was configured.Angular projects without SSR are now treated as assets-only deployments: no
wrangler.jsoncmainentry is generated,angular.jsonis not modified, nosrc/server.tsis created, and no extra dependencies are installed.#13036
0b4c21aThanks @pbrowne011! - Fixwrangler deploy --dry-runskipping asset build-artifact validation checksPreviously,
--dry-runskipped the entire asset sync step, which meant it also skipped validation that runs during asset manifest building. This included the check that errors when a_worker.jsfile or directory would be uploaded as a public static asset (which can expose private server-side code), as well as the per-file size limit check.With this fix,
--dry-runnow runsbuildAssetManifestagainst the asset directory when assets are configured, performing the same file-system validation as a real deploy without uploading anything or making any API calls.#13061
535582dThanks @petebacondarwin! - fix: resolve secondary worker types when environment overrides the worker name in multi-worker type generationWhen running
wrangler typeswith multiple-cconfig flags and the secondary worker has named environments that override the worker name (e.g. a worker nameddo-workerwith envstagingwhose effective name becomesdo-worker-staging), service bindings and Durable Object bindings in the primary worker that referencedo-worker-stagingnow correctly resolve to the typed entry point instead of falling back to an unresolved comment type such asDurableObjectNamespace /* MyClass from do-worker-staging */.The fix extends the secondary entries map to also register environment-specific worker names, so that lookups by the env-qualified name (e.g.
do-worker-staging) resolve to the same source file as the base worker name.#13058
992f9a3Thanks @petebacondarwin! - fix: patch undici to prevent fetch() throwing on 401 responses with a request bodyFetching with a request body (string, JSON, FormData, etc.) to an endpoint that returns a 401 would throw
TypeError: fetch failedwith causeexpected non-null body source. This affectedUnstable_DevWorker.fetch()and any other use of undici's fetch in wrangler.The root cause is
isTraversableNavigable()in undici returningtrueunconditionally, causing the 401 credential-retry logic to run in Node.js where it should never apply (there is no browser UI to prompt for credentials). This is tracked upstream in nodejs/undici#4910. Until an upstream fix is released, we apply a patch to undici that returnsfalsefromisTraversableNavigable().#13017
91b7f73Thanks @petebacondarwin! - fix: prevent Docker container builds from spawning console windows on WindowsOn Windows,
detached: trueinchild_process.spawn()gives each child process its own visible console window, causing many windows to flash open duringwrangler deploywith[[containers]]. Thedetachedoption is now only set on non-Windows platforms (where it is needed for process group cleanup), andwindowsHide: trueis added to further suppress console windows on Windows.#12996
f6cdab2Thanks @guybedford! - Fix source phase imports in bundled and non-bundled WorkersWrangler now preserves
import sourcesyntax when it runs esbuild, including module format detection and bundled deploy output. This fixes both--no-bundleand bundled deployments for Workers that import WebAssembly using source phase imports.#12931
ce65246Thanks @dario-piotrowicz! - Improve error message when modules cannot be resolved during bundlingWhen a module cannot be resolved during bundling, Wrangler now suggests using the
aliasconfiguration option to substitute it with an alternative implementation. This replaces esbuild's default suggestion to "mark the path as external", which is not a supported option in Wrangler.For example, if you try to import a module that doesn't exist:
Wrangler will now suggest:
This provides actionable guidance for resolving import errors.
#13049
7a5be20Thanks @nikitassharma! - add library-push flag to containers registries credentialsThis flag is not available for public use.
#13018
9c5ebf5Thanks @tgarg-cf! - Validate that queue consumers in wrangler config only use the "worker" typePreviously, non-worker consumer types (e.g.
http_pull) could be specified in thequeues.consumersconfig. Now, wrangler will error if a consumertypeother than"worker"is specified in the config file.To configure non-worker consumer types, use the
wrangler queues consumerCLI commands instead (e.g.wrangler queues consumer http-pull add).Updated dependencies [
9fcdfca,1faff35,f4ea4ac,0386553]:v4.77.0Compare Source
Minor Changes
#13023
593c4dbThanks @jamesopstad! - Addwrangler versions uploadsupport for the experimentalsecretsconfiguration propertyWhen the new
secretsproperty is defined,wrangler versions uploadnow validates that all secrets declared insecrets.requiredare configured on the Worker before the upload succeeds. If any required secrets are missing, the upload fails with a clear error listing which secrets need to be set.When
secretsis not defined, the existing behavior is unchanged.#12732
c2e9163Thanks @jamesopstad! - Add deploy support for the experimentalsecretsconfiguration propertyWhen the new
secretsproperty is defined,wrangler deploynow validates that all secrets declared insecrets.requiredare configured on the Worker before the deploy succeeds. If any required secrets are missing, the deploy fails with a clear error listing which secrets need to be set.When
secretsis not defined, the existing behavior is unchanged.Patch Changes
#12896
451dae3Thanks @petebacondarwin! - fix: Add retry and timeout protection to remote preview API callsRemote preview sessions (
wrangler dev --remote) now automatically retry transient 5xx API errors (up to 3 attempts with linear backoff) and enforce a 30-second per-request timeout. Previously, a single hung or failed API response during session creation or worker upload could block the dev session reload indefinitely.#12569
379f2a2Thanks @MattieTK! - Useqwik add cloudflare-workersinstead ofqwik add cloudflare-pagesfor Workers targetsBoth the wrangler autoconfig and C3 Workers template for Qwik were running
qwik add cloudflare-pageseven when targeting Cloudflare Workers. This caused the wrong adapter directory structure to be scaffolded (adapters/cloudflare-pages/instead ofadapters/cloudflare-workers/), and required post-hoc cleanup of Pages-specific files like_routes.json.Qwik now provides a dedicated
cloudflare-workersadapter that generates the correct Workers configuration, includingwrangler.jsoncwithmainandassetsfields, apublic/.assetsignorefile, and the correctadapters/cloudflare-workers/vite.config.ts.Also adds
--skipConfirmation=trueto allqwik addinvocations so the interactive prompt is skipped in automated contexts.#11899
9a1cf29Thanks @hoodmane! - Remove cf-requirements support for Python workers. It hasn't worked with the runtime for a while now.#11800
875da60Thanks @southpolesteve! - Add upgrade hint to unexpected configuration field warnings when an update is availableWhen Wrangler encounters unexpected fields in the configuration file and a newer version of Wrangler is available, it now displays a message suggesting to update. This helps users who may be using configuration options that were added in a newer version of Wrangler.
Updated dependencies [
b8f3309,5aaaab2,5aaaab2,f8516dd,9c9fe30,6a6449e]:v4.76.0Compare Source
Minor Changes
#12893
782df44Thanks @gpanders! - Rewritewrangler containers listto use the paginated Dash API endpointwrangler containers listnow fetches from the/dash/applicationsendpoint instead of/applications, displaying results in a paginated table with columns for ID, Name, State, Live Instances, and Last Modified. Container state is derived from health instance counters (active, degraded, provisioning, ready).The command supports
--per-page(default 25) for interactive pagination with Enter to load more and q/Esc to quit, and--jsonfor machine-readable output. Non-interactive environments load all results in a single request.#12957
62545c9Thanks @natewong1313! - Add Stream binding support to Wrangler and workers-utilsWrangler and workers-utils now recognize the
streambinding in configuration, deployment metadata, and generated worker types. This enables projects to declare Stream bindings inwrangler.jsonand have the binding represented consistently across validation, metadata mapping, and type generation.#12848
ce48b77Thanks @emily-shen! - Enable local explorer by defaultThis ungates the local explorer, a UI that lets you inspect the state of D1, DO and KV resources locally by visiting
/cdn-cgi/explorerduring local development.Note: this feature is still experimental, and can be disabled by setting the env var
X_LOCAL_EXPLORER=false.Patch Changes
#12938
71ab981Thanks @dario-piotrowicz! - Add backward-compatible autoconfig support for Astro v5 and v4 projectsThe
astro add cloudflarecommand in older Astro versions installs the latest adapter version, which causes compatibility issues. This change adds manual configuration logic for projects using Astro versions before 6.0.0:astro add cloudflarecommand (unchanged behavior)@astrojs/cloudflare@12and manually configures the adapter@astrojs/cloudflare@11and manually configures the adapter#11892
7c3c6c6Thanks @staticpayload! - Handle registry ports when matching container image digestsWrangler now strips tags without breaking registry ports when comparing local images to remote digests. This prevents unnecessary pushes for tags like
localhost:5000/app:tag.Updated dependencies [
3c988e2,d028ffb,cb71403,3a1c149,ce48b77,8729f3d]:Configuration
📅 Schedule: Branch creation - "on wednesday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.