chore(deps): update dependency @opennextjs/cloudflare to v1.16.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@opennextjs/cloudflare (source)	1.11.1 → 1.16.1

---

Release Notes

opennextjs/opennextjs-cloudflare (@​opennextjs/cloudflare)

v1.16.1

Compare Source

Patch Changes

• #​1100 8676c78 Thanks @​vicb! - Empty NextNodeServer#handleNextImageRequest to avoid pulling unneeded deps (in #​1098)

v1.16.0

Compare Source

Minor Changes

• #​1083 b062597 Thanks @​dario-piotrowicz! - feature: add migrate command to set up OpenNext for Cloudflare adapter

  This command helps users migrate existing Next.js applications to the OpenNext Cloudflare adapter by automatically setting up all necessary configuration files, dependencies, and scripts.

  To use the command simply run: npx opennextjs-cloudflare migrate

Patch Changes

• #​1092 4279043 Thanks @​vicb! - Check for supported Next version

  The build will now error for unsupported Next version which may contain unpatched security vulnerabilities.
  You can bypass the check using the --dangerouslyUseUnsupportedNextVersion flag.

v1.15.1

Compare Source

Patch Changes

• #​1085 74302ec Thanks @​vicb! - fix the detection of the runtime (webpack vs turbopack)

v1.15.0

Compare Source

Minor Changes

• #​1081 ae3d43d Thanks @​vicb! - Next 16 is now supported

Patch Changes

• #​1076 c99eefd Thanks @​vicb! - fix: do not bundle og when not used

  This saves ~500kB when og is not used

• #​1079 6ac789a Thanks @​vicb! - fix: use the correct runtime (i.e. webpack or turbopack)

• #​1078 249f738 Thanks @​vicb! - drop unused react-dom modules

  This saves ~500kB on the output bundle

v1.14.10

Compare Source

Patch Changes

• #​1071 886c742 Thanks @​vicb! - fix: patch Next config for missing fields.

  There was a regression in Next 16.1.0 (vercel/next.js#86830) and some fields were missing in the config.
  The Next team fixed that in 16.1.4 (vercel/next.js#88733).

  This PR introduce a patch for 16.1.0-16.1.3

v1.14.9

Compare Source

Patch Changes

• #​1070 f7c6b3a Thanks @​vicb! - bump @opennextjs/aws to 3.9.8

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.8

• #​1057 0230cbe Thanks @​vicb! - Do not inject setImmediate/clearImmediate in the global scope

• #​1069 4ee4ba3 Thanks @​vicb! - Check that wrangler is >= 4.59.2 when building Next 16.1+.

  To ensure workerd has a required fix to setImmediate

v1.14.8

Compare Source

Patch Changes

• #​1064 9222070 Thanks @​vicb! - fix r2 bulk put to respect bucket jurisdiction

v1.14.7

Compare Source

Patch Changes

• #​1053 d447125 Thanks @​vicb! - Support composable cache in Next 16

v1.14.6

Compare Source

Patch Changes

• #​1043 c83cb83 Thanks @​vicb! - fix for CVE-2025-67779

  See https://nextjs.org/blog/security-update-2025-12-11

v1.14.5

Compare Source

Patch Changes

• #​1042 763c4ec Thanks @​vicb! - Bump Next, React, and @​opennextjs/aws to fix vulnerabilities (CVE-2025-55184 and CVE-2025-55183)

  See https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
  See https://nextjs.org/blog/security-update-2025-12-11
  See https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.5

• #​1034 721bff0 Thanks @​james-elicx! - output more wrangler command logs when the command fails

• #​1023 a4a2f02 Thanks @​dario-piotrowicz! - When running wrangler deploy add a OPEN_NEXT_DEPLOY environment variable to let wrangler know that it is being run by open-next

v1.14.4

Compare Source

Patch Changes

• #​1020 07919d8 Thanks @​dario-piotrowicz! - Add missing WORKER_SELF_REFERENCE service binding in the wrangler.jsonc that the CLI creates

• #​1032 1de4899 Thanks @​vicb! - fix(images): allow any local path when no localPatterns are specified

v1.14.3

Compare Source

Patch Changes

• #​1025 c3aba94 Thanks @​vicb! - bump @opennextjs/aws to 3.9.4

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.4

• #​1025 c3aba94 Thanks @​vicb! - Bump Next

v1.14.2

Compare Source

Patch Changes

• #​1021 250aba2 Thanks @​vicb! - bump @opennextjs/aws to 3.9.3

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.3

• #​1021 250aba2 Thanks @​vicb! - Bump Next

v1.14.1

Compare Source

Patch Changes

• #​1016 2200b4b Thanks @​vicb! - Update e2e tests to Next 16 (webpack)

• #​1015 e8971cd Thanks @​vicb! - memory queue: retrieve the preview ID from process.env

• #​1012 5f6c0a6 Thanks @​pilcrowonpaper! - Add image binding to Wrangler configuration template file

• #​1017 a6904a4 Thanks @​vicb! - fix: response.validate with the turbo pages runtime

• #​1014 f4b53b9 Thanks @​vicb! - bump @opennextjs/aws to 3.9.1

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.1

• #​1019 2a3ee86 Thanks @​vicb! - await headers()

v1.14.0

Compare Source

Minor Changes

• #​999 50d7427 Thanks @​pilcrowonpaper! - feat: support image optimization using the image binding

v1.13.1

Compare Source

Patch Changes

• #​1001 fdf61b4 Thanks @​vicb! - Bump wrangler to ^4.49.1

• #​998 f69787c Thanks @​vicb! - Warn when using Next 16

v1.13.0

Compare Source

Minor Changes

• #​991 b95e7ca Thanks @​vicb! - use wrangler r2 bulk put for R2 cache population

Patch Changes

• #​994 ab2d805 Thanks @​vicb! - bump @opennextjs/aws to 3.9.0

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.0

v1.12.0

Compare Source

Minor Changes

• #​973 8cb7669 Thanks @​petebacondarwin! - Add standard Next template generated from create-next-app that will be used by create-cloudflare going forward

• #​983 68aed26 Thanks @​vicb! - feat: turbopack support

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key(s) in object: 'path_filters'

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}