chore(deps): bump the next-stack group across 1 directory with 4 updates

[dependabot]

Bumps the next-stack group with 4 updates in the /sites directory: next, eslint-config-next, vinext and @next/swc-linux-x64-gnu.

Updates next from 16.2.11 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: #91711
• turbo-persistence: remove Unmergeable mmap advice: #91713
• turbopack: move "compact database" tracing span to backend layer: #91693
• Turbopack: lazy require metadata and handle TLA: #91705
• Fix adapter outputs for dynamic metadata routes: #91680
• Turbopack: fix webpack loader runner layer: #91727
• [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
• Add module count field to module graph tracing spans: #91697
• turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
• Turbopack: pull in updated vercel/nft tests: #91651
• [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
• [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
• [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
• Avoid deprecated TS node10 moduleResolution defaults: #91847
• [turbopack] Rebuild the docker build scripts: #91799
• Fix TS6 baseUrl deprecation for extended tsconfig: #91855
• Add next internal post-build CLI command for Turbopack database compaction: #91336
• Turbopack: Define Effect as a trait instead of a closure: #89080
• Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
• turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
• Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
• Use charCodeAt for normalizePathTrailingSlash: #91380
• Turbopack: Only patch lockfile when bindings fails to load: #91379
• [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
• [devtools] Make instant navs panel draggable: #91914
• [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

• d73f562 v16.3.0
• 2e0d4cb Edits to turbopackFileSystemCache (#96531)
• 86df9c7 docs: cover direct visits and client navigations in the instant() e2e example...
• 47a52c0 [turbopack / next.js] Add an end-to-end test for new root detection (#96544)
• 8e878d4 Remove implicit Partial Prefetching opt-in from instant (#96539)
• e37ddd1 Fix deploy test TypeScript exclusions (#96545)
• 8a4920c docs: clarify first-party Skills workflows (#96495)
• 4344b83 Flag newly disabled deploy tests (#96505)
• 459617a fix: double fragment on navigation (#93132)
• cbf0cef Enable TypeScript CLI by default (#96497)
• Additional commits viewable in compare view

Updates eslint-config-next from 16.2.11 to 16.3.0

Release notes

Sourced from eslint-config-next's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: #91711
• turbo-persistence: remove Unmergeable mmap advice: #91713
• turbopack: move "compact database" tracing span to backend layer: #91693
• Turbopack: lazy require metadata and handle TLA: #91705
• Fix adapter outputs for dynamic metadata routes: #91680
• Turbopack: fix webpack loader runner layer: #91727
• [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
• Add module count field to module graph tracing spans: #91697
• turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
• Turbopack: pull in updated vercel/nft tests: #91651
• [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
• [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
• [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
• Avoid deprecated TS node10 moduleResolution defaults: #91847
• [turbopack] Rebuild the docker build scripts: #91799
• Fix TS6 baseUrl deprecation for extended tsconfig: #91855
• Add next internal post-build CLI command for Turbopack database compaction: #91336
• Turbopack: Define Effect as a trait instead of a closure: #89080
• Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
• turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
• Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
• Use charCodeAt for normalizePathTrailingSlash: #91380
• Turbopack: Only patch lockfile when bindings fails to load: #91379
• [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
• [devtools] Make instant navs panel draggable: #91914
• [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

• d73f562 v16.3.0
• 4fd843f v16.3.0-canary.107
• 9480f7f v16.3.0-canary.106
• a8dcd25 v16.3.0-canary.105
• 38f0cde v16.3.0-canary.104
• f3edea1 v16.3.0-canary.103
• 0d5ff0d v16.3.0-canary.102
• cf1e001 v16.3.0-canary.101
• 267d6b1 v16.3.0-canary.100
• ad618bf Restore canary version 16.3.0-canary.99 after v16.3.0-preview.10 preview release
• Additional commits viewable in compare view

Updates vinext from 0.0.45 to 0.2.1

Release notes

Sourced from vinext's releases.

vinext@0.2.1

Bug Fixes

App Router

• limit mounted slot cache variants (#2497)
• omit pending RSC cache state for query renders (#2488)
• isolate global not-found css (#2444)
• expose app rewrites to pages data clients (#2468)
• publish committed no-prefetch navigations (#2469)
• cache segment prefetches by rendered search params (#2477)
• skip readiness waits for speculative prerenders (#2457)
• align app static ISR lifecycle (#2472)
• reuse metadata rewrite prefetches (#2455)
• avoid runtime route-tree prefetch sizing (#2467)
• start optimistic prefetches immediately (#2440)
• normalize rsc reference validation ids (#2480)
• send deployment id on RSC responses (#2452)
• separate header-only full-route rsc requests (#2445)
• preserve app rewrite filtering (#2441)
• revalidate dynamic intercepted actions (#2443)
• evict segment prefetches under memory pressure (#2466)
• honor basePath false rewrites (#2370)
• preserve rewritten route identity (#2358)
• support styled-jsx from next (#2341)

Pages

• align middleware data prefetch caching (#2451)
• honor basePath false rewrites (#2442)
• normalize data routes for trailing slash middleware (#2470)
• align prerender functional parity (#2471)
• enforce reactStrictMode by wrapping client root in (#2433)
• preload initial dev stylesheets (#2423)
• route dotted dynamic paths in dev (#2424)

Misc

• fully elide inline type-only import specifiers (#2498)
• Config: escape destination query params (#2494)
• Link: avoid reusing dynamic app route prefetches (#2450)
• Build: handle dynamic requests in JS files with JSX (#1736)
• Dev: treat .js as JSX in the optimizeDeps scanner (#2434)
• Config: resolve and bundle extensionless .cjs config imports (#2435)
• CSS: preserve Sass partial asset URLs (#2338)
• Link: reuse full prefetch loading shells (#2332)
• Dev: seed Cloudflare Pages Router worker deps (#2430)
• Cloudflare: support Sentry request errors on Workers (#2425)
• use normalizePathSeparators in formatAppFilePath for Windows compatibility (#2426)
• Routing: use normalizePathSeparators(path.relative) instead of path.posix.relative (#2308)

... (truncated)

Commits

• 5471b41 chore: version packages (#2428)
• b7455c3 fix: fully elide inline type-only import specifiers (#2498)
• 5915c87 fix(app-router): limit mounted slot cache variants (#2497)
• 336450a fix(config): escape destination query params (#2494)
• e0db846 fix(cloudflare): respect TPR cache opt-outs (#2493)
• 20e1076 chore(release): reclassify reactStrictMode entry (#2496)
• a9a30a5 fix(app-router): omit pending RSC cache state for query renders (#2488)
• 6c7b71e fix(app-router): isolate global not-found css (#2444)
• 8b12274 fix(pages): align middleware data prefetch caching (#2451)
• 6bd1ee0 fix(app-router): expose app rewrites to pages data clients (#2468)
• Additional commits viewable in compare view

Updates @next/swc-linux-x64-gnu from 16.2.11 to 16.3.0

Release notes

Sourced from @​next/swc-linux-x64-gnu's releases.

v16.3.0

Core Changes

• Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
• Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
• Normalize encoded dynamic placeholders in app routes: #91603
• Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
• Update tokio from 1.43.0 to 1.47.3: #90945
• [turbopack] Simplify snapshotting logic: #91178
• Turbopack: enable server HMR for app route handlers: #91466
• turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
• [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
• Skip loadBindings() Lightning CSS check during next start: #91538
• turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
• Turbopack: Add importModule() support to webpack loaders: #89630
• turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
• turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
• feat(node-streams): add config flag, define-env, and env precedence test: #90427
• Rename /_next/webpack-hmr to /_next/hmr: #91415
• Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
• Handle encoded params further: #91627
• [turbopack] Respect {eval:true} in worker_threads constructors: #91666
• Fix missing route in otel spans without base-server: #91665
• [turbopack] Optimize compaction cpu usage: #91468
• Fix layout segment optimization: move app-page imports to server-utility transition: #91701
• Fix server actions in standalone mode with cacheComponents: #91711
• turbo-persistence: remove Unmergeable mmap advice: #91713
• turbopack: move "compact database" tracing span to backend layer: #91693
• Turbopack: lazy require metadata and handle TLA: #91705
• Fix adapter outputs for dynamic metadata routes: #91680
• Turbopack: fix webpack loader runner layer: #91727
• [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
• Add module count field to module graph tracing spans: #91697
• turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
• Turbopack: pull in updated vercel/nft tests: #91651
• [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
• [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
• [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
• Avoid deprecated TS node10 moduleResolution defaults: #91847
• [turbopack] Rebuild the docker build scripts: #91799
• Fix TS6 baseUrl deprecation for extended tsconfig: #91855
• Add next internal post-build CLI command for Turbopack database compaction: #91336
• Turbopack: Define Effect as a trait instead of a closure: #89080
• Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
• turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
• Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
• Use charCodeAt for normalizePathTrailingSlash: #91380
• Turbopack: Only patch lockfile when bindings fails to load: #91379
• [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
• [devtools] Make instant navs panel draggable: #91914
• [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

• See full diff in compare view