chore(deps)(deps): bump the minor-and-patch group with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates: @next/third-parties and @opennextjs/cloudflare.

Updates @next/third-parties from 16.3.8 to 16.4.0

Release notes

Sourced from @​next/third-parties's releases.

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

• Show compiler plugin warning in more situations: #75682
• fix(scripts): correct typo in rm.mjs error message: #87015
• docs: improve clarity and punctuation in README: #86096
• Fix debug build paths Pages Router support entries: #93529
• bundle-analyzer: record historical snapshots on each analyze run: #93520
• fix: detect proxy.ts correctly with compound pageExtensions: #93246
• feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

• docs: correction to dynamicParams migration: #96624
• docs: proxy event argument: #96435
• docs: remove experimental note from runtime prefetching: #96615
• Preserve per-segment prefetching after dynamic navigation: #96583
• Rename static generation stream option to waitForAllReady: #96564
• Remove obsolete static generation plumbing: #96563
• [turbopack] Drop dead writes to exports: #96381
• [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380
• [turbopack] Add test for sideEffects with optimizePackageImports: #96549
• [turbopack] Strip leading BOM before parsing CSS: #96678
• Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550
• docs: use relative doc links in instant-navigation error pages: #96672
• Turbopack: terminate failed plugin worker threads: #96592
• Fix HTML-limited bot matching in prerender bypass rules: #96584
• [ci] Fix create_release_branch for new repo permissions: #96641
• test: skip action module instance deploy test: #96629
• docs: quote the dynamicParams build error in a blockquote: #96633
• [react-sync] Open pull requests as the bot that authors the commits: #96682
• [Bench] Fixes for pure Fizz bench: #96771
• Derive foreground cache revalidation from the consumer: #96731
• Fix race when navigating Back before hydration: #96252
• docs: present each Skill as steps in the AI agents guide: #96751
• Reuse completed cache entries for the rest of a request: #96727
• Upgrade React from 7dfc7ccd-20260803 to 11eddecd-20260805: #96735
• Remove WorkStore execution mode: #96674
• Remove cache revalidation execution mode reads: #96670
• Separate App Route render and prerender pipelines: #96662
• Remove App Page execution mode reads: #96660
• test: fix missing await in css-chunking test: #96725
• docs (Skills): stop assuming app/ at the root and port 3000: #96696
• Implement next/font BeforeResolvePlugins as ImportMappingReplacement: #95808
• Use Tailwind Turbopack loader in create-next-app: #96606
• docs: instant navigation quick start with an adoption prompt: #96663
• Separate App Page render and prerender pipelines: #96659
• Move App Router execution intent to entrypoints: #96640

... (truncated)

Commits

• e273d5b v16.4.0
• c3e76ad v16.4.0-canary.63
• ccf8c15 v16.4.0-canary.62
• 27ee721 v16.4.0-canary.61
• cdf6866 v16.4.0-canary.60
• ba80ee4 v16.4.0-canary.59
• 1bcedb4 v16.4.0-canary.58
• 3683479 v16.4.0-canary.57
• a209429 v16.4.0-canary.56
• fbd032f v16.4.0-canary.55
• Additional commits viewable in compare view

Updates @opennextjs/cloudflare from 1.20.7 to 1.20.10

Release notes

Sourced from @​opennextjs/cloudflare's releases.

@​opennextjs/cloudflare@​1.20.10

Patch Changes

• #1426 66b4a2d Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.9

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.9

• #1419 8327c21 Thanks @​Adnan-Husayn! - fix: set the image Content-Type from the format produced by the Images binding

  The Images binding can fall back to another format than the requested one, i.e. from AVIF to WebP for large images. /_next/image responses were labelled with the requested format, so the Content-Type could disagree with the image bytes.

• #1420 afea1a0 Thanks @​cpruijsen! - fix: skip route directories matching the loadManifest globs

  opennextjs-cloudflare build no longer fails with EISDIR or an unresolved import when an App Router route directory matches an internal manifest glob. Only manifest files are now inlined.

• #1423 a515128 Thanks @​Adnan-Husayn! - fix: do not log Failed to copy for packages whose exports is a string

@​opennextjs/cloudflare@​1.20.9

Patch Changes

• #1416 63cbece Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.8

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.8

• #1416 63cbece Thanks @​vicb! - fix: isolate module-loading cache signals between requests

  Prevent Next.js 15.4 and newer Cache Components from failing under concurrent traffic with Cannot perform I/O on behalf of a different request when module-loading timers cross Cloudflare Worker request contexts.

@​opennextjs/cloudflare@​1.20.8

Patch Changes

• #1411 1551d6f Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.7

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.7

• #1411 31009e1 Thanks @​vicb! - chore: require Next.js 15.5.27 or 16.3.8

  Raise the supported Next.js version floor to 15.5.27 and 16.3.8 to include the latest security fixes.

Changelog

Sourced from @​opennextjs/cloudflare's changelog.

1.20.10

Patch Changes

• #1426 66b4a2d Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.9

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.9

• #1419 8327c21 Thanks @​Adnan-Husayn! - fix: set the image Content-Type from the format produced by the Images binding

  The Images binding can fall back to another format than the requested one, i.e. from AVIF to WebP for large images. /_next/image responses were labelled with the requested format, so the Content-Type could disagree with the image bytes.

• #1420 afea1a0 Thanks @​cpruijsen! - fix: skip route directories matching the loadManifest globs

  opennextjs-cloudflare build no longer fails with EISDIR or an unresolved import when an App Router route directory matches an internal manifest glob. Only manifest files are now inlined.

• #1423 a515128 Thanks @​Adnan-Husayn! - fix: do not log Failed to copy for packages whose exports is a string

1.20.9

Patch Changes

• #1416 63cbece Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.8

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.8

• #1416 63cbece Thanks @​vicb! - fix: isolate module-loading cache signals between requests

  Prevent Next.js 15.4 and newer Cache Components from failing under concurrent traffic with Cannot perform I/O on behalf of a different request when module-loading timers cross Cloudflare Worker request contexts.

1.20.8

Patch Changes

• #1411 1551d6f Thanks @​vicb! - chore: bump @opennextjs/aws to 4.1.7

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.1.7

• #1411 31009e1 Thanks @​vicb! - chore: require Next.js 15.5.27 or 16.3.8

  Raise the supported Next.js version floor to 15.5.27 and 16.3.8 to include the latest security fixes.

Commits

• 37ede26 Version Packages (#1421)
• 66b4a2d chore: bump @opennextjs/aws to 4.1.9 (#1426)
• 82486c8 refactor: write next-env.mjs in a single call (#1422)
• a515128 fix: do not log Failed to copy for packages whose exports is a string (#1...
• e6d87c9 chore: bump dependencies (#1424)
• afea1a0 fix: skip route directories matching the loadManifest globs (#1420)
• 8327c21 fix: set the image Content-Type from the format produced by the Images bind...
• a8db8c2 Version Packages (#1418)
• 63cbece chore: bump @opennextjs/aws to 4.1.8 (#1416)
• dd91200 Version Packages
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions