meta: bump @opennextjs/cloudflare from 1.19.3 to 1.19.11

[dependabot]

Bumps @opennextjs/cloudflare from 1.19.3 to 1.19.11.

Release notes

Sourced from @​opennextjs/cloudflare's releases.

@​opennextjs/cloudflare@​1.19.11

Patch Changes

• #1270 802047e Thanks @​alex-all3dp! - fix: skip non-upload-triggered worker versions when building skew-protection deployment mapping

  Worker versions created by metadata-only operations (e.g. Cloudflare API secret updates) do not include the static assets bundle. Previously, such versions could become the "latest" target in the skew-protection mapping, causing /_next/static/* requests to return 404 on past deployments. Versions are now filtered to those with workers/triggered_by in {upload, version_upload}.

  Closes #1230

@​opennextjs/cloudflare@​1.19.10

Patch Changes

• #1261 780dd4f Thanks @​vicb! - Allow populating R2 when the domain is protected by Cloudflare Access

  You need to:

  • create a "Service Auth" policy for "open-next-cache-populate..workers.dev"
  • add an "Include" rule for "Any Access Service Token" or for a given service token ("Service Token")
  • populate the env variables CLOUDFLARE_ACCESS_CLIENT_ID and CLOUDFLARE_ACCESS_CLIENT_SECRET

@​opennextjs/cloudflare@​1.19.9

Patch Changes

• #1259 3b35c6e Thanks @​vicb! - chore: bump Next.js to 15.5.18 / 16.2.6 and @​opennextjs/aws to 4.0.2

@​opennextjs/cloudflare@​1.19.8

Patch Changes

• #1256 9696cd0 Thanks @​vicb! - bump @opennextjs/aws to 4.0.1

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.0.1

@​opennextjs/cloudflare@​1.19.7

Patch Changes

• #1252 29fe15d Thanks @​vicb! - bump the number of retries for r2 cache uploads

  Increase the retry count from 5 to 15 with a capped exponential backoff to improve resilience against transient R2 write failures during cache population.

• #1255 364b7d9 Thanks @​vicb! - Bump react and next

@​opennextjs/cloudflare@​1.19.6

Patch Changes

• #1246 5d2014f Thanks @​vicb! - fix: do not log expected expected D1 errors

  The populateCache command adds columns to the D1 tag cache for SWR support. This is required for older deployments made before those column were added. SQLite errors when the columns exist and we should not log those errors.

... (truncated)

Changelog

Sourced from @​opennextjs/cloudflare's changelog.

1.19.11

Patch Changes

• #1270 802047e Thanks @​alex-all3dp! - fix: skip non-upload-triggered worker versions when building skew-protection deployment mapping

  Worker versions created by metadata-only operations (e.g. Cloudflare API secret updates) do not include the static assets bundle. Previously, such versions could become the "latest" target in the skew-protection mapping, causing /_next/static/* requests to return 404 on past deployments. Versions are now filtered to those with workers/triggered_by in {upload, version_upload}.

  Closes #1230

1.19.10

Patch Changes

• #1261 780dd4f Thanks @​vicb! - Allow populating R2 when the domain is protected by Cloudflare Access

  You need to:

  • create a "Service Auth" policy for "open-next-cache-populate..workers.dev"
  • add an "Include" rule for "Any Access Service Token" or for a given service token ("Service Token")
  • populate the env variables CLOUDFLARE_ACCESS_CLIENT_ID and CLOUDFLARE_ACCESS_CLIENT_SECRET

1.19.9

Patch Changes

• #1259 3b35c6e Thanks @​vicb! - chore: bump Next.js to 15.5.18 / 16.2.6 and @​opennextjs/aws to 4.0.2

1.19.8

Patch Changes

• #1256 9696cd0 Thanks @​vicb! - bump @opennextjs/aws to 4.0.1

  See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v4.0.1

1.19.7

Patch Changes

• #1252 29fe15d Thanks @​vicb! - bump the number of retries for r2 cache uploads

  Increase the retry count from 5 to 15 with a capped exponential backoff to improve resilience against transient R2 write failures during cache population.

• #1255 364b7d9 Thanks @​vicb! - Bump react and next

1.19.6

Patch Changes

... (truncated)

Commits

• 596f924 Version Packages (#1271)
• 802047e fix: skip non-upload-triggered worker versions in skew-protection (#1270)
• dd78941 docs: clarify Cloudflare Access setup in populate-cache comment (#1267)
• 49eade5 Version Packages (#1266)
• 780dd4f Allow populating R2 when the domain is protected by Cloudflare Access (#1261)
• f07200e Version Packages (#1260)
• 3b35c6e Bump Next.js (#1259)
• 8786774 Version Packages (#1257)
• 9696cd0 bump @opennextjs/aws to 4.0.1 (#1256)
• 08b3d3c Version Packages (#1253)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nodejs-org	Ready	Preview	Jun 8, 2026 1:39am

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.73%. Comparing base (b2772ae) to head (89d1950).
⚠️ Report is 10 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8948      +/-   ##
==========================================
+ Coverage   75.66%   75.73%   +0.06%     
==========================================
  Files         102      102              
  Lines        8676     8676              
  Branches      322      321       -1     
==========================================
+ Hits         6565     6571       +6     
+ Misses       2108     2102       -6     
  Partials        3        3              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[dependabot]

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.