chore(deps): bump next from 15.5.20 to 16.3.1

[dependabot]

Bumps next from 15.5.20 to 16.3.1.

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in vercel/next.js#96653
• [16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @​lukesandberg in vercel/next.js#96655
• [16.x] [turbopack] Collapse nested promises in the analyzer by @​sampoder in vercel/next.js#96675
• [16.x] fix(next/image): preserve image response after optimization by @​styfle in vercel/next.js#96733
• [16.3.x] Default deploy e2e tests to the repo next version by @​eps1lon in vercel/next.js#96900
• [backport] Bump @​swc/helpers by @​mischnic in vercel/next.js#96885
• [backport] [turbopack] Raise registration calls in hoisted modules to the top by @​lukesandberg in vercel/next.js#97308
• [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @​lukesandberg in vercel/next.js#97302
• [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @​lukesandberg in vercel/next.js#97317
• [backport] Restore the live headers() view of the incoming request by @​unstubbable in vercel/next.js#97311
• [backport] Allow literal exports in 'use cache' files by @​unstubbable in vercel/next.js#97312
• [backport] Keep the dev validation worker alive across HMR updates by @​unstubbable in vercel/next.js#97315
• [backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @​unstubbable in vercel/next.js#97314
• [backport] Encode the cache item name built by unstable_cache by @​unstubbable in vercel/next.js#97313
• [16.3] [ci] Use OIDC tokens to read private preview builds by @​eps1lon in vercel/next.js#97258
• [backport] [test] Compile the middleware redirect routes up front in dev by @​lukesandberg in vercel/next.js#97328
• [backport] Fix Nav Inspector request loop on repeat captures by @​acdlite in vercel/next.js#97326
• [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @​acdlite in vercel/next.js#97325
• [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @​lukesandberg in vercel/next.js#97304
• [backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @​gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

• docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645
• Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636
• Turbopack: rename to use turbopack: no side effects: #94427
• refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360
• [PPF] unstable_navigation(): #96908
• [PPF] Scaffold unstable_navigation(): #97236
• docs: Explicit cache output description: #97548
• Improve Cache Components sync IO migration guidance: #97572
• [test] Use a non-native stub for the server externals list test: #97614
• Avoid GitHub API rate limits for create-next-app examples: #97612
• [test] Cover the prerender worker-thread backend with an addon we control: #97543
• [test] Convert the prerender-native-module suite to local fixture packages: #97542
• [test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541
• [test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540
• [ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590
• Remove HmrTarget: #97253
• Keep HMR instructions typed until serialization: #96569
• Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

• 3d32eb8 v16.3.1
• 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
• 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
• 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
• 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
• f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
• 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
• 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
• 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
• 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[0dillon]

Superseded by chore/action-bumps on feat/hardening-ci-and-tap — the action bumps are applied there directly, and majors on the AI SDK, Next, React and Express are now ignored in dependabot.yml as deliberate migrations rather than routine merges.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.