[pull] canary from vercel:canary

Cargo.toml

@@ -293,6 +293,7 @@ next-taskless = { path = "crates/next-taskless" }
 
 # Turbopack
 auto-hash-map = { path = "turbopack/crates/turbo-tasks-auto-hash-map" }
+turbo-bincode = { path = "turbopack/crates/turbo-bincode" }
 turbo-prehash = { path = "turbopack/crates/turbo-prehash" }
 turbo-rcstr = { path = "turbopack/crates/turbo-rcstr" }
 turbo-dyn-eq-hash = { path = "turbopack/crates/turbo-dyn-eq-hash" }
@@ -359,6 +360,7 @@ preset_env_base = "6.0.0"
 
 
 # General Deps
+bincode = { version = "2.0.1", features = ["serde"] }
 chromiumoxide = { version = "0.5.4", features = [
   "tokio-runtime",
 ], default-features = false }
@@ -371,10 +373,6 @@ allsorts = { version = "0.14.0", default-features = false, features = [
   "flate2_rust",
 ] }
 anyhow = "1.0.100"
-async-compression = { version = "0.3.13", default-features = false, features = [
-  "gzip",
-  "tokio",
-] }
 async-trait = "0.1.64"
 bitfield = "0.18.0"
 byteorder = "1.5.0"
@@ -481,4 +479,5 @@ webbrowser = "1.0.6"
 inventory = "0.3.21"
 
 [patch.crates-io]
+bincode = { git = "https://github.com/bgw/bincode.git", branch = "bgw/patches" }
 mdxjs = { git = "https://github.com/mischnic/mdxjs-rs.git", branch = "swc-core-32" }

apps/bundle-analyzer/package.json

@@ -18,7 +18,7 @@
     "clsx": "^2.1.1",
     "cmdk": "1.0.4",
     "lucide-react": "^0.554.0",
-    "next": "16.0.1",
+    "next": "16.0.7",
     "next-themes": "^0.4.6",
     "polished": "^4.3.1",
     "react": "19.2.0",

apps/docs/package.json

@@ -12,7 +12,7 @@
     "fumadocs-core": "15.7.12",
     "fumadocs-mdx": "11.10.0",
     "fumadocs-ui": "15.7.12",
-    "next": "15.5.3",
+    "next": "15.5.7",
     "react": "19.1.1",
     "react-dom": "19.1.1"
   },

docs/01-app/01-getting-started/17-deploying.mdx

@@ -76,6 +76,7 @@ Refer to each provider's documentation for information on supported Next.js feat
 - [AWS Amplify Hosting](https://docs.amplify.aws/nextjs/start/quickstart/nextjs-app-router-client-components)
 - [Cloudflare](https://developers.cloudflare.com/workers/frameworks/framework-guides/nextjs)
 - [Deno Deploy](https://docs.deno.com/examples/next_tutorial)
+- [Firebase App Hosting](https://firebase.google.com/docs/app-hosting/get-started)
 - [Netlify](https://docs.netlify.com/frameworks/next-js/overview/#next-js-support-on-netlify)
 - [Vercel](https://vercel.com/docs/frameworks/nextjs)
 

docs/01-app/02-guides/data-security.mdx

@@ -397,14 +397,12 @@ However, for this to happen, the captured variables are sent to the client and b
 
 ### Overwriting encryption keys (advanced)
 
-When self-hosting your Next.js application across multiple servers, each server instance may end up with a different encryption key, leading to potential inconsistencies.
+When **self-hosting** your Next.js application across multiple servers, each server instance may end up with a different encryption key, leading to potential inconsistencies.
 
 To mitigate this, you can overwrite the encryption key using the `process.env.NEXT_SERVER_ACTIONS_ENCRYPTION_KEY` environment variable. Specifying this variable ensures that your encryption keys are persistent across builds, and all server instances use the same key. This variable **must** be AES-GCM encrypted.
 
 This is an advanced use case where consistent encryption behavior across multiple deployments is critical for your application. You should consider standard security practices such key rotation and signing.
 
-> **Good to know:** Next.js applications deployed to Vercel automatically handle this.
-
 ### Allowed origins (advanced)
 
 Since Server Actions can be invoked in a `<form>` element, this opens them up to [CSRF attacks](https://developer.mozilla.org/en-US/docs/Glossary/CSRF).

packages/next/src/next-devtools/dev-overlay/components/errors/dev-tools-indicator/draggable.tsx

@@ -143,17 +143,7 @@ export function Draggable({
   }
 
   return (
-    <div
-      {...props}
-      ref={ref}
-      {...drag}
-      style={{
-        touchAction: 'none',
-        userSelect: 'none',
-        WebkitUserSelect: 'none',
-        ...props.style,
-      }}
-    >
+    <div {...props} {...drag} ref={ref}>
       {children}
     </div>
   )
@@ -208,6 +198,7 @@ function useDrag(options: UseDragOptions) {
     velocities.current = []
 
     ref.current?.classList.remove('dev-tools-grabbing')
+    ref.current?.style.removeProperty('-webkit-user-select')
     document.body.style.removeProperty('user-select')
     document.body.style.removeProperty('-webkit-user-select')
   }, [])
@@ -310,6 +301,7 @@ function useDrag(options: UseDragOptions) {
         machine.current = { state: 'drag', pointerId: e.pointerId }
         ref.current?.setPointerCapture(e.pointerId)
         ref.current?.classList.add('dev-tools-grabbing')
+        ref.current?.style.setProperty('-webkit-user-select', 'none')
         document.body.style.userSelect = 'none'
         document.body.style.webkitUserSelect = 'none'
         options.onDragStart?.()

packages/next/src/next-devtools/dev-overlay/components/overview/segment-explorer.css

@@ -41,7 +41,6 @@
   display: flex;
   align-items: center;
   white-space: pre;
-  cursor: default;
   color: var(--color-gray-1000);
 }
 
@@ -90,8 +89,6 @@
   line-height: 16px;
   font-size: var(--size-12);
   font-weight: 500;
-  user-select: none;
-  cursor: pointer;
   background-color: var(--color-gray-300);
   color: var(--color-gray-1000);
 }

packages/next/src/server/app-render/action-handler.ts

@@ -49,7 +49,10 @@ import { warn } from '../../build/output/log'
 import { RequestCookies, ResponseCookies } from '../web/spec-extension/cookies'
 import { HeadersAdapter } from '../web/spec-extension/adapters/headers'
 import { fromNodeOutgoingHttpHeaders } from '../web/utils'
-import { selectWorkerForForwarding, type ServerModuleMap } from './action-utils'
+import {
+  selectWorkerForForwarding,
+  type ServerModuleMap,
+} from './manifests-singleton'
 import { isNodeNextRequest, isWebNextRequest } from '../base-http/helpers'
 import { RedirectStatusCode } from '../../client/components/redirect-status-code'
 import { synchronizeMutableCookies } from '../async-storage/request-store'