Backports #88207
For this issue #88822

Also includes df12b89 to get CI working

…mode response cache (#89122)

Backports:
- #88509

Co-authored-by: Wyatt Johnson <accounts+github@wyattjoh.ca>

We originally prefixed the TTL sentinel with the null-byte separator to
avoid collisions with real invocation IDs, but that makes
`extractInvocationID` return "ttl" instead of undefined for TTL-mode
keys.

This switches to a reserved magic string sentinel so TTL-mode entries
are correctly treated as “no invocation ID”.

Backport new guide and glossary update.

---------

Co-authored-by: Delba de Oliveira <32464864+delbaoliveira@users.noreply.github.com>
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>

…#89100)

Backports #89098
Part of Closes https://linear.app/vercel/issue/NAR-753/

#89176)

Specifically, the `lint` job is currently failing in CI for
`apps/bundle-analyzer/next-env.d.ts`, e.g.:

https://github.com/vercel/next.js/actions/runs/21444929031/job/61758061793?pr=89175

The warnings from `baseline-browser-mapping` about outdated data fail some tests that don't expect the CLI output. By updating the dependency we avoid showing the warning for now, and by setting the environment variable `BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA` we should silence any future warnings as well.

related:
- #86625
- #86653

…ing in dev (#89194)

Backports:

- #89171

…handlers (#89380)

Backports:

- #89316

Trying out a new way to publish updates. We won't always backport this
many docs updates.

Typos and other minor fixes can wait until a new minor release. 

This is more about keeping the docs in sync with the latest release,
while still being able to still or publish content (new guides, etc),
without having to wait for a patch release.

Merging to the backport branch is enough to get the document published
automatically.

---------

Co-authored-by: Sebastian "Sebbie" Silbermann <sebastian.silbermann@vercel.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Deni Mintsaev <cube327@tuta.io>
Co-authored-by: Pavan Shinde <pavann97@gmail.com>
Co-authored-by: Jan Amann <jan@amann.work>
Co-authored-by: Rhys Evans <wheresrhys@gmail.com>
Co-authored-by: Eric Rabinowitz <ericrabinowitz@me.com>
Co-authored-by: Thomas Schrödinger <tomas.computer.guy@gmail.com>
Co-authored-by: Abhishek Mardiya <97448460+abhishekmardiya@users.noreply.github.com>
Co-authored-by: Vasiliy Vanchuk <v.vanchuk@tut.by>
Co-authored-by: Jimmy Lai <laijimmy0@gmail.com>
Co-authored-by: freek-boon-greenberry <freek.boon@greenberry.nl>
Co-authored-by: vercel[bot] <35613825+vercel[bot]@users.noreply.github.com>
Co-authored-by: Allen Zhou <46854522+allenzhou101@users.noreply.github.com>
Co-authored-by: Jinsoo Lee <binary01@kakao.com>
Co-authored-by: Andrew D'Amelio <dev@andrewdamel.io>
Co-authored-by: Andrew Damelio <andrewdamelio@users.noreply.github.com>
Co-authored-by: Swarnava Sengupta <swarnava.sengupta@vercel.com>
Co-authored-by: Jude Gao <jude.gao@vercel.com>

…#90471)

Backports:
- #90060

## Summary

Backports documentation fixes and improvements from canary to the
`next-16-1` branch.

### Included commits:
- `757ab17e54` In-Depth Explanation of React Version Handling Doc
(#89426)
- `fe0bb2fc51` Next.js sticky scroll standards (#90197)
- `d13d1ba23b` docs: improve form guide consistency and validation
examples (#90361)
- `c23f3434a3` docs: fixes typo in manifest.mdx regarding Route Handler
note (#90394)
- `dcf11d111b` docs: clarify that next upgrade is for 16.1.x+ (#90435)
- `da0cbcce76` Add not-found.js / notFound() links to Status Codes
section (#88332)
- `ae79ae55eb` docs: add Docker Standalone and Docker Export examples to
Deploying page (#90386)
- `bb813afd49` docs(deploying): add Hostinger Web Apps Hosting to
Node.js deployment options (#90246)
- `15fcfb9ce4` docs: fix navigationType value and variable name in
useReportWebVitals (#90599)
- `080e1b3` docs: Accept header content negotiation (#90607)

---------

Co-authored-by: Abhishek Mardiya <97448460+abhishekmardiya@users.noreply.github.com>
Co-authored-by: vercel[bot] <35613825+vercel[bot]@users.noreply.github.com>
Co-authored-by: Jimmy Lai <laijimmy0@gmail.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Mary Lavanitha <lavanitha.officialdesk@gmail.com>
Co-authored-by: Tyler Arthur <46767044+tdarthur@users.noreply.github.com>
Co-authored-by: Karl Horky <karl.horky@gmail.com>
Co-authored-by: Kristiyan Velkov <40764277+kristiyan-velkov@users.noreply.github.com>
Co-authored-by: Wyatt Johnson <accounts+github@wyattjoh.ca>
Co-authored-by: kristiyan.velkov <kristiyan.velkov@ffw.com>
Co-authored-by: agneliutkiene <agne.liutkiene@hostinger.com>
Co-authored-by: Mimori <mimorimori256@gmail.com>
Co-authored-by: Joseph <icyJoseph@users.noreply.github.com>

…iskCacheSize` (#91469)

Backports:
- #89963

Co-authored-by: Steven <steven@ceriously.com>

…-sensitive origins (#62)

…contexts by default (#66)

* Current behavior

* Disallow Server Action submissions from privacy-sensitive contexts by default

* Remove endpoints used for manual testing

Was only used to design the test

…rites (#65) (#67)

* fix: patch http-proxy to prevent request smuggling in rewrites (#65)

* namespace temp files (#50)

* fix: patch http-proxy to prevent request smuggling in rewrites

* ncc

(cherry picked from commit e9a0b6dd0a27d07c0526b1d8d1b71c13ad4951dd)

* block hop-by-hop TE rewrite smuggling bypass (#70)

* block hop-by-hop TE rewrite smuggling bypass

* more hardening

* chore: minimize lockfile delta for http-proxy patch