[waleedlatif1]

Summary

• App image: declare .next/server/route-cache as a VOLUME (created and owned by the app user). Next 16.4 writes every revalidated (ISR) page and route handler response there, so on a read-only root filesystem each revalidation failed with EROFS and the result was never persisted; pages kept serving from the in-memory cache
• PII image: set TLDEXTRACT_CACHE=/tmp/tldextract. tldextract (pulled in by Presidio) caches the Public Suffix List under $HOME/.cache, which is read-only there, so it fell back to its bundled snapshot and warned on every start
• Both paths sit on writable task volumes once the companion infra change mounts route-cache; on a writable root nothing changes

Type of Change

• Bug fix

Testing

• Dockerfile-only; the image builds run on the staging push
• Confirmed in the Next 16.4 source that file-system-cache writes route-cache/ under the server dist dir, and in tldextract 5.4.0 (cache.py) that TLDEXTRACT_CACHE overrides the cache dir

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Nov 10, 2026 6:29am UTC

[cubic-dev-ai]

No issues found across 2 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge with the companion deployment mounts described by the author.

Summary

The PR gives both images writable cache locations for read-only deployments.

• The app image gives Next.js a writable place to save revalidated responses.
• The PII service saves its suffix-list cache under /tmp.

_{Reviews (1) · Last reviewed commit: "fix(docker): keep ISR and suffix-list ca..." · Reviewed by Greptile}