Default Branch

Default branch "canary" does not exist.

Branches

ee110db735 · fix(stripe): set billing anchor for scheduled plan changes · Updated 2026-09-19 03:23:40 -05:00

fa569b4c3d · fix(electron): honor cookie security policies · Updated 2026-09-17 04:17:55 -05:00

4c7df29359 · BACKPORT-CONFLICT · Updated 2026-09-16 19:14:57 -05:00

4d9d0106ac · fix(i18n): localize session deletion errors · Updated 2026-09-16 17:05:51 -05:00

ab723eb71d · fix(expo): chunk storage values by byte size · Updated 2026-09-09 06:44:52 -05:00

0b591fe895 · docs: clarify account recovery and preserve column collations · Updated 2026-09-07 09:58:36 -05:00

18a205c81d · fix(react): return the pending session as the server snapshot during hydration · Updated 2026-09-04 17:11:06 -05:00

eb14ffd680 · fix(oauth-provider): drop unsupported grant types from dynamic registration instead of rejecting it · Updated 2026-09-04 17:10:04 -05:00

d3baa4cf49 · fix(mongo-adapter): recognize ObjectId and UUID values from a different bson instance · Updated 2026-09-04 17:07:16 -05:00

01eb19611c · feat(cookies): support the __Host- cookie prefix · Updated 2026-09-04 17:02:25 -05:00

17e99d670a · fix(two-factor): make enabling two-factor safe under concurrent requests · Updated 2026-09-04 16:58:40 -05:00

10056eb3fd · fix(oauth): keep the state cookie alive as long as the state it protects · Updated 2026-09-04 16:54:47 -05:00

22e81e0e5a · feat(schema-validation): enhance schema validation to report all issues at once and differentiate core and plugin problems · Updated 2026-09-04 16:41:57 -05:00

cb8db5e67f · fix(sso)!: run the DNS SSRF guard on OIDC discovery for public issuers · Updated 2026-09-04 00:39:04 -05:00

bbeccec036 · fix(one-tap): bind ID tokens to a server-issued single-use nonce · Updated 2026-09-04 00:27:30 -05:00

90127ff2a1 · fix(core): make consumeOne and incrementOne optional on custom adapters · Updated 2026-09-04 00:14:45 -05:00

b969d19155 · docs(changeset): note the dropped account issuer column · Updated 2026-09-03 23:37:01 -05:00

27de1f669c · fix(auth): stop warning when account identity scope is omitted · Updated 2026-09-03 20:05:59 -05:00

1b47398d40 · refactor(auth): rename account identity strategy to scope · Updated 2026-09-03 20:05:59 -05:00

f55b51dec7 · fix(cli): handle mixed account identity remediation · Updated 2026-09-03 20:03:19 -05:00