chore: release v1.7.3 (#11032)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-10-24 00:15:17 -05:00 · 2026-09-06 02:53:49 +00:00
parent 1a1b7d56f5
commit 597d39cb4a
74 changed files with 213 additions and 189 deletions
@@ -1,5 +0,0 @@
---
-"auth": patch
---
-
-Add Codex as a supported target for configuring the Better Auth documentation MCP server.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Handle malformed custom-scheme callback URLs without excessive processing.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes.
@@ -1,10 +0,0 @@
---
-"@better-auth/core": patch
-"@better-auth/drizzle-adapter": patch
-"@better-auth/prisma-adapter": patch
-"auth": patch
---
-
-Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.
-
-For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation.
@@ -1,5 +0,0 @@
---
-"@better-auth/expo": patch
---
-
-Prevent Expo apps from sending unauthenticated requests while large stored cookies are being updated, and recover the previous cookie value when an update is interrupted or incomplete.
@@ -1,5 +0,0 @@
---
-"auth": patch
---
-
-Allow `auth init` to finish when a generated setup has no dependencies in one of its install groups, and preserve useful package-manager output when an installation fails.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Prevent `getSession` from failing when cookie caching is disabled while clients still have cached session cookies.
@@ -1,7 +0,0 @@
---
-"@better-auth/core": patch
-"better-auth": patch
-"auth": patch
---
-
-Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Add a custom token endpoint authentication strategy for providers that require non-standard request parameters.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Improve request IP validation performance.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Normalize Auth0 domains without a potentially slow trailing-slash regular expression.
@@ -1,5 +0,0 @@
---
-"@better-auth/cimd": patch
---
-
-Fix CIMD client metadata discovery failing with `ERR_INVALID_IP_ADDRESS` on supported Node.js versions.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Prevent duplicate session requests and hydration mismatches when using the Vue client with Nuxt `useFetch`.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Fix TikTok sign-in and token refresh failing when configured with the documented `clientKey` and `clientSecret` options.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Add `isPasswordCompromised` for checking passwords against Have I Been Pwned in custom server-side flows, while ignoring padded response entries with zero occurrences.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Run callback hooks after proxied OAuth sign-ins and preserve server state when callback cookies are unavailable. The legacy `/oauth-proxy-callback` endpoint is deprecated and will be removed in the next minor release.
@@ -1,5 +0,0 @@
---
-"@better-auth/oauth-provider": patch
---
-
-Allow native OAuth clients with `localhost` loopback redirect URIs to use ephemeral callback ports, and ensure loopback port variance changes only the port.
@@ -1,5 +0,0 @@
---
-"@better-auth/test-utils": patch
---
-
-Adapter test suites now run significantly faster. Cleanup between tests no longer re-deletes rows it has already removed, so suites spend far less time waiting on redundant database round trips.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Improve PayPal authorization code and refresh token requests, including PKCE parameter handling.
@@ -1,10 +0,0 @@
---
-"better-auth": patch
-"@better-auth/core": patch
-"@better-auth/kysely-adapter": patch
-"auth": patch
---
-
-Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.
-
-Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Improve Reddit token requests with OAuth-compliant Basic authentication and redirect protection.
@@ -1,5 +0,0 @@
---
-"auth": patch
---
-
-`auth info` now reports installed package versions instead of declared dependency specifiers, including catalog and workspace references.
@@ -1,5 +0,0 @@
---
-"@better-auth/core": patch
---
-
-Make `consumeOne` and `incrementOne` optional again for custom database adapters, using guarded fallbacks when native methods are absent. Fallbacks require atomic conditional writes and accurate affected-row counts. Fallback increments can fail when contention exhausts their retries.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Improve dynamic organization role permission check performance.
@@ -1,10 +0,0 @@
---
-"@better-auth/core": patch
-"@better-auth/sso": patch
-"@better-auth/test-utils": patch
-"better-auth": patch
---
-
-Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.
-
-If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Skip a generic OAuth provider when discovery fails instead of taking down the rest of the auth API.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Track email OTP sign-ins in the last login method plugin.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Provide type-safe Nuxt `useFetch` integration for the Vue client's `useSession` hook.
@@ -1,5 +0,0 @@
---
-"auth": patch
---
-
-`auth upgrade` now skips non-semver dependency specifiers, including pnpm catalogs, with a clear warning instead of crashing.
@@ -1,5 +0,0 @@
---
-"better-auth": patch
---
-
-Upgrade the packaged Zod dependency to 4.5. Generated OpenAPI schemas now mark required request fields consistently with runtime validation, including passkey registration responses.
@@ -1,5 +1,7 @@
 # @better-auth/api-key

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/api-key",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "API Key plugin for Better Auth.",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,52 @@
 # better-auth

+## 1.7.3
+
+### Patch Changes
+
+- [#11060](https://github.com/better-auth/better-auth/pull/11060) [`3660f06`](https://github.com/better-auth/better-auth/commit/3660f062d6e7a9b02e3fc8eee5b99482117ebba0) Thanks [@bytaesu](https://github.com/bytaesu)! - Handle malformed custom-scheme callback URLs without excessive processing.
+
+- [#11037](https://github.com/better-auth/better-auth/pull/11037) [`5bd7096`](https://github.com/better-auth/better-auth/commit/5bd709640a14e03972420bbfe778e3c732df80d5) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes.
+
+- [#11120](https://github.com/better-auth/better-auth/pull/11120) [`7ec7146`](https://github.com/better-auth/better-auth/commit/7ec71461f1b3dcc0f9852ced5cc1ed7252ded4f2) Thanks [@onmax](https://github.com/onmax)! - Prevent `getSession` from failing when cookie caching is disabled while clients still have cached session cookies.
+
+- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret.
+
+- [#11188](https://github.com/better-auth/better-auth/pull/11188) [`c47b765`](https://github.com/better-auth/better-auth/commit/c47b76517d235d7cde07a1b4717f76b8f71a675f) Thanks [@bytaesu](https://github.com/bytaesu)! - Normalize Auth0 domains without a potentially slow trailing-slash regular expression.
+
+- [#11084](https://github.com/better-auth/better-auth/pull/11084) [`2d5c63d`](https://github.com/better-auth/better-auth/commit/2d5c63d512164d4e18c5e67b79a9c7d19b27b669) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent duplicate session requests and hydration mismatches when using the Vue client with Nuxt `useFetch`.
+
+- [#11147](https://github.com/better-auth/better-auth/pull/11147) [`a9d8c12`](https://github.com/better-auth/better-auth/commit/a9d8c12d14b99a2df35ae2fba98ad4e4bc512ad5) Thanks [@bytaesu](https://github.com/bytaesu)! - Add `isPasswordCompromised` for checking passwords against Have I Been Pwned in custom server-side flows, while ignoring padded response entries with zero occurrences.
+
+- [#10988](https://github.com/better-auth/better-auth/pull/10988) [`9fc7498`](https://github.com/better-auth/better-auth/commit/9fc749867592536b6e472381581cee8f00f6b59b) Thanks [@bytaesu](https://github.com/bytaesu)! - Run callback hooks after proxied OAuth sign-ins and preserve server state when callback cookies are unavailable. The legacy `/oauth-proxy-callback` endpoint is deprecated and will be removed in the next minor release.
+
+- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.
+
+  Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair.
+
+- [#11069](https://github.com/better-auth/better-auth/pull/11069) [`0bb0dbf`](https://github.com/better-auth/better-auth/commit/0bb0dbf6f38ab53a0c1f2fb639acd7bd602e2a24) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve dynamic organization role permission check performance.
+
+- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.
+
+  If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps.
+
+- [#10978](https://github.com/better-auth/better-auth/pull/10978) [`5fe5bc2`](https://github.com/better-auth/better-auth/commit/5fe5bc21d1bf699655054192f4f833bcc33d0ba4) Thanks [@BetterAndBetterII](https://github.com/BetterAndBetterII)! - Skip a generic OAuth provider when discovery fails instead of taking down the rest of the auth API.
+
+- [#10963](https://github.com/better-auth/better-auth/pull/10963) [`74a7369`](https://github.com/better-auth/better-auth/commit/74a7369179cc6ab9fc2a9f13a67b33e8c00aa9ac) Thanks [@thisismert](https://github.com/thisismert)! - Track email OTP sign-ins in the last login method plugin.
+
+- [#11085](https://github.com/better-auth/better-auth/pull/11085) [`e16b40a`](https://github.com/better-auth/better-auth/commit/e16b40aeadde4203c883f121e7e5f7a2ec04d6b2) Thanks [@bytaesu](https://github.com/bytaesu)! - Provide type-safe Nuxt `useFetch` integration for the Vue client's `useSession` hook.
+
+- [#11066](https://github.com/better-auth/better-auth/pull/11066) [`c0444dc`](https://github.com/better-auth/better-auth/commit/c0444dc97928f46978c42083083d3b8642b89493) Thanks [@bytaesu](https://github.com/bytaesu)! - Upgrade the packaged Zod dependency to 4.5. Generated OpenAPI schemas now mark required request fields consistently with runtime validation, including passkey registration responses.
+
+- Updated dependencies [[`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c), [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6), [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4), [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864), [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186), [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951), [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9), [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc), [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a), [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc)]:
+  - @better-auth/core@1.7.3
+  - @better-auth/drizzle-adapter@1.7.3
+  - @better-auth/prisma-adapter@1.7.3
+  - @better-auth/kysely-adapter@1.7.3
+  - @better-auth/memory-adapter@1.7.3
+  - @better-auth/mongo-adapter@1.7.3
+  - @better-auth/telemetry@1.7.3
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "better-auth",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "The most comprehensive authentication framework for TypeScript.",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,11 @@
 # @better-auth/cimd

+## 1.7.3
+
+### Patch Changes
+
+- [#10730](https://github.com/better-auth/better-auth/pull/10730) [`1d9b55c`](https://github.com/better-auth/better-auth/commit/1d9b55cfdb789224b545ae317b4bca6b5621d755) Thanks [@erikpr1994](https://github.com/erikpr1994)! - Fix CIMD client metadata discovery failing with `ERR_INVALID_IP_ADDRESS` on supported Node.js versions.
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/cimd",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Client ID Metadata Document plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,32 @@
 # auth

+## 1.7.3
+
+### Patch Changes
+
+- [#11100](https://github.com/better-auth/better-auth/pull/11100) [`b489373`](https://github.com/better-auth/better-auth/commit/b4893737325a8b1073a40aa25b3111b38d579a16) Thanks [@bytaesu](https://github.com/bytaesu)! - Add Codex as a supported target for configuring the Better Auth documentation MCP server.
+
+- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.
+
+  For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation.
+
+- [#11140](https://github.com/better-auth/better-auth/pull/11140) [`b95b7b3`](https://github.com/better-auth/better-auth/commit/b95b7b31e70a20f644bc5f8ff404b43832a8d019) Thanks [@bytaesu](https://github.com/bytaesu)! - Allow `auth init` to finish when a generated setup has no dependencies in one of its install groups, and preserve useful package-manager output when an installation fails.
+
+- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret.
+
+- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.
+
+  Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair.
+
+- [#11126](https://github.com/better-auth/better-auth/pull/11126) [`5024647`](https://github.com/better-auth/better-auth/commit/5024647392141b41cc9a05e1e3112a2bae5fcb15) Thanks [@bytaesu](https://github.com/bytaesu)! - `auth info` now reports installed package versions instead of declared dependency specifiers, including catalog and workspace references.
+
+- [#11127](https://github.com/better-auth/better-auth/pull/11127) [`8bb6847`](https://github.com/better-auth/better-auth/commit/8bb68479f53b14853a086f15402211606968ea72) Thanks [@bytaesu](https://github.com/bytaesu)! - `auth upgrade` now skips non-semver dependency specifiers, including pnpm catalogs, with a clear warning instead of crashing.
+
+- Updated dependencies [[`3660f06`](https://github.com/better-auth/better-auth/commit/3660f062d6e7a9b02e3fc8eee5b99482117ebba0), [`5bd7096`](https://github.com/better-auth/better-auth/commit/5bd709640a14e03972420bbfe778e3c732df80d5), [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c), [`7ec7146`](https://github.com/better-auth/better-auth/commit/7ec71461f1b3dcc0f9852ced5cc1ed7252ded4f2), [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6), [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4), [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864), [`c47b765`](https://github.com/better-auth/better-auth/commit/c47b76517d235d7cde07a1b4717f76b8f71a675f), [`2d5c63d`](https://github.com/better-auth/better-auth/commit/2d5c63d512164d4e18c5e67b79a9c7d19b27b669), [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186), [`a9d8c12`](https://github.com/better-auth/better-auth/commit/a9d8c12d14b99a2df35ae2fba98ad4e4bc512ad5), [`9fc7498`](https://github.com/better-auth/better-auth/commit/9fc749867592536b6e472381581cee8f00f6b59b), [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951), [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9), [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc), [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a), [`0bb0dbf`](https://github.com/better-auth/better-auth/commit/0bb0dbf6f38ab53a0c1f2fb639acd7bd602e2a24), [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc), [`5fe5bc2`](https://github.com/better-auth/better-auth/commit/5fe5bc21d1bf699655054192f4f833bcc33d0ba4), [`74a7369`](https://github.com/better-auth/better-auth/commit/74a7369179cc6ab9fc2a9f13a67b33e8c00aa9ac), [`e16b40a`](https://github.com/better-auth/better-auth/commit/e16b40aeadde4203c883f121e7e5f7a2ec04d6b2), [`c0444dc`](https://github.com/better-auth/better-auth/commit/c0444dc97928f46978c42083083d3b8642b89493)]:
+  - better-auth@1.7.3
+  - @better-auth/core@1.7.3
+  - @better-auth/telemetry@1.7.3
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "auth",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "The CLI for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,35 @@
 # @better-auth/core

+## 1.7.3
+
+### Patch Changes
+
+- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.
+
+  For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation.
+
+- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret.
+
+- [#11101](https://github.com/better-auth/better-auth/pull/11101) [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4) Thanks [@bytaesu](https://github.com/bytaesu)! - Add a custom token endpoint authentication strategy for providers that require non-standard request parameters.
+
+- [#11068](https://github.com/better-auth/better-auth/pull/11068) [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve request IP validation performance.
+
+- [#11102](https://github.com/better-auth/better-auth/pull/11102) [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186) Thanks [@bytaesu](https://github.com/bytaesu)! - Fix TikTok sign-in and token refresh failing when configured with the documented `clientKey` and `clientSecret` options.
+
+- [#11129](https://github.com/better-auth/better-auth/pull/11129) [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve PayPal authorization code and refresh token requests, including PKCE parameter handling.
+
+- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.
+
+  Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair.
+
+- [#11134](https://github.com/better-auth/better-auth/pull/11134) [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve Reddit token requests with OAuth-compliant Basic authentication and redirect protection.
+
+- [#11189](https://github.com/better-auth/better-auth/pull/11189) [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a) Thanks [@bytaesu](https://github.com/bytaesu)! - Make `consumeOne` and `incrementOne` optional again for custom database adapters, using guarded fallbacks when native methods are absent. Fallbacks require atomic conditional writes and accurate affected-row counts. Fallback increments can fail when contention exhausts their retries.
+
+- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.
+
+  If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps.
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/core",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "The most comprehensive authentication framework for TypeScript.",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,13 @@
 # @better-auth/drizzle-adapter

+## 1.7.3
+
+### Patch Changes
+
+- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.
+
+  For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation.
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/drizzle-adapter",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "bugs": {
    "url": "https://github.com/better-auth/better-auth/issues"
  },
@@ -1,5 +1,7 @@
 # @better-auth/electron

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/electron",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Better Auth integration for Electron applications.",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,11 @@
 # @better-auth/expo

+## 1.7.3
+
+### Patch Changes
+
+- [#11099](https://github.com/better-auth/better-auth/pull/11099) [`fb7c018`](https://github.com/better-auth/better-auth/commit/fb7c018608bdc019c1685e70a878a084602c2fd3) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent Expo apps from sending unauthenticated requests while large stored cookies are being updated, and recover the previous cookie value when an update is interrupted or incomplete.
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/expo",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Better Auth integration for Expo and React Native applications.",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/i18n

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/i18n",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "i18n plugin for Better Auth - translate error messages",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,13 @@
 # @better-auth/kysely-adapter

+## 1.7.3
+
+### Patch Changes
+
+- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match.
+
+  Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair.
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/kysely-adapter",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Kysely adapter for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,12 @@
 # @better-auth/mcp

+## 1.7.3
+
+### Patch Changes
+
+- Updated dependencies [[`4d09d50`](https://github.com/better-auth/better-auth/commit/4d09d502254f1bfe65dafc8d813d803225429c4a)]:
+  - @better-auth/oauth-provider@1.7.3
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/mcp",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Model Context Protocol (MCP) plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/memory-adapter

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/memory-adapter",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Memory adapter for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/mongo-adapter

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/mongo-adapter",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Mongo adapter for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,11 @@
 # @better-auth/oauth-provider

+## 1.7.3
+
+### Patch Changes
+
+- [#11090](https://github.com/better-auth/better-auth/pull/11090) [`4d09d50`](https://github.com/better-auth/better-auth/commit/4d09d502254f1bfe65dafc8d813d803225429c4a) Thanks [@Salman-Arshad](https://github.com/Salman-Arshad)! - Allow native OAuth clients with `localhost` loopback redirect URIs to use ephemeral callback ports, and ensure loopback port variance changes only the port.
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/oauth-provider",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "An oauth provider plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/passkey

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/passkey",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Passkey plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,13 @@
 # @better-auth/prisma-adapter

+## 1.7.3
+
+### Patch Changes
+
+- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.
+
+  For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation.
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/prisma-adapter",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Prisma adapter for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/redis-storage

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/redis-storage",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Redis storage for Better Auth secondary storage",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/scim

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/scim",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "SCIM plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,13 @@
 # @better-auth/sso

+## 1.7.3
+
+### Patch Changes
+
+- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.
+
+  If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps.
+
 ## 1.7.2

 ### Patch Changes
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/sso",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "SSO plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/stripe

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/stripe",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Stripe plugin for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,7 @@
 # @better-auth/telemetry

+## 1.7.3
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/telemetry",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Telemetry package for Better Auth",
  "type": "module",
  "license": "MIT",
@@ -1,5 +1,15 @@
 # @better-auth/test-utils

+## 1.7.3
+
+### Patch Changes
+
+- [#10762](https://github.com/better-auth/better-auth/pull/10762) [`b7aeed8`](https://github.com/better-auth/better-auth/commit/b7aeed84ce9b8dbec22fc5fc97995b75d8063d9c) Thanks [@starslingdev](https://github.com/apps/starslingdev)! - Adapter test suites now run significantly faster. Cleanup between tests no longer re-deletes rows it has already removed, so suites spend far less time waiting on redundant database round trips.
+
+- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account.
+
+  If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps.
+
 ## 1.7.2

 ## 1.7.1
@@ -1,6 +1,6 @@
 {
  "name": "@better-auth/test-utils",
-  "version": "1.7.2",
+  "version": "1.7.3",
  "description": "Testing utilities for Better Auth adapter development",
  "type": "module",
  "license": "MIT",