From 597d39cb4aaaac1ad729051fbdd22a63b8ba8d8d Mon Sep 17 00:00:00 2001 From: "better-release[bot]" <273320539+better-release[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 02:53:49 +0000 Subject: [PATCH] chore: release v1.7.3 (#11032) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- .changeset/add-codex-mcp-target.md | 5 -- .changeset/bright-paths-parse.md | 5 -- .changeset/calm-apples-verify.md | 5 -- .changeset/calm-models-register-checks.md | 10 ---- .changeset/calm-taxis-store-cookies.md | 5 -- .changeset/calm-tools-skip-empty-installs.md | 5 -- .changeset/clean-rice-skip.md | 5 -- .changeset/cloudflare-social-provider.md | 7 --- .changeset/custom-token-auth.md | 5 -- .changeset/faster-ip-validation.md | 5 -- .changeset/fix-auth0-domain-normalization.md | 5 -- .changeset/fix-cimd-node-lookup.md | 5 -- .changeset/fix-nuxt-session-hydration.md | 5 -- .changeset/fix-tiktok-token-auth.md | 5 -- .changeset/fresh-cats-check-passwords.md | 5 -- .changeset/oauth-proxy-callback-hooks.md | 5 -- .changeset/odona-localhost-port-variance.md | 5 -- .changeset/olive-pumas-repeat.md | 5 -- .changeset/paypal-token-helpers.md | 5 -- .changeset/quiet-tables-check-schema.md | 10 ---- .changeset/reddit-token-helpers.md | 5 -- .changeset/report-installed-cli-versions.md | 5 -- ...restore-custom-adapter-atomic-fallbacks.md | 5 -- .changeset/reuse-role-permission-schema.md | 5 -- .changeset/revert-issuer-account-key.md | 10 ---- .changeset/skip-failed-oauth-discovery.md | 5 -- .changeset/track-email-otp-login-method.md | 5 -- .changeset/type-safe-nuxt-session-fetch.md | 5 -- .../upgrade-pnpm-catalog-dependencies.md | 5 -- .changeset/zod-45-validation.md | 5 -- packages/api-key/CHANGELOG.md | 2 + packages/api-key/package.json | 2 +- packages/better-auth/CHANGELOG.md | 47 +++++++++++++++++++ packages/better-auth/package.json | 2 +- packages/cimd/CHANGELOG.md | 6 +++ packages/cimd/package.json | 2 +- packages/cli/CHANGELOG.md | 27 +++++++++++ packages/cli/package.json | 2 +- packages/core/CHANGELOG.md | 30 ++++++++++++ packages/core/package.json | 2 +- packages/drizzle-adapter/CHANGELOG.md | 8 ++++ packages/drizzle-adapter/package.json | 2 +- packages/electron/CHANGELOG.md | 2 + packages/electron/package.json | 2 +- packages/expo/CHANGELOG.md | 6 +++ packages/expo/package.json | 2 +- packages/i18n/CHANGELOG.md | 2 + packages/i18n/package.json | 2 +- packages/kysely-adapter/CHANGELOG.md | 8 ++++ packages/kysely-adapter/package.json | 2 +- packages/mcp/CHANGELOG.md | 7 +++ packages/mcp/package.json | 2 +- packages/memory-adapter/CHANGELOG.md | 2 + packages/memory-adapter/package.json | 2 +- packages/mongo-adapter/CHANGELOG.md | 2 + packages/mongo-adapter/package.json | 2 +- packages/oauth-provider/CHANGELOG.md | 6 +++ packages/oauth-provider/package.json | 2 +- packages/passkey/CHANGELOG.md | 2 + packages/passkey/package.json | 2 +- packages/prisma-adapter/CHANGELOG.md | 8 ++++ packages/prisma-adapter/package.json | 2 +- packages/redis-storage/CHANGELOG.md | 2 + packages/redis-storage/package.json | 2 +- packages/scim/CHANGELOG.md | 2 + packages/scim/package.json | 2 +- packages/sso/CHANGELOG.md | 8 ++++ packages/sso/package.json | 2 +- packages/stripe/CHANGELOG.md | 2 + packages/stripe/package.json | 2 +- packages/telemetry/CHANGELOG.md | 2 + packages/telemetry/package.json | 2 +- packages/test-utils/CHANGELOG.md | 10 ++++ packages/test-utils/package.json | 2 +- 74 files changed, 213 insertions(+), 189 deletions(-) delete mode 100644 .changeset/add-codex-mcp-target.md delete mode 100644 .changeset/bright-paths-parse.md delete mode 100644 .changeset/calm-apples-verify.md delete mode 100644 .changeset/calm-models-register-checks.md delete mode 100644 .changeset/calm-taxis-store-cookies.md delete mode 100644 .changeset/calm-tools-skip-empty-installs.md delete mode 100644 .changeset/clean-rice-skip.md delete mode 100644 .changeset/cloudflare-social-provider.md delete mode 100644 .changeset/custom-token-auth.md delete mode 100644 .changeset/faster-ip-validation.md delete mode 100644 .changeset/fix-auth0-domain-normalization.md delete mode 100644 .changeset/fix-cimd-node-lookup.md delete mode 100644 .changeset/fix-nuxt-session-hydration.md delete mode 100644 .changeset/fix-tiktok-token-auth.md delete mode 100644 .changeset/fresh-cats-check-passwords.md delete mode 100644 .changeset/oauth-proxy-callback-hooks.md delete mode 100644 .changeset/odona-localhost-port-variance.md delete mode 100644 .changeset/olive-pumas-repeat.md delete mode 100644 .changeset/paypal-token-helpers.md delete mode 100644 .changeset/quiet-tables-check-schema.md delete mode 100644 .changeset/reddit-token-helpers.md delete mode 100644 .changeset/report-installed-cli-versions.md delete mode 100644 .changeset/restore-custom-adapter-atomic-fallbacks.md delete mode 100644 .changeset/reuse-role-permission-schema.md delete mode 100644 .changeset/revert-issuer-account-key.md delete mode 100644 .changeset/skip-failed-oauth-discovery.md delete mode 100644 .changeset/track-email-otp-login-method.md delete mode 100644 .changeset/type-safe-nuxt-session-fetch.md delete mode 100644 .changeset/upgrade-pnpm-catalog-dependencies.md delete mode 100644 .changeset/zod-45-validation.md diff --git a/.changeset/add-codex-mcp-target.md b/.changeset/add-codex-mcp-target.md deleted file mode 100644 index 5f2f5606a7..0000000000 --- a/.changeset/add-codex-mcp-target.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"auth": patch ---- - -Add Codex as a supported target for configuring the Better Auth documentation MCP server. diff --git a/.changeset/bright-paths-parse.md b/.changeset/bright-paths-parse.md deleted file mode 100644 index 2379d5b259..0000000000 --- a/.changeset/bright-paths-parse.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Handle malformed custom-scheme callback URLs without excessive processing. diff --git a/.changeset/calm-apples-verify.md b/.changeset/calm-apples-verify.md deleted file mode 100644 index 3fcd56c4d6..0000000000 --- a/.changeset/calm-apples-verify.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes. diff --git a/.changeset/calm-models-register-checks.md b/.changeset/calm-models-register-checks.md deleted file mode 100644 index 3879a422bf..0000000000 --- a/.changeset/calm-models-register-checks.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -"@better-auth/core": patch -"@better-auth/drizzle-adapter": patch -"@better-auth/prisma-adapter": patch -"auth": patch ---- - -Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations. - -For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation. diff --git a/.changeset/calm-taxis-store-cookies.md b/.changeset/calm-taxis-store-cookies.md deleted file mode 100644 index 3664fd3d25..0000000000 --- a/.changeset/calm-taxis-store-cookies.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/expo": patch ---- - -Prevent Expo apps from sending unauthenticated requests while large stored cookies are being updated, and recover the previous cookie value when an update is interrupted or incomplete. diff --git a/.changeset/calm-tools-skip-empty-installs.md b/.changeset/calm-tools-skip-empty-installs.md deleted file mode 100644 index b64ae88c9b..0000000000 --- a/.changeset/calm-tools-skip-empty-installs.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"auth": patch ---- - -Allow `auth init` to finish when a generated setup has no dependencies in one of its install groups, and preserve useful package-manager output when an installation fails. diff --git a/.changeset/clean-rice-skip.md b/.changeset/clean-rice-skip.md deleted file mode 100644 index fb0fbef6ef..0000000000 --- a/.changeset/clean-rice-skip.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Prevent `getSession` from failing when cookie caching is disabled while clients still have cached session cookies. diff --git a/.changeset/cloudflare-social-provider.md b/.changeset/cloudflare-social-provider.md deleted file mode 100644 index f2c90f809a..0000000000 --- a/.changeset/cloudflare-social-provider.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"@better-auth/core": patch -"better-auth": patch -"auth": patch ---- - -Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret. diff --git a/.changeset/custom-token-auth.md b/.changeset/custom-token-auth.md deleted file mode 100644 index b895557a82..0000000000 --- a/.changeset/custom-token-auth.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Add a custom token endpoint authentication strategy for providers that require non-standard request parameters. diff --git a/.changeset/faster-ip-validation.md b/.changeset/faster-ip-validation.md deleted file mode 100644 index d417072028..0000000000 --- a/.changeset/faster-ip-validation.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Improve request IP validation performance. diff --git a/.changeset/fix-auth0-domain-normalization.md b/.changeset/fix-auth0-domain-normalization.md deleted file mode 100644 index 57e541bb80..0000000000 --- a/.changeset/fix-auth0-domain-normalization.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Normalize Auth0 domains without a potentially slow trailing-slash regular expression. diff --git a/.changeset/fix-cimd-node-lookup.md b/.changeset/fix-cimd-node-lookup.md deleted file mode 100644 index 4ca6adf06a..0000000000 --- a/.changeset/fix-cimd-node-lookup.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/cimd": patch ---- - -Fix CIMD client metadata discovery failing with `ERR_INVALID_IP_ADDRESS` on supported Node.js versions. diff --git a/.changeset/fix-nuxt-session-hydration.md b/.changeset/fix-nuxt-session-hydration.md deleted file mode 100644 index 7ce256a80b..0000000000 --- a/.changeset/fix-nuxt-session-hydration.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Prevent duplicate session requests and hydration mismatches when using the Vue client with Nuxt `useFetch`. diff --git a/.changeset/fix-tiktok-token-auth.md b/.changeset/fix-tiktok-token-auth.md deleted file mode 100644 index 991229951c..0000000000 --- a/.changeset/fix-tiktok-token-auth.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Fix TikTok sign-in and token refresh failing when configured with the documented `clientKey` and `clientSecret` options. diff --git a/.changeset/fresh-cats-check-passwords.md b/.changeset/fresh-cats-check-passwords.md deleted file mode 100644 index 80c8052151..0000000000 --- a/.changeset/fresh-cats-check-passwords.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Add `isPasswordCompromised` for checking passwords against Have I Been Pwned in custom server-side flows, while ignoring padded response entries with zero occurrences. diff --git a/.changeset/oauth-proxy-callback-hooks.md b/.changeset/oauth-proxy-callback-hooks.md deleted file mode 100644 index 5c39ffde98..0000000000 --- a/.changeset/oauth-proxy-callback-hooks.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Run callback hooks after proxied OAuth sign-ins and preserve server state when callback cookies are unavailable. The legacy `/oauth-proxy-callback` endpoint is deprecated and will be removed in the next minor release. diff --git a/.changeset/odona-localhost-port-variance.md b/.changeset/odona-localhost-port-variance.md deleted file mode 100644 index 781dd10cea..0000000000 --- a/.changeset/odona-localhost-port-variance.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/oauth-provider": patch ---- - -Allow native OAuth clients with `localhost` loopback redirect URIs to use ephemeral callback ports, and ensure loopback port variance changes only the port. diff --git a/.changeset/olive-pumas-repeat.md b/.changeset/olive-pumas-repeat.md deleted file mode 100644 index 6ecb2a9256..0000000000 --- a/.changeset/olive-pumas-repeat.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/test-utils": patch ---- - -Adapter test suites now run significantly faster. Cleanup between tests no longer re-deletes rows it has already removed, so suites spend far less time waiting on redundant database round trips. diff --git a/.changeset/paypal-token-helpers.md b/.changeset/paypal-token-helpers.md deleted file mode 100644 index 2437dac362..0000000000 --- a/.changeset/paypal-token-helpers.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Improve PayPal authorization code and refresh token requests, including PKCE parameter handling. diff --git a/.changeset/quiet-tables-check-schema.md b/.changeset/quiet-tables-check-schema.md deleted file mode 100644 index 8414982e8a..0000000000 --- a/.changeset/quiet-tables-check-schema.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -"better-auth": patch -"@better-auth/core": patch -"@better-auth/kysely-adapter": patch -"auth": patch ---- - -Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match. - -Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair. diff --git a/.changeset/reddit-token-helpers.md b/.changeset/reddit-token-helpers.md deleted file mode 100644 index 5c90330513..0000000000 --- a/.changeset/reddit-token-helpers.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Improve Reddit token requests with OAuth-compliant Basic authentication and redirect protection. diff --git a/.changeset/report-installed-cli-versions.md b/.changeset/report-installed-cli-versions.md deleted file mode 100644 index 697ec85e95..0000000000 --- a/.changeset/report-installed-cli-versions.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"auth": patch ---- - -`auth info` now reports installed package versions instead of declared dependency specifiers, including catalog and workspace references. diff --git a/.changeset/restore-custom-adapter-atomic-fallbacks.md b/.changeset/restore-custom-adapter-atomic-fallbacks.md deleted file mode 100644 index 539be403d7..0000000000 --- a/.changeset/restore-custom-adapter-atomic-fallbacks.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@better-auth/core": patch ---- - -Make `consumeOne` and `incrementOne` optional again for custom database adapters, using guarded fallbacks when native methods are absent. Fallbacks require atomic conditional writes and accurate affected-row counts. Fallback increments can fail when contention exhausts their retries. diff --git a/.changeset/reuse-role-permission-schema.md b/.changeset/reuse-role-permission-schema.md deleted file mode 100644 index a125b29658..0000000000 --- a/.changeset/reuse-role-permission-schema.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Improve dynamic organization role permission check performance. diff --git a/.changeset/revert-issuer-account-key.md b/.changeset/revert-issuer-account-key.md deleted file mode 100644 index 58dfaec483..0000000000 --- a/.changeset/revert-issuer-account-key.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -"@better-auth/core": patch -"@better-auth/sso": patch -"@better-auth/test-utils": patch -"better-auth": patch ---- - -Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account. - -If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps. diff --git a/.changeset/skip-failed-oauth-discovery.md b/.changeset/skip-failed-oauth-discovery.md deleted file mode 100644 index 8cd8414bd3..0000000000 --- a/.changeset/skip-failed-oauth-discovery.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Skip a generic OAuth provider when discovery fails instead of taking down the rest of the auth API. diff --git a/.changeset/track-email-otp-login-method.md b/.changeset/track-email-otp-login-method.md deleted file mode 100644 index 825fe3b974..0000000000 --- a/.changeset/track-email-otp-login-method.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Track email OTP sign-ins in the last login method plugin. diff --git a/.changeset/type-safe-nuxt-session-fetch.md b/.changeset/type-safe-nuxt-session-fetch.md deleted file mode 100644 index f2500d223d..0000000000 --- a/.changeset/type-safe-nuxt-session-fetch.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Provide type-safe Nuxt `useFetch` integration for the Vue client's `useSession` hook. diff --git a/.changeset/upgrade-pnpm-catalog-dependencies.md b/.changeset/upgrade-pnpm-catalog-dependencies.md deleted file mode 100644 index 59423aef22..0000000000 --- a/.changeset/upgrade-pnpm-catalog-dependencies.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"auth": patch ---- - -`auth upgrade` now skips non-semver dependency specifiers, including pnpm catalogs, with a clear warning instead of crashing. diff --git a/.changeset/zod-45-validation.md b/.changeset/zod-45-validation.md deleted file mode 100644 index 4346c15155..0000000000 --- a/.changeset/zod-45-validation.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"better-auth": patch ---- - -Upgrade the packaged Zod dependency to 4.5. Generated OpenAPI schemas now mark required request fields consistently with runtime validation, including passkey registration responses. diff --git a/packages/api-key/CHANGELOG.md b/packages/api-key/CHANGELOG.md index e5678dbd4d..0818cee8a0 100644 --- a/packages/api-key/CHANGELOG.md +++ b/packages/api-key/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/api-key +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/api-key/package.json b/packages/api-key/package.json index 8e4707b626..e885bae20e 100644 --- a/packages/api-key/package.json +++ b/packages/api-key/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/api-key", - "version": "1.7.2", + "version": "1.7.3", "description": "API Key plugin for Better Auth.", "type": "module", "license": "MIT", diff --git a/packages/better-auth/CHANGELOG.md b/packages/better-auth/CHANGELOG.md index 476682d3a0..0bc22a873f 100644 --- a/packages/better-auth/CHANGELOG.md +++ b/packages/better-auth/CHANGELOG.md @@ -1,5 +1,52 @@ # better-auth +## 1.7.3 + +### Patch Changes + +- [#11060](https://github.com/better-auth/better-auth/pull/11060) [`3660f06`](https://github.com/better-auth/better-auth/commit/3660f062d6e7a9b02e3fc8eee5b99482117ebba0) Thanks [@bytaesu](https://github.com/bytaesu)! - Handle malformed custom-scheme callback URLs without excessive processing. + +- [#11037](https://github.com/better-auth/better-auth/pull/11037) [`5bd7096`](https://github.com/better-auth/better-auth/commit/5bd709640a14e03972420bbfe778e3c732df80d5) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent repeated TOTP enrollment from replacing an active authenticator and its backup codes. + +- [#11120](https://github.com/better-auth/better-auth/pull/11120) [`7ec7146`](https://github.com/better-auth/better-auth/commit/7ec71461f1b3dcc0f9852ced5cc1ed7252ded4f2) Thanks [@onmax](https://github.com/onmax)! - Prevent `getSession` from failing when cookie caching is disabled while clients still have cached session cookies. + +- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret. + +- [#11188](https://github.com/better-auth/better-auth/pull/11188) [`c47b765`](https://github.com/better-auth/better-auth/commit/c47b76517d235d7cde07a1b4717f76b8f71a675f) Thanks [@bytaesu](https://github.com/bytaesu)! - Normalize Auth0 domains without a potentially slow trailing-slash regular expression. + +- [#11084](https://github.com/better-auth/better-auth/pull/11084) [`2d5c63d`](https://github.com/better-auth/better-auth/commit/2d5c63d512164d4e18c5e67b79a9c7d19b27b669) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent duplicate session requests and hydration mismatches when using the Vue client with Nuxt `useFetch`. + +- [#11147](https://github.com/better-auth/better-auth/pull/11147) [`a9d8c12`](https://github.com/better-auth/better-auth/commit/a9d8c12d14b99a2df35ae2fba98ad4e4bc512ad5) Thanks [@bytaesu](https://github.com/bytaesu)! - Add `isPasswordCompromised` for checking passwords against Have I Been Pwned in custom server-side flows, while ignoring padded response entries with zero occurrences. + +- [#10988](https://github.com/better-auth/better-auth/pull/10988) [`9fc7498`](https://github.com/better-auth/better-auth/commit/9fc749867592536b6e472381581cee8f00f6b59b) Thanks [@bytaesu](https://github.com/bytaesu)! - Run callback hooks after proxied OAuth sign-ins and preserve server state when callback cookies are unavailable. The legacy `/oauth-proxy-callback` endpoint is deprecated and will be removed in the next minor release. + +- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match. + + Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair. + +- [#11069](https://github.com/better-auth/better-auth/pull/11069) [`0bb0dbf`](https://github.com/better-auth/better-auth/commit/0bb0dbf6f38ab53a0c1f2fb639acd7bd602e2a24) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve dynamic organization role permission check performance. + +- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account. + + If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps. + +- [#10978](https://github.com/better-auth/better-auth/pull/10978) [`5fe5bc2`](https://github.com/better-auth/better-auth/commit/5fe5bc21d1bf699655054192f4f833bcc33d0ba4) Thanks [@BetterAndBetterII](https://github.com/BetterAndBetterII)! - Skip a generic OAuth provider when discovery fails instead of taking down the rest of the auth API. + +- [#10963](https://github.com/better-auth/better-auth/pull/10963) [`74a7369`](https://github.com/better-auth/better-auth/commit/74a7369179cc6ab9fc2a9f13a67b33e8c00aa9ac) Thanks [@thisismert](https://github.com/thisismert)! - Track email OTP sign-ins in the last login method plugin. + +- [#11085](https://github.com/better-auth/better-auth/pull/11085) [`e16b40a`](https://github.com/better-auth/better-auth/commit/e16b40aeadde4203c883f121e7e5f7a2ec04d6b2) Thanks [@bytaesu](https://github.com/bytaesu)! - Provide type-safe Nuxt `useFetch` integration for the Vue client's `useSession` hook. + +- [#11066](https://github.com/better-auth/better-auth/pull/11066) [`c0444dc`](https://github.com/better-auth/better-auth/commit/c0444dc97928f46978c42083083d3b8642b89493) Thanks [@bytaesu](https://github.com/bytaesu)! - Upgrade the packaged Zod dependency to 4.5. Generated OpenAPI schemas now mark required request fields consistently with runtime validation, including passkey registration responses. + +- Updated dependencies [[`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c), [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6), [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4), [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864), [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186), [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951), [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9), [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc), [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a), [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc)]: + - @better-auth/core@1.7.3 + - @better-auth/drizzle-adapter@1.7.3 + - @better-auth/prisma-adapter@1.7.3 + - @better-auth/kysely-adapter@1.7.3 + - @better-auth/memory-adapter@1.7.3 + - @better-auth/mongo-adapter@1.7.3 + - @better-auth/telemetry@1.7.3 + ## 1.7.2 ### Patch Changes diff --git a/packages/better-auth/package.json b/packages/better-auth/package.json index 5aabc125f0..8bde79bfc3 100644 --- a/packages/better-auth/package.json +++ b/packages/better-auth/package.json @@ -1,6 +1,6 @@ { "name": "better-auth", - "version": "1.7.2", + "version": "1.7.3", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/cimd/CHANGELOG.md b/packages/cimd/CHANGELOG.md index 649b0f2591..05151b1505 100644 --- a/packages/cimd/CHANGELOG.md +++ b/packages/cimd/CHANGELOG.md @@ -1,5 +1,11 @@ # @better-auth/cimd +## 1.7.3 + +### Patch Changes + +- [#10730](https://github.com/better-auth/better-auth/pull/10730) [`1d9b55c`](https://github.com/better-auth/better-auth/commit/1d9b55cfdb789224b545ae317b4bca6b5621d755) Thanks [@erikpr1994](https://github.com/erikpr1994)! - Fix CIMD client metadata discovery failing with `ERR_INVALID_IP_ADDRESS` on supported Node.js versions. + ## 1.7.2 ## 1.7.1 diff --git a/packages/cimd/package.json b/packages/cimd/package.json index 75b32b7e2c..0ee16a94f7 100644 --- a/packages/cimd/package.json +++ b/packages/cimd/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/cimd", - "version": "1.7.2", + "version": "1.7.3", "description": "Client ID Metadata Document plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index f724eb50ea..c371806f17 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,32 @@ # auth +## 1.7.3 + +### Patch Changes + +- [#11100](https://github.com/better-auth/better-auth/pull/11100) [`b489373`](https://github.com/better-auth/better-auth/commit/b4893737325a8b1073a40aa25b3111b38d579a16) Thanks [@bytaesu](https://github.com/bytaesu)! - Add Codex as a supported target for configuring the Better Auth documentation MCP server. + +- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations. + + For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation. + +- [#11140](https://github.com/better-auth/better-auth/pull/11140) [`b95b7b3`](https://github.com/better-auth/better-auth/commit/b95b7b31e70a20f644bc5f8ff404b43832a8d019) Thanks [@bytaesu](https://github.com/bytaesu)! - Allow `auth init` to finish when a generated setup has no dependencies in one of its install groups, and preserve useful package-manager output when an installation fails. + +- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret. + +- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match. + + Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair. + +- [#11126](https://github.com/better-auth/better-auth/pull/11126) [`5024647`](https://github.com/better-auth/better-auth/commit/5024647392141b41cc9a05e1e3112a2bae5fcb15) Thanks [@bytaesu](https://github.com/bytaesu)! - `auth info` now reports installed package versions instead of declared dependency specifiers, including catalog and workspace references. + +- [#11127](https://github.com/better-auth/better-auth/pull/11127) [`8bb6847`](https://github.com/better-auth/better-auth/commit/8bb68479f53b14853a086f15402211606968ea72) Thanks [@bytaesu](https://github.com/bytaesu)! - `auth upgrade` now skips non-semver dependency specifiers, including pnpm catalogs, with a clear warning instead of crashing. + +- Updated dependencies [[`3660f06`](https://github.com/better-auth/better-auth/commit/3660f062d6e7a9b02e3fc8eee5b99482117ebba0), [`5bd7096`](https://github.com/better-auth/better-auth/commit/5bd709640a14e03972420bbfe778e3c732df80d5), [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c), [`7ec7146`](https://github.com/better-auth/better-auth/commit/7ec71461f1b3dcc0f9852ced5cc1ed7252ded4f2), [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6), [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4), [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864), [`c47b765`](https://github.com/better-auth/better-auth/commit/c47b76517d235d7cde07a1b4717f76b8f71a675f), [`2d5c63d`](https://github.com/better-auth/better-auth/commit/2d5c63d512164d4e18c5e67b79a9c7d19b27b669), [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186), [`a9d8c12`](https://github.com/better-auth/better-auth/commit/a9d8c12d14b99a2df35ae2fba98ad4e4bc512ad5), [`9fc7498`](https://github.com/better-auth/better-auth/commit/9fc749867592536b6e472381581cee8f00f6b59b), [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951), [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9), [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc), [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a), [`0bb0dbf`](https://github.com/better-auth/better-auth/commit/0bb0dbf6f38ab53a0c1f2fb639acd7bd602e2a24), [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc), [`5fe5bc2`](https://github.com/better-auth/better-auth/commit/5fe5bc21d1bf699655054192f4f833bcc33d0ba4), [`74a7369`](https://github.com/better-auth/better-auth/commit/74a7369179cc6ab9fc2a9f13a67b33e8c00aa9ac), [`e16b40a`](https://github.com/better-auth/better-auth/commit/e16b40aeadde4203c883f121e7e5f7a2ec04d6b2), [`c0444dc`](https://github.com/better-auth/better-auth/commit/c0444dc97928f46978c42083083d3b8642b89493)]: + - better-auth@1.7.3 + - @better-auth/core@1.7.3 + - @better-auth/telemetry@1.7.3 + ## 1.7.2 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index 2839c9a036..39f1499412 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "auth", - "version": "1.7.2", + "version": "1.7.3", "description": "The CLI for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md index 5dc657f28e..1d4d251856 100644 --- a/packages/core/CHANGELOG.md +++ b/packages/core/CHANGELOG.md @@ -1,5 +1,35 @@ # @better-auth/core +## 1.7.3 + +### Patch Changes + +- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations. + + For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation. + +- [#9908](https://github.com/better-auth/better-auth/pull/9908) [`76d311f`](https://github.com/better-auth/better-auth/commit/76d311f4b94799496ddfc0be7d03db1731f4b2a6) Thanks [@harshil1712](https://github.com/harshil1712)! - Add Cloudflare as a built-in social provider, with support for client-secret authentication and PKCE clients without a secret. + +- [#11101](https://github.com/better-auth/better-auth/pull/11101) [`3e9e197`](https://github.com/better-auth/better-auth/commit/3e9e19746e609004da31bea3356c0059611d9ed4) Thanks [@bytaesu](https://github.com/bytaesu)! - Add a custom token endpoint authentication strategy for providers that require non-standard request parameters. + +- [#11068](https://github.com/better-auth/better-auth/pull/11068) [`157ec8d`](https://github.com/better-auth/better-auth/commit/157ec8d8799ddda642f2fe40120fc364660a8864) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve request IP validation performance. + +- [#11102](https://github.com/better-auth/better-auth/pull/11102) [`baa08f4`](https://github.com/better-auth/better-auth/commit/baa08f4ee674f5cc39624063847c89f1bea73186) Thanks [@bytaesu](https://github.com/bytaesu)! - Fix TikTok sign-in and token refresh failing when configured with the documented `clientKey` and `clientSecret` options. + +- [#11129](https://github.com/better-auth/better-auth/pull/11129) [`9e36635`](https://github.com/better-auth/better-auth/commit/9e36635eb2fbf27d58c70d3361724335ba9a9951) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve PayPal authorization code and refresh token requests, including PKCE parameter handling. + +- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match. + + Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair. + +- [#11134](https://github.com/better-auth/better-auth/pull/11134) [`a2bae0c`](https://github.com/better-auth/better-auth/commit/a2bae0cad04ccc23c40555c77f86b0da1ba40ebc) Thanks [@bytaesu](https://github.com/bytaesu)! - Improve Reddit token requests with OAuth-compliant Basic authentication and redirect protection. + +- [#11189](https://github.com/better-auth/better-auth/pull/11189) [`1a1b7d5`](https://github.com/better-auth/better-auth/commit/1a1b7d56f51cb9ce6b06334b22fcbfa0d52be05a) Thanks [@bytaesu](https://github.com/bytaesu)! - Make `consumeOne` and `incrementOne` optional again for custom database adapters, using guarded fallbacks when native methods are absent. Fallbacks require atomic conditional writes and accurate affected-row counts. Fallback increments can fail when contention exhausts their retries. + +- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account. + + If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps. + ## 1.7.2 ### Patch Changes diff --git a/packages/core/package.json b/packages/core/package.json index 96cf3c2d06..4af9f09b53 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/core", - "version": "1.7.2", + "version": "1.7.3", "description": "The most comprehensive authentication framework for TypeScript.", "type": "module", "license": "MIT", diff --git a/packages/drizzle-adapter/CHANGELOG.md b/packages/drizzle-adapter/CHANGELOG.md index 918bd0f24a..cc3a4ea296 100644 --- a/packages/drizzle-adapter/CHANGELOG.md +++ b/packages/drizzle-adapter/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/drizzle-adapter +## 1.7.3 + +### Patch Changes + +- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations. + + For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation. + ## 1.7.2 ### Patch Changes diff --git a/packages/drizzle-adapter/package.json b/packages/drizzle-adapter/package.json index 02da48e126..d6cb207f31 100644 --- a/packages/drizzle-adapter/package.json +++ b/packages/drizzle-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/drizzle-adapter", - "version": "1.7.2", + "version": "1.7.3", "bugs": { "url": "https://github.com/better-auth/better-auth/issues" }, diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md index 8eabd669ca..b17d78211f 100644 --- a/packages/electron/CHANGELOG.md +++ b/packages/electron/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/electron +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/electron/package.json b/packages/electron/package.json index 96f61c7e9f..c63597bae0 100644 --- a/packages/electron/package.json +++ b/packages/electron/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/electron", - "version": "1.7.2", + "version": "1.7.3", "description": "Better Auth integration for Electron applications.", "type": "module", "license": "MIT", diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md index 3d4a1c65c9..473abf0955 100644 --- a/packages/expo/CHANGELOG.md +++ b/packages/expo/CHANGELOG.md @@ -1,5 +1,11 @@ # @better-auth/expo +## 1.7.3 + +### Patch Changes + +- [#11099](https://github.com/better-auth/better-auth/pull/11099) [`fb7c018`](https://github.com/better-auth/better-auth/commit/fb7c018608bdc019c1685e70a878a084602c2fd3) Thanks [@bytaesu](https://github.com/bytaesu)! - Prevent Expo apps from sending unauthenticated requests while large stored cookies are being updated, and recover the previous cookie value when an update is interrupted or incomplete. + ## 1.7.2 ## 1.7.1 diff --git a/packages/expo/package.json b/packages/expo/package.json index a68f38a5d7..6c2959d197 100644 --- a/packages/expo/package.json +++ b/packages/expo/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/expo", - "version": "1.7.2", + "version": "1.7.3", "description": "Better Auth integration for Expo and React Native applications.", "type": "module", "license": "MIT", diff --git a/packages/i18n/CHANGELOG.md b/packages/i18n/CHANGELOG.md index d4d2888c71..508b60aa09 100644 --- a/packages/i18n/CHANGELOG.md +++ b/packages/i18n/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/i18n +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/i18n/package.json b/packages/i18n/package.json index 732e500f91..f82386e969 100644 --- a/packages/i18n/package.json +++ b/packages/i18n/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/i18n", - "version": "1.7.2", + "version": "1.7.3", "description": "i18n plugin for Better Auth - translate error messages", "type": "module", "license": "MIT", diff --git a/packages/kysely-adapter/CHANGELOG.md b/packages/kysely-adapter/CHANGELOG.md index 98ca5a6f99..d5e89e50b8 100644 --- a/packages/kysely-adapter/CHANGELOG.md +++ b/packages/kysely-adapter/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/kysely-adapter +## 1.7.3 + +### Patch Changes + +- [#11178](https://github.com/better-auth/better-auth/pull/11178) [`be0e007`](https://github.com/better-auth/better-auth/commit/be0e007e20ea310aa533acf49edfae34cfc797a9) Thanks [@bytaesu](https://github.com/bytaesu)! - Report missing tables, missing columns, and required columns Better Auth never writes during initialization, with guidance for fixing them. Kysely checks the live database schema. Authentication requests await the same check and are rejected if the schema does not match. + + Validation is enabled by default, including in production. Set `advanced.database.validateSchema: false` to disable runtime validation. `auth migrate` refuses to apply changes when required unwritten columns need manual repair. + ## 1.7.2 ### Patch Changes diff --git a/packages/kysely-adapter/package.json b/packages/kysely-adapter/package.json index d31f96ee9b..309e74cf55 100644 --- a/packages/kysely-adapter/package.json +++ b/packages/kysely-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/kysely-adapter", - "version": "1.7.2", + "version": "1.7.3", "description": "Kysely adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md index 5a5f79d0e7..f441d878e0 100644 --- a/packages/mcp/CHANGELOG.md +++ b/packages/mcp/CHANGELOG.md @@ -1,5 +1,12 @@ # @better-auth/mcp +## 1.7.3 + +### Patch Changes + +- Updated dependencies [[`4d09d50`](https://github.com/better-auth/better-auth/commit/4d09d502254f1bfe65dafc8d813d803225429c4a)]: + - @better-auth/oauth-provider@1.7.3 + ## 1.7.2 ### Patch Changes diff --git a/packages/mcp/package.json b/packages/mcp/package.json index 2ddd902232..0a13317a56 100644 --- a/packages/mcp/package.json +++ b/packages/mcp/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/mcp", - "version": "1.7.2", + "version": "1.7.3", "description": "Model Context Protocol (MCP) plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/memory-adapter/CHANGELOG.md b/packages/memory-adapter/CHANGELOG.md index cd7ff2fdad..b8fe6f0f79 100644 --- a/packages/memory-adapter/CHANGELOG.md +++ b/packages/memory-adapter/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/memory-adapter +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/memory-adapter/package.json b/packages/memory-adapter/package.json index 0b7f369552..faa4dd6ece 100644 --- a/packages/memory-adapter/package.json +++ b/packages/memory-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/memory-adapter", - "version": "1.7.2", + "version": "1.7.3", "description": "Memory adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/mongo-adapter/CHANGELOG.md b/packages/mongo-adapter/CHANGELOG.md index 9dc43faa48..7ee1dbbbe4 100644 --- a/packages/mongo-adapter/CHANGELOG.md +++ b/packages/mongo-adapter/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/mongo-adapter +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/mongo-adapter/package.json b/packages/mongo-adapter/package.json index 68e502b121..01fa68eca9 100644 --- a/packages/mongo-adapter/package.json +++ b/packages/mongo-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/mongo-adapter", - "version": "1.7.2", + "version": "1.7.3", "description": "Mongo adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/oauth-provider/CHANGELOG.md b/packages/oauth-provider/CHANGELOG.md index beb13694a5..0d02fe3d01 100644 --- a/packages/oauth-provider/CHANGELOG.md +++ b/packages/oauth-provider/CHANGELOG.md @@ -1,5 +1,11 @@ # @better-auth/oauth-provider +## 1.7.3 + +### Patch Changes + +- [#11090](https://github.com/better-auth/better-auth/pull/11090) [`4d09d50`](https://github.com/better-auth/better-auth/commit/4d09d502254f1bfe65dafc8d813d803225429c4a) Thanks [@Salman-Arshad](https://github.com/Salman-Arshad)! - Allow native OAuth clients with `localhost` loopback redirect URIs to use ephemeral callback ports, and ensure loopback port variance changes only the port. + ## 1.7.2 ### Patch Changes diff --git a/packages/oauth-provider/package.json b/packages/oauth-provider/package.json index 36d603a185..0490506f60 100644 --- a/packages/oauth-provider/package.json +++ b/packages/oauth-provider/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/oauth-provider", - "version": "1.7.2", + "version": "1.7.3", "description": "An oauth provider plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/passkey/CHANGELOG.md b/packages/passkey/CHANGELOG.md index 85251b4a63..a6d9224620 100644 --- a/packages/passkey/CHANGELOG.md +++ b/packages/passkey/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/passkey +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/passkey/package.json b/packages/passkey/package.json index 88838051d7..6f5f446e39 100644 --- a/packages/passkey/package.json +++ b/packages/passkey/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/passkey", - "version": "1.7.2", + "version": "1.7.3", "description": "Passkey plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/prisma-adapter/CHANGELOG.md b/packages/prisma-adapter/CHANGELOG.md index 8febe1ee09..c7145885de 100644 --- a/packages/prisma-adapter/CHANGELOG.md +++ b/packages/prisma-adapter/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/prisma-adapter +## 1.7.3 + +### Patch Changes + +- [#11179](https://github.com/better-auth/better-auth/pull/11179) [`352d012`](https://github.com/better-auth/better-auth/commit/352d012bd54e613782bf4af22aae24443541c77c) Thanks [@bytaesu](https://github.com/bytaesu)! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations. + + For Prisma clients whose model metadata omits nullability, `auth generate` reports required fields that Better Auth never writes by reading the existing Prisma schema. Set `advanced.database.validateSchema: false` to disable runtime validation. + ## 1.7.2 ## 1.7.1 diff --git a/packages/prisma-adapter/package.json b/packages/prisma-adapter/package.json index 4b08afe2b3..6e3a0ea06d 100644 --- a/packages/prisma-adapter/package.json +++ b/packages/prisma-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/prisma-adapter", - "version": "1.7.2", + "version": "1.7.3", "description": "Prisma adapter for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/redis-storage/CHANGELOG.md b/packages/redis-storage/CHANGELOG.md index 138eeed625..f65a7286dc 100644 --- a/packages/redis-storage/CHANGELOG.md +++ b/packages/redis-storage/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/redis-storage +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/redis-storage/package.json b/packages/redis-storage/package.json index 64ce259a38..a181271afd 100644 --- a/packages/redis-storage/package.json +++ b/packages/redis-storage/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/redis-storage", - "version": "1.7.2", + "version": "1.7.3", "description": "Redis storage for Better Auth secondary storage", "type": "module", "license": "MIT", diff --git a/packages/scim/CHANGELOG.md b/packages/scim/CHANGELOG.md index 25e5241212..304c15573d 100644 --- a/packages/scim/CHANGELOG.md +++ b/packages/scim/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/scim +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/scim/package.json b/packages/scim/package.json index a569c09db5..e4ecd62fb6 100644 --- a/packages/scim/package.json +++ b/packages/scim/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/scim", - "version": "1.7.2", + "version": "1.7.3", "description": "SCIM plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/sso/CHANGELOG.md b/packages/sso/CHANGELOG.md index d63c60abf8..030d3dc20b 100644 --- a/packages/sso/CHANGELOG.md +++ b/packages/sso/CHANGELOG.md @@ -1,5 +1,13 @@ # @better-auth/sso +## 1.7.3 + +### Patch Changes + +- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account. + + If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps. + ## 1.7.2 ### Patch Changes diff --git a/packages/sso/package.json b/packages/sso/package.json index 951b10405c..63c4b1bec4 100644 --- a/packages/sso/package.json +++ b/packages/sso/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/sso", - "version": "1.7.2", + "version": "1.7.3", "description": "SSO plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/stripe/CHANGELOG.md b/packages/stripe/CHANGELOG.md index 0253c6c428..d4fe5cafea 100644 --- a/packages/stripe/CHANGELOG.md +++ b/packages/stripe/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/stripe +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/stripe/package.json b/packages/stripe/package.json index a5a2bc1d44..ff606e30cb 100644 --- a/packages/stripe/package.json +++ b/packages/stripe/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/stripe", - "version": "1.7.2", + "version": "1.7.3", "description": "Stripe plugin for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/telemetry/CHANGELOG.md b/packages/telemetry/CHANGELOG.md index 2655aa79ed..6c516a4761 100644 --- a/packages/telemetry/CHANGELOG.md +++ b/packages/telemetry/CHANGELOG.md @@ -1,5 +1,7 @@ # @better-auth/telemetry +## 1.7.3 + ## 1.7.2 ## 1.7.1 diff --git a/packages/telemetry/package.json b/packages/telemetry/package.json index dfef26c75c..f09f393623 100644 --- a/packages/telemetry/package.json +++ b/packages/telemetry/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/telemetry", - "version": "1.7.2", + "version": "1.7.3", "description": "Telemetry package for Better Auth", "type": "module", "license": "MIT", diff --git a/packages/test-utils/CHANGELOG.md b/packages/test-utils/CHANGELOG.md index a2a005a0d4..9a919997a8 100644 --- a/packages/test-utils/CHANGELOG.md +++ b/packages/test-utils/CHANGELOG.md @@ -1,5 +1,15 @@ # @better-auth/test-utils +## 1.7.3 + +### Patch Changes + +- [#10762](https://github.com/better-auth/better-auth/pull/10762) [`b7aeed8`](https://github.com/better-auth/better-auth/commit/b7aeed84ce9b8dbec22fc5fc97995b75d8063d9c) Thanks [@starslingdev](https://github.com/apps/starslingdev)! - Adapter test suites now run significantly faster. Cleanup between tests no longer re-deletes rows it has already removed, so suites spend far less time waiting on redundant database round trips. + +- [#11153](https://github.com/better-auth/better-auth/pull/11153) [`2220ee7`](https://github.com/better-auth/better-auth/commit/2220ee726934de3aa128d5b4114391be8e9570cc) Thanks [@bytaesu](https://github.com/bytaesu)! - Restore sign-in compatibility with 1.6 databases by identifying accounts with `(providerId, accountId)` and removing the `issuer` requirement introduced in 1.7.0. Upgrading from 1.6 no longer requires an account schema migration. Ambiguous account keys are rejected instead of selecting an arbitrary account. + + If you applied the 1.7.0 through 1.7.2 account schema, remove its issuer unique index before upgrading. For SQL databases, also make `issuer` nullable or remove the column so sign-ups and account linking can succeed. `auth migrate` does not perform this cleanup. Follow the [upgrade guide](https://www.better-auth.com/docs/guides/1-7-upgrade-guide) for database-specific steps. + ## 1.7.2 ## 1.7.1 diff --git a/packages/test-utils/package.json b/packages/test-utils/package.json index ea7951426b..cac0d96dc8 100644 --- a/packages/test-utils/package.json +++ b/packages/test-utils/package.json @@ -1,6 +1,6 @@ { "name": "@better-auth/test-utils", - "version": "1.7.2", + "version": "1.7.3", "description": "Testing utilities for Better Auth adapter development", "type": "module", "license": "MIT",