Gustavo Valverde and GitHub
2832dbda06
fix(oauth-provider): accept key-rotation assertions when baseURL ends in a slash ( #11804 )
2026-10-15 10:59:35 +01:00
Gustavo Valverde and GitHub
ef3175ae52
refactor(demo): share demo base URL and MCP resource ( #11765 )
2026-10-15 04:25:55 +00:00
Taesu and GitHub
13c0726d8d
fix(demo): show admin action errors instead of success toasts ( #11771 )
2026-10-15 06:58:39 +09:00
Taesu and GitHub
e3e87ddbeb
fix(demo): reset loading state after unbanning a user ( #11770 )
2026-10-14 21:34:54 +00:00
Taesu and GitHub
c03ced528a
chore: bump @biomejs/biome ( #11760 )
2026-10-14 21:01:10 +00:00
Gustavo Valverde and GitHub
bdf20eb93e
fix(demo): link dynamically registered MCP clients to the MCP resource ( #11764 )
2026-10-14 19:47:33 +00:00
0a1a87e388
fix(oauth-provider): distinguish post-login continuation from initial selection ( #11185 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-14 18:32:15 +00:00
Gustavo Valverde and GitHub
3ddc6096e5
fix(demo): keep OAuth token responses uncacheable in development ( #11742 )
2026-10-14 09:27:24 +01:00
Taesu and GitHub
227156b475
fix(demo): align better-fetch version ( #11264 )
2026-09-12 12:57:14 +09:00
80b1d64594
chore(deps): bump next ( #11226 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-10 07:20:54 +00:00
Taesu and GitHub
2220ee7269
revert: drop the issuer column and resolve accounts by provider id ( #11153 )
2026-09-05 23:03:14 +00:00
Taesu and GitHub
93e9143fe8
chore: bump mysql2 ( #11125 )
2026-09-02 15:17:26 +00:00
Taesu and GitHub
c0444dc979
fix: align OpenAPI required fields with Zod 4.5 ( #11066 )
2026-08-30 18:51:24 +00:00
Gustavo Valverde and GitHub
5af501fd3b
test(demo): validate migrated 1.6 SCIM and SSO workflows ( #10986 )
2026-08-28 22:34:57 +00:00
Taesu
80799e6931
chore: sync main to next
2026-08-14 09:19:43 +09:00
Taesu and GitHub
c92a1ca27b
chore: upgrade next to 16.3 ( #10787 )
2026-08-13 18:06:00 +00:00
a7962147b3
feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings ( #10703 )
...
Co-authored-by: Bereket Engida <bekacru@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-06 05:32:06 +00:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
Taesu and GitHub
d68fec0c9e
chore: bump postcss ( #10683 )
2026-08-04 21:49:53 +00:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
Gustavo Valverde and GitHub
26b194960f
feat(scim): add managed connection catalog and runtime connection resolution ( #10592 )
2026-08-03 13:15:13 -04:00
Gustavo Valverde and GitHub
b7683b82be
feat(scim): add enterprise user attributes and interop conformance ( #10620 )
2026-08-03 07:15:59 -04:00
Gustavo Valverde and GitHub
675eae7a8d
chore(deps): patch remaining security floors ( #10604 )
2026-07-30 22:39:43 -04:00
5c45abcd20
feat(oauth-provider)!: align MCP authorization with 2026-07-28 ( #10577 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-30 21:42:14 -04:00
Gustavo Valverde and GitHub
d701f90e6f
fix(types): expand workspace and consumer type checking ( #10505 )
2026-07-27 16:01:26 +00:00
1190e0498f
chore(deps): bump @babel/core from 7.29.0 to 7.29.7 ( #10548 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-27 13:54:12 +09:00
3177f17f0a
chore(deps): bump ua-parser-js from 2.0.9 to 2.0.10 in /demo/nextjs ( #10546 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-07-27 13:51:47 +09:00
Taesu and GitHub
2e011495c8
chore: bump vite ( #10538 )
2026-07-27 13:50:25 +09:00
b58c3c980d
chore(deps): bump next from 16.2.6 to 16.2.11 in /demo/nextjs ( #10498 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-25 08:18:14 +00:00
bcf7925043
chore(deps): bump postcss from 8.5.14 to 8.5.22 ( #10524 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-25 07:58:24 +00:00
b34d85a2d4
chore(deps): bump next from 16.2.6 to 16.2.11 in /demo/stateless ( #10497 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 13:28:41 +00:00
Gustavo Valverde
558d2de0a7
chore(sync): merge main into next
2026-07-22 10:39:55 -04:00
Gustavo Valverde and GitHub
bfdaa35e20
feat(demo): demonstrate SCIM-backed employee SSO ( #10475 )
2026-07-22 09:17:24 -04:00
Maxwell and GitHub
67cff3edbf
chore(electron): bump tested Electron to 43 ( #10440 )
2026-07-18 04:18:18 +00:00
Gustavo Valverde and GitHub
0de88f5e61
feat(scim)!: decouple provisioning from the organization plugin ( #10390 )
2026-07-16 11:17:06 +01:00
Taesu and GitHub
1508c44484
chore: upgrade TypeScript to 6.0 ( #10373 )
2026-07-12 09:48:50 +00:00
Gustavo Valverde and GitHub
6ddb5554c0
chore(deps)!: upgrade dependencies to latest ( #10170 )
2026-06-20 10:15:37 -07:00
Gustavo Valverde
3b170f2f40
chore: sync main to next
2026-06-20 09:15:00 -07:00
Taesu and GitHub
d032ad6088
chore(deps): update esbuild tooling resolutions ( #10091 )
2026-06-16 01:36:35 +00:00
d2a79bae79
feat(oauth-provider)!: model OAuth protected resources explicitly ( #9648 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-12 10:08:43 -07:00
Gustavo Valverde
381fc6cfaf
chore: sync main to next
2026-06-11 18:18:13 -07:00
Taesu and GitHub
24a6b01463
chore(deps): update hono and shell-quote ( #10010 )
2026-06-11 17:23:05 -07:00
Gustavo Valverde and GitHub
1dbf5bb59d
fix: harden trusted request context ( #9990 )
2026-06-11 03:50:35 +00:00
Gustavo Valverde
a99a331376
chore: pin kysely and zod, regenerate lockfiles for merged deps ( #9533 )
...
Reconcile pnpm-lock.yaml (root) and demo/nextjs/pnpm-lock.yaml with the merged
package.json and pnpm-workspace.yaml overrides: next's workspace versions plus
main's security bumps (samlify 2.13.1, fast-xml-parser 5.8.0) and the #9820
transitive-version overrides. demo/nextjs is a standalone pnpm project whose
lockfile was resolved to next's during the merge while its workspace took
main's overrides, so it is regenerated to match.
Two root overrides pin dependencies to next's working versions:
- kysely 0.28.17 (main's resolved version). The catalog range permits 0.29,
but kysely 0.29's ESM build dropped the migration-table exports the
kysely-adapter node:sqlite introspector imports, breaking table discovery.
- zod 4.x to 4.3.6. better-call's zod peer otherwise resolves to 4.4.3, which
produces a third zod copy that makes the docs app resolve zod to the 3.x
line and fails react-hook-form's zodResolver type check.
main reaches these versions through its release-age policy; next pins them
explicitly because that policy does not resolve in every environment. Remove
the pins once the kysely 0.29 and zod 4.4 upgrades land with their fixes.
Verified: frozen install (root and all demos) under the strict policy, docs
tsc, build, and the OAuth/SSO/oauth-provider regression suites.
2026-05-31 01:36:10 +01:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Gustavo Valverde and GitHub
a1028d9f1f
fix(deps): force patched transitive versions via pnpm overrides ( #9820 )
2026-05-30 23:40:38 +01:00
04303a92ac
fix(deps): widen Kysely peer dependency range for 0.29 support ( #9683 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-05-19 17:28:38 +00:00
Gustavo Valverde and GitHub
e637c7d8ff
fix(deps): resolve dependabot security alerts ( #9662 )
2026-05-18 01:41:47 +00:00
45d7cb8ad6
chore(deps): bump next from 16.2.3 to 16.2.6 ( #9580 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-05-12 23:44:51 +00:00
Taesu and GitHub
8cd6fc5136
chore: restore pnpm v11 upgrade and bump to v11.1.1 ( #9541 )
2026-05-12 19:12:14 +00:00
Gustavo ValverdeandGitHub
TaesuandGitHub
