Gustavo Valverde and GitHub
2832dbda06
fix(oauth-provider): accept key-rotation assertions when baseURL ends in a slash ( #11804 )
2026-10-15 10:59:35 +01:00
Gustavo Valverde and GitHub
af4b7965e8
test(oauth-provider): add black-box DPoP interop smoke tests ( #11791 )
2026-10-15 08:35:47 +00:00
Taesu and GitHub
c03ced528a
chore: bump @biomejs/biome ( #11760 )
2026-10-14 21:01:10 +00:00
Taesu and GitHub
9725f1b361
fix(core): prevent stalled AsyncLocalStorage initialization ( #11711 )
2026-10-12 21:19:17 +00:00
9904b29ece
fix(kysely-adapter): allow concurrent queries on the D1 dialect ( #11490 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-10-10 07:59:43 +00:00
Gustavo Valverde and GitHub
2627237fae
fix(organization): published types fail with skipLibCheck: false ( #11637 )
2026-10-08 14:30:44 +00:00
c68b2cd8a5
fix(oauth-provider): resolve exactOptionalPropertyTypes incompatibility ( #10266 )
...
Co-authored-by: shiminshen <16914659+shiminshen@users.noreply.github.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-10-08 12:20:42 +00:00
3d1f008ae3
fix(db): use static zod lookup in toZodSchema so locales tree-shake ( #10866 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-10-03 02:33:10 +00:00
Taesu and GitHub
2b13e011b4
fix(kysely-adapter): detect SQLite rowid aliases correctly ( #11374 )
2026-09-24 01:31:18 +00:00
8f8ceccc6b
chore(deps): bump hono from 4.12.34 to 4.13.7 ( #11225 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-09-09 09:58:20 +00:00
Taesu and GitHub
3ff842ab7f
fix(core): handle optional OpenTelemetry imports in Metro ( #11210 )
2026-09-08 09:26:10 +00:00
Taesu and GitHub
a5b2ba4ae6
test(e2e): track typecheck with skipLibCheck disabled ( #11141 )
2026-09-03 19:18:04 +00:00
Taesu and GitHub
557e19bfad
refactor(context): clarify auth endpoint context access ( #10938 )
2026-08-25 08:19:52 +00:00
Taesu and GitHub
d76d51c2ad
ci: harden smoke test timeouts ( #10936 )
2026-08-22 13:54:36 +00:00
Taesu and GitHub
19f75a03ca
refactor(e2e): simplify Cloudflare fixture ( #10876 )
2026-08-20 11:43:02 +00:00
Taesu and GitHub
94e04c6a96
test(e2e): cover concurrent async context initialization in Workerd ( #10847 )
2026-08-20 11:04:38 +00:00
Taesu and GitHub
591a5e7c43
test(e2e): run Cloudflare smoke tests with the integration test harness ( #10839 )
2026-08-20 10:51:54 +00:00
a7962147b3
feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings ( #10703 )
...
Co-authored-by: Bereket Engida <bekacru@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-06 05:32:06 +00:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
5c45abcd20
feat(oauth-provider)!: align MCP authorization with 2026-07-28 ( #10577 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-30 21:42:14 -04:00
Gustavo Valverde and GitHub
d701f90e6f
fix(types): expand workspace and consumer type checking ( #10505 )
2026-07-27 16:01:26 +00:00
Taesu and GitHub
2e011495c8
chore: bump vite ( #10538 )
2026-07-27 13:50:25 +09:00
Taesu and GitHub
70a12ca63b
chore(deps): bump @hono/node-server from 1.19.14 to 2.0.10 ( #10526 )
2026-07-25 08:17:54 +00:00
9344b08f4b
chore(deps): bump hono from 4.12.25 to 4.12.31 ( #10477 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-25 07:51:41 +00:00
Gustavo Valverde
558d2de0a7
chore(sync): merge main into next
2026-07-22 10:39:55 -04:00
Gustavo Valverde and GitHub
dbd302e422
feat(auth)!: scope accounts by issuer ( #10403 )
2026-07-16 17:24:34 +01:00
e4818b5459
fix(kysely-adapter): restore local migration constants ( #10377 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-13 06:32:49 +00:00
Taesu and GitHub
1508c44484
chore: upgrade TypeScript to 6.0 ( #10373 )
2026-07-12 09:48:50 +00:00
Gustavo Valverde and GitHub
6ddb5554c0
chore(deps)!: upgrade dependencies to latest ( #10170 )
2026-06-20 10:15:37 -07:00
Gustavo Valverde
3b170f2f40
chore: sync main to next
2026-06-20 09:15:00 -07:00
Gustavo Valverde and GitHub
de8394de20
fix(cimd): route client_id SSRF checks through the shared host classifier ( #10126 )
2026-06-17 18:29:06 -07:00
Taesu and GitHub
d032ad6088
chore(deps): update esbuild tooling resolutions ( #10091 )
2026-06-16 01:36:35 +00:00
Gustavo Valverde and GitHub
6fe9faab65
refactor!: remove deprecated oidc-provider plugin ( #10031 )
2026-06-12 21:45:19 +00:00
Gustavo Valverde
6f5c707459
chore: sync main to next
2026-06-12 10:25:24 -07:00
Gautam Manchandani and GitHub
b21a5f7f6c
fix(client): preserve plugin inference in composite monorepos ( #9583 )
2026-06-12 15:05:58 +00:00
Gustavo Valverde and GitHub
73541c1190
fix: cloudflare runtime require helper ( #10014 )
2026-06-11 21:53:18 -07:00
Gustavo Valverde
381fc6cfaf
chore: sync main to next
2026-06-11 18:18:13 -07:00
Taesu and GitHub
24a6b01463
chore(deps): update hono and shell-quote ( #10010 )
2026-06-11 17:23:05 -07:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Maxwell and GitHub
f6bf45123f
fix(api-key): add better-call as peer dependency to fix TS4023 declaration emit ( #9759 )
2026-05-27 00:05:31 +00:00
Gustavo Valverde and GitHub
e637c7d8ff
fix(deps): resolve dependabot security alerts ( #9662 )
2026-05-18 01:41:47 +00:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Taesu and GitHub
05f9d17aa5
test(e2e): verify auth.fetch default export on Bun and Deno ( #9494 )
2026-05-08 05:17:42 +00:00
d427d1dba9
fix(oauth-provider): export declaration helper types ( #9406 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:20:44 +00:00
Taesu and GitHub
d17ee3e534
test: add regression tests for public type exports from better-auth/types ( #9419 )
2026-05-01 01:16:02 +00:00
a02e07cb89
fix(passkey): resolve exactOptionalPropertyTypes incompatibility ( #9270 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-23 09:48:05 +00:00
Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
Gustavo ValverdeandGitHub
TaesuandGitHub
Gautam ManchandaniandGitHub
