Bereket Engida
4e898b369b
docs: render fallback for MDX components missing from synced beta content
...
Beta docs content is synced from the next branch at build time, so it can
reference MDX components that don't exist in the deploying branch's app
code. When GenerateAppleJwt was removed on main (#9938 ) while next still
used it, prerendering /docs/beta/authentication/apple crashed the whole
Vercel build with "Expected component `GenerateAppleJwt` to be defined".
Scan each beta page's markdown for component-like JSX tags and provide a
fallback for any tag the app doesn't supply, so cross-branch content drift
degrades to a visible callout instead of a failed deploy. Stable pages keep
the hard failure since their content and components ship from the same
commit.
2026-06-11 21:25:15 -07:00
better-release[bot] and GitHub
0d8b238acc
chore: release v1.6.17 ( #9984 )
2026-06-11 19:50:30 -07:00
Taesu and GitHub
eff3c99952
test(next-js): verify nextCookies forwards all set-cookie headers ( #10013 )
2026-06-11 18:46:21 -07:00
ZerGo0 and GitHub
029cbdc072
docs: update Apple client secret JWT guidance ( #9938 )
2026-06-11 17:54:44 -07:00
Jordan Kahtava and GitHub
44a24ed948
docs: highlighted emailVerified requirement on manually inserted users ( #9999 )
2026-06-11 17:45:37 -07:00
Taesu and GitHub
24a6b01463
chore(deps): update hono and shell-quote ( #10010 )
2026-06-11 17:23:05 -07:00
Taesu and GitHub
ac69e81a29
fix(cli): skip Unsupported() fields when regenerating prisma schema ( #10011 )
2026-06-11 17:19:17 -07:00
2edeb33228
chore(deps): bump the github-actions group across 1 directory with 12 updates ( #9827 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 17:13:18 -07:00
Gautam Manchandani and GitHub
e0a768c973
refactor(access): flatten access plugin role authorization logic ( #9677 )
2026-06-11 17:04:07 -07:00
Gautam Manchandani and GitHub
3310ebc4a0
fix(open-api): mark model ids as required ( #9704 )
2026-06-11 17:01:24 -07:00
108aadd251
fix(cli): update existing prisma field types ( #9729 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-06-11 16:59:14 -07:00
59e0ccbedc
fix(client): updateSession should infer session additional fields ( #9777 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-06-11 16:56:45 -07:00
Gautam Manchandani and Bereket Engida
96c78c3e98
fix(logger): downgrade validation logs level to warn
2026-06-11 16:50:14 -07:00
Arnav Sharma and GitHub
d3758fb2a3
fix(expo): on /linkSocial include cookie for id token ( #9953 )
2026-06-11 16:45:19 -07:00
5c289b52bc
fix(account): resolve stateless account cookies across instances ( #9979 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-11 16:44:11 -07:00
Gustavo Valverde and GitHub
8960f5f3bd
fix(client): restructure session fetch architecture ( #8760 )
2026-06-11 22:49:34 +00:00
Taesu and GitHub
e246ac0929
ci: scope semantic-pull-request app token to pull requests ( #10006 )
2026-06-11 22:15:57 +00:00
Gustavo Valverde and GitHub
7faddd4a1d
refactor(core): prevent accidental HTTP exposure of server-only endpoints ( #9835 )
2026-06-11 20:37:51 +00:00
Gustavo Valverde and GitHub
ed7b6c9ac0
fix: enforce team capacity, constant-time SCIM tokens, and org-admin SSO domain verification ( #10002 )
2026-06-11 19:21:34 +00:00
Gustavo Valverde and GitHub
fdef997eb9
fix: harden provider identity validation (One Tap, Microsoft, SSO, WeChat, Reddit) ( #10003 )
2026-06-11 19:10:55 +00:00
7343284149
fix: jwks caching, oauth id mapping, team invitations, account cookie, and scim deprovision bugs ( #9987 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-06-11 08:25:19 -07:00
Gustavo Valverde and GitHub
0c3856f098
fix: harden session authority against stale cookie cache and unverified selectors ( #9991 )
2026-06-11 13:31:13 +00:00
Damien Maspero and GitHub
e468ff37ce
docs: update Node.js built-in SQLite status to Release Candidate ( #9914 )
2026-06-10 23:13:39 -07:00
Taesu and GitHub
d9c526b2a5
feat(oauth-popup): add popup-based OAuth sign-in ( #9890 )
2026-06-11 05:38:22 +00:00
Taesu and GitHub
3e99e6c77e
fix(admin): create credential account in setUserPassword when missing ( #9482 )
2026-06-11 05:36:55 +00:00
Gustavo Valverde and GitHub
baeaa00bc2
fix: make single-use credentials, counters, and replay markers atomic ( #9993 )
2026-06-11 05:11:26 +00:00
Gustavo Valverde and GitHub
1dbf5bb59d
fix: harden trusted request context ( #9990 )
2026-06-11 03:50:35 +00:00
Taesu and GitHub
9484a77805
chore: bump @better-fetch/fetch ( #9989 )
2026-06-11 01:09:05 +00:00
6987c628f1
fix(cli): resolve SvelteKit, Vite asset, and Cloudflare virtual-module imports ( #9834 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-06-11 01:06:43 +00:00
b803c61fdc
fix(organization): reject setting unknown or empty roles on updateMemberRole ( #9962 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-10 16:57:24 -07:00
Taesu and GitHub
a11a706ff2
fix(stripe): correct subscription handling and customer linking ( #9971 )
2026-06-10 18:58:40 +00:00
Prakash Kumar and GitHub
128bc34572
docs: add horizontal scrolling to landing page code block ( #9975 )
2026-06-09 23:22:24 -07:00
better-release[bot] and GitHub
1a3c8c478a
chore: release v1.6.16 ( #9958 )
2026-06-09 22:32:25 -07:00
Bereket Engida and GitHub
cb1cbfa4cc
fix: address bug findings across packages ( #9974 )
2026-06-09 19:46:12 -07:00
Gustavo Valverde and GitHub
a6b0295df3
fix(sso): consume SAML AuthnRequest atomically ( #9972 )
2026-06-10 01:58:45 +00:00
Gustavo Valverde and GitHub
87e7aa5e0f
fix(api): validate Origin/Referer on cookieless email sign-in and sign-up ( #9973 )
2026-06-10 01:43:41 +00:00
Gustavo Valverde and GitHub
893cf6cb3f
fix(session): honor server-side session deletion in update-session and token routes ( #9967 )
2026-06-10 00:42:45 +00:00
Gustavo Valverde and GitHub
5e49c56a9e
fix(auth): mark plugin-owned session fields as non-input ( #9965 )
2026-06-09 23:59:09 +00:00
Taesu and GitHub
2ac00fe421
chore: bump better-call and @better-fetch/fetch ( #9955 )
2026-06-09 21:34:16 +00:00
Taesu and GitHub
2545b7bb13
chore: drop two-factor-newsession-null.md changeset ( #9960 )
2026-06-09 14:24:28 -07:00
Paola Estefanía de Campos and GitHub
afcb4dd7f3
docs(two-factor): document newSession is null during 2FA challenge ( #9957 )
2026-06-09 13:15:00 -07:00
Taesu and GitHub
6a8dfa4f3e
docs(changelog): show contributor avatars with proper size and styling ( #9956 )
2026-06-09 19:44:32 +00:00
better-release[bot] and GitHub
03e0e36a98
chore: release v1.6.15 ( #9886 )
2026-06-08 06:57:06 -07:00
ef4e131b85
fix(kysely-adapter): inline migration-table constants to fix Turbopack build ( #9933 )
...
Co-authored-by: bytaesu <166604494+bytaesu@users.noreply.github.com >
2026-06-08 12:20:53 +00:00
Gustavo Valverde and GitHub
fe9600bc07
feat(oauth-provider): accept POST on the userinfo endpoint ( #9937 )
2026-06-07 21:09:27 -07:00
d23735b1de
feat(passkey): resolve authenticator name from AAGUID at read time ( #9927 )
...
Co-authored-by: Maxwell Weru <1645026+mburumaxwell@users.noreply.github.com >
2026-06-07 23:22:39 +00:00
b0ddfd3433
fix(oauth-provider): run configured hooks when authorize resumes ( #9919 )
...
Co-authored-by: Gautam Manchandani <manchandanigautam@gmail.com >
2026-06-07 14:43:47 -07:00
ea64709ae6
docs: security update for June 2026 ( #9884 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-06-07 14:41:58 -07:00
Gustavo Valverde and GitHub
7213d1ac3a
test(cli): give the integration-style suite a generous timeout ( #9926 )
2026-06-07 14:36:12 -07:00
bff65fd620
fix(sso): pass clockSkew to samlify clockDrifts to fix ERR_SUBJECT_UNCONFIRMED ( #9748 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-06-06 04:20:14 +00:00
Bereket Engida
better-release[bot]andGitHub
TaesuandGitHub
ZerGo0andGitHub
Jordan KahtavaandGitHub
Gautam ManchandaniandGitHub
Arnav SharmaandGitHub
Damien MasperoandGitHub
Prakash KumarandGitHub
Paola Estefanía de CamposandGitHub
