  better-release[bot]andGitHub
|
0d8b238acc
|
chore: release v1.6.17 (#9984)
|
2026-06-11 19:50:30 -07:00 |
|
 Gustavo ValverdeandGitHub
|
7faddd4a1d
|
refactor(core): prevent accidental HTTP exposure of server-only endpoints (#9835)
|
2026-06-11 20:37:51 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
fdef997eb9
|
fix: harden provider identity validation (One Tap, Microsoft, SSO, WeChat, Reddit) (#10003)
|
2026-06-11 19:10:55 +00:00 |
|
|
7343284149
|
fix: jwks caching, oauth id mapping, team invitations, account cookie, and scim deprovision bugs (#9987)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-06-11 08:25:19 -07:00 |
|
|
Gustavo ValverdeandGitHub
|
baeaa00bc2
|
fix: make single-use credentials, counters, and replay markers atomic (#9993)
|
2026-06-11 05:11:26 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
1dbf5bb59d
|
fix: harden trusted request context (#9990)
|
2026-06-11 03:50:35 +00:00 |
|
|
better-release[bot]andGitHub
|
1a3c8c478a
|
chore: release v1.6.16 (#9958)
|
2026-06-09 22:32:25 -07:00 |
|
 Bereket EngidaandGitHub
|
cb1cbfa4cc
|
fix: address bug findings across packages (#9974)
|
2026-06-09 19:46:12 -07:00 |
|
|
better-release[bot]andGitHub
|
03e0e36a98
|
chore: release v1.6.15 (#9886)
|
2026-06-08 06:57:06 -07:00 |
|
|
better-release[bot]andGitHub
|
5038d41ca2
|
chore: release v1.6.14 (#9846)
|
2026-06-02 16:56:28 -04:00 |
|
|
Gustavo ValverdeandGitHub
|
13abc7922b
|
fix(core): make redirect-uri validation runtime-safe and reject fragments (#9845)
|
2026-05-31 13:37:39 +01:00 |
|
|
better-release[bot]andGitHub
|
a6f38c72ee
|
chore: release v1.6.13 (#9804)
|
2026-05-31 12:41:17 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
be32012ca3
|
fix(oauth): validate redirect_uri schemes in oidc-provider and mcp (#9838)
|
2026-05-31 11:38:52 +01:00 |
|
|
TaesuandGitHub
|
5c3e248cbf
|
fix(core): throw on non-numeric deleteMany in consumeOne fallback (#9831)
|
2026-05-31 09:00:18 +00:00 |
|
|
43c08a2bc7
|
fix(account): scope OAuth account identity and fix buggy internalAdapter helpers (#9818)
Co-authored-by: Krish Garg <kgarg@chapman.edu>
|
2026-05-30 20:48:10 +00:00 |
|
|
|
23d7cbfa79
|
fix(oauth): apply updateUserInfoOnLink in OAuth callback link flow (#8758)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-05-30 19:48:38 +01:00 |
|
|
5f282bd382
|
fix(account): default storeStateStrategy to "database" when using secondaryStorage (#9591)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-05-30 11:05:28 +01:00 |
|
|
better-release[bot]andGitHub
|
c0c574ea50
|
chore: release v1.6.12 (#9590)
|
2026-05-29 22:28:58 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
c5b9f93498
|
fix(generic-oauth): add accessTokenExpiresIn for providers that omit expires_in (#9799)
|
2026-05-29 20:49:59 +00:00 |
|
|
a3b0c63de9
|
fix: accept hashed nonces for native iOS sign-in with Apple (#8870)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-05-28 12:35:09 +00:00 |
|
 
|
7bf5449b11
|
fix(oauth2): map jose token verification errors (#9655)
Co-authored-by: cyphercodes <cyphercodes@users.noreply.github.com>
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
|
2026-05-27 09:45:02 +00:00 |
|
|
TaesuandGitHub
|
83fa3695e7
|
feat(core): add string case conversion utilities (#9727)
|
2026-05-24 23:40:22 +00:00 |
|
|
f77060af3a
|
fix: consumeVerificationValue returns null for expired rows (#9624)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
|
2026-05-19 16:37:55 +00:00 |
|
|
better-release[bot]andGitHub
|
f41514ef07
|
chore: release v1.6.11 (#9532)
|
2026-05-12 17:30:34 +01:00 |
|
|
MaxwellandGitHub
|
b0ef96fd8e
|
fix: invalid instrumentation import list (#9582)
|
2026-05-12 15:03:15 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
da7e50beee
|
fix(oauth): block OAuth linking to unverified local accounts (#9578)
|
2026-05-12 14:20:19 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
0cbddb8fa4
|
refactor(db): rename claimOne adapter primitive to consumeOne (#9568)
|
2026-05-12 07:44:07 +00:00 |
|
|
TaesuandGitHub
|
62b8793c11
|
chore(deps): consolidate kysely into pnpm catalog (#9569)
|
2026-05-12 07:38:59 +00:00 |
|
  
|
3bec284c4f
|
chore(deps): bump kysely from 0.28.14 to 0.28.17 (#9567)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
|
2026-05-12 06:25:23 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
a2c0c9346e
|
feat(db): add atomic claimOne adapter primitive (#9560)
|
2026-05-11 20:10:29 +00:00 |
|
|
MaxwellandGitHub
|
ee93485499
|
fix: add error code to change-email-disabled (#8948)
|
2026-05-11 11:49:38 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
e21d744987
|
fix(rate-limit): widen ipv6Subnet type and correct default in docs (#9545)
|
2026-05-11 07:04:16 +00:00 |
|
|
|
cbb5014cdf
|
chore: release v1.6.10 (#9350)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
|
2026-05-09 14:31:47 +00:00 |
|
|
TaesuandGitHub
|
15ff28a957
|
fix(internal-adapter): rename deleteAccount param from accountId to id (#9503)
|
2026-05-09 13:50:32 +00:00 |
|
 
|
3a9a2c37ee
|
chore: expose refreshUserSessions on internal adapter (#7764)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com>
|
2026-05-07 10:17:56 +00:00 |
|
|
2220a6d6c2
|
fix(core): use pure instrumentation entry for workerd (#9395)
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com>
|
2026-04-29 12:59:31 -07:00 |
|
|
better-release[bot]andGitHub
|
f484269228
|
chore: release v1.6.9 (#9341)
|
2026-04-24 06:25:08 +01:00 |
|
 
|
815ecf62b6
|
fix(core): resolve instrumentation via package self-reference in adapter factory (#9340)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-04-24 05:12:34 +00:00 |
|
|
better-release[bot]andGitHub
|
b289ac6c4b
|
chore: release v1.6.8 (#9316)
|
2026-04-23 11:31:03 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
9aa8e63de8
|
fix(oauth): support mapProfileToUser fallback for providers that may omit email (#9331)
|
2026-04-23 10:15:36 +00:00 |
|
|
better-release[bot]andGitHub
|
f8076d141a
|
chore: release v1.6.7 (#9289)
|
2026-04-22 12:36:30 +01:00 |
|
|
Gustavo ValverdeandGitHub
|
4f373eed8a
|
feat(social-providers): accept array of Client IDs for ID token audience (#9292)
|
2026-04-22 09:02:56 +00:00 |
|
 RayandGitHub
|
4a180f0b0c
|
fix(core): serve noop ./instrumentation on browser and edge conditions (#9281)
|
2026-04-22 08:44:00 +00:00 |
|
|
307196a405
|
fix(api): preserve response headers when APIError is thrown (#9211)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-04-22 06:47:16 +00:00 |
|
|
better-release[bot]andGitHub
|
0290077760
|
chore: release v1.6.6 (#9222)
|
2026-04-21 17:42:18 +01:00 |
|
|
TaesuandGitHub
|
b5742f9d08
|
feat(core): add mapConcurrent bounded-concurrency utility (#9227)
|
2026-04-21 15:31:08 +00:00 |
|
|
Gustavo ValverdeandGitHub
|
e64ff720fb
|
fix: unify host classification and close SSRF gaps across packages (#9226)
|
2026-04-17 23:25:25 +00:00 |
|
|
a844c7dd08
|
chore(core): update @opentelemetry/api dep declaration to be optional (#9111)
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
|
2026-04-17 14:26:40 +00:00 |
|
|
better-release[bot]andGitHub
|
c8a91f4167
|
chore: release v1.6.5 (#9209)
|
2026-04-16 11:05:30 +01:00 |
|
|
better-release[bot]andGitHub
|
9ec849ff71
|
chore: release v1.6.4 (#9175)
|
2026-04-15 13:00:42 +01:00 |
|