Taesu and GitHub
a5b2ba4ae6
test(e2e): track typecheck with skipLibCheck disabled ( #11141 )
2026-09-03 19:18:04 +00:00
Taesu and GitHub
557e19bfad
refactor(context): clarify auth endpoint context access ( #10938 )
2026-08-25 08:19:52 +00:00
Taesu and GitHub
d76d51c2ad
ci: harden smoke test timeouts ( #10936 )
2026-08-22 13:54:36 +00:00
Taesu and GitHub
19f75a03ca
refactor(e2e): simplify Cloudflare fixture ( #10876 )
2026-08-20 11:43:02 +00:00
Taesu and GitHub
94e04c6a96
test(e2e): cover concurrent async context initialization in Workerd ( #10847 )
2026-08-20 11:04:38 +00:00
Taesu and GitHub
591a5e7c43
test(e2e): run Cloudflare smoke tests with the integration test harness ( #10839 )
2026-08-20 10:51:54 +00:00
a7962147b3
feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings ( #10703 )
...
Co-authored-by: Bereket Engida <bekacru@gmail.com >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-06 05:32:06 +00:00
Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
5c45abcd20
feat(oauth-provider)!: align MCP authorization with 2026-07-28 ( #10577 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-30 21:42:14 -04:00
Gustavo Valverde and GitHub
d701f90e6f
fix(types): expand workspace and consumer type checking ( #10505 )
2026-07-27 16:01:26 +00:00
Taesu and GitHub
2e011495c8
chore: bump vite ( #10538 )
2026-07-27 13:50:25 +09:00
Taesu and GitHub
70a12ca63b
chore(deps): bump @hono/node-server from 1.19.14 to 2.0.10 ( #10526 )
2026-07-25 08:17:54 +00:00
9344b08f4b
chore(deps): bump hono from 4.12.25 to 4.12.31 ( #10477 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-25 07:51:41 +00:00
Gustavo Valverde
558d2de0a7
chore(sync): merge main into next
2026-07-22 10:39:55 -04:00
Gustavo Valverde and GitHub
dbd302e422
feat(auth)!: scope accounts by issuer ( #10403 )
2026-07-16 17:24:34 +01:00
e4818b5459
fix(kysely-adapter): restore local migration constants ( #10377 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-13 06:32:49 +00:00
Taesu and GitHub
1508c44484
chore: upgrade TypeScript to 6.0 ( #10373 )
2026-07-12 09:48:50 +00:00
Gustavo Valverde and GitHub
6ddb5554c0
chore(deps)!: upgrade dependencies to latest ( #10170 )
2026-06-20 10:15:37 -07:00
Gustavo Valverde
3b170f2f40
chore: sync main to next
2026-06-20 09:15:00 -07:00
Gustavo Valverde and GitHub
de8394de20
fix(cimd): route client_id SSRF checks through the shared host classifier ( #10126 )
2026-06-17 18:29:06 -07:00
Taesu and GitHub
d032ad6088
chore(deps): update esbuild tooling resolutions ( #10091 )
2026-06-16 01:36:35 +00:00
Gustavo Valverde and GitHub
6fe9faab65
refactor!: remove deprecated oidc-provider plugin ( #10031 )
2026-06-12 21:45:19 +00:00
Gustavo Valverde
6f5c707459
chore: sync main to next
2026-06-12 10:25:24 -07:00
Gautam Manchandani and GitHub
b21a5f7f6c
fix(client): preserve plugin inference in composite monorepos ( #9583 )
2026-06-12 15:05:58 +00:00
Gustavo Valverde and GitHub
73541c1190
fix: cloudflare runtime require helper ( #10014 )
2026-06-11 21:53:18 -07:00
Gustavo Valverde
381fc6cfaf
chore: sync main to next
2026-06-11 18:18:13 -07:00
Taesu and GitHub
24a6b01463
chore(deps): update hono and shell-quote ( #10010 )
2026-06-11 17:23:05 -07:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Maxwell and GitHub
f6bf45123f
fix(api-key): add better-call as peer dependency to fix TS4023 declaration emit ( #9759 )
2026-05-27 00:05:31 +00:00
Gustavo Valverde and GitHub
e637c7d8ff
fix(deps): resolve dependabot security alerts ( #9662 )
2026-05-18 01:41:47 +00:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Taesu and GitHub
05f9d17aa5
test(e2e): verify auth.fetch default export on Bun and Deno ( #9494 )
2026-05-08 05:17:42 +00:00
d427d1dba9
fix(oauth-provider): export declaration helper types ( #9406 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:20:44 +00:00
Taesu and GitHub
d17ee3e534
test: add regression tests for public type exports from better-auth/types ( #9419 )
2026-05-01 01:16:02 +00:00
a02e07cb89
fix(passkey): resolve exactOptionalPropertyTypes incompatibility ( #9270 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-23 09:48:05 +00:00
Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
88d4a0507e
chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 ( #9306 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-22 12:00:49 +00:00
Taesu and GitHub
3d39e63cd2
test: remove dead stripe option from fixture ( #9303 )
2026-04-22 10:30:50 +00:00
cd8313ba00
feat(cimd): add Client ID Metadata Document plugin ( #9159 )
...
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com >
2026-04-13 20:52:34 +00:00
5f84335815
feat(stripe): support Stripe SDK v21 and v22 ( #9084 )
...
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com >
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
514a3062ec
chore(deps-dev): bump vite from 7.3.1 to 7.3.2 ( #9001 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-08 08:02:56 +00:00
8ad1995077
chore(deps): bump drizzle-orm from 0.45.1 to 0.45.2 ( #9033 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 07:40:52 +00:00
63bf778ea4
chore(deps): bump hono from 4.12.7 to 4.12.12 ( #9029 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 06:49:06 +00:00
Taesu and GitHub
141781d6fc
fix: generate session id when using secondary storage without database ( #8927 )
2026-04-06 14:43:47 +00:00
Gustavo Valverde and GitHub
d06b5865f4
fix(ci): mark test packages as private and remove duplicate beta title suffix ( #8950 )
2026-04-04 06:10:47 +00:00
Gustavo Valverde and GitHub
7c2ce8a371
feat(passkey): add pre-auth registration and extensions ( #7154 )
2026-03-30 06:43:10 +00:00
Alex Yang and GitHub
a67630edb4
fix(sso): use namespace import for samlify to fix ESM compatibility ( #8697 )
2026-03-19 19:31:11 +00:00
TaesuandGitHub
Gustavo Valverde
Gautam ManchandaniandGitHub
Alex YangandGitHub