Gustavo Valverde
5af0b3b77e
chore(sync): merge main into next
2026-08-04 18:34:05 -04:00
a8d52f29d2
chore(deps): bump hono from 4.12.31 to 4.12.34 ( #10669 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:19:15 +00:00
Gustavo Valverde and GitHub
8bc28daf42
fix(core): preserve issuer-scoped account identities ( #10668 )
2026-08-04 13:47:09 -04:00
Gustavo Valverde and GitHub
26b194960f
feat(scim): add managed connection catalog and runtime connection resolution ( #10592 )
2026-08-03 13:15:13 -04:00
5c45abcd20
feat(oauth-provider)!: align MCP authorization with 2026-07-28 ( #10577 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-30 21:42:14 -04:00
Gustavo Valverde and GitHub
d701f90e6f
fix(types): expand workspace and consumer type checking ( #10505 )
2026-07-27 16:01:26 +00:00
Taesu and GitHub
2e011495c8
chore: bump vite ( #10538 )
2026-07-27 13:50:25 +09:00
Taesu and GitHub
70a12ca63b
chore(deps): bump @hono/node-server from 1.19.14 to 2.0.10 ( #10526 )
2026-07-25 08:17:54 +00:00
9344b08f4b
chore(deps): bump hono from 4.12.25 to 4.12.31 ( #10477 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-07-25 07:51:41 +00:00
Gustavo Valverde
558d2de0a7
chore(sync): merge main into next
2026-07-22 10:39:55 -04:00
Gustavo Valverde and GitHub
bfdaa35e20
feat(demo): demonstrate SCIM-backed employee SSO ( #10475 )
2026-07-22 09:17:24 -04:00
Gustavo Valverde and GitHub
dbd302e422
feat(auth)!: scope accounts by issuer ( #10403 )
2026-07-16 17:24:34 +01:00
Gustavo Valverde and GitHub
763a2671c5
feat(db): add compound table indexes ( #10402 )
2026-07-16 14:31:48 +01:00
Gustavo Valverde and GitHub
0de88f5e61
feat(scim)!: decouple provisioning from the organization plugin ( #10390 )
2026-07-16 11:17:06 +01:00
Maxwell and GitHub
8784c1c1f4
chore!: move joins to advanced.database.joins ( #10359 )
2026-07-14 22:21:38 +00:00
e4818b5459
fix(kysely-adapter): restore local migration constants ( #10377 )
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-13 06:32:49 +00:00
Taesu and GitHub
1508c44484
chore: upgrade TypeScript to 6.0 ( #10373 )
2026-07-12 09:48:50 +00:00
Maxwell and GitHub
097eecdd16
fix(cli): disambiguate Drizzle relations with relationName ( #10352 )
2026-07-12 01:54:16 +00:00
0f2cc1b33b
fix(cli): recover when auth generate's config self-imports its own output ( #10302 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-07-09 00:29:41 +00:00
Gustavo Valverde
c02ea52953
chore(sync): merge main into next
...
Resolve the sync conflicts by keeping the next release train package versions, carrying the 1.6.23 stable changelog entries forward, and unioning the cspell word list.
2026-06-29 18:12:01 -04:00
Taesu and GitHub
7f3ac3879f
ci(e2e): close mongo client and add adapter-integration timeout ( #10261 )
2026-06-26 19:04:36 -07:00
ea06c5a71f
feat(drizzle-adapter): support Drizzle Relations v2 ( #9489 )
...
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-06-26 11:01:48 +00:00
Gustavo Valverde and GitHub
6ddb5554c0
chore(deps)!: upgrade dependencies to latest ( #10170 )
2026-06-20 10:15:37 -07:00
Gustavo Valverde
3b170f2f40
chore: sync main to next
2026-06-20 09:15:00 -07:00
Gustavo Valverde and GitHub
de8394de20
fix(cimd): route client_id SSRF checks through the shared host classifier ( #10126 )
2026-06-17 18:29:06 -07:00
Taesu and GitHub
d032ad6088
chore(deps): update esbuild tooling resolutions ( #10091 )
2026-06-16 01:36:35 +00:00
Gustavo Valverde and GitHub
6fe9faab65
refactor!: remove deprecated oidc-provider plugin ( #10031 )
2026-06-12 21:45:19 +00:00
Gustavo Valverde
6f5c707459
chore: sync main to next
2026-06-12 10:25:24 -07:00
Gautam Manchandani and GitHub
b21a5f7f6c
fix(client): preserve plugin inference in composite monorepos ( #9583 )
2026-06-12 15:05:58 +00:00
Gustavo Valverde and GitHub
73541c1190
fix: cloudflare runtime require helper ( #10014 )
2026-06-11 21:53:18 -07:00
Gustavo Valverde
381fc6cfaf
chore: sync main to next
2026-06-11 18:18:13 -07:00
Taesu and GitHub
24a6b01463
chore(deps): update hono and shell-quote ( #10010 )
2026-06-11 17:23:05 -07:00
Gustavo Valverde and GitHub
baeaa00bc2
fix: make single-use credentials, counters, and replay markers atomic ( #9993 )
2026-06-11 05:11:26 +00:00
Gustavo Valverde
ef4fb0ff95
chore: merge main into next ( #9533 )
...
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.
Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577 .
2026-05-31 00:10:16 +01:00
Maxwell and GitHub
f6bf45123f
fix(api-key): add better-call as peer dependency to fix TS4023 declaration emit ( #9759 )
2026-05-27 00:05:31 +00:00
Maxwell and GitHub
85ca603eec
fix: drizzle mixed and/or ( #9756 )
2026-05-26 14:08:11 +00:00
Gustavo Valverde and GitHub
e637c7d8ff
fix(deps): resolve dependabot security alerts ( #9662 )
2026-05-18 01:41:47 +00:00
Taesu and GitHub
62b8793c11
chore(deps): consolidate kysely into pnpm catalog ( #9569 )
2026-05-12 07:38:59 +00:00
3bec284c4f
chore(deps): bump kysely from 0.28.14 to 0.28.17 ( #9567 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-05-12 06:25:23 +00:00
Taesu
2b83087180
chore: sync main to next
2026-05-10 03:45:29 +09:00
Taesu and GitHub
05f9d17aa5
test(e2e): verify auth.fetch default export on Bun and Deno ( #9494 )
2026-05-08 05:17:42 +00:00
d427d1dba9
fix(oauth-provider): export declaration helper types ( #9406 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-05-06 05:20:44 +00:00
Taesu and GitHub
d17ee3e534
test: add regression tests for public type exports from better-auth/types ( #9419 )
2026-05-01 01:16:02 +00:00
a02e07cb89
fix(passkey): resolve exactOptionalPropertyTypes incompatibility ( #9270 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-23 09:48:05 +00:00
Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
88d4a0507e
chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 ( #9306 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-22 12:00:49 +00:00
Taesu and GitHub
3d39e63cd2
test: remove dead stripe option from fixture ( #9303 )
2026-04-22 10:30:50 +00:00
Gustavo Valverde and GitHub
e64ff720fb
fix: unify host classification and close SSRF gaps across packages ( #9226 )
2026-04-17 23:25:25 +00:00
Gustavo Valverde
225976c7d2
chore: main to next conflict resolution
...
Resolve the main to next sync discrepancies after the v1.6.4 release.
Conflict resolution:
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.4 sections below the 1.7.0-beta entries
- restore the next pre-release accumulator changesets that the stable release deleted on main
2026-04-15 15:40:35 +01:00
Gustavo Valverde
TaesuandGitHub
MaxwellandGitHub
Gautam ManchandaniandGitHub
