Commit Graph
97 Commits
Author SHA1 Message Date
Gustavo Valverde 5af0b3b77e chore(sync): merge main into next 2026-08-04 18:34:05 -04:00
better-release[bot]andGitHub a16b30e843 chore: release v1.6.26 (#10521) 2026-08-04 17:15:45 -04:00
better-release[bot]andGitHub 8bb588dde2 chore: release v1.7.0-rc.3 (#10496) 2026-08-03 13:27:15 -04:00
Gustavo ValverdeandGitHub d701f90e6f fix(types): expand workspace and consumer type checking (#10505) 2026-07-27 16:01:26 +00:00
better-release[bot]andGitHub 07a646ea19 chore: release v1.6.25 (#10491) 2026-07-23 11:44:59 -04:00
better-release[bot]andGitHub cc708e51bc chore: release v1.7.0-rc.2 (#10327) 2026-07-22 15:51:41 -04:00
Gustavo Valverde 1dd09ed096 docs(sync): address merged documentation comments 2026-07-22 14:22:50 -04:00
Gustavo Valverde 558d2de0a7 chore(sync): merge main into next 2026-07-22 10:39:55 -04:00
better-release[bot]andGitHub 9a661c7b7a chore: release v1.6.24 (#10323) 2026-07-22 06:30:26 -04:00
better-release[bot]andGitHub fb1dff141c chore: release v1.7.0-rc.1 (#10303) 2026-07-02 18:35:29 +01:00
Gustavo Valverde c02ea52953 chore(sync): merge main into next
Resolve the sync conflicts by keeping the next release train package versions, carrying the 1.6.23 stable changelog entries forward, and unioning the cspell word list.
2026-06-29 18:12:01 -04:00
better-release[bot]andGitHub 9dfceee140 chore: release v1.6.23 (#10260) 2026-06-29 18:04:39 -04:00
better-release[bot]andGitHub b7239f37de chore: release v1.7.0-rc.0 (#10254) 2026-06-26 23:12:46 +01:00
better-release[bot]andGitHub ba52913eed chore: release v1.7.0-beta.10 (#10173) 2026-06-26 17:59:41 +01:00
Gustavo Valverde 010bd65811 chore: resolve 10246 main-to-next sync conflicts 2026-06-26 13:54:08 +01:00
better-release[bot]andGitHub a90d061de7 chore: release v1.6.22 (#10245) 2026-06-26 13:43:23 +01:00
Gustavo Valverde cc1aed88d3 fix: address sync review feedback 2026-06-26 07:42:55 +01:00
Gustavo Valverde 4bcda56649 chore: resolve 10178 main-to-next sync conflicts
Merges origin/main into origin/next for the replacement sync PR and records the hand-resolved package metadata, changelog, OAuth/social provider, admin, SIWE, SCIM, SSO, username, rate-limiter, and next-owned MCP/OIDC provider conflicts.
2026-06-26 06:33:24 +01:00
better-release[bot]andGitHub 414169d95a chore: release v1.6.21 (#10184) 2026-06-26 05:52:50 +01:00
TaesuandGitHub 471f81c1ab refactor: centralize request IP resolver in core (#10216) 2026-06-26 05:05:00 +01:00
5953157acf fix: harden forwarded client IP resolution (#10203)
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
2026-06-25 04:55:10 +00:00
Gustavo Valverde 3b170f2f40 chore: sync main to next 2026-06-20 09:15:00 -07:00
better-release[bot]andGitHub c342f42fff chore: release v1.6.20 (#10108) 2026-06-19 19:42:38 -07:00
better-release[bot]andGitHub 4218161c53 chore: release v1.7.0-beta.9 (#10141) 2026-06-19 18:12:18 -07:00
better-release[bot]andGitHub 4d699c5fda chore: release v1.7.0-beta.8 (#10131) 2026-06-18 08:34:54 -07:00
better-release[bot]andGitHub 1bf3c9d374 chore: release v1.7.0-beta.7 (#10116) 2026-06-17 18:34:04 -07:00
better-release[bot]andGitHub 477044a065 chore: release v1.7.0-beta.6 (#10009) 2026-06-16 13:44:27 -07:00
Gustavo Valverde 849f6e8aca chore: sync main to next 2026-06-15 18:30:49 -07:00
better-release[bot]andGitHub ac4d81df74 chore: release v1.6.19 (#10034) 2026-06-15 17:40:36 -07:00
Gustavo Valverde 6f5c707459 chore: sync main to next 2026-06-12 10:25:24 -07:00
better-release[bot]andGitHub 04debbff04 chore: release v1.6.18 (#10026) 2026-06-12 10:15:14 -07:00
Gustavo Valverde 167f3c7645 Merge remote-tracking branch 'origin/main' into chore/sync-main-to-next-20260611
# Conflicts:
#	.changeset/accept-invitation-team-capacity.md
#	.changeset/adapters-native-increment-one.md
#	.changeset/api-key-atomic-quota.md
#	.changeset/delete-account-token-single-use.md
#	.changeset/device-code-single-use.md
#	.changeset/electron-code-single-use.md
#	.changeset/email-otp-attempts-atomic.md
#	.changeset/increment-one-primitive.md
#	.changeset/memory-adapter-transaction-isolation.md
#	.changeset/one-time-token-single-use.md
#	.changeset/passkey-ceremony-binding.md
#	.changeset/password-reset-token-single-use.md
#	.changeset/phone-otp-attempts-atomic.md
#	.changeset/rate-limit-atomic-consume.md
#	.changeset/redis-increment.md
#	.changeset/reserve-verification-value.md
#	.changeset/saml-replay-reserve.md
#	.changeset/siwe-nonce-single-use.md
#	.changeset/two-factor-challenge-single-use.md
#	.changeset/twofactor-otp-attempts-atomic.md
#	packages/api-key/CHANGELOG.md
#	packages/api-key/package.json
#	packages/better-auth/CHANGELOG.md
#	packages/better-auth/package.json
#	packages/cli/CHANGELOG.md
#	packages/cli/package.json
#	packages/core/CHANGELOG.md
#	packages/core/package.json
#	packages/drizzle-adapter/CHANGELOG.md
#	packages/drizzle-adapter/package.json
#	packages/electron/CHANGELOG.md
#	packages/electron/package.json
#	packages/expo/CHANGELOG.md
#	packages/expo/package.json
#	packages/i18n/CHANGELOG.md
#	packages/i18n/package.json
#	packages/kysely-adapter/CHANGELOG.md
#	packages/kysely-adapter/package.json
#	packages/memory-adapter/CHANGELOG.md
#	packages/memory-adapter/package.json
#	packages/mongo-adapter/CHANGELOG.md
#	packages/mongo-adapter/package.json
#	packages/oauth-provider/CHANGELOG.md
#	packages/oauth-provider/package.json
#	packages/passkey/CHANGELOG.md
#	packages/passkey/package.json
#	packages/prisma-adapter/CHANGELOG.md
#	packages/prisma-adapter/package.json
#	packages/redis-storage/CHANGELOG.md
#	packages/redis-storage/package.json
#	packages/scim/CHANGELOG.md
#	packages/scim/package.json
#	packages/sso/CHANGELOG.md
#	packages/sso/package.json
#	packages/stripe/CHANGELOG.md
#	packages/stripe/package.json
#	packages/telemetry/CHANGELOG.md
#	packages/telemetry/package.json
#	packages/test-utils/CHANGELOG.md
#	packages/test-utils/package.json
2026-06-11 19:56:06 -07:00
better-release[bot]andGitHub 0d8b238acc chore: release v1.6.17 (#9984) 2026-06-11 19:50:30 -07:00
Gustavo Valverde 7a55ae4f52 Merge remote-tracking branch 'origin/next' into chore/sync-main-to-next-20260611
# Conflicts:
#	.changeset/accept-invitation-team-capacity.md
#	.changeset/adapters-native-increment-one.md
#	.changeset/api-key-atomic-quota.md
#	.changeset/delete-account-token-single-use.md
#	.changeset/device-code-single-use.md
#	.changeset/electron-code-single-use.md
#	.changeset/email-otp-attempts-atomic.md
#	.changeset/increment-one-primitive.md
#	.changeset/memory-adapter-transaction-isolation.md
#	.changeset/one-time-token-single-use.md
#	.changeset/passkey-ceremony-binding.md
#	.changeset/password-reset-token-single-use.md
#	.changeset/phone-otp-attempts-atomic.md
#	.changeset/rate-limit-atomic-consume.md
#	.changeset/redis-increment.md
#	.changeset/reserve-verification-value.md
#	.changeset/saml-replay-reserve.md
#	.changeset/siwe-nonce-single-use.md
#	.changeset/two-factor-challenge-single-use.md
#	.changeset/twofactor-otp-attempts-atomic.md
#	packages/api-key/src/adapter.ts
#	packages/api-key/src/api-key.test.ts
#	packages/better-auth/src/api/rate-limiter/index.ts
#	packages/better-auth/src/api/rate-limiter/rate-limiter.test.ts
#	packages/better-auth/src/db/internal-adapter.ts
#	packages/better-auth/src/plugins/device-authorization/routes.ts
#	packages/better-auth/src/plugins/organization/adapter.ts
#	packages/better-auth/src/plugins/organization/routes/crud-invites.ts
#	packages/better-auth/src/plugins/organization/routes/crud-members.ts
#	packages/better-auth/src/plugins/organization/routes/crud-team.ts
#	packages/better-auth/src/plugins/organization/team.test.ts
#	packages/better-auth/src/plugins/phone-number/routes.ts
#	packages/better-auth/src/plugins/two-factor/two-factor.security.test.ts
#	packages/core/src/db/adapter/factory.ts
#	packages/core/src/db/adapter/index.ts
#	packages/core/src/db/type.ts
#	packages/core/src/types/context.ts
#	packages/core/src/types/init-options.ts
#	packages/drizzle-adapter/src/drizzle-adapter.test.ts
#	packages/drizzle-adapter/src/drizzle-adapter.ts
#	packages/electron/test/electron.test.ts
#	packages/kysely-adapter/src/kysely-adapter.ts
#	packages/memory-adapter/src/memory-adapter.ts
#	packages/mongo-adapter/src/mongodb-adapter.test.ts
#	packages/mongo-adapter/src/mongodb-adapter.ts
#	packages/passkey/src/routes.ts
#	packages/prisma-adapter/src/prisma-adapter.ts
#	packages/redis-storage/src/redis-storage.ts
#	packages/redis-storage/test/redis-storage.test.ts
#	packages/sso/src/saml.test.ts
2026-06-11 18:45:17 -07:00
Gustavo Valverde 381fc6cfaf chore: sync main to next 2026-06-11 18:18:13 -07:00
Gustavo ValverdeandGitHub 86ccb5de91 feat(auth)!: harden atomic state transitions (#10000) 2026-06-12 00:46:44 +00:00
Gustavo ValverdeandGitHub 7faddd4a1d refactor(core): prevent accidental HTTP exposure of server-only endpoints (#9835) 2026-06-11 20:37:51 +00:00
Gustavo ValverdeandGitHub 0c3856f098 fix: harden session authority against stale cookie cache and unverified selectors (#9991) 2026-06-11 13:31:13 +00:00
Gustavo ValverdeandGitHub baeaa00bc2 fix: make single-use credentials, counters, and replay markers atomic (#9993) 2026-06-11 05:11:26 +00:00
better-release[bot]andGitHub 8b1e759c07 chore: release v1.7.0-beta.5 (#9905) 2026-06-10 12:34:04 -07:00
Gustavo Valverde bf7f2c5b4e chore: sync main to next 2026-06-10 11:30:38 -07:00
better-release[bot]andGitHub 1a3c8c478a chore: release v1.6.16 (#9958) 2026-06-09 22:32:25 -07:00
Bereket EngidaandGitHub cb1cbfa4cc fix: address bug findings across packages (#9974) 2026-06-09 19:46:12 -07:00
better-release[bot]andGitHub 03e0e36a98 chore: release v1.6.15 (#9886) 2026-06-08 06:57:06 -07:00
better-release[bot]andGitHub 5038d41ca2 chore: release v1.6.14 (#9846) 2026-06-02 16:56:28 -04:00
better-release[bot]andGitHub a5e2442e3c chore: release v1.7.0-beta.4 (#9534) 2026-05-31 14:29:39 +01:00
better-release[bot]andGitHub a6f38c72ee chore: release v1.6.13 (#9804) 2026-05-31 12:41:17 +01:00
Gustavo Valverde ef4fb0ff95 chore: merge main into next (#9533)
Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.

Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577.
2026-05-31 00:10:16 +01:00
TaesuandGitHub e131d3ac5b fix(api-key): verify non-default keys when configId is omitted (#9794) 2026-05-30 03:14:57 +00:00
better-release[bot]andGitHub c0c574ea50 chore: release v1.6.12 (#9590) 2026-05-29 22:28:58 +01:00