Bereket Engida
35e9f9f6e4
docs: landing improvements ( #9169 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-18 23:04:27 -07:00
Gustavo Valverde
e64ff720fb
fix: unify host classification and close SSRF gaps across packages ( #9226 )
2026-04-17 23:25:25 +00:00
Jonathan Samines
e37167aaf5
docs: fix fastify integration docs to avoid race conditions ( #9230 )
2026-04-17 17:51:21 +00:00
Jonathan Samines
a844c7dd08
chore(core): update @opentelemetry/api dep declaration to be optional ( #9111 )
...
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-17 14:26:40 +00:00
Maxwell
d69d888b78
docs: add please_restart_the_process error page ( #9224 )
2026-04-17 13:01:31 +00:00
Maxwell
3728518d1c
fix(api-key): run secondary-storage api-key executions in parallel ( #9187 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-17 12:43:30 +00:00
Gustavo Valverde
2c1b1994d5
ci(verify-changesets): always run and report pass/fail ( #9223 )
2026-04-17 09:52:37 +00:00
Taesu
a61083e023
fix(phone-number): allow removing phone number via updateUser ( #9219 )
2026-04-17 04:19:26 +00:00
better-release[bot]
c8a91f4167
chore: release v1.6.5 ( #9209 )
2026-04-16 11:05:30 +01:00
Daniel Müller
5b900a2b43
Merge commit from fork
...
* Add tests reproducing GHSA-xr8f-h2gw-9xh6
* Fix GHSA-xr8f-h2gw-9xh6
* Move clientPrivilege assertion to shared helper
* chore: add oauth-provider changeset for GHSA-xr8f-h2gw-9xh6
---------
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-16 10:52:33 +01:00
Gautam Manchandani
938dd80e2d
docs(test-utils): clarify production usage ( #9119 )
...
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:20:34 +00:00
Ahmed Abdullah
25c8f59069
docs: fix wrong AutumnProvider usage in docs ( #9176 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:18:35 +00:00
Jonathan Samines
09005a974d
docs: add mention to self service directory sync ( #9194 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-16 01:15:52 +00:00
Ray
05386271ca
fix(client): trigger $sessionSignal for session-rotating endpoints ( #9087 )
2026-04-15 15:27:48 +00:00
better-release[bot]
9ec849ff71
chore: release v1.6.4 ( #9175 )
2026-04-15 13:00:42 +01:00
Gustavo Valverde
39d6af2a39
chore(adapters): require patched drizzle-orm and kysely peer versions ( #9165 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-15 11:37:50 +00:00
Gustavo Valverde
ba03fb59f4
chore(deps): bump electron and next devDependencies to patched versions ( #9166 )
2026-04-15 11:24:20 +00:00
Gustavo Valverde
9aed910499
fix(two-factor): revert enforcement broadening from #9122 ( #9205 )
2026-04-15 10:59:53 +00:00
Taesu
a0caa1f6f8
docs(device-authorization): fix approval page query param ( #9197 )
2026-04-14 23:36:23 +00:00
Jonathan Samines
7be52d9403
docs: add docs email normalization on sentinel ( #9188 )
2026-04-14 14:21:36 -06:00
Gautam Manchandani
acbd6ef69f
fix: honor forceAllowId UUIDs on postgres adapters ( #9068 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-14 13:05:11 +00:00
Taesu
dd6528f45b
docs(guides): move dynamic base url from concepts to guides and options ( #9145 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-14 11:36:59 +00:00
better-release[bot]
6f17bb3ebd
chore: release v1.6.3 ( #9081 )
2026-04-14 12:04:31 +01:00
Maxwell
9a6d4759cd
fix(client): prevent isMounted race condition causing many rps ( #9078 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-14 09:36:59 +00:00
Gustavo Valverde
390a03190c
fix(stripe): prevent prototype pollution via user-supplied metadata ( #9164 )
2026-04-14 08:05:31 +00:00
Gustavo Valverde
5142e9cec5
fix(auth): harden dynamic baseURL resolution ( #9131 )
2026-04-14 08:01:13 +00:00
Gustavo Valverde
92256a2d0d
chore: minor review followups on recent main commits ( #9163 )
2026-04-14 07:22:10 +00:00
Taesu
513dabb132
fix: resolve dynamic baseURL for direct auth.api calls ( #9113 )
2026-04-14 06:16:53 +00:00
Jaden Stanton
2514c3d970
docs: correct wording for invocable endpoints in integration guides ( #9160 )
2026-04-14 05:59:29 +00:00
Sean Filimon
a1f619969d
docs: update Convex Labs link in documentation ( #9161 )
2026-04-14 05:55:27 +00:00
Taesu
8dcb98873e
docs: update not-found page ( #9158 )
2026-04-13 19:54:32 +00:00
Taesu
6c946a3e0c
docs(sso): extract inline fields to named exports ( #9144 )
2026-04-13 03:01:29 +00:00
Taesu
daf7ab7aaa
docs: fix fk references in schema tables to match actual plugin schemas ( #9143 )
2026-04-13 02:37:17 +00:00
Taesu
a6f31972ca
docs(landing): polish sentinel section ( #9142 )
2026-04-13 01:19:15 +00:00
dependabot[bot]
ed2c18df31
chore(deps): bump next from 16.2.2 to 16.2.3 in /docs ( #9112 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-12 08:47:53 +00:00
Taesu
a6e9b94318
docs: improve enterprise contact form ( #9128 )
2026-04-12 08:30:35 +00:00
dependabot[bot]
504ea253ac
chore(deps-dev): bump @sveltejs/kit from 2.53.3 to 2.57.1 ( #9109 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-12 08:24:12 +00:00
Gustavo Valverde
e2e25a4954
fix(oauth-provider): graceful DCR override for unauthenticated confidential clients ( #9123 )
2026-04-11 15:25:06 +00:00
Byte-Biscuit
f8758975ae
fix(two-factor): updated backup codes respect storeBackupCodes option ( #7231 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-11 13:19:46 +00:00
Gustavo Valverde
484ce6a262
fix(two-factor): enforce 2FA on all sign-in paths ( #9122 )
2026-04-11 12:33:58 +00:00
Gustavo Valverde
314e06f0fd
feat(oauth-provider): add customTokenResponseFields and harden authorization code validation ( #9118 )
2026-04-11 09:54:48 +00:00
Gustavo Valverde
9fd0192d0e
fix(ci): fix grep -c fallback producing invalid integer in release validation
...
grep -coP outputs "0" to stdout on no matches but exits 1, causing
the || echo 0 fallback to append a second "0". The resulting "0\n0"
value fails the -lt integer comparison. Use || true instead since
grep -c already outputs the correct count.
2026-04-11 07:53:07 +01:00
Taesu
f32099449e
chore: fix typecheck command in CLAUDE.md ( #9110 )
2026-04-10 19:43:07 +00:00
Taesu
4673c6d83c
fix(cli): handle extends and mid-path wildcards in tsconfig paths ( #9032 )
2026-04-10 16:26:53 +00:00
Gustavo Valverde
52c47517a2
fix(sso): unify SAML response processing and fix bugs ( #9097 )
2026-04-10 15:00:26 +00:00
Gustavo Valverde
7fb4a55b65
fix(ci): rename release PR with actual version ( #9066 )
2026-04-10 14:58:56 +00:00
Taesu
c5066fe5d6
fix(stripe): omit quantity for metered prices in checkout and upgrades ( #8926 )
...
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 12:55:44 +00:00
SAI YASWANTH
684154d3d1
chore: replace z.union with z.xor for permission schemas in admin plugin ( #8982 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-10 12:47:23 +00:00
Taesu
5f84335815
feat(stripe): support Stripe SDK v21 and v22 ( #9084 )
...
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com >
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
Tony
d141a3b190
docs: fix PostgreSQL Prisma native type typo ( #9090 )
2026-04-10 05:21:45 +00:00
