Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
Taesu and GitHub
b828c54698
chore(deps-dev): bump electron from 38.8.6 to 41.2.2 ( #9310 )
2026-04-22 12:19:47 +00:00
88d4a0507e
chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 ( #9306 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-22 12:00:49 +00:00
Gustavo Valverde and GitHub
19a3dfa63a
chore(deps): add pnpm overrides for vulnerable transitive dependencies ( #9167 )
2026-04-22 11:06:37 +00:00
35e9f9f6e4
docs: landing improvements ( #9169 )
...
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-18 23:04:27 -07:00
Gustavo Valverde
225976c7d2
chore: main to next conflict resolution
...
Resolve the main to next sync discrepancies after the v1.6.4 release.
Conflict resolution:
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.4 sections below the 1.7.0-beta entries
- restore the next pre-release accumulator changesets that the stable release deleted on main
2026-04-15 15:40:35 +01:00
39d6af2a39
chore(adapters): require patched drizzle-orm and kysely peer versions ( #9165 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-15 11:37:50 +00:00
Gustavo Valverde and GitHub
ba03fb59f4
chore(deps): bump electron and next devDependencies to patched versions ( #9166 )
2026-04-15 11:24:20 +00:00
Gustavo Valverde
3fbab44068
chore: sync main to next
...
Resolves conflicts in PR #9115 which the release bot cannot auto-merge.
Conflict resolutions:
- .github/workflows/release.yml: take main's hardened grep fallback (92256a2d0#9144 )
- packages/oauth-provider/src/token.ts: keep next's at_hash sequencing (#9079 ),
add main's customTokenResponseFields spread and credential helper rename (#9118 )
- packages/oauth-provider/src/token.test.ts: keep both new describe blocks
(at_hash in id tokens from next, customTokenResponseFields from main)
Semantic fixes on auto-merged files where git silently dropped main's changes
around next's discriminated-response refactor:
- two-factor/index.ts: restore skipVerificationOnEnable handling in the totp
enablement path
- two-factor/types.ts: restore the skipVerificationOnEnable type field
- two-factor/two-factor.test.ts: narrow the discriminated enable response via
method === "totp" guard
2026-04-14 11:30:13 +01:00
Gustavo Valverde and GitHub
390a03190c
fix(stripe): prevent prototype pollution via user-supplied metadata ( #9164 )
2026-04-14 08:05:31 +00:00
Gustavo Valverde and GitHub
5142e9cec5
fix(auth): harden dynamic baseURL resolution ( #9131 )
2026-04-14 08:01:13 +00:00
cd8313ba00
feat(cimd): add Client ID Metadata Document plugin ( #9159 )
...
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com >
2026-04-13 20:52:34 +00:00
ed2c18df31
chore(deps): bump next from 16.2.2 to 16.2.3 in /docs ( #9112 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-12 08:47:53 +00:00
504ea253ac
chore(deps-dev): bump @sveltejs/kit from 2.53.3 to 2.57.1 ( #9109 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-12 08:24:12 +00:00
Gustavo Valverde and GitHub
960304354a
fix(sso): upgrade samlify to 2.12.0 with XPath injection and XXE fixes ( #9121 )
2026-04-11 10:46:50 +00:00
5f84335815
feat(stripe): support Stripe SDK v21 and v22 ( #9084 )
...
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com >
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
514a3062ec
chore(deps-dev): bump vite from 7.3.1 to 7.3.2 ( #9001 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-08 08:02:56 +00:00
8ad1995077
chore(deps): bump drizzle-orm from 0.45.1 to 0.45.2 ( #9033 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 07:40:52 +00:00
63bf778ea4
chore(deps): bump hono from 4.12.7 to 4.12.12 ( #9029 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 06:49:06 +00:00
Taesu and GitHub
3baf0294c2
chore(docs): add remark-frontmatter ( #9015 )
2026-04-07 15:35:57 +00:00
ee8b40d502
fix(deps): patch Dependabot security issues ( #8838 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-04-06 13:16:45 +00:00
Taesu and GitHub
475d512376
chore: revert better-call v2 migration, downgrade to v1.3.5 ( #8973 )
2026-04-05 23:18:54 +00:00
Gustavo Valverde and GitHub
271a5bc3fc
fix: patch changesets to fix pre-release peer dep version escalation ( #8942 )
2026-04-03 23:12:26 +00:00
Gustavo Valverde and GitHub
0afc6a1e78
ci: replace bumpp with changesets release automation ( #8903 )
2026-04-03 21:43:23 +00:00
Gustavo Valverde and GitHub
1eec2e8090
chore: use caret ranges for internal peerDependencies ( #8937 )
2026-04-03 19:05:37 +00:00
Gustavo Valverde and GitHub
e089ce127d
chore(knip): fix CI blind spots and remove dead code ( #8888 )
2026-04-02 19:28:30 +00:00
6a3044e50e
chore(deps-dev): bump happy-dom from 20.7.0 to 20.8.9 ( #8830 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-02 08:13:55 +00:00
Gustavo Valverde and GitHub
e80cc38b0d
fix: turbo caching, enforce lockfile integrity, expand pre-commit hooks ( #8892 )
2026-04-02 07:35:24 +00:00
Gustavo Valverde and GitHub
04e91d1643
perf(build): reduce published package sizes ( #8884 )
2026-04-01 15:55:03 +00:00
Taesu and GitHub
920f5052de
chore(docs): clean up package.json deps and use catalog ( #8881 )
2026-04-01 14:27:48 +00:00
Taesu and GitHub
e3d1063a0a
chore: merge landing app into docs ( #8878 )
2026-04-01 13:38:37 +00:00
Taesu and GitHub
c2f9ee4b64
chore(docs): scope remark linting to docs with standard presets ( #8876 )
2026-04-01 12:26:31 +00:00
Taesu and GitHub
b495001f65
chore: add lefthook pre-commit hook ( #8874 )
2026-04-01 10:16:57 +00:00
Taesu and GitHub
9a539d0b53
chore: pin axios below 1.14.0 ( #8852 )
2026-03-31 04:21:41 +00:00
Gustavo Valverde and GitHub
7c2ce8a371
feat(passkey): add pre-auth registration and extensions ( #7154 )
2026-03-30 06:43:10 +00:00
Maxwell and GitHub
5e655cf81b
docs: fix enterprise contact form ( #8800 )
2026-03-27 09:32:06 +00:00
Taesu and GitHub
14347d2627
chore: centralize to use catalog and bump @better-auth/utils, better-call ( #8684 )
2026-03-26 04:09:49 +00:00
5c7bc4b434
chore(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 ( #8698 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 22:26:50 +00:00
1486fafb77
chore(deps): bump kysely from 0.28.12 to 0.28.14 ( #8718 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 21:43:42 +00:00
ab158b1e8c
chore(deps): bump kysely from 0.28.11 to 0.28.12 ( #8700 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 00:08:17 +00:00
Alex Yang and GitHub
92d60cd0d4
chore(deps): bump next.js from 16.1.6 to 16.2.0 ( #8682 )
2026-03-18 22:11:23 +00:00
40b5e23b3b
chore(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 ( #8665 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 16:55:02 +00:00
2e6de42999
chore(deps-dev): bump undici from 7.22.0 to 7.24.0 ( #8601 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-16 17:03:52 +00:00
Alex Yang and GitHub
a1a9745305
fix(docs): improve AI chat security and cleanup ( #8597 )
2026-03-13 19:42:37 +00:00
bce10c0285
docs: custom AI chat ( #8523 )
...
Co-authored-by: Sandy <github@sandy00.aleeas.com >
2026-03-13 18:21:29 +00:00
58883e97b5
chore(deps): bump hono from 4.12.5 to 4.12.7 ( #8541 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 02:13:10 +00:00
Alex Yang and GitHub
0fd3ba6344
chore: bump tsdown ( #8532 )
2026-03-10 16:01:55 +00:00
Alex Yang and GitHub
b5e2203f14
fix(cli): resolve path aliases from extended tsconfig files ( #8520 )
2026-03-09 18:03:46 +00:00
Taesu and GitHub
4eb1131abd
docs: improve ai-chat for mobile ( #8505 )
2026-03-09 04:02:38 +00:00
Gustavo Valverde
TaesuandGitHub
Alex YangandGitHub
