Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
88d4a0507e
chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 ( #9306 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-22 12:00:49 +00:00
Taesu and GitHub
3d39e63cd2
test: remove dead stripe option from fixture ( #9303 )
2026-04-22 10:30:50 +00:00
Gustavo Valverde and GitHub
e64ff720fb
fix: unify host classification and close SSRF gaps across packages ( #9226 )
2026-04-17 23:25:25 +00:00
Gustavo Valverde
225976c7d2
chore: main to next conflict resolution
...
Resolve the main to next sync discrepancies after the v1.6.4 release.
Conflict resolution:
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.4 sections below the 1.7.0-beta entries
- restore the next pre-release accumulator changesets that the stable release deleted on main
2026-04-15 15:40:35 +01:00
acbd6ef69f
fix: honor forceAllowId UUIDs on postgres adapters ( #9068 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-14 13:05:11 +00:00
Gustavo Valverde
3fbab44068
chore: sync main to next
...
Resolves conflicts in PR #9115 which the release bot cannot auto-merge.
Conflict resolutions:
- .github/workflows/release.yml: take main's hardened grep fallback (92256a2d0 )
- docs/content/docs/plugins/sso.mdx: take main's named-exports refactor verbatim (#9144 )
- packages/oauth-provider/src/token.ts: keep next's at_hash sequencing (#9079 ),
add main's customTokenResponseFields spread and credential helper rename (#9118 )
- packages/oauth-provider/src/token.test.ts: keep both new describe blocks
(at_hash in id tokens from next, customTokenResponseFields from main)
Semantic fixes on auto-merged files where git silently dropped main's changes
around next's discriminated-response refactor:
- two-factor/index.ts: restore skipVerificationOnEnable handling in the totp
enablement path
- two-factor/types.ts: restore the skipVerificationOnEnable type field
- two-factor/two-factor.test.ts: narrow the discriminated enable response via
method === "totp" guard
2026-04-14 11:30:13 +01:00
Gustavo Valverde and GitHub
5142e9cec5
fix(auth): harden dynamic baseURL resolution ( #9131 )
2026-04-14 08:01:13 +00:00
cd8313ba00
feat(cimd): add Client ID Metadata Document plugin ( #9159 )
...
Co-authored-by: Dylan Vanmali <dylanvanmali@yahoo.com >
2026-04-13 20:52:34 +00:00
5f84335815
feat(stripe): support Stripe SDK v21 and v22 ( #9084 )
...
Co-authored-by: leonardo2204 <1509421+leonardo2204@users.noreply.github.com >
Co-authored-by: better-release[bot] <273320539+better-release[bot]@users.noreply.github.com>
2026-04-10 06:19:34 +00:00
514a3062ec
chore(deps-dev): bump vite from 7.3.1 to 7.3.2 ( #9001 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
2026-04-08 08:02:56 +00:00
8ad1995077
chore(deps): bump drizzle-orm from 0.45.1 to 0.45.2 ( #9033 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 07:40:52 +00:00
63bf778ea4
chore(deps): bump hono from 4.12.7 to 4.12.12 ( #9029 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 06:49:06 +00:00
Gustavo Valverde and GitHub
d9b16d2551
chore: sync main to next
...
chore: sync main to next
2026-04-06 16:47:42 +01:00
Gustavo Valverde and GitHub
535655bc0d
chore: fix release-blocking Changesets null versions on next ( #8992 )
2026-04-06 15:31:00 +00:00
Taesu and GitHub
141781d6fc
fix: generate session id when using secondary storage without database ( #8927 )
2026-04-06 14:43:47 +00:00
better-release[bot]
d666a03372
chore: exit pre-release mode for v1.6.0
2026-04-06 14:41:56 +00:00
Gustavo Valverde and GitHub
d06b5865f4
fix(ci): mark test packages as private and remove duplicate beta title suffix ( #8950 )
2026-04-04 06:10:47 +00:00
Gustavo Valverde and GitHub
7c2ce8a371
feat(passkey): add pre-auth registration and extensions ( #7154 )
2026-03-30 06:43:10 +00:00
Jonathan Samines and GitHub
a1b0fdcd70
feat(db): add case insensitive queries support ( #8556 )
2026-03-23 13:09:29 -07:00
1486fafb77
chore(deps): bump kysely from 0.28.12 to 0.28.14 ( #8718 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 21:43:42 +00:00
ab158b1e8c
chore(deps): bump kysely from 0.28.11 to 0.28.12 ( #8700 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 00:08:17 +00:00
Alex Yang and GitHub
a67630edb4
fix(sso): use namespace import for samlify to fix ESM compatibility ( #8697 )
2026-03-19 19:31:11 +00:00
Taesu and GitHub
3aa107291e
feat(mongo-adapter): store UUIDs as native BSON UUID ( #8681 )
2026-03-18 20:54:59 +00:00
Taesu and GitHub
6578bd89ae
feat(test-utils): export adapter test suites from @better-auth/test-utils/adapter ( #8564 )
2026-03-12 22:27:44 +00:00
58883e97b5
chore(deps): bump hono from 4.12.5 to 4.12.7 ( #8541 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 02:13:10 +00:00
7caec1727a
chore(deps): bump @hono/node-server from 1.19.9 to 1.19.10 ( #8396 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:20:06 +00:00
938f25d554
chore(deps): bump hono from 4.12.3 to 4.12.4 ( #8390 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-05 20:40:54 +00:00
Alex Yang and GitHub
c9b9c91ec5
fix(prisma-adapter): use deleteMany when deleting by non-unique field ( #8314 )
2026-03-03 04:32:18 +00:00
Alex Yang and GitHub
913bd5babe
test(cookies): add Playwright e2e test for sign-out cookie clearing ( #8275 )
2026-03-02 06:07:34 +00:00
Alex Yang and GitHub
af9e010e36
fix: updateAge should extend session_token cookie on stateless mode ( #7995 )
2026-02-28 14:19:53 -08:00
Alexis Williams and GitHub
1dc9627400
fix(drizzle-adapter): resolve db.query key mismatch when config.schema keys differ from schema exports ( #8117 )
2026-02-28 14:13:31 -08:00
Alex Yang and GitHub
8048a1d367
chore: upgrade dependencies ( #8183 )
2026-02-27 08:11:46 +00:00
f77c391393
chore: bump prisma to v7 ( #8166 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-27 02:24:32 +00:00
87767a97e1
chore(deps): bump hono from 4.11.7 to 4.11.10 ( #8074 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:07:53 +00:00
Alex Yang and GitHub
425ec38f84
fix(sso): import cjs dep ( #8041 )
2026-02-18 10:44:43 +00:00
Alex Yang and GitHub
62d51d00c7
test: check client output ( #7979 )
2026-02-15 09:29:23 +00:00
Maxwell and GitHub
ad111866cd
fix(mongo-adapter): updating a FK id should store as ObjectID ( #7977 )
2026-02-15 01:05:35 -08:00
Alex Yang and GitHub
d5955d6ab2
chore: bump version ( #7882 )
2026-02-12 13:27:12 +00:00
Alex Yang
00c95728f1
Revert "feat: make name field optional ( #7617 )"
...
This reverts commit e0df7c9e38 .
2026-02-02 10:52:19 -08:00
Alex Yang and GitHub
8d2a4f46c9
chore: move generic type into db schema ( #7711 )
2026-01-30 22:03:37 +00:00
Joél Solano and GitHub
20d08ede10
feat(adapter): improve select support ( #7667 )
2026-01-30 00:02:39 +00:00
Taesu and GitHub
e0df7c9e38
feat: make name field optional ( #7617 )
2026-01-29 23:42:52 +00:00
8630f6f56b
fix(anonymous): export types ( #7661 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2026-01-27 23:44:58 -08:00
Alex Yang and GitHub
1251787f72
feat: remove deprecated API ( #7623 )
2026-01-28 01:49:50 +00:00
Alex Yang and GitHub
c1f046f588
chore: bump version ( #7646 )
2026-01-27 23:12:31 +00:00
Alex Yang and GitHub
b0a6fb89c4
chore: bump version ( #7626 )
2026-01-27 21:05:02 +00:00
Alex Yang and GitHub
0f2287891e
refactor: remove duplicate session id generation ( #7583 )
2026-01-26 22:56:59 +00:00
Alex Yang and GitHub
2398811cd7
test(smoke): secdonary storage with redis ( #7590 )
2026-01-26 19:22:08 +00:00