Taesu and GitHub
5d65d98a3b
docs(careers): replace hardcoded roles with gem job board api ( #9426 )
2026-05-02 23:53:25 +00:00
Taesu and GitHub
d4d7888d62
chore: upgrade to pnpm v11 ( #9416 )
2026-05-01 02:22:49 +00:00
Taesu and GitHub
906b7b34a7
fix(bearer): write one entry per cookie name when merging session token ( #9387 )
2026-05-01 02:13:16 +00:00
Taesu and GitHub
fe64413cef
chore: bump vitest ( #9413 )
2026-05-01 01:40:28 +00:00
Taesu and GitHub
d17ee3e534
test: add regression tests for public type exports from better-auth/types ( #9419 )
2026-05-01 01:16:02 +00:00
Taesu and GitHub
f266c7d6f0
docs: centralize community plugin data ( #9403 )
2026-04-30 22:44:40 +00:00
Taesu and GitHub
eb6061acb1
docs(stripe): document user deletion with active subscriptions recipe ( #9404 )
2026-04-30 22:44:30 +00:00
Taesu and GitHub
6cc30e7950
ci(backport): drop persist-credentials false and unnecessary fetch-depth ( #9384 )
2026-04-29 22:19:23 +00:00
a6a3e8face
docs: update brand assets ( #9377 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-04-29 20:04:16 +00:00
2220a6d6c2
fix(core): use pure instrumentation entry for workerd ( #9395 )
...
Co-authored-by: cyphercodes <7407177+cyphercodes@users.noreply.github.com >
2026-04-29 12:59:31 -07:00
Craig (Michael) Thompson and GitHub
006e809b92
fix(sso): use findSAMLProvider in spMetadata so defaultSSO works ( #9398 )
2026-04-29 12:56:44 -07:00
c8ec03d26e
docs: add MikroORM better-auth adapter to community adapters ( #9379 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: ping-maxwell <maxwell.multinite@gmail.com >
2026-04-28 22:56:02 +00:00
Taesu and GitHub
8200d3c748
docs: adjust docs page header layout ( #9376 )
2026-04-28 14:08:02 +00:00
Gustavo Valverde and GitHub
408a3076bd
fix(oauth-provider): honor prompt=login across consent continuation ( #9344 )
2026-04-27 08:49:55 +00:00
Taesu and GitHub
edc321a7f5
chore: add detailed changeset guides for contributing ( #9362 )
2026-04-27 00:32:30 +00:00
Taesu and GitHub
3e4fc8ca74
fix(stripe): pass post-update subscription to onSubscriptionDeleted and trial callbacks ( #9356 )
2026-04-26 10:26:56 +00:00
Taesu and GitHub
a9d48c993d
fix(stripe)!: remove optional marker from onSubscriptionCancel event ( #9359 )
2026-04-26 10:23:30 +00:00
Taesu and GitHub
012b4e6331
refactor(stripe): rename subscription webhook variables for clarity ( #9355 )
2026-04-26 09:56:30 +00:00
Taesu and GitHub
5d24a7478b
fix(stripe): expose stripeSubscription in onSubscriptionUpdate and fix stale snapshot ( #9354 )
2026-04-26 09:41:11 +00:00
Maxwell and GitHub
88a7c678f4
fix: openAPI schema for POST /sign-in/social mis-declares required fields ( #9268 )
2026-04-25 07:18:10 +00:00
Maxwell and GitHub
1e0f26d4c8
fix(captcha): breaks email-otp flow ( #8339 )
2026-04-25 00:28:55 +00:00
b67783d364
docs(hooks): add example for handling multiple endpoints in a single hook ( #8792 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-25 00:26:20 +00:00
89af592e93
docs: add revokeSessionsOnPasswordReset to password reset section ( #8551 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-25 00:19:51 +00:00
c1336c563d
fix(organization): scope setActiveTeam to active organization ( #9239 )
...
Signed-off-by: Gautam Manchandani <manchandanigautam@gmail.com >
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-24 23:48:16 +00:00
7fbe9282ba
docs: update import path for drizzleAdapter ( #9218 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2026-04-24 23:22:13 +00:00
skalkii and GitHub
ca57b001b9
docs(test): cross-reference #8897 on cookie-strategy OAuth state CSRF test ( #9334 )
2026-04-24 16:25:18 +09:00
Taesu and GitHub
75524d61b1
test(api-key): add regression test for listApiKeys with integer user.id ( #9343 )
2026-04-24 06:44:25 +00:00
Taesu and GitHub
ae3374c6d5
docs: clean up DatabaseTable component ( #9342 )
2026-04-24 06:37:38 +00:00
better-release[bot] and GitHub
f484269228
chore: release v1.6.9 ( #9341 )
@better-auth/api-key@1.6.9
@better-auth/core@1.6.9
@better-auth/drizzle-adapter@1.6.9
@better-auth/electron@1.6.9
@better-auth/expo@1.6.9
@better-auth/i18n@1.6.9
@better-auth/kysely-adapter@1.6.9
@better-auth/memory-adapter@1.6.9
@better-auth/mongo-adapter@1.6.9
@better-auth/oauth-provider@1.6.9
@better-auth/passkey@1.6.9
@better-auth/prisma-adapter@1.6.9
@better-auth/redis-storage@1.6.9
@better-auth/scim@1.6.9
@better-auth/sso@1.6.9
@better-auth/stripe@1.6.9
@better-auth/telemetry@1.6.9
@better-auth/test-utils@1.6.9
auth@1.6.9
better-auth@1.6.9
v1.6.9
2026-04-24 06:25:08 +01:00
815ecf62b6
fix(core): resolve instrumentation via package self-reference in adapter factory ( #9340 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-04-24 05:12:34 +00:00
fef7dd6df5
chore: update readme ( #9330 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-04-23 19:50:25 +00:00
better-release[bot] and GitHub
b289ac6c4b
chore: release v1.6.8 ( #9316 )
@better-auth/api-key@1.6.8
@better-auth/core@1.6.8
@better-auth/drizzle-adapter@1.6.8
@better-auth/expo@1.6.8
@better-auth/i18n@1.6.8
@better-auth/kysely-adapter@1.6.8
@better-auth/memory-adapter@1.6.8
@better-auth/mongo-adapter@1.6.8
@better-auth/oauth-provider@1.6.8
@better-auth/passkey@1.6.8
@better-auth/prisma-adapter@1.6.8
@better-auth/redis-storage@1.6.8
@better-auth/scim@1.6.8
@better-auth/stripe@1.6.8
auth@1.6.8
better-auth@1.6.8
v1.6.8
@better-auth/telemetry@1.6.8
@better-auth/sso@1.6.8
@better-auth/electron@1.6.8
@better-auth/test-utils@1.6.8
2026-04-23 11:31:03 +01:00
Gustavo Valverde and GitHub
9aa8e63de8
fix(oauth): support mapProfileToUser fallback for providers that may omit email ( #9331 )
2026-04-23 10:15:36 +00:00
a02e07cb89
fix(passkey): resolve exactOptionalPropertyTypes incompatibility ( #9270 )
...
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com >
2026-04-23 09:48:05 +00:00
Gustavo Valverde and GitHub
8e3cc3453c
fix(oauth-provider): accept authorization flows without state ( #9328 )
2026-04-23 07:00:05 +00:00
Taesu and GitHub
4e8e4c7fc5
feat(client): add hydrateSession for SSR session hydration ( #8733 )
2026-04-22 21:09:45 +00:00
856ab2426c
fix(organization): allow passing id through beforeCreateTeam and beforeCreateInvitation ( #9253 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-04-22 16:56:50 +00:00
better-release[bot] and GitHub
d3bde2d21f
chore: release v1.7.0-beta.2 ( #9207 )
@better-auth/cimd@1.7.0-beta.2
@better-auth/core@1.7.0-beta.2
@better-auth/drizzle-adapter@1.7.0-beta.2
@better-auth/electron@1.7.0-beta.2
@better-auth/expo@1.7.0-beta.2
@better-auth/i18n@1.7.0-beta.2
@better-auth/kysely-adapter@1.7.0-beta.2
@better-auth/memory-adapter@1.7.0-beta.2
@better-auth/mongo-adapter@1.7.0-beta.2
@better-auth/oauth-provider@1.7.0-beta.2
@better-auth/passkey@1.7.0-beta.2
@better-auth/prisma-adapter@1.7.0-beta.2
@better-auth/redis-storage@1.7.0-beta.2
@better-auth/scim@1.7.0-beta.2
@better-auth/sso@1.7.0-beta.2
@better-auth/stripe@1.7.0-beta.2
@better-auth/telemetry@1.7.0-beta.2
@better-auth/test-utils@1.7.0-beta.2
auth@1.7.0-beta.2
better-auth@1.7.0-beta.2
@better-auth/api-key@1.7.0-beta.2
v1.7.0-beta.2
2026-04-22 17:23:06 +01:00
Gustavo Valverde and GitHub
a3348dab01
chore(deps): pin patched versions in demo lockfiles ( #9168 )
2026-04-22 16:22:24 +00:00
Taesu and GitHub
14ef858971
docs: remove duplicated Dynamic Base URL link from sidebar ( #9313 )
2026-04-23 00:36:23 +09:00
Gustavo Valverde and GitHub
402ca23ad9
chore: sync main to next
...
chore: sync main to next
2026-04-22 16:28:45 +01:00
Gustavo Valverde
888b1fc90e
test(generic-oauth): align GET-callback-without-state test with rewritten plugin contract
...
Caught during the main-to-next sync in #9312 . The test was imported from main
in #9293 , which targeted the legacy /oauth2/callback/:providerId endpoint that
the generic-oauth rewrite (#9069 ) removed on next; callbacks now flow through
the core /callback/:id route. That route preserves the security contract (GET
without state redirects to the error page, never crashes) via an early state
guard that emits `state_not_found` instead of `please_restart_the_process`.
2026-04-22 16:19:42 +01:00
Gustavo Valverde
827aeede1b
chore: sync dependabot bumps from main
...
Catches the electron (38.8.6 -> 41.2.2) and @hono/node-server (1.19.11 -> 1.19.14) dep bumps that landed on main after the previous sync commit. Auto-merged without conflicts.
2026-04-22 15:52:52 +01:00
Gustavo Valverde
eb3cd10d50
chore: resolve main-to-next sync conflicts
...
- keep next package versions at 1.7.0-beta.1
- keep both changelog streams by inserting the stable 1.6.5, 1.6.6, and 1.6.7 sections below the 1.7.0-beta entries
- keep the cimd and dash deps on demo/nextjs (next-only); regenerate pnpm-lock.yaml
- resolve TODO(sync-from-main-9226) in oauth-provider authorize.ts: findRegisteredRedirectUri now uses isLoopbackIP from @better-auth/core/utils/host to cover the full 127.0.0.0/8 range per RFC 8252 §7.3
- drop the unused saml import that main's #9262 added to sso/src/routes/sso.ts; next already migrated to saml-pipeline
2026-04-22 14:54:27 +01:00
Taesu and GitHub
b828c54698
chore(deps-dev): bump electron from 38.8.6 to 41.2.2 ( #9310 )
2026-04-22 12:19:47 +00:00
88d4a0507e
chore(deps): bump @hono/node-server from 1.19.11 to 1.19.14 ( #9306 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com >
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com >
2026-04-22 12:00:49 +00:00
Taesu and GitHub
7fc966942c
docs: fix arrow indicator persisting on inactive legal nav item ( #9307 )
2026-04-22 11:42:42 +00:00
better-release[bot] and GitHub
f8076d141a
chore: release v1.6.7 ( #9289 )
@better-auth/api-key@1.6.7
@better-auth/core@1.6.7
@better-auth/drizzle-adapter@1.6.7
@better-auth/expo@1.6.7
@better-auth/i18n@1.6.7
@better-auth/kysely-adapter@1.6.7
@better-auth/memory-adapter@1.6.7
@better-auth/mongo-adapter@1.6.7
@better-auth/oauth-provider@1.6.7
@better-auth/passkey@1.6.7
@better-auth/prisma-adapter@1.6.7
@better-auth/redis-storage@1.6.7
@better-auth/scim@1.6.7
@better-auth/stripe@1.6.7
@better-auth/telemetry@1.6.7
auth@1.6.7
better-auth@1.6.7
v1.6.7
@better-auth/sso@1.6.7
@better-auth/electron@1.6.7
@better-auth/test-utils@1.6.7
2026-04-22 12:36:30 +01:00
Gustavo Valverde and GitHub
19a3dfa63a
chore(deps): add pnpm overrides for vulnerable transitive dependencies ( #9167 )
2026-04-22 11:06:37 +00:00
Taesu and GitHub
3d39e63cd2
test: remove dead stripe option from fixture ( #9303 )
2026-04-22 10:30:50 +00:00