[PR #4433] [MERGED] chore: update jose and crypto dependencies #22282

Closed
opened 2026-04-15 20:56:08 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/4433
Author: @kevcube
Created: 9/4/2025
Status: Merged
Merged: 9/5/2025
Merged by: @himself65

Base: canaryHead: native-deps-fix


📝 Commits (8)

📊 Changes

5 files changed (+38 additions, -19 deletions)

View changed files

📝 packages/better-auth/package.json (+3 -3)
📝 packages/better-auth/src/crypto/index.ts (+7 -3)
📝 packages/better-auth/src/crypto/password.ts (+2 -2)
📝 packages/better-auth/src/utils/hashing.ts (+3 -2)
📝 pnpm-lock.yaml (+23 -9)

📄 Description

Fixes: https://github.com/better-auth/better-auth/issues/4422

these are problematic in expo projects, updating them resolves some warnings and issues.

jose causes issues with node:crypto not being available in react-native

the @noble packages are outdated and don't export correctly, causing warnings in metro bundler.


Summary by cubic

Update jose and @noble crypto deps to fix React Native/Expo issues and silence Metro warnings. This removes node:crypto pitfalls in RN and stabilizes auth in mobile builds.

  • Dependencies

    • jose: ^5.10.0 → ^6.1.0 (avoids node:crypto usage in React Native)
    • @noble/ciphers: ^0.6.0 → ^2.0.0 (fixes bad exports/warnings)
    • @noble/hashes: ^1.8.0 → ^2.0.0 (fixes bad exports/warnings)
  • Migration

    • @noble/ciphers and @noble/hashes v2 require Node 20.19+ in dev/build environments.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/4433 **Author:** [@kevcube](https://github.com/kevcube) **Created:** 9/4/2025 **Status:** ✅ Merged **Merged:** 9/5/2025 **Merged by:** [@himself65](https://github.com/himself65) **Base:** `canary` ← **Head:** `native-deps-fix` --- ### 📝 Commits (8) - [`2347c4f`](https://github.com/better-auth/better-auth/commit/2347c4ff249e3d2e41e7aadf62b665b95e9548d0) chore: update jose and crypto dependencies - [`b132823`](https://github.com/better-auth/better-auth/commit/b1328233cb04069400420d6eabba508580d2433f) chore: update jose and crypto dependencies - [`19a98b8`](https://github.com/better-auth/better-auth/commit/19a98b82e31e4a7cf0bea2585ab550afd3744f21) fix: import - [`6f02019`](https://github.com/better-auth/better-auth/commit/6f020193afac637fe8647f03600ecbcf189bbdd0) fix: import - [`063e6b5`](https://github.com/better-auth/better-auth/commit/063e6b5005c9d6f0a6ba9c48d3c8288de69df912) Merge branch 'canary' into native-deps-fix - [`6e66fb6`](https://github.com/better-auth/better-auth/commit/6e66fb69da4c77add041447c35761c9fae05ecba) Merge branch 'native-deps-fix' of https://github.com/kevcube/better-auth into native-deps-fix - [`573948b`](https://github.com/better-auth/better-auth/commit/573948ba1546898ce23feb4de00ce715e9254af1) fix(SIWE): hashing function update to @noble/hashes 2 - [`39b40c4`](https://github.com/better-auth/better-auth/commit/39b40c4202f1225ff8be7d99a4395ebe125d1432) chore: add js to @noble imports ### 📊 Changes **5 files changed** (+38 additions, -19 deletions) <details> <summary>View changed files</summary> 📝 `packages/better-auth/package.json` (+3 -3) 📝 `packages/better-auth/src/crypto/index.ts` (+7 -3) 📝 `packages/better-auth/src/crypto/password.ts` (+2 -2) 📝 `packages/better-auth/src/utils/hashing.ts` (+3 -2) 📝 `pnpm-lock.yaml` (+23 -9) </details> ### 📄 Description Fixes: https://github.com/better-auth/better-auth/issues/4422 these are problematic in expo projects, updating them resolves some warnings and issues. jose causes issues with node:crypto not being available in react-native the @noble packages are outdated and don't export correctly, causing warnings in metro bundler. <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Update jose and @noble crypto deps to fix React Native/Expo issues and silence Metro warnings. This removes node:crypto pitfalls in RN and stabilizes auth in mobile builds. - **Dependencies** - jose: ^5.10.0 → ^6.1.0 (avoids node:crypto usage in React Native) - @noble/ciphers: ^0.6.0 → ^2.0.0 (fixes bad exports/warnings) - @noble/hashes: ^1.8.0 → ^2.0.0 (fixes bad exports/warnings) - **Migration** - @noble/ciphers and @noble/hashes v2 require Node 20.19+ in dev/build environments. <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-15 20:56:08 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#22282