Gustavo Valverde ef4fb0ff95 chore: merge main into next (#9533) ...

Sync main (through #9821/#9820/#9822/#9768) into next. Conflicting
package.json files keep next's version and intentional divergences (for
example the cli's c12 v4) while taking main's dependency updates, including
the samlify 2.13.1 and fast-xml-parser security bumps; the lockfile is
regenerated from the reconciled set. The 13 source/doc/test conflicts take
next's refactored architecture as the baseline; main's colliding fixes are
re-applied on top in the following per-domain commits.

Clean main fixes land via this merge, including the auto-restored
account-takeover defenses #9578 and #9577.

2026-05-31 00:10:16 +01:00

..

oidc

…

proxy-agent

…

types

chore: add method type constraints and ensure method is set (#8466)

2026-03-07 00:02:06 +00:00

magic-link-secondary-storage.test.ts

fix: consumeVerificationValue returns null for expired rows (#9624)

2026-05-19 16:37:55 +00:00

oauth-stateless-account-data.test.ts

chore: sync main to next

2026-05-10 03:45:29 +09:00