Update dependency next-auth to v4.24.14

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
next-auth (source)	4.24.5 → 4.24.14

---

Release Notes

nextauthjs/next-auth (next-auth)

v4.24.14

Compare Source

Bugfixes

• providers: add issuer to GitHub provider for RFC 9207 compliance (#​13412)

GitHub now returns an iss parameter in OAuth callbacks. openid-client validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to https://github.com/login/oauth.

v4.24.13

Compare Source

v4.24.12

Compare Source

v4.24.11

Compare Source

v4.24.10

Compare Source

What's Changed

• fix: functions that return promises must be async by @​thomaslindstrom in #​12105
• fix: support AUTH_SECRET for compat with npx auth secret by @​balazsorban44 in 490a033

Full Changelog: https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.9...next-auth@4.24.10

v4.24.9

Compare Source

What's Changed

• chore(docs): fix typo in WorkOS documentation by @​outofgamut in #​11959
• chore(v4): add neon sponsor by @​ndom91 in #​12008
• cookie package upgraded by @​talyuk in #​12046
• Allow Next.js v15 peer dependency by @​thomaslindstrom in #​12098
• await dynamic APIs as per Next.js 15 changes by @​balazsorban44 in 4d143c5

New Contributors

• @​outofgamut made their first contribution in #​11959
• @​talyuk made their first contribution in #​12046
• @​thomaslindstrom made their first contribution in #​12098

Full Changelog: https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.8...next-auth@4.24.9

v4.24.8

Compare Source

What's Changed

• allow optional identifier param
• optionally check identifier
• tweak email flow, change homepage
• fix: typo in Naver Provider options url by @​no-pla in #​10483
• fix(providers): Update Foursquare profile callback + API version by @​MatyiFKBT in #​11348
• fix(ts): add compat types for @auth/*-adapters for v4 by @​balazsorban44 in #​11562
• fix:Matcher wildcard docs-Update securing-pages-and-api-routes.md by @​yaodada123 in #​11599
• Update linkedin.ts to support new scopes by @​PragyanSubedi in #​11805
• fix: updated email for auth user in github endpoint by @​A91y in #​11896

New Contributors

• @​martinkariuki7 made their first contribution in #​10329
• @​no-pla made their first contribution in #​10483
• @​azadious made their first contribution in #​10603
• @​mbrookson made their first contribution in #​10916
• @​craftycodie made their first contribution in #​10921
• @​erik-gullberg-devoteam made their first contribution in #​11323
• @​yaodada123 made their first contribution in #​11599
• @​PragyanSubedi made their first contribution in #​11805
• @​leorente made their first contribution in #​11855
• @​A91y made their first contribution in #​11896

Full Changelog: https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.7...next-auth@4.24.8

v4.24.7

Compare Source

Others

• chore(deps): bump jose (#​10240). See: https://github.com/panva/jose/releases/tag/v4.15.5

v4.24.6

Compare Source

Bugfixes

• providers: correct nodemailer imports (#​9261) (fa287be)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
todo-app	Error		May 18, 2026 0:14am