chore(deps): update dependency better-auth to v1.6.10#2694
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
chore(deps): update dependency better-auth to v1.6.10#2694renovate[bot] wants to merge 1 commit intomasterfrom
renovate[bot] wants to merge 1 commit intomasterfrom
Conversation
SafeDep Report SummaryPackage Details
This report is generated by SafeDep Github App |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.




This PR contains the following updates:
1.6.9→1.6.10Release Notes
better-auth/better-auth (better-auth)
v1.6.10Compare Source
Patch Changes
#8339
1e0f26dThanks @ping-maxwell! - fix(captcha): breaks email-otp flow#9484
8c1e917Thanks @ping-maxwell! - fix: warn for cookie-plugin being last in array#9437
b2d655cThanks @cyphercodes! - Allow organization invitation role input types to accept dynamic access control roles.#9497
09f1327Thanks @bytaesu! - Endpoints that set cookies before redirecting (such as social sign-incallbacks and magic-link verification) no longer emit each
Set-Cookieentry twice on the response.
#9387
906b7b3Thanks @bytaesu! - The bearer plugin now produces a single entry per cookie name when mergingits session token into the request
Cookieheader. Previously the mergedheader could carry two entries for the same name if the request already
had a stale session cookie, which would surface to downstream code that
picks the first occurrence.
#9475
e9c978eThanks @jaydeep-pipaliya! - fix(username): respect callbackURL on/sign-in/usernameThe endpoint accepted a
callbackURLbody field but ignored it, soauthClient.signIn.username({ ..., callbackURL })silently did nothingwhile
authClient.signIn.emailredirected as expected. The handler nowsets a
Locationheader whencallbackURLis provided and returns{ redirect, url }alongsidetoken/user, matching the email flow.#9440
e71aad3Thanks @cyphercodes! - Clear organization active hook state after sign-out souseActiveMemberRoledoes not retain a previous user's role in SPA sign-out/sign-in flows.#9402
80a655dThanks @onmax! - Revalidate the client session after admin impersonation starts or stops.#9503
15ff28aThanks @bytaesu! -internalAdapter.deleteAccountparameter renamed fromaccountIdtoidto reflect that it queries by primary key, not theaccountIdcolumn. No runtime behavior change.#9268
88a7c67Thanks @ping-maxwell! - fix: openAPI schema for POST /sign-in/social mis-declares required fields#8839
9a7b51dThanks @dipan-ck! - Apply email enumeration protection whenemailAndPassword.autoSignInis false. Duplicate sign-ups now return a synthetic user (token: null) and triggeronExistingUserSignUp, and new sign-ups skip auto sign-in (token: null)—even withoutrequireEmailVerification, aligning with the docs.#9065
1b25902Thanks @ping-maxwell! - non-ASCII error_description in generic-oauth callback routes causes TypeError on redirect#9349
cf59136Thanks @ping-maxwell! - fix(organization): re-export field types to prevent TS2742 with additionalFields#9453
a597ee0Thanks @mausic! - The organization plugin'scancelPendingInvitationsOnReInviteoption now actually cancels the prior pending invitation when re-inviting the same email. Previously the option had no effect — re-inviting always failed withUSER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION#9456
fc02cedThanks @cyphercodes! - Reject OAuth callbacks when provider user info omits the account id to avoid linking accounts under the literalundefinedid.#9461
9f1ef1fThanks @cyphercodes! - ExposeauthClient.siwe.getNonce()as a compatibility alias for the SIWE nonce endpoint.#9369
36ef808Thanks @ping-maxwell! - fix: incorrect email casing across one-tap, email-otp & email-verification#9239
c1336c5Thanks @GautamBytes! - Fixorganization.setActiveTeamso it only accepts teams from the current active organization.#7764
3a9a2c3Thanks @programming-with-ia! - chore: expose refreshUserSessions on internal adapter#9521
fde0432Thanks @ping-maxwell! - fix: improve link accessibility issuesUpdated dependencies [
2220a6d]:Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.