Repository navigation
Update dependency better-auth to v1.7.12 - #75
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.7.10→1.7.12Release Notes
better-auth/better-auth (better-auth)
v1.7.12Compare Source
Patch Changes
#11925
fb48619Thanks @bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.#11924
681aa5cThanks @bytaesu! -auth.api.getSession()now keeps the original database error aserror.causewhen the session lookup fails, so server code can tell a transient failure from a bug.#11930
b18e3b8Thanks @bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.Updated dependencies [
681aa5c,4bc78ba,876608d,083a743,492134a]:v1.7.11Compare Source
Patch Changes
#10719
bd65db0Thanks @rendermani! - Recognize PostgreSQLint8as a valid number type in migration diffs. Kysely's introspector reportspg_type.typname, so Better Auth's ownbigintcolumns (such as the database-backed rate limiter'slastRequest) came back asint8and were reported as a type mismatch on every run.#11521
37a75c9Thanks @aryan1306! - Fix database-backed rate limiting returning an excessively largeX-Retry-Afterheader instead of the remaining seconds in the rate-limit window.Updated dependencies [
ce96569,2f6ca3f,dfd8dd2]:Configuration
📅 Schedule: (in timezone America/Los_Angeles)
* * * * 4)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.