Skip to content

chore(deps): Bump @better-auth/api-key from 1.7.7 to 1.7.10 - #5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/better-auth/api-key-1.7.10
Closed

chore(deps): Bump @better-auth/api-key from 1.7.7 to 1.7.10#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/better-auth/api-key-1.7.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @better-auth/api-key from 1.7.7 to 1.7.10.

Release notes

Sourced from @​better-auth/api-key's releases.

v1.7.10

better-auth

Bug Fixes

  • Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)
  • Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)
  • Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)
  • Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)
  • Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)
  • Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

  • Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

  • Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)
  • Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)
  • Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)
  • Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)
  • Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)
  • Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)
  • Improved errors for unknown OAuth client_id values to say client not found. (#11799)
  • Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)
  • Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)
  • Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)
  • Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

@better-auth/mongo-adapter

Bug Fixes

  • Fixed MongoDB findMany ignoring ID sorting and potentially repeating or skipping paginated results. (#11801)

... (truncated)

Changelog

Sourced from @​better-auth/api-key's changelog.

1.7.10

1.7.9

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@dependabot
chore(deps): Bump @better-auth/api-key from 1.7.7 to 1.7.10
2326f85 
Bumps [@better-auth/api-key](https://github.com/better-auth/better-auth/tree/HEAD/packages/api-key) from 1.7.7 to 1.7.10.
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/api-key/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/api-key)

---
updated-dependencies:
- dependency-name: "@better-auth/api-key"
  dependency-version: 1.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/better-auth/api-key-1.7.10 branch from 9859ea4 to 2326f85 Compare October 20, 2026 11:30
@Madraka Madraka mentioned this pull request Oct 20, 2026
Merged
@Madraka

Madraka commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Closing: better-auth and its plugins must move together (they share exact internal versions, and a lone @better-auth/api-key bump breaks npm installs of @cloudhal/api; CI's better-auth pins test caught it). #9 makes Dependabot update the whole family in one grouped PR.

@Madraka Madraka closed this Oct 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/better-auth/api-key-1.7.10 branch October 20, 2026 11:50
Madraka added a commit that referenced this pull request Oct 20, 2026
@Madraka @claude
chore(deps): update the better-auth family and tiptap as groups
05d05dd 
better-auth and its plugins share exact internal versions; a lone bump
of @better-auth/api-key (as in #5) breaks npm installs of @cloudhal/api.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Madraka <8898640+Madraka@users.noreply.github.com>
@Madraka Madraka mentioned this pull request Nov 7, 2026
Merged
5 tasks done
Madraka added a commit that referenced this pull request Nov 11, 2026
@Madraka @claude
fix(core-ts): text anchors, anchored refs writes, fixed-size leave gu…
cb0ad73 
…ard (PR #205 review)

- A (#5, #3, #6, #7): the definitions and collections anchors read the
  fragment's stored text when planned (checked against the planned Site,
  else ConflictError) and compare that text at batch time, so a site row
  stored verbatim anchors like any other. The canonical-rows job and its
  local-open run are removed: nothing depends on canonical site rows.
- B (#2, #4): in a site with reference fields every entry write carries the
  definitions anchor (status-only publishes included); the shared subquery
  only matches reference and repeater definitions, so a retyped key fails
  the batch.
- C (#0): usable members are one json_each count over the needed collection
  lists (six parameters, per-pair semantics kept).
- D (#8, #15): the list-values fingerprint format moves to 2, so rows built
  under the old readsOriginal rebuild once.
- E (#16): a referrer write naming an entry outside the field's collections
  is unknown_entry (422); reference_target_moved stays the move's 409.
- F (#12): a reference sub-field added over a key stored items hold is
  field_key_in_use, counted and guarded on the site CAS.
- G (#1): racing cases for the R3 narrowing in both orders, R13 for a move
  and a group change, the #2 interleaving, a verbatim site row, 22 blocking
  pairs, and SQL tests of the shared subquery.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Madraka <8898640+Madraka@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Madraka