Skip to content

build(deps): bump @better-auth/drizzle-adapter and better-auth in /services/hackbot-ui - #7348

Merged
marco-c merged 1 commit into
masterfrom
dependabot/npm_and_yarn/services/hackbot-ui/multi-b8d8e36483
Oct 30, 2026
Merged

build(deps): bump @better-auth/drizzle-adapter and better-auth in /services/hackbot-ui#7348
marco-c merged 1 commit into
masterfrom
dependabot/npm_and_yarn/services/hackbot-ui/multi-b8d8e36483

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor

Bumps @better-auth/drizzle-adapter to 1.7.14 and updates ancestor dependency better-auth. These dependencies need to be updated together.

Updates @better-auth/drizzle-adapter from 1.6.22 to 1.7.14

Release notes

Sourced from @​better-auth/drizzle-adapter's releases.

v1.7.14

better-auth

Bug Fixes

  • Fixed two-factor TOTP to accept imported Base32 secrets stored as base32:<secret> (#12031)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed Kakao sign-in to forward loginHint so the Kakao Account login page opens with the ID field prefilled (#12045)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​honuuk

Full changelog: v1.7.13...v1.7.14

v1.7.13

better-auth

Bug Fixes

  • Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

  • Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

... (truncated)

Changelog

Sourced from @​better-auth/drizzle-adapter's changelog.

1.7.14

1.7.13

1.7.12

1.7.11

1.7.10

1.7.9

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

  • #11731 0cfe07d Thanks @​gustavovalverde! - Drizzle schemas that store dates in string columns now work: timestamp({ mode: "string" }), MySQL datetime({ mode: "string" }), and SQLite text(), including on Cloudflare D1. Before, the adapter passed a JavaScript Date to those columns. Drivers such as postgres-js, better-sqlite3 and D1 rejected it, so email sign-up, social sign-in and session refresh failed. Filtering on those columns, for example when listing sessions, failed the same way. Better Auth now writes these dates as UTC text and reads a value without a time zone as UTC.

    If your server's time zone is not UTC and you use node-postgres or mysql2 with a string column that has no time zone, existing rows were written in the server's local time. They now read back shifted by the server's UTC offset, so sessions and verification codes created before the upgrade can expire early or late. Schemas generated by the CLI use date columns and are unaffected.

1.7.7

Patch Changes

  • #11331 35d7cd3 Thanks @​gitmotion! - Drizzle incrementOne now rejects updates when a concurrent write makes the original where condition false. This prevents stale updates and counter limits from being exceeded on PostgreSQL. Both the default adapter and relations-v2 retain the single-row limit.

1.7.6

Patch Changes

  • #11333 631ac29 Thanks @​bytaesu! - Preserve logical model identity when a custom model name matches another schema key.

1.7.5

Patch Changes

  • #11263 e18bc83 Thanks @​bytaesu! - Defer Drizzle relation metadata access until a relational query runs, preserving lazy database initialization during application builds.

1.7.4

Patch Changes

  • #11213 b905bfe Thanks @​bytaesu! - Run schema validation for the Drizzle Relations v2 adapter, including configurations that provide only relations, so schema mismatches are reported during initialization.

1.7.3

Patch Changes

... (truncated)

Commits

Updates better-auth from 1.6.22 to 1.7.14

Release notes

Sourced from better-auth's releases.

v1.7.14

better-auth

Bug Fixes

  • Fixed two-factor TOTP to accept imported Base32 secrets stored as base32:<secret> (#12031)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed Kakao sign-in to forward loginHint so the Kakao Account login page opens with the ID field prefilled (#12045)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​honuuk

Full changelog: v1.7.13...v1.7.14

v1.7.13

better-auth

Bug Fixes

  • Fixed type declarations so type-only exports are no longer listed as values, making a value import fail type checking instead of failing at runtime (#11985)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added token endpoint authentication options to the Vercel social provider, including dynamic OIDC tokens and private key JWT client assertions, without replacing the built-in sign-in flow (#11948)

Bug Fixes

  • Added tokenEndpointAuth: { method } to the Cloudflare provider and deprecated tokenEndpointAuthMethod, which remains supported (#11997)

For detailed changes, see CHANGELOG

@better-auth/stripe

Features

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.14

Patch Changes

  • #12031 d2cb7f5 Thanks @​bytaesu! - Two-factor TOTP now accepts imported Base32 secrets stored as base32:<secret>.

  • Updated dependencies [2947ab7]:

    • @​better-auth/core@​1.7.14
    • @​better-auth/drizzle-adapter@​1.7.14
    • @​better-auth/kysely-adapter@​1.7.14
    • @​better-auth/memory-adapter@​1.7.14
    • @​better-auth/mongo-adapter@​1.7.14
    • @​better-auth/prisma-adapter@​1.7.14
    • @​better-auth/telemetry@​1.7.14

1.7.13

Patch Changes

  • #11985 9cb95fe Thanks @​bytaesu! - Type declarations no longer list type-only exports as values, so importing one as a value now fails type checking instead of failing at runtime.

  • Updated dependencies [2712441, 1cf4b2c]:

    • @​better-auth/core@​1.7.13
    • @​better-auth/drizzle-adapter@​1.7.13
    • @​better-auth/kysely-adapter@​1.7.13
    • @​better-auth/memory-adapter@​1.7.13
    • @​better-auth/mongo-adapter@​1.7.13
    • @​better-auth/prisma-adapter@​1.7.13
    • @​better-auth/telemetry@​1.7.13

1.7.12

Patch Changes

  • #11925 fb48619 Thanks @​bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.

  • #11924 681aa5c Thanks @​bytaesu! - auth.api.getSession() now keeps the original database error as error.cause when the session lookup fails, so server code can tell a transient failure from a bug.

  • #11930 b18e3b8 Thanks @​bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.

  • Updated dependencies [681aa5c, 4bc78ba, 876608d, 083a743, 492134a]:

    • @​better-auth/core@​1.7.12
    • @​better-auth/drizzle-adapter@​1.7.12
    • @​better-auth/kysely-adapter@​1.7.12
    • @​better-auth/memory-adapter@​1.7.12
    • @​better-auth/mongo-adapter@​1.7.12
    • @​better-auth/prisma-adapter@​1.7.12
    • @​better-auth/telemetry@​1.7.12

1.7.11

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump @better-auth/drizzle-adapter and better-auth
accd3ee 
Bumps [@better-auth/drizzle-adapter](https://github.com/better-auth/better-auth/tree/HEAD/packages/drizzle-adapter) to 1.7.14 and updates ancestor dependency [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth). These dependencies need to be updated together.


Updates `@better-auth/drizzle-adapter` from 1.6.22 to 1.7.14
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/drizzle-adapter/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.14/packages/drizzle-adapter)

Updates `better-auth` from 1.6.22 to 1.7.14
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.14/packages/better-auth)

---
updated-dependencies:
- dependency-name: "@better-auth/drizzle-adapter"
  dependency-version: 1.7.14
  dependency-type: indirect
- dependency-name: better-auth
  dependency-version: 1.7.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 29, 2026 18:39
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Oct 29, 2026
@dependabot dependabot Bot mentioned this pull request Oct 29, 2026
Closed
@suhaibmujahid
suhaibmujahid enabled auto-merge (squash) October 29, 2026 18:46
@marco-c
marco-c disabled auto-merge October 30, 2026 13:58
@marco-c
marco-c merged commit 8e1d3b3 into master Oct 30, 2026
12 of 13 checks passed
@marco-c
marco-c deleted the dependabot/npm_and_yarn/services/hackbot-ui/multi-b8d8e36483 branch October 30, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@suhaibmujahid suhaibmujahid suhaibmujahid approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@suhaibmujahid @marco-c