chore(deps): bump better-auth from 1.1.18 to 1.1.21 #6

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/better-auth-1.1.21 into main

2025-02-25 00:48:57 +01:00

dependabot[bot] commented

2025-02-24 21:51:53 +01:00

(Migrated from github.com)

Bumps better-auth from 1.1.18 to 1.1.21.

Release notes

Sourced from better-auth's releases.

v1.1.21

   🐞 Bug Fixes

open-api: Add authentication schemes - by @Bekacru (ee0d6)

origin-check: Add tests for callback URLs with malicious patterns - by @Bekacru (b381c)

    View changes on GitHub

v1.1.21-beta.1

   🚀 Features

Cleanup expired verification data on fetch - by @Bekacru in better-auth/better-auth#1110 (1a492)

Disable default scopes and allow scopes to be passed on request - by @Bekacru in better-auth/better-auth#1240 (4ba72)

Move to better call version 1 - by @Bekacru in better-auth/better-auth#1402 (46dfc)

Captcha Plugin with multiple providers - by @0scrm in better-auth/better-auth#957 (363ca)

Add VK ID social provider - by @nukhtarov and @Bekacru in better-auth/better-auth#1013 (700d3)

Implement JWT token generation and retrieval with encryption support - by @Bekacru (1a482)

Check organization slug - by @Bekacru in better-auth/better-auth#1201 (51e2b)

Support stroring dispaly username to store un-normalized username - by @Bekacru in better-auth/better-auth#1204 (047d6)

Add Roblox social provider - by @D3visionNL and @Bekacru in better-auth/better-auth#1249 (e6470)

Add total users table/collection count to admin plugin list-users endpoint - by @D3visionNL and Kinfe123 in better-auth/better-auth#1258 (d28e4)

Add context to database hooks - by @kzlar in better-auth/better-auth#1180 (63fbd)

Base64 conversion without Buffer - by @BlankParticle in better-auth/better-auth#1523 (27401)

Add cloudflare worker basic tests - by @BlankParticle in better-auth/better-auth#1524 (d7f66)

Add access control to admin plugin - by @jslno in better-auth/better-auth#1424 (61212)

admin:

Add adminUserIds option for custom admin access control - by @Bekacru (2020e)

mongodb-adapter:

Support custom ID generation in MongoDB adapter - by @Bekacru in better-auth/better-auth#1444 (abd58)

oidc:

Allow header auth for token endpoint - by @t3duk in better-auth/better-auth#1484 (15f97)

one-tap:

Improve Google One Tap integration with JWT verification and improved prompt handling - by @Bekacru in better-auth/better-auth#1452 (8a08a)

Implement account linking - by @Bekacru (0a47a)

organization:

Support multiple roles - by @Bekacru in better-auth/better-auth#1037 (1971f)

phone-number:

Add reset password functionality with phone number - by @Bekacru in better-auth/better-auth#1202 (3766b)

username:

Add default validation and options for validating username - by @Bekacru in better-auth/better-auth#1345 (c4f20)

   🐞 Bug Fixes

Update @better-fetch/fetch to version 1.1.14-beta.2 and clean up client options - by @Bekacru (29f2e)

anonymous: Link account user and session type should be less strict - by @Bekacru (11739)

auth: Use options.baseURL instead of ctx.baseURL on trusted origins - by @Bekacru (868a6)

oidc-plugin: User info endpoint casing to match OIDC spec - by @stephenlacy in better-auth/better-auth#1446 (8d9fa)

one-tap: Update import path for generateRandomString to fix unsupported crypto import for react native - by @Bekacru (73297)

open-api: Convert path parameters to OpenAPI format - by @Phanuwat-Pao in better-auth/better-auth#1437 (06419)

origin-check: Add tests for callback URLs with malicious patterns - by @Bekacru (b381c)

... (truncated)

Commits

4c5f0c2 chore: release v1.1.21
ee0d6be fix(open-api): add authentication schemes
ade3974 chore: release v1.1.21-beta.1
b381cac fix(origin-check): add tests for callback URLs with malicious patterns
ddebd03 chore: release v1.1.20
da62e63 fix(session): include expiresAt in session data for HMAC verification
1fadaee chore: release v1.1.20-beta.5
790a942 chore: release v1.1.20-beta.4
795ff42 test(origin-check): add test for callback URL with double slashes
24659ae fix(origin-check): prevent URLs with double slashes from being trusted
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) from 1.1.18 to 1.1.21. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/better-auth/better-auth/releases">better-auth's releases</a>.</em></p> <blockquote> <h2>v1.1.21</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li><strong>open-api</strong>: Add authentication schemes - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/ee0d6be5">(ee0d6)</a></li> <li><strong>origin-check</strong>: Add tests for callback URLs with malicious patterns - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/b381cac7">(b381c)</a></li> </ul> <h5> <a href="https://github.com/better-auth/better-auth/compare/v1.1.20...v1.1.21">View changes on GitHub</a></h5> <h2>v1.1.21-beta.1</h2> <h3> 🚀 Features</h3> <ul> <li>Cleanup expired verification data on fetch - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1110">better-auth/better-auth#1110</a> <a href="https://github.com/better-auth/better-auth/commit/1a492e10">(1a492)</a></li> <li>Disable default scopes and allow scopes to be passed on request - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1240">better-auth/better-auth#1240</a> <a href="https://github.com/better-auth/better-auth/commit/4ba72296">(4ba72)</a></li> <li>Move to better call version 1 - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1402">better-auth/better-auth#1402</a> <a href="https://github.com/better-auth/better-auth/commit/46dfc078">(46dfc)</a></li> <li>Captcha Plugin with multiple providers - by <a href="https://github.com/0scrm"><code>@0scrm</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/957">better-auth/better-auth#957</a> <a href="https://github.com/better-auth/better-auth/commit/363ca39d">(363ca)</a></li> <li>Add VK ID social provider - by <a href="https://github.com/nukhtarov"><code>@nukhtarov</code></a> and <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1013">better-auth/better-auth#1013</a> <a href="https://github.com/better-auth/better-auth/commit/700d3927">(700d3)</a></li> <li>Implement JWT token generation and retrieval with encryption support - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/1a482061">(1a482)</a></li> <li>Check organization slug - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1201">better-auth/better-auth#1201</a> <a href="https://github.com/better-auth/better-auth/commit/51e2b16a">(51e2b)</a></li> <li>Support stroring dispaly username to store un-normalized username - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1204">better-auth/better-auth#1204</a> <a href="https://github.com/better-auth/better-auth/commit/047d6779">(047d6)</a></li> <li>Add Roblox social provider - by <a href="https://github.com/D3visionNL"><code>@D3visionNL</code></a> and <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1249">better-auth/better-auth#1249</a> <a href="https://github.com/better-auth/better-auth/commit/e647040b">(e6470)</a></li> <li>Add total users table/collection count to admin plugin list-users endpoint - by <a href="https://github.com/D3visionNL"><code>@D3visionNL</code></a> and <strong>Kinfe123</strong> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1258">better-auth/better-auth#1258</a> <a href="https://github.com/better-auth/better-auth/commit/d28e4861">(d28e4)</a></li> <li>Add context to database hooks - by <a href="https://github.com/kzlar"><code>@kzlar</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1180">better-auth/better-auth#1180</a> <a href="https://github.com/better-auth/better-auth/commit/63fbd910">(63fbd)</a></li> <li>Base64 conversion without Buffer - by <a href="https://github.com/BlankParticle"><code>@BlankParticle</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1523">better-auth/better-auth#1523</a> <a href="https://github.com/better-auth/better-auth/commit/27401ac6">(27401)</a></li> <li>Add cloudflare worker basic tests - by <a href="https://github.com/BlankParticle"><code>@BlankParticle</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1524">better-auth/better-auth#1524</a> <a href="https://github.com/better-auth/better-auth/commit/d7f66335">(d7f66)</a></li> <li>Add access control to admin plugin - by <a href="https://github.com/jslno"><code>@jslno</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1424">better-auth/better-auth#1424</a> <a href="https://github.com/better-auth/better-auth/commit/612120cc">(61212)</a></li> <li><strong>admin</strong>: <ul> <li>Add adminUserIds option for custom admin access control - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/2020e1f2">(2020e)</a></li> </ul> </li> <li><strong>mongodb-adapter</strong>: <ul> <li>Support custom ID generation in MongoDB adapter - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1444">better-auth/better-auth#1444</a> <a href="https://github.com/better-auth/better-auth/commit/abd58be5">(abd58)</a></li> </ul> </li> <li><strong>oidc</strong>: <ul> <li>Allow header auth for token endpoint - by <a href="https://github.com/t3duk"><code>@t3duk</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1484">better-auth/better-auth#1484</a> <a href="https://github.com/better-auth/better-auth/commit/15f97ff0">(15f97)</a></li> </ul> </li> <li><strong>one-tap</strong>: <ul> <li>Improve Google One Tap integration with JWT verification and improved prompt handling - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1452">better-auth/better-auth#1452</a> <a href="https://github.com/better-auth/better-auth/commit/8a08ae9e">(8a08a)</a></li> <li>Implement account linking - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/0a47a402">(0a47a)</a></li> </ul> </li> <li><strong>organization</strong>: <ul> <li>Support multiple roles - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1037">better-auth/better-auth#1037</a> <a href="https://github.com/better-auth/better-auth/commit/1971fea6">(1971f)</a></li> </ul> </li> <li><strong>phone-number</strong>: <ul> <li>Add reset password functionality with phone number - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1202">better-auth/better-auth#1202</a> <a href="https://github.com/better-auth/better-auth/commit/3766bea9">(3766b)</a></li> </ul> </li> <li><strong>username</strong>: <ul> <li>Add default validation and options for validating username - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1345">better-auth/better-auth#1345</a> <a href="https://github.com/better-auth/better-auth/commit/c4f20879">(c4f20)</a></li> </ul> </li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Update <code>@better-fetch/fetch</code> to version 1.1.14-beta.2 and clean up client options - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/29f2efb1">(29f2e)</a></li> <li><strong>anonymous</strong>: Link account user and session type should be less strict - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/11739a9d">(11739)</a></li> <li><strong>auth</strong>: Use options.baseURL instead of ctx.baseURL on trusted origins - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/868a63c0">(868a6)</a></li> <li><strong>oidc-plugin</strong>: User info endpoint casing to match OIDC spec - by <a href="https://github.com/stephenlacy"><code>@stephenlacy</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1446">better-auth/better-auth#1446</a> <a href="https://github.com/better-auth/better-auth/commit/8d9fa3ba">(8d9fa)</a></li> <li><strong>one-tap</strong>: Update import path for generateRandomString to fix unsupported crypto import for react native - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/73297b3b">(73297)</a></li> <li><strong>open-api</strong>: Convert path parameters to OpenAPI format - by <a href="https://github.com/Phanuwat-Pao"><code>@Phanuwat-Pao</code></a> in <a href="https://redirect.github.com/better-auth/better-auth/issues/1437">better-auth/better-auth#1437</a> <a href="https://github.com/better-auth/better-auth/commit/06419fff">(06419)</a></li> <li><strong>origin-check</strong>: Add tests for callback URLs with malicious patterns - by <a href="https://github.com/Bekacru"><code>@Bekacru</code></a> <a href="https://github.com/better-auth/better-auth/commit/b381cac7">(b381c)</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/better-auth/better-auth/commit/4c5f0c279f2c6ebb97df8b1be01fade4d08d9f26"><code>4c5f0c2</code></a> chore: release v1.1.21</li> <li><a href="https://github.com/better-auth/better-auth/commit/ee0d6be5697f9633443f1fd7d4c32e80068edf71"><code>ee0d6be</code></a> fix(open-api): add authentication schemes</li> <li><a href="https://github.com/better-auth/better-auth/commit/ade3974ed55190dea167457ba3e1b3d885ce23b1"><code>ade3974</code></a> chore: release v1.1.21-beta.1</li> <li><a href="https://github.com/better-auth/better-auth/commit/b381cac7aafd6aa53ef78b6ab771ebfa24643c80"><code>b381cac</code></a> fix(origin-check): add tests for callback URLs with malicious patterns</li> <li><a href="https://github.com/better-auth/better-auth/commit/ddebd0358d74376ea64541512d0167dd4377f182"><code>ddebd03</code></a> chore: release v1.1.20</li> <li><a href="https://github.com/better-auth/better-auth/commit/da62e635bee4fb1d0d246686dd6020f255634438"><code>da62e63</code></a> fix(session): include expiresAt in session data for HMAC verification</li> <li><a href="https://github.com/better-auth/better-auth/commit/1fadaeecfa6a6d4332380d29edf7856b6eb4b6a7"><code>1fadaee</code></a> chore: release v1.1.20-beta.5</li> <li><a href="https://github.com/better-auth/better-auth/commit/790a942933e551e9996c27f97b955426d3c5b410"><code>790a942</code></a> chore: release v1.1.20-beta.4</li> <li><a href="https://github.com/better-auth/better-auth/commit/795ff4269a3200b733a09e85d38ab8f8ee390be2"><code>795ff42</code></a> test(origin-check): add test for callback URL with double slashes</li> <li><a href="https://github.com/better-auth/better-auth/commit/24659aefc35a536b95ea4e5347e52c8803910153"><code>24659ae</code></a> fix(origin-check): prevent URLs with double slashes from being trusted</li> <li>Additional commits viewable in <a href="https://github.com/better-auth/better-auth/commits/v1.1.21/packages/better-auth">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=better-auth&package-manager=npm_and_yarn&previous-version=1.1.18&new-version=1.1.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nord-studio/miru/network/alerts). </details>

socket-security[bot] commented

2025-02-24 21:54:01 +01:00

(Migrated from github.com)

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/better-auth@1.1.21 🔁 npm/better-auth@1.1.18	Transitive: environment	`+19`	11.4 MB	bekacru

View full report↗︎

**New, updated, and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [npm/better-auth@1.1.21](https://socket.dev/npm/package/better-auth/overview/1.1.21) 🔁 [npm/better-auth@1.1.18](https://socket.dev/npm/package/better-auth/overview/1.1.18) | Transitive: <a href="https://socket.dev/npm/package/better-auth/alerts/1.1.21?tab=dependencies&alert_name=envVars">environment</a> | <a href="https://socket.dev/npm/package/better-auth/dependencies/1.1.21">`+19`</a> | 11.4 MB | <a href="https://socket.dev/npm/user/bekacru">bekacru</a> | [**View full report↗︎**](https://socket.dev/dashboard/org/nord-studio/diff/5db3180f-c971-4963-9920-65a9ff15e81d/4eb06d14-5ca8-466f-b71c-7f0a091dde4e)