Skip to content

build(deps): bump the npm-production group across 1 directory with 15 updates - #440

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-4b582d7722
Open

build(deps): bump the npm-production group across 1 directory with 15 updates#440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-4b582d7722

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 15 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1104.0 3.1152.0
@aws-sdk/lib-storage 3.1104.0 3.1152.0
@aws-sdk/s3-request-presigner 3.1104.0 3.1152.0
@better-auth/drizzle-adapter 1.6.30 1.7.8
@better-auth/passkey 1.6.30 1.7.8
@scalar/hono-api-reference 0.9.48 0.12.12
applicationinsights 3.14.0 3.17.0
better-auth 1.6.30 1.7.8
drizzle-orm 0.45.2 0.45.4
drizzle-zod 0.7.1 0.8.3
hono 4.13.5 4.13.13
hono-pino 0.8.0 0.10.3
pg-boss 12.1.1 12.38.0
postgres 3.4.7 3.4.9
usfm-grammar 3.2.0 3.2.1

Updates @aws-sdk/client-s3 from 3.1104.0 to 3.1152.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes
  • client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)
New Features
  • clients: update client endpoints as of 2026-10-14 (91a8a07c)
  • client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)
  • client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)
  • client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)
  • client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)
  • client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)
  • client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)
  • client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)
  • client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)
  • client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)
  • client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)
  • lib-transfer-manager: publish as a preview package (#8355) (41080929)

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

v3.1151.0

3.1151.0(2026-10-13)

Chores
  • lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)
  • scripts: add preview/ folder to build tooling (#8350) (a922905a)
Documentation Changes
  • client-lambda-web: Documentation update to include common use cases. (643507a0)
New Features
  • clients: update client endpoints as of 2026-10-13 (d3994582)
  • client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)
  • client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)
  • client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)
  • client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)
  • client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)
  • client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)
  • client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)
  • client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/client-s3

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/client-s3

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1146.0 (2026-10-02)

... (truncated)

Commits

Updates @aws-sdk/lib-storage from 3.1104.0 to 3.1152.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes
  • client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)
New Features
  • clients: update client endpoints as of 2026-10-14 (91a8a07c)
  • client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)
  • client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)
  • client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)
  • client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)
  • client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)
  • client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)
  • client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)
  • client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)
  • client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)
  • client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)
  • lib-transfer-manager: publish as a preview package (#8355) (41080929)

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

v3.1151.0

3.1151.0(2026-10-13)

Chores
  • lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)
  • scripts: add preview/ folder to build tooling (#8350) (a922905a)
Documentation Changes
  • client-lambda-web: Documentation update to include common use cases. (643507a0)
New Features
  • clients: update client endpoints as of 2026-10-13 (d3994582)
  • client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)
  • client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)
  • client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)
  • client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)
  • client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)
  • client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)
  • client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)
  • client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1146.0 (2026-10-02)

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.1104.0 to 3.1152.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes
  • client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)
New Features
  • clients: update client endpoints as of 2026-10-14 (91a8a07c)
  • client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)
  • client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)
  • client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)
  • client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)
  • client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)
  • client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)
  • client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)
  • client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)
  • client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)
  • client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)
  • lib-transfer-manager: publish as a preview package (#8355) (41080929)

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

v3.1151.0

3.1151.0(2026-10-13)

Chores
  • lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)
  • scripts: add preview/ folder to build tooling (#8350) (a922905a)
Documentation Changes
  • client-lambda-web: Documentation update to include common use cases. (643507a0)
New Features
  • clients: update client endpoints as of 2026-10-13 (d3994582)
  • client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)
  • client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)
  • client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)
  • client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)
  • client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)
  • client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)
  • client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)
  • client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1146.0 (2026-10-02)

... (truncated)

Commits

Updates @better-auth/drizzle-adapter from 1.6.30 to 1.7.8

Release notes

Sourced from @​better-auth/drizzle-adapter's releases.

v1.7.8

better-auth

Bug Fixes

  • Aligned cookie security attributes with RFC 6265bis (#11540)
  • Added SvelteKit 3 to the supported peer dependency range (#11488)
  • Fixed stale cookies persisting after customSession sessions expire or are revoked (#10591)
  • Fixed customSession treating session lookup errors as signed-out users (#11391)
  • Fixed sign-in failures, replay checks, and SIWE email handling with generateId: "uuid" (#11625)
  • Removed non-returned custom fields from inferred output schema types (#11565)
  • Fixed Kysely migration foreign keys when custom table names match another model key (#11505)
  • Reduced organization plugin server bundles by excluding unused Zod locales (#10866)
  • Aligned @better-auth/utils and better-call dependency versions across official packages (#11512)
  • Fixed generic OAuth providers remaining unavailable after discovery fails at startup by retrying on subsequent requests (#11750)
  • Fixed lastLoginMethod sign-in failures when cookieName or maxAge is explicitly undefined (#11549)
  • Fixed magic link verification changing percent-encoded characters in callback URLs (#11174)
  • Fixed type errors when using oauthProvider() or mcp() with exactOptionalPropertyTypes (#10266)
  • Fixed organization plugin type errors in projects with skipLibCheck: false (#11637)
  • Fixed failed password resets consuming reset links or OTPs before the new password is saved (#11646)
  • Fixed password resets and changes retaining the new password when database session revocation fails (#11626)
  • Fixed phone number password resets to use a configured verifyOTP callback (#10698)
  • Fixed secondary-storage session failures leaving sign-ups, passkey registrations, or SSO sign-ins in an inconsistent state (#11643)
  • Fixed missing device sessions and failed automatic session switching after cache eviction (#11718)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed ID token sign-in failures caused by up to 30 seconds of clock difference with identity providers (#11749)
  • Fixed Atlassian user info errors being mislabeled as Figma errors in logs (#11592)
  • Fixed authentication requests hanging after interrupted async context initialization (#11711)
  • Fixed recognition of valid AsyncLocalStorage initialized after importing Better Auth but before first use, and corrected misleading errors for invalid runtime-provided values in edge and browser fallbacks. (#11712)
  • Fixed after hooks being skipped for writes retained after a failed request on adapters without transactions (#11645)
  • Fixed Microsoft Entra ID sign-in and account linking with ID tokens when signing keys omit alg (#11663)
  • Fixed sign-in failures, replay checks, and SIWE email handling with generateId: "uuid" (#11625)
  • Aligned @better-auth/utils and better-call dependency versions across official packages (#11512)
  • Fixed concurrent MongoDB writes failing with transaction conflicts by retrying transient errors (#11515)
  • Added support for host-bearing custom-scheme redirect URIs for native OAuth clients (#10956)
  • Fixed password resets and changes retaining the new password when database session revocation fails (#11626)
  • Fixed secondary-storage session failures leaving sign-ups, passkey registrations, or SSO sign-ins in an inconsistent state (#11643)
  • Fixed missing device sessions and failed automatic session switching after cache eviction (#11718)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

... (truncated)

Changelog

Sourced from @​better-auth/drizzle-adapter's changelog.

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

  • #11731 0cfe07d Thanks @​gustavovalverde! - Drizzle schemas that store dates in string columns now work: timestamp({ mode: "string" }), MySQL datetime({ mode: "string" }), and SQLite text(), including on Cloudflare D1. Before, the adapter passed a JavaScript Date to those columns. Drivers such as postgres-js, better-sqlite3 and D1 rejected it, so email sign-up, social sign-in and session refresh failed. Filtering on those columns, for example when listing sessions, failed the same way. Better Auth now writes these dates as UTC text and reads a value without a time zone as UTC.

    If your server's time zone is not UTC and you use node-postgres or mysql2 with a string column that has no time zone, existing rows were written in the server's local time. They now read back shifted by the server's UTC offset, so sessions and verification codes created before the upgrade can expire early or late. Schemas generated by the CLI use date columns and are unaffected.

1.7.7

Patch Changes

  • #11331 35d7cd3 Thanks @​gitmotion! - Drizzle incrementOne now rejects updates when a concurrent write makes the original where condition false. This prevents stale updates and counter limits from being exceeded on PostgreSQL. Both the default adapter and relations-v2 retain the single-row limit.

1.7.6

Patch Changes

  • #11333 631ac29 Thanks @​bytaesu! - Preserve logical model identity when a custom model name matches another schema key.

1.7.5

Patch Changes

  • #11263 e18bc83 Thanks @​bytaesu! - Defer Drizzle relation metadata access until a relational query runs, preserving lazy database initialization during application builds.

1.7.4

Patch Changes

  • #11213 b905bfe Thanks @​bytaesu! - Run schema validation for the Drizzle Relations v2 adapter, including configurations that provide only relations, so schema mismatches are reported during initialization.

1.7.3

Patch Changes

  • #11179 352d012 Thanks @​bytaesu! - Validate Drizzle schema objects and generated Prisma client models during initialization, including in production, and report mismatches with guidance for fixing them. These checks do not query the database and cannot detect unapplied migrations.

    For Prisma clients whose model metadata omits nullability, auth generate reports required fields that Better Auth never writes by reading the existing Prisma schema. Set advanced.database.validateSchema: false to disable runtime validation.

1.7.2

Patch Changes

  • #10859 ea77118 Thanks @​bytaesu! - Reject missing Drizzle schema fields before building compound where clauses, preventing malformed SQL when an application schema is out of date.

  • #10941 5aea9f7 Thanks @​bytaesu! - Prevent one-to-one joins from failing in Drizzle Relations v1 and v2 when usePlural is enabled. Resolve generated and legacy relation keys from Drizzle runtime metadata, including Relations v2 setups without an adapter schema.

... (truncated)

Commits

Updates @better-auth/passkey from 1.6.30 to 1.7.8

Release notes

Sourced from @​better-auth/passkey's releases.

v1.7.8

better-auth

Bug Fixes

  • Aligned cookie security attributes with RFC 6265bis (#11540)
  • Added SvelteKit 3 to the supported peer dependency range (#11488)
  • Fixed stale cookies persisting after customSession sessions expire or are revoked (#10591)
  • Fixed customSession treating session lookup errors as signed-out users (#11391)
  • Fixed sign-in failures, replay checks, and SIWE email handling with generateId: "uuid" (#11625)
  • Removed non-returned custom fields from inferred output schema types (#11565)
  • Fixed Kysely migration foreign keys when custom table names match another model key (#11505)
  • Reduced organization plugin server bundles by excluding unused Zod locales (#10866)
  • Aligned @better-auth/utils and better-call dependency versions across official packages (#11512)
  • Fixed generic OAuth providers remaining unavailable after discovery fails at startup by retrying on subsequent requests (#11750)
  • Fixed lastLoginMethod sign-in failures when cookieName or maxAge is explicitly undefined (#11549)
  • Fixed magic link verification changing percent-encoded characters in callback URLs (#11174)
  • Fixed type errors when using oauthProvider() or mcp() with exactOptionalPropertyTypes (#10266)
  • Fixed organization plugin type errors in projects with skipLibCheck: false (#11637)
  • Fixed failed password resets consuming reset links or OTPs before the new password is saved (#11646)
  • Fixed password resets and changes retaining the new password when database session revocation fails (#11626)
  • Fixed phone number password resets to use a configured verifyOTP callback (#10698)
  • Fixed secondary-storage session failures leaving sign-ups, passkey registrations, or SSO sign-ins in an inconsistent state (#11643)
  • Fixed missing device sessions and failed automatic session switching after cache eviction (#11718)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed ID token sign-in failures caused by up to 30 seconds of clock difference with identity providers (#11749)
  • Fixed Atlassian user info errors being mislabeled as Figma errors in logs (#11592)
  • Fixed authentication requests hanging after interrupted async context initialization (#11711)
  • Fixed recognition of valid AsyncLocalStorage initialized after importing Better Auth but before first use, and corrected misleading errors for invalid runtime-provided values in edge and browser fallbacks. (#11712)
  • Fixed after hooks being skipped for writes retained after a failed request on adapters without transactions (#11645)
  • Fixed Microsoft Entra ID sign-in and account linking with ID tokens when signing keys omit alg (#11663)
  • Fixed sign-in failures, replay checks, and SIWE email handling with generateId: "uuid" (#11625)
  • Aligned @better-auth/utils and better-call dependency versions across official packages (#11512)
  • Fixed concurrent MongoDB writes failing with transaction conflicts by retrying transient errors (#11515)
  • Added support for host-bearing custom-scheme redirect URIs for native OAuth clients (#10956)
  • Fixed password resets and changes retaining the new password when database session revocation fails (#11626)
  • Fixed secondary-storage session failures leaving sign-ups, passkey registrations, or SSO sign-ins in an inconsistent state (#11643)
  • Fixed missing device sessions and failed automatic session switching after cache eviction (#11718)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

... (truncated)

Changelog

Sourced from @​better-auth/passkey's changelog.

1.7.8

Patch Changes

  • #11512 4175b34 Thanks @​bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

1.7.7

1.7.6

1.7.5

1.7.4

1.7.3

1.7.2

1.7.1

1.7.0

Minor Changes

  • #9873 2f3a714 Thanks @​GautamBytes! - Add the optional createSession setting to passkey registration. When enabled, successful registration signs the user in, sets the session cookie, and returns the session and user with the registered passkey.

1.7.0-rc.6

1.7.0-rc.5

1.7.0-rc.4

1.7.0-rc.3

Minor Changes

  • #9873 2f3a714 Thanks @​GautamBytes! - Add the optional createSession setting to passkey registration. When enabled, successful registration signs the user in, sets the session cookie, and returns the session and user with the registered passkey.

1.7.0-rc.2

1.7.0-rc.1

1.7.0-rc.0

1.7.0-beta.10

1.7.0-beta.9

Patch Changes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 5667f3ce-ce1d-43a9-864b-d42a586f75ea

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot dependabot Bot changed the title build(deps): bump the npm-production group with 15 updates build(deps): bump the npm-production group across 1 directory with 15 updates Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-4b582d7722 branch 6 times, most recently from faac4ae to 3489b31 Compare October 21, 2026 22:30
@dependabot
build(deps): bump the npm-production group across 1 directory with 15…
548bac1 
… updates

Bumps the npm-production group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1104.0` | `3.1152.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1104.0` | `3.1152.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1104.0` | `3.1152.0` |
| [@better-auth/drizzle-adapter](https://github.com/better-auth/better-auth/tree/HEAD/packages/drizzle-adapter) | `1.6.30` | `1.7.8` |
| [@better-auth/passkey](https://github.com/better-auth/better-auth/tree/HEAD/packages/passkey) | `1.6.30` | `1.7.8` |
| [@scalar/hono-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/hono) | `0.9.48` | `0.12.12` |
| [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js) | `3.14.0` | `3.17.0` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.30` | `1.7.8` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |
| [drizzle-zod](https://github.com/drizzle-team/drizzle-orm) | `0.7.1` | `0.8.3` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.13` |
| [hono-pino](https://github.com/maou-shonen/hono-pino) | `0.8.0` | `0.10.3` |
| [pg-boss](https://github.com/timgit/pg-boss) | `12.1.1` | `12.38.0` |
| [postgres](https://github.com/porsager/postgres) | `3.4.7` | `3.4.9` |
| [usfm-grammar](https://github.com/Bridgeconn/usfm-grammar) | `3.2.0` | `3.2.1` |



Updates `@aws-sdk/client-s3` from 3.1104.0 to 3.1152.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.1104.0 to 3.1152.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/lib/lib-storage)

Updates `@aws-sdk/s3-request-presigner` from 3.1104.0 to 3.1152.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1152.0/packages/s3-request-presigner)

Updates `@better-auth/drizzle-adapter` from 1.6.30 to 1.7.8
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/drizzle-adapter/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.8/packages/drizzle-adapter)

Updates `@better-auth/passkey` from 1.6.30 to 1.7.8
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/passkey/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.8/packages/passkey)

Updates `@scalar/hono-api-reference` from 0.9.48 to 0.12.12
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/integrations/hono/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/hono)

Updates `applicationinsights` from 3.14.0 to 3.17.0
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-node.js/commits)

Updates `better-auth` from 1.6.30 to 1.7.8
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.8/packages/better-auth)

Updates `drizzle-orm` from 0.45.2 to 0.45.4
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4)

Updates `drizzle-zod` from 0.7.1 to 0.8.3
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/commits)

Updates `hono` from 4.13.5 to 4.13.13
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.13)

Updates `hono-pino` from 0.8.0 to 0.10.3
- [Release notes](https://github.com/maou-shonen/hono-pino/releases)
- [Changelog](https://github.com/maou-shonen/hono-pino/blob/main/CHANGELOG.md)
- [Commits](maou-shonen/hono-pino@v0.8.0...v0.10.3)

Updates `pg-boss` from 12.1.1 to 12.38.0
- [Release notes](https://github.com/timgit/pg-boss/releases)
- [Commits](timgit/pg-boss@12.1.1...12.38.0)

Updates `postgres` from 3.4.7 to 3.4.9
- [Release notes](https://github.com/porsager/postgres/releases)
- [Changelog](https://github.com/porsager/postgres/blob/master/CHANGELOG.md)
- [Commits](porsager/postgres@v3.4.7...v3.4.9)

Updates `usfm-grammar` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/Bridgeconn/usfm-grammar/releases)
- [Changelog](https://github.com/Bridgeconn/usfm-grammar/blob/master/docs/Releases.md)
- [Commits](Bridgeconn/usfm-grammar@v3.2.0...v3.2.1)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@better-auth/drizzle-adapter"
  dependency-version: 1.7.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@better-auth/passkey"
  dependency-version: 1.7.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@scalar/hono-api-reference"
  dependency-version: 0.12.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: applicationinsights
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: better-auth
  dependency-version: 1.7.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: drizzle-orm
  dependency-version: 0.45.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: drizzle-zod
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: hono
  dependency-version: 4.13.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: hono-pino
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: pg-boss
  dependency-version: 12.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: postgres
  dependency-version: 3.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: usfm-grammar
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-4b582d7722 branch from 3489b31 to 548bac1 Compare October 21, 2026 22:34

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants