[dependabot]

Bumps better-auth from 1.6.25 to 1.7.6.

Release notes

Sourced from better-auth's releases.

v1.7.6

better-auth

Features

• Added support for a bannedUserMessage function that receives the banned user, allowing sign-in errors to include details such as the ban reason. (#11325)
• Added Vercel BotID as a captcha provider for protected authentication routes. (#11016)

Bug Fixes

• Passwords over maxPasswordLength are now rejected with PASSWORD_TOO_LONG before hashing or verification. (#11324)
• Fixed React hydration mismatches when session or plugin auth queries resolve before streamed components hydrate. (#11316)
• Prevented older auth-query responses from overwriting newer results when requests overlap. (#11376)
• Fixed model identity when a custom model name matches another schema key. (#11333)
• Fixed schema validation for Cloudflare D1 when the Kysely dialect cannot introspect the database. (#11366)
• Fixed social account linking through the OAuth Proxy plugin. (#11268)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

• Fixed model identity when a custom model name matches another schema key. (#11333)
• Fixed schema validation for SQLite-generated primary keys, including INTEGER PRIMARY KEY columns without AUTOINCREMENT. (#11374)
• Fixed schema validation for Cloudflare D1 when the Kysely dialect cannot introspect the database. (#11366)

For detailed changes, see CHANGELOG

@better-auth/prisma-adapter

Bug Fixes

• Fixed model identity when a custom model name matches another schema key. (#11333)
• Fixed schema validation for capitalized custom Prisma model names. (#11319)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

• Fixed model identity when a custom model name matches another schema key. (#11333)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.6

Patch Changes

• #11325 af88385 Thanks @​Wadiou! - Admin plugin bannedUserMessage can now be a function that receives the banned user, so sign-in errors can include details such as the ban reason.

• #11268 2fa501c Thanks @​bytaesu! - Support linking social accounts through the OAuth Proxy plugin.

• #11366 d41e2ca Thanks @​bytaesu! - Use targeted PRAGMA queries when a Kysely dialect cannot introspect Cloudflare D1.

• #11016 3d0efa3 Thanks @​davbrito! - Support Vercel BotID checks on protected authentication routes in Vercel-hosted applications.

• #11333 631ac29 Thanks @​bytaesu! - Preserve logical model identity when a custom model name matches another schema key.

• #11324 8853419 Thanks @​XXMOHAMED012! - Passwords longer than maxPasswordLength are now rejected with PASSWORD_TOO_LONG before hashing on sign-in (email, username, phone number), verify-password, change-password (currentPassword), delete-user, the two-factor endpoints that take a password, and admin create-user, matching what sign-up and password reset already did.

• #11316 2ee1545 Thanks @​Smidge! - Fix React hydration mismatches when a session or plugin auth query resolves before a streamed component hydrates. Preserve the server-rendered pending state during hydration, then update to the current client state without changing ordinary or computed plugin stores.

• #11376 fc45d08 Thanks @​bytaesu! - Prevent older auth-query responses from replacing newer results when requests overlap.

• Updated dependencies [41b7dc1, d41e2ca, 631ac29, 2b13e01]:

  • @​better-auth/prisma-adapter@​1.7.6
  • @​better-auth/kysely-adapter@​1.7.6
  • @​better-auth/core@​1.7.6
  • @​better-auth/drizzle-adapter@​1.7.6
  • @​better-auth/memory-adapter@​1.7.6
  • @​better-auth/mongo-adapter@​1.7.6
  • @​better-auth/telemetry@​1.7.6

1.7.5

Patch Changes

• #11283 e56c45b Thanks @​bytaesu! - Log Cloudflare Turnstile error codes and binding mismatches on the server so CAPTCHA verification failures can be diagnosed.

• #11209 8d37cc3 Thanks @​siam923! - Remove the unused optional better-sqlite3 peer dependency to prevent installation conflicts.

• #11272 348fc26 Thanks @​bytaesu! - Use MySQL's reported byte lengths when validating indexes on existing string columns.

• #11203 cb627eb Thanks @​dshukertjr! - Add a database.schemaName option for direct PostgreSQL connections. When set, the adapter and the CLI qualify every statement with that schema, so auth generate writes a schema-qualified migration that creates the schema before its tables instead of relying on the connection's search_path.

• #11270 133f6a2 Thanks @​bytaesu! - Prevent PostgreSQL migrations from treating tables in other schemas or views in the active schema as Better Auth tables.

• Updated dependencies [e18bc83, cb627eb, dae97ed]:

  • @​better-auth/drizzle-adapter@​1.7.5
  • @​better-auth/kysely-adapter@​1.7.5
  • @​better-auth/core@​1.7.5
  • @​better-auth/memory-adapter@​1.7.5
  • @​better-auth/mongo-adapter@​1.7.5
  • @​better-auth/prisma-adapter@​1.7.5

... (truncated)

Commits

• 229a02a chore: release v1.7.6 (#11322)
• dcaa5a7 feat(cli): add check command for schema validation (#11314)
• fc45d08 fix(client): prevent stale query overwrites (#11376)
• 8853419 fix: enforce maxPasswordLength before hashing on password verification endpoi...
• 2fa501c fix(oauth-proxy): support social account linking (#11268)
• 3d0efa3 feat(captcha): add Vercel BotID provider (#11016)
• af88385 feat(admin): allow bannedUserMessage to be a function of the banned user (#11...
• 2ee1545 fix(client): preserve auth query snapshots during hydration (#11316)
• 0362d62 test(oauth): cover stateless implicit linking across instances (#11298)
• 5468e6b chore: release v1.7.5 (#11245)
• Additional commits viewable in compare view

[dependabot]

Assignees

The following users could not be added as assignees: mavric-team. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #95.