chore(deps): Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@better-auth/passkey (source)	^1.7.5 → ^1.7.6
@better-auth/redis-storage (source)	^1.7.5 → ^1.7.6
@commitlint/cli (source)	^21.2.2 → ^21.2.3
@commitlint/config-conventional (source)	^21.2.2 → ^21.2.3
better-auth (source)	^1.7.5 → ^1.7.6
hono (source)	^4.13.8 → ^4.13.9
prettier (source)	^3.9.8 → ^3.9.9
resend	^6.28.1 → ^6.29.0
tsx (source)	^4.23.13 → ^4.23.15
typescript-eslint (source)	^8.70.0 → ^8.70.1

---

Release Notes

better-auth/better-auth (@​better-auth/passkey)

v1.7.6

Compare Source

better-auth/better-auth (@​better-auth/redis-storage)

v1.7.6

Compare Source

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.3

Compare Source

Bug Fixes

• lint: trim trailing whitespace off the message handed to ignore matchers (#​4960) (a6f279b)

conventional-changelog/commitlint (@​commitlint/config-conventional)

v21.2.3

Compare Source

Bug Fixes

• rules: report the case that matched in case rule failure messages (#​4962) (9f5f7bc)

better-auth/better-auth (better-auth)

v1.7.6

Compare Source

Patch Changes

• #​11325 af88385 Thanks @​Wadiou! - Admin plugin bannedUserMessage can now be a function that receives the banned user, so sign-in errors can include details such as the ban reason.

• #​11268 2fa501c Thanks @​bytaesu! - Support linking social accounts through the OAuth Proxy plugin.

• #​11366 d41e2ca Thanks @​bytaesu! - Use targeted PRAGMA queries when a Kysely dialect cannot introspect Cloudflare D1.

• #​11016 3d0efa3 Thanks @​davbrito! - Support Vercel BotID checks on protected authentication routes in Vercel-hosted applications.

• #​11333 631ac29 Thanks @​bytaesu! - Preserve logical model identity when a custom model name matches another schema key.

• #​11324 8853419 Thanks @​XXMOHAMED012! - Passwords longer than maxPasswordLength are now rejected with PASSWORD_TOO_LONG before hashing on sign-in (email, username, phone number), verify-password, change-password (currentPassword), delete-user, the two-factor endpoints that take a password, and admin create-user, matching what sign-up and password reset already did.

• #​11316 2ee1545 Thanks @​Smidge! - Fix React hydration mismatches when a session or plugin auth query resolves before a streamed component hydrates. Preserve the server-rendered pending state during hydration, then update to the current client state without changing ordinary or computed plugin stores.

• #​11376 fc45d08 Thanks @​bytaesu! - Prevent older auth-query responses from replacing newer results when requests overlap.

• Updated dependencies [41b7dc1, d41e2ca, 631ac29, 2b13e01]:

  • @​better-auth/prisma-adapter@1.7.6
  • @​better-auth/kysely-adapter@1.7.6
  • @​better-auth/core@1.7.6
  • @​better-auth/drizzle-adapter@1.7.6
  • @​better-auth/memory-adapter@1.7.6
  • @​better-auth/mongo-adapter@1.7.6
  • @​better-auth/telemetry@1.7.6

honojs/hono (hono)

v4.13.9

Compare Source

What's Changed

• fix(jsx): replace Suspense and ErrorBoundary content across newlines in #​5380
• fix(accepts): match media types and language tags case-insensitively in #​5376
• fix(linear-router): don't match an empty path segment as a param in #​5373
• fix(pretty-json): don't break responses with unparseable JSON bodies in #​5377
• fix(jwt): throw JwtTokenInvalid when the signature is not valid base64url in #​5379
• fix(aws-lambda): treat binary +xml archive media types as binary in #​5424
• fix(aws-lambda): preserve empty query parameters in #​5292
• fix(lambda-edge): sync content type detection with aws-lambda in #​5426
• fix(lambda-edge): fail with a descriptive error on a malformed event in #​5358

Full Changelog: honojs/hono@v4.13.8...v4.13.9

prettier/prettier (prettier)

v3.9.9

Compare Source

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#​20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

<!-- Prettier 3.9.8 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR`from`c.sh`, before anything else runs here.

<!-- Prettier 3.9.9 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

resend/resend-node (resend)

v6.29.0

Compare Source

What's Changed

• feat(contacts): accept boolean property values on update by @​felipefreitag in #​1110

Full Changelog: resend/resend-node@v6.28.1...v6.29.0

privatenumber/tsx (tsx)

v4.23.15

Compare Source

Bug Fixes

• exclude bare builtins from namespace inheritance (38e1588)
• expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
• make namespaced register() overloads portable for declaration emit (562c434)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.14

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.70.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.