Bump managed auth React to 0.5.5

[akxue]

upgrades @onkernel/managed-auth-react from 0.5.3 to 0.5.5 and regenerates the embedded managed-auth App bundle (bun run build:managed-auth-app with the pinned bun 1.3.3).

this picks up two releases:

• 0.5.4: keeps ready login fields from being replaced by a loading state, recovers from missed state updates, and preserves scheduled reconnect deadlines during snapshot recovery
• 0.5.5: derives the site label on the initial auth screen from the public suffix list (via tldts), so hosts like login.example.co.il show example

the generated bundle grows from ~275 KB to ~401 KB, almost all of it the public suffix list data that tldts ships.

testing

• bun install --frozen-lockfile from a clean node_modules
• bun run check:managed-auth-app
• bunx tsc --noEmit --incremental false
• bun test — 888 passed
• OAuth Redis recordings unchanged
• git diff --check

not run: next build (needs KERNEL_CLI_* env locally) and a live run of the MCP managed-auth App. bun run format:check fails on AGENTS.md, same as on main.

---

Note

Medium Risk
Changes the embedded managed-auth login UI behavior and bundle size via a third-party auth component upgrade, though server-side auth in this repo is unchanged in the diff.

Overview
Upgrades @onkernel/managed-auth-react from 0.5.3 to 0.5.5 in package.json and refreshes bun.lock. The new library version adds a direct dependency on tldts (public suffix parsing), reflected in the lockfile.

This bump is intended to pick up managed-auth UI fixes (stable login fields during loading, better state/reconnect recovery) and 0.5.5’s site label on the initial auth screen derived from the public suffix list (e.g. login.example.co.il → example).

^{Reviewed by Cursor Bugbot for commit a939708. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
mcp	Ready	Preview	Oct 6, 2026 1:14am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​onkernel/​managed-auth-react@​0.5.3 ⏵ 0.5.5	+7		+1	+1

View full report

[chruffins]

Reviewed; no issues found.