chore(deps-dev): bump the dev-dependencies group with 4 updates by dependabot[bot] · Pull Request #14 · vcode-sh/better-auth-telegram

dependabot · 2026-03-02T14:08:39Z

Bumps the dev-dependencies group with 4 updates: @types/node, better-auth, lint-staged and ultracite.

Updates @types/node from 25.3.0 to 25.3.3

Commits

See full diff in compare view

Updates better-auth from 1.5.0 to 1.5.1

Release notes

v1.5.1

   🐞 Bug Fixes

client: Use direct imports to fix bundler re-export type resolution - by @himself65 in better-auth/better-auth#8261 (63bb7)

core: Revive date strings in safeJSONParse for pre-parsed objects - by @himself65 in better-auth/better-auth#8248 (56db7)

db: Support verification operations with secondary storage - by @himself65 in better-auth/better-auth#8247 (8a047)

expo: Avoid shim require - by @himself65 in better-auth/better-auth#8253 (977bf)

generic-oauth: Use discovery userinfo endpoint instead of hardcoded URLs - by @himself65 in better-auth/better-auth#8223 (58940)

    View changes on GitHub

v1.5.1-beta.1

   🚨 Breaking Changes

oauth-provider: Keep auth_time across id_token refresh - by @grant0417 in better-auth/better-auth#8134 (c41d1)

   🚀 Features

Add built-in support for D1Database - by @bytaesu in better-auth/better-auth#7519 (37608)

Support non-destructive key rotation for BETTER_AUTH_SECRET - by @jzila in better-auth/better-auth#7738 (07b83)

blog:

Add draft support for blog posts and update image URLs - by @Bekacru (58c71)

Enhance blog left panel with post details and add table of contents component - by @Bekacru (4b502)

cli:

Add upgrade command to update better-auth packages - by @himself65 in better-auth/better-auth#8204 (00b54)

Generate schema from adapter CLI flag - by @ping-maxwell and Bereket Engida in better-auth/better-auth#7316 (3485e)

client:

Add fallback support for VERCEL_URL and NEXTAUTH_URL - by @GautamBytes in better-auth/better-auth#6421 (d727c)

email-otp:

Add change email flow with OTP - by @cdy-peters in better-auth/better-auth#7968 (4eec4)

layout:

Update metadata with full URLs for icons and Open Graph images - by @Bekacru (86735)

   🐞 Bug Fixes

Persist refreshed idToken in getAccessToken - by @GautamBytes in better-auth/better-auth#8211 (d3f3e)

Prevent email enumeration on /change-email, add customSyntheticUser - by @nphlp in better-auth/better-auth#8097 (c9f6e)

UpdateAge should extend session_token cookie on stateless mode - by @himself65 in better-auth/better-auth#7995 (af9e0)

Preserve refresh token when provider omits it on refresh - by @async3619 and Bereket Engida in better-auth/better-auth#8001 (81d83)

Session listing endpoints returning empty arrays when >100 inactive sessions exist - by @ping-maxwell in better-auth/better-auth#7166 (e2e56)

Update sign-in link to use absolute URL for better accessibility - by @Bekacru (9619e)

Revert npm downloads label to "/ year" to match API data - by @bytaesu (e61fd)

bearer:

Support case-insensitive scheme and handle token URL encoding - by @bytaesu in better-auth/better-auth#7745 (fbdc0)

ci:

Increase test timeout for sso, api-key, oauth-provider and add CI job timeout - by @himself65 in better-auth/better-auth#8210 (2bd46)

client:

Use direct imports to fix bundler re-export type resolution - by @himself65 in better-auth/better-auth#8261 (ed7d6)

core:

Avoid throwing on required session fields when collecting defaults - by @AlexStrNik in better-auth/better-auth#8146 (f3c33)

... (truncated)

Commits

3715137 chore: release v1.5.1
63bb770 fix(client): use direct imports to fix bundler re-export type resolution (#8261)
04e4ccd chore: bump expo deps (#8250)
56db73b fix(core): revive date strings in safeJSONParse for pre-parsed objects (#8248)
8a0475f fix(db): support verification operations with secondary storage (#8247)
58940f7 fix(generic-oauth): use discovery userinfo endpoint instead of hardcoded URLs...
See full diff in compare view

Updates lint-staged from 16.2.7 to 16.3.1

Release notes

Sourced from lint-staged's releases.

v16.3.1

Patch Changes

#1729 cd5d762 Thanks @iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Minor Changes

#1698 feda37a Thanks @iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

#1699 1346d16 Thanks @iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

#1726 87467aa Thanks @iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

Changelog

Sourced from lint-staged's changelog.

16.3.1

Patch Changes

#1729 cd5d762 Thanks @iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

16.3.0

Minor Changes

#1698 feda37a Thanks @iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

#1699 1346d16 Thanks @iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

#1726 87467aa Thanks @iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

Commits

2a74cd2 chore(changeset): release
cd5d762 refactor: remove nano-spawn dependency completely
e342cab build(deps): move nano-spawn to dev
9aa2cd7 chore(changeset): release
0c387bc test: make long-running task longer because of GitHub Actions slowness
87467aa refactor: detect incorrect brace expansion exhaustively
dceabc6 ci: run npm audit in GitHub Actions
d0e4c2a build(deps): update dependencies
93cf144 docs: add tip about lint-staged.sh
9809fee test: adjust integration test logging setup for concurrency
Additional commits viewable in compare view

Updates ultracite from 7.2.3 to 7.2.4

Release notes

Sourced from ultracite's releases.

ultracite@7.2.4

Patch Changes

cfaa912: Remove Jest and Vitest rules from non-test files

f72f2dc: Add support for copilot hooks

66d51fd: Disable import/no-nodejs-modules for Chris Consent

d1e8490: Create skill

Commits

68f495e Version Packages (#579)
a0adfd6 Run fix
b98567a Update bun.lock
f72f2dc Resolves #580
66d51fd Disable import/no-nodejs-modules
cfaa912 Resolves #583
ca24a22 Clone from snapshot (#582)
c150f77 Use npx ultracite to resolve locally first
47d6c83 Update configure-git.ts
6954546 Run fix
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth), [lint-staged](https://github.com/lint-staged/lint-staged) and [ultracite](https://github.com/haydenbleasel/ultracite). Updates `@types/node` from 25.3.0 to 25.3.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `better-auth` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.5.1/packages/better-auth) Updates `lint-staged` from 16.2.7 to 16.3.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.7...v16.3.1) Updates `ultracite` from 7.2.3 to 7.2.4 - [Release notes](https://github.com/haydenbleasel/ultracite/releases) - [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.2.3...ultracite@7.2.4) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: better-auth dependency-version: 1.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 16.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: ultracite dependency-version: 7.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

sentry · 2026-03-02T14:09:31Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026

dependabot bot requested a review from vcode-sh as a code owner March 2, 2026 14:08

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026

github-actions bot enabled auto-merge (squash) March 2, 2026 14:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the dev-dependencies group with 4 updates#14

chore(deps-dev): bump the dev-dependencies group with 4 updates#14
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-de6e17450e

dependabot bot commented on behalf of github Mar 2, 2026

Uh oh!

sentry bot commented Mar 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 2, 2026

v1.5.1

🐞 Bug Fixes

View changes on GitHub

v1.5.1-beta.1

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

v16.3.1

Patch Changes

v16.3.0

Minor Changes

Patch Changes

16.3.1

Patch Changes

16.3.0

Minor Changes

Patch Changes

ultracite@7.2.4

Patch Changes

Uh oh!

sentry bot commented Mar 2, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants