Files
PaperClipAI/server
dependabot[bot] 6aaef2998f build(deps): bump better-auth from 1.6.25 to 1.6.28 (#11516)
Bumps
[better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth)
from 1.6.25 to 1.6.28.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/better-auth/better-auth/releases">better-auth's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.28</h2>
<h2><code>better-auth</code></h2>
<h3>Bug Fixes</h3>
<ul>
<li>Prevented duplicate session requests during React Suspense retries
while preserving revalidation for interrupted refreshes (<a
href="https://redirect.github.com/better-auth/better-auth/pull/10769">#10769</a>)</li>
<li>Restored client plugin declaration compatibility for downstream
TypeScript consumers (<a
href="https://redirect.github.com/better-auth/better-auth/pull/10794">#10794</a>)</li>
</ul>
<p>For detailed changes, see the <a
href="https://github.com/better-auth/better-auth/blob/86faaee69b6c2afe237fff8a00602ecc8eccc367/packages/better-auth/CHANGELOG.md"><code>CHANGELOG</code></a>.</p>
<h2><code>@better-auth/electron</code></h2>
<h3>Bug Fixes</h3>
<ul>
<li>Restored client plugin declaration compatibility for downstream
TypeScript consumers (<a
href="https://redirect.github.com/better-auth/better-auth/pull/10794">#10794</a>)</li>
</ul>
<p>For detailed changes, see the <a
href="https://github.com/better-auth/better-auth/blob/86faaee69b6c2afe237fff8a00602ecc8eccc367/packages/electron/CHANGELOG.md"><code>CHANGELOG</code></a>.</p>
<h2><code>@better-auth/expo</code></h2>
<h3>Bug Fixes</h3>
<ul>
<li>Restored client plugin declaration compatibility for downstream
TypeScript consumers (<a
href="https://redirect.github.com/better-auth/better-auth/pull/10794">#10794</a>)</li>
</ul>
<p>For detailed changes, see the <a
href="https://github.com/better-auth/better-auth/blob/86faaee69b6c2afe237fff8a00602ecc8eccc367/packages/expo/CHANGELOG.md"><code>CHANGELOG</code></a>.</p>
<h2>Contributors</h2>
<p>Thanks to everyone who contributed to this release:</p>
<p><a href="https://github.com/bytaesu"><code>@​bytaesu</code></a></p>
<p><strong>Full changelog:</strong> <a
href="https://github.com/better-auth/better-auth/compare/v1.6.27...v1.6.28"><code>v1.6.27...v1.6.28</code></a></p>
<h2>v1.6.27</h2>
<h2><code>better-auth</code></h2>
<h3>Bug Fixes</h3>
<ul>
<li>Fixed duplicate session requests being made across Suspense retries
(<a
href="https://redirect.github.com/better-auth/better-auth/pull/10676">#10676</a>)</li>
</ul>
<p>For detailed changes, see <a
href="https://github.com/better-auth/better-auth/blob/be47e9418b4a25a4ecd51ba781d2296373b65a03/packages/better-auth/CHANGELOG.md"><code>CHANGELOG</code></a></p>
<h2><code>@better-auth/scim</code></h2>
<h3>Bug Fixes</h3>
<ul>
<li>Fixed auth endpoint types to align with <code>better-call</code> (<a
href="https://redirect.github.com/better-auth/better-auth/pull/10657">#10657</a>)</li>
</ul>
<p>For detailed changes, see <a
href="https://github.com/better-auth/better-auth/blob/be47e9418b4a25a4ecd51ba781d2296373b65a03/packages/scim/CHANGELOG.md"><code>CHANGELOG</code></a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md">better-auth's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.28</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10769">#10769</a>
<a
href="https://github.com/better-auth/better-auth/commit/773de54b18c0e920a3542bdecaf8b42fffc0dc4b"><code>773de54</code></a>
Thanks <a href="https://github.com/bytaesu"><code>@​bytaesu</code></a>!
- Prevent duplicate session requests during transient remounts while
ensuring incomplete refreshes are revalidated.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10794">#10794</a>
<a
href="https://github.com/better-auth/better-auth/commit/2ad2928f967afa9f9858caecd01466ecb8686982"><code>2ad2928</code></a>
Thanks <a href="https://github.com/bytaesu"><code>@​bytaesu</code></a>!
- Restore client plugin declaration compatibility for downstream
TypeScript consumers.</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@​better-auth/core</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/drizzle-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/kysely-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/memory-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/mongo-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/prisma-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
<li><code>@​better-auth/telemetry</code><a
href="https://github.com/1"><code>@​1</code></a>.6.28</li>
</ul>
</li>
</ul>
<h2>1.6.27</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10657">#10657</a>
<a
href="https://github.com/better-auth/better-auth/commit/2ae491eac3ece50839a0eb2d4f868c4deedac67b"><code>2ae491e</code></a>
Thanks <a href="https://github.com/bytaesu"><code>@​bytaesu</code></a>!
- Aligned endpoint and middleware context types with runtime route
parameters, and preserved response headers when resolving sessions from
endpoint contexts.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10676">#10676</a>
<a
href="https://github.com/better-auth/better-auth/commit/90b509344794b8064700371cbc04b985d0519839"><code>90b5093</code></a>
Thanks <a href="https://github.com/bytaesu"><code>@​bytaesu</code></a>!
- Deduplicate in-flight session requests when React retries a suspended
component.</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/better-auth/better-auth/commit/2ae491eac3ece50839a0eb2d4f868c4deedac67b"><code>2ae491e</code></a>]:</p>
<ul>
<li><code>@​better-auth/core</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/drizzle-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/kysely-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/memory-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/mongo-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/prisma-adapter</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
<li><code>@​better-auth/telemetry</code><a
href="https://github.com/1"><code>@​1</code></a>.6.27</li>
</ul>
</li>
</ul>
<h2>1.6.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10619">#10619</a>
<a
href="https://github.com/better-auth/better-auth/commit/9ede8059b56e1415c1e8cfdd93ff72691b848bbf"><code>9ede805</code></a>
Thanks <a
href="https://github.com/jeroenvandermerwe"><code>@​jeroenvandermerwe</code></a>!
- Ensure database rate-limit cleanup completes when no background task
handler is configured.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10608">#10608</a>
<a
href="https://github.com/better-auth/better-auth/commit/5a811f1b4314b8bcf6f21c0b72de5cb67d552d97"><code>5a811f1</code></a>
Thanks <a href="https://github.com/bytaesu"><code>@​bytaesu</code></a>!
- Pass the email verification type to custom OTP generators after email
sign-up.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10605">#10605</a>
<a
href="https://github.com/better-auth/better-auth/commit/d8327f1fea92243b6fea1b0ab183e2a989792c0c"><code>d8327f1</code></a>
Thanks <a
href="https://github.com/XXMOHAMED012"><code>@​XXMOHAMED012</code></a>!
- The email OTP verification check no longer reveals whether an email is
registered before the OTP itself is verified.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10513">#10513</a>
<a
href="https://github.com/better-auth/better-auth/commit/e2c73fbec87f5e19f6a2b5ac371bc5bba9bd49ff"><code>e2c73fb</code></a>
Thanks <a
href="https://github.com/mrosberghaus"><code>@​mrosberghaus</code></a>!
- Fix <code>jwtClient()</code> collapsing <code>createAuthClient</code>
type inference when combined with other client plugins such as
<code>inferAdditionalFields</code>. Additional user fields (for example
on <code>updateUser</code>) are preserved again.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10635">#10635</a>
<a
href="https://github.com/better-auth/better-auth/commit/af50c45553a62cfb6cdcdede86828731ca00c22c"><code>af50c45</code></a>
Thanks <a
href="https://github.com/krish-vachhani"><code>@​krish-vachhani</code></a>!
- Fix <code>oneTapClient()</code> collapsing
<code>createAuthClient</code> type inference when combined with other
client plugins. The <code>oneTap</code> action is available on the
client again.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/better-auth/better-auth/pull/10633">#10633</a>
<a
href="https://github.com/better-auth/better-auth/commit/701cd43babac52784d855291a6adc0cf3fba7970"><code>701cd43</code></a>
Thanks <a
href="https://github.com/gustavovalverde"><code>@​gustavovalverde</code></a>!
- Minting or reading a JWKS signing key inside an active database
transaction now uses the transaction-scoped adapter instead of the root
connection. On a single-connection SQLite database with native
transactions enabled, this no longer deadlocks, and on Postgres and
MySQL the key commits with the surrounding transaction instead of
independently of it.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/better-auth/better-auth/commit/86faaee69b6c2afe237fff8a00602ecc8eccc367"><code>86faaee</code></a>
chore: release v1.6.28 (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10796">#10796</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/773de54b18c0e920a3542bdecaf8b42fffc0dc4b"><code>773de54</code></a>
fix(client): deduplicate settled session requests during Suspense
retries (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/1">#1</a>...</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/c92a1ca27bb3f430811f007e6b7769ac31c9749a"><code>c92a1ca</code></a>
chore: upgrade <code>next</code> to 16.3 (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10787">#10787</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/be47e9418b4a25a4ecd51ba781d2296373b65a03"><code>be47e94</code></a>
chore: release v1.6.27 (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10686">#10686</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/2ae491eac3ece50839a0eb2d4f868c4deedac67b"><code>2ae491e</code></a>
fix(types): align auth endpoints with <code>better-call</code> (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10657">#10657</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/90b509344794b8064700371cbc04b985d0519839"><code>90b5093</code></a>
fix(client): deduplicate session requests across suspense retries (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10676">#10676</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/a16b30e8437927c08350194000178073b06af8cf"><code>a16b30e</code></a>
chore: release v1.6.26 (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10521">#10521</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/9ede8059b56e1415c1e8cfdd93ff72691b848bbf"><code>9ede805</code></a>
fix(rate-limit): await database cleanup by default (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10619">#10619</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/af50c45553a62cfb6cdcdede86828731ca00c22c"><code>af50c45</code></a>
fix(one-tap): preserve client plugin inference with oneTapClient (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10635">#10635</a>)</li>
<li><a
href="https://github.com/better-auth/better-auth/commit/222facff556e6c570bbd6b7fd5923757b5a55711"><code>222facf</code></a>
fix(jwt): resolve the transaction-scoped adapter when signing (<a
href="https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/10623">#10623</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/better-auth/better-auth/commits/v1.6.28/packages/better-auth">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=better-auth&package-manager=npm_and_yarn&previous-version=1.6.25&new-version=1.6.28)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 00:32:01 -07:00
..