build(deps): bump the all-version-updates group across 1 directory with 21 updates by dependabot[bot] · Pull Request #93 · arnabnandy7/openissue.dev

dependabot · 2026-10-21T05:17:19Z

Bumps the all-version-updates group with 21 updates in the / directory:

Package	From	To
@better-auth/drizzle-adapter	`1.7.3`	`1.7.10`
better-auth	`1.7.3`	`1.7.10`
drizzle-orm	`0.45.2`	`0.45.4`
lucide-react	`1.41.0`	`1.59.0`
next	`16.3.4`	`16.4.2`
nodemailer	`10.0.0`	`10.1.2`
radix-ui	`1.6.7`	`1.8.1`
react	`19.2.8`	`19.3.1`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.1`
@types/react-dom	`19.2.7`	`19.3.0`
shadcn	`4.21.0`	`4.22.0`
tailwind-merge	`3.6.0`	`3.7.0`
@testing-library/dom	`10.4.1`	`10.4.2`
@testing-library/user-event	`14.6.7`	`14.6.8`
@types/node	`26.4.1`	`26.6.5`
@types/nodemailer	`8.0.1`	`8.0.2`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
@vitest/coverage-v8	`4.1.11`	`4.1.12`
eslint-config-next	`16.3.4`	`16.4.2`
jsdom	`30.0.1`	`30.1.3`
vitest	`4.1.11`	`4.1.12`

Updates @better-auth/drizzle-adapter from 1.7.3 to 1.7.10

Release notes

Sourced from @better-auth/drizzle-adapter's releases.

v1.7.10

better-auth

Bug Fixes

Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)

Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)

Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)

Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)

Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)

Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)

Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)

Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)

Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)

Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)

Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)

Improved errors for unknown OAuth client_id values to say client not found. (#11799)

Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)

Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)

Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)

Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

@better-auth/mongo-adapter

Bug Fixes

Fixed MongoDB findMany ignoring ID sorting and potentially repeating or skipping paginated results. (#11801)

... (truncated)

Changelog

Sourced from @better-auth/drizzle-adapter's changelog.

1.7.10

1.7.9

1.7.8

Patch Changes

#11512 4175b34 Thanks @bytaesu! - Align the installed @better-auth/utils version with better-call while accepting ^0.4.2 || ^0.5.0 across official package peers.

#11731 0cfe07d Thanks @gustavovalverde! - Drizzle schemas that store dates in string columns now work: timestamp({ mode: "string" }), MySQL datetime({ mode: "string" }), and SQLite text(), including on Cloudflare D1. Before, the adapter passed a JavaScript Date to those columns. Drivers such as postgres-js, better-sqlite3 and D1 rejected it, so email sign-up, social sign-in and session refresh failed. Filtering on those columns, for example when listing sessions, failed the same way. Better Auth now writes these dates as UTC text and reads a value without a time zone as UTC.

If your server's time zone is not UTC and you use node-postgres or mysql2 with a string column that has no time zone, existing rows were written in the server's local time. They now read back shifted by the server's UTC offset, so sessions and verification codes created before the upgrade can expire early or late. Schemas generated by the CLI use date columns and are unaffected.

1.7.7

Patch Changes

#11331 35d7cd3 Thanks @gitmotion! - Drizzle incrementOne now rejects updates when a concurrent write makes the original where condition false. This prevents stale updates and counter limits from being exceeded on PostgreSQL. Both the default adapter and relations-v2 retain the single-row limit.

1.7.6

Patch Changes

#11333 631ac29 Thanks @bytaesu! - Preserve logical model identity when a custom model name matches another schema key.

1.7.5

Patch Changes

#11263 e18bc83 Thanks @bytaesu! - Defer Drizzle relation metadata access until a relational query runs, preserving lazy database initialization during application builds.

1.7.4

Patch Changes

#11213 b905bfe Thanks @bytaesu! - Run schema validation for the Drizzle Relations v2 adapter, including configurations that provide only relations, so schema mismatches are reported during initialization.

Commits

b734a41 chore: release v1.7.10 (#11795)
d2a5f83 chore: release v1.7.9 (#11761)
c03ced5 chore: bump @biomejs/biome (#11760)
5f4cc5c chore: release v1.7.8 (#11513)
0cfe07d fix(drizzle-adapter): support dates in string columns (#11731)
4175b34 fix(deps): align @better-auth/utils with better-call (#11512)
db02f23 chore: release v1.7.7 (#11413)
35d7cd3 fix(drizzle-adapter): re-check the incrementOne guard on the UPDATE (#11331)
229a02a chore: release v1.7.6 (#11322)
dcaa5a7 feat(cli): add check command for schema validation (#11314)
Additional commits viewable in compare view

Updates better-auth from 1.7.3 to 1.7.10

Release notes

Sourced from better-auth's releases.

v1.7.10

better-auth

Bug Fixes

Fixed Captcha and OpenAPI plugin subpath imports and type resolution for better-auth/plugins/multi-session and better-auth/test. (#11822)

Fixed Google One Tap sign-ins not recording google as the last login method. (#11393)

Fixed imports from better-auth/plugins/one-tap failing with a not-exported error. (#11696)

Fixed Google One Tap ignoring plugin-level autoSelect and cancelOnTapOutside settings. (#11820)

Fixed Google One Tap sign-ins ignoring configured Google profile mapping and user info updates. (#11819)

Fixed Google One Tap calling a prompt method unsupported by FedCM and retrying skipped prompts. (#11821)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

Added optional self-service signing key rotation for private_key_jwt clients. (#11695)

Bug Fixes

Fixed valid DPoP proofs being rejected for parameterized routes and URLs with trailing slashes. (#11786)

Fixed native clients with HTTP loopback callbacks being rejected when application type inference is enabled. (#11798)

Fixed device-code clients being unable to refresh access for approved resources omitted from a token poll. (#11815)

Fixed OAuth consent without a reference overwriting or reusing consent for a different reference. (#11801)

Fixed dynamic client registration rejecting requests that include both supported and unsupported grants. (#11797)

Fixed attempts to change cached trusted clients returning HTTP 500 instead of HTTP 400. (#11781)

Improved errors for unknown OAuth client_id values to say client not found. (#11799)

Fixed PKCE verifier errors to return the specified HTTP 400 response and error code. (#11724)

Fixed unknown OAuth clients receiving invalid_grant instead of invalid_client at the token endpoint. (#11176)

Fixed unverifiable JWT access tokens causing server errors at /oauth2/userinfo, /oauth2/introspect, and /oauth2/revoke. (#11596)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

Limited JWKS refetches for unknown key IDs to protect servers from repeated requests. (#11805)

Fixed unreachable JWKS endpoints being reported as invalid tokens instead of server errors. (#11612)

For detailed changes, see CHANGELOG

@better-auth/mongo-adapter

Bug Fixes

Fixed MongoDB findMany ignoring ID sorting and potentially repeating or skipping paginated results. (#11801)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.10

Patch Changes

#11393 eebd47a Thanks @breken-ai! - If you use the lastLoginMethod plugin with oneTap, signing in through Google One Tap now records "google", the same value as signing in with the Google button. Before, a One Tap sign-in recorded nothing: the better-auth.last_used_login_method cookie kept its previous value or stayed unset, and so did user.lastLoginMethod with storeInDatabase.

If your customResolveMethod includes a /one-tap/callback → "google" workaround, remove that mapping; keep the resolver if it handles other routes.

#11821 09d07e6 Thanks @gustavovalverde! - The Google One Tap prompt (authClient.oneTap() without button) no longer calls getSkippedReason(), which Google's FedCM migration guide says to remove. Before, it called it under any promptOptions.fedCM setting.

A skipped prompt now ends the flow and calls onPromptNotification right away instead of retrying. Google doesn't report why a prompt was skipped, and a prompt the user closed stays hidden for Google's cooldown period, so the retries could not bring it back. Dismissed prompts still retry as before.

Google Identity Services still logs its FedCM migration warning, because it does so whenever prompt() receives a listener. The plugin needs the listener to track dismissals and skips, so the warning is expected and safe to ignore.

#11819 eaecb72 Thanks @gustavovalverde! - Google One Tap now applies your socialProviders.google.mapProfileToUser and custom getUserInfo, the same as the standard Google sign-in. Before, One Tap ignored both and always stored the token's name, email, email_verified, and picture claims.

If you configured either one, users created through One Tap now get the fields it returns, including any extra fields such as a first name from given_name. Returning users are updated from it on each One Tap sign-in when socialProviders.google.overrideUserInfoOnSignIn is on, and so are existing users that One Tap links when account.accountLinking.updateUserInfoOnLink is on. Check that your mapper suits One Tap users too.

If you set socialProviders.google.overrideUserInfoOnSignIn, One Tap sign-ins now update returning users' name, image, and email from Google, as the redirect sign-in already does.

Setups that configure none of these, including oneTap({ clientId }) with no Google provider, are unaffected.

#11820 88c9a37 Thanks @gustavovalverde! - If you set autoSelect or cancelOnTapOutside on oneTapClient(), the One Tap prompt and the Sign in with Google button now use them. Before, only values passed to authClient.oneTap() took effect, so with autoSelect: true on the plugin, returning users still had to pick an account. Values passed to oneTap() still override the plugin's. Apps that set these options only on oneTap(), or not at all, are unaffected.

#11696 0cf1f7c Thanks @drewsephski! - You can now import the One Tap plugin from better-auth/plugins/one-tap, as you can for other plugins. Previously this import failed with a "not exported" error. Imports from better-auth/plugins and better-auth/client/plugins are unchanged.

#11822 414e845 Thanks @gustavovalverde! - You can now import the Captcha and OpenAPI plugins from better-auth/plugins/captcha and better-auth/plugins/open-api, as you can for other plugins. Previously these imports failed with a "not exported" error. Imports from better-auth/plugins are unchanged.

If your TypeScript config uses "moduleResolution": "node" (or node10), better-auth/plugins/multi-session and better-auth/test now resolve their types. Previously TypeScript reported that it could not find their declarations. Projects using bundler, node16, or nodenext resolution are unaffected.

Updated dependencies [fedd055, bbd0a19, 99cdfe7]:

@better-auth/core@1.7.10

@better-auth/mongo-adapter@1.7.10

@better-auth/drizzle-adapter@1.7.10

@better-auth/kysely-adapter@1.7.10

@better-auth/memory-adapter@1.7.10

@better-auth/prisma-adapter@1.7.10

@better-auth/telemetry@1.7.10

1.7.9

Patch Changes

#11766 6edaa61 Thanks @bytaesu! - An onAPIError.onError handler that throws or rejects no longer fails the request or causes an unhandled promise rejection. The error is logged and the original error response is returned. Async handlers now finish before the response is sent.

Updated dependencies []:

@better-auth/core@1.7.9

@better-auth/drizzle-adapter@1.7.9

@better-auth/kysely-adapter@1.7.9

@better-auth/memory-adapter@1.7.9

... (truncated)

Commits

b734a41 chore: release v1.7.10 (#11795)
eebd47a fix(last-login-method): record Google One Tap sign-ins (#11393)
eaecb72 fix(one-tap): apply the Google provider's mapProfileToUser and getUserInfo (#...
414e845 fix(better-auth): keep package subpaths in sync with build entries (#11822)
88c9a37 fix(one-tap): apply plugin-level autoSelect and cancelOnTapOutside (#11820)
09d07e6 fix(one-tap): stop calling prompt moment methods unsupported under FedCM (#11...
0cf1f7c fix(one-tap): add the better-auth/plugins/one-tap subpath export (#11696)
d2a5f83 chore: release v1.7.9 (#11761)
dbca311 test: fix test names in bearer and organization (#11768)
c03ced5 chore: bump @biomejs/biome (#11760)
Additional commits viewable in compare view

Updates drizzle-orm from 0.45.2 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

Fixed postgres-js not using prepared queries on explicit .prepare(name)

0.45.3 New Netlify DB Driver

Note: The Netlify DB driver is developed and maintained by the Netlify team.

Installation:

npm i @netlify/db

Usage example:

import { drizzle } from 'drizzle-orm/netlify-db';
// reads NETLIFY_DB_URL and NETLIFY_DB_DRIVER env vars
const db = drizzle();
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';
const db = drizzle(process.env.DATABASE_URL);
const result = await db.execute('select 1');

import { drizzle } from 'drizzle-orm/netlify-db';

// Explicit client — consumer controls the driver
const db = drizzle({ client: netlifyDbClient });

const result = await db.execute('select 1');

Commits

eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
15454db +
54e436f exclude gel from pull
0fd1cc6 remove gel
d028db7 skip gel
93dc01e [All-kit]: Warn when journal timestamps can cause migrations to be skipped (#...
b786252 Merge pull request #6049 from drizzle-team/drizzle-kit-announcements
f9fc5bf Add drizzle-kit announcement manifest and schema doc
9d64532 Merge pull request #6004 from drizzle-team/pin-npm-11-main
0af2f2e Pin the release npm self-update to major 11: the npm 12.0.0 tarball is missin...
Additional commits viewable in compare view

Updates lucide-react from 1.41.0 to 1.59.0

Release notes

Sourced from lucide-react's releases.

Version 1.59.0

What's Changed

feat(docs): Adds search field to docs pages by @ericfennis in lucide-icons/lucide#5012

fix(icons): changed chess-queen icon by @karsa-mistmere in lucide-icons/lucide#4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

Version 1.58.0

What's Changed

feat(docs): add third-party package lucide-jte by @sgruendel in lucide-icons/lucide#5000

chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @ericfennis in lucide-icons/lucide#5005

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#5004

fix(site): Fix homepage animation by @ericfennis in lucide-icons/lucide#5015

feat(ci): auto-generate PR titles from added file paths by @ericfennis with @Copilot in lucide-icons/lucide#4790

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4639

ci(dev): fix "Generate PR Title" job by using REST API for changed files by @ericfennis with @Copilot in lucide-icons/lucide#5017

feat(icons): added certificate icon by @rrod497 in lucide-icons/lucide#4327

fix(icons): update music icons by @jamiemlaw in lucide-icons/lucide#4072

New Contributors

@sgruendel made their first contribution in lucide-icons/lucide#5000

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

Version 1.57.0

What's Changed

feat(icons): added folder-user and folder-user icons by @rrod497 in lucide-icons/lucide#4603

feat(icons): added calendar-chevrons-left icon by @karsa-mistmere in lucide-icons/lucide#5001

feat(icons): added users-collaboration icon by @rrod497 in lucide-icons/lucide#4922

feat(icons): added Belarusian ruble icon by @js-best in lucide-icons/lucide#4984

feat(icons): added circle-fading-play icon by @tatianatsiguleva in lucide-icons/lucide#4990

feat(icons): add cpu-ai icon by @signalgridco in lucide-icons/lucide#4992

feat(icons): added guitar-electric icon by @rrod497 in lucide-icons/lucide#4917

feat(icons): added graph-star icon by @Nitero in lucide-icons/lucide#4983

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4996

chore(deps-dev): bump preact from 11.0.0 to 11.0.1 in the preact-deps group by @dependabot[bot] in lucide-icons/lucide#4999

chore(deps-dev): bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in the react-deps group by @dependabot[bot] in lucide-icons/lucide#4995

feat(icons): added perfume icon by @rrod497 in lucide-icons/lucide#4426

New Contributors

@js-best made their first contribution in lucide-icons/lucide#4984

@tatianatsiguleva made their first contribution in lucide-icons/lucide#4990

@signalgridco made their first contribution in lucide-icons/lucide#4992

@Nitero made their first contribution in lucide-icons/lucide#4983

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

... (truncated)

Commits

3f1255e chore(deps-dev): bump @vitejs/plugin-react (#4995)
949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
See full diff in compare view

Updates next from 16.3.4 to 16.4.2

Release notes

Sourced from next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
Additional commits viewable in compare view

Updates nodemailer from 10.0.0 to 10.1.2

Release notes

Sourced from nodemailer's releases.

v10.1.2

10.1.2 (2026-10-16)

Bug Fixes

bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

fetch: strip credentials on any cross-origin redirect (a15360c)

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.

connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.

Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.

A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.

With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.

The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.

Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

do not read the environment or the interface table on import (094179d)

end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)

keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)

let the proxy handshake and the SMTP connection share one deadline (91ed683)

mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)

mime-node: finish an encoded part only after its output was read (ec97d8f)

qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)

smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)

smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)

smtp-connection: refuse a second connect() call (24ba2e0)

turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.1.2 (2026-10-16)

Bug Fixes

bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

10.1.1 (2026-10-14)

Bug Fixes

fetch: strip credentials on any cross-origin redirect (a15360c)

10.1.0 (2026-10-10)

Features

harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

do not read the environment or the interface table on import (094179d)

end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)

keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)

let the proxy handshake and the SMTP connection share one deadline (91ed683)

mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)

mime-node: finish an encoded part only after its output was read (ec97d8f)

qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)

smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)

smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)

smtp-connection: refuse a second connect() call (24ba2e0)

turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

encode base64 and quoted-printable without per-chunk delays (fd377bb)

10.0.16 (2026-10-07)

Bug Fixes

addressparser: keep an escaped parenthesis inside a comment (c4ae20d)

fetch: keep the case of cookie names (#1888) (9f16eed)

fetch: read the cookie name-value pair by position (645e97c)

... (truncated)

Commits

8454a24 Merge pull request #1894 from nodemailer/release-please--branches--master--co...
667cea6 chore(master): release 10.1.2
e347fa2 fix: bound the work a message can make the mailer do and keep per-message aut...
e58217c chore: add Oveyon SMTP service (#1892)
Description has been truncated

…th 21 updates Bumps the all-version-updates group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@better-auth/drizzle-adapter](https://github.com/better-auth/better-auth/tree/HEAD/packages/drizzle-adapter) | `1.7.3` | `1.7.10` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.3` | `1.7.10` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.41.0` | `1.59.0` | | [next](https://github.com/vercel/next.js) | `16.3.4` | `16.4.2` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.0` | `10.1.2` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.7` | `1.8.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.0` | `4.22.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.5` | | [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `8.0.1` | `8.0.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `4.1.12` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.4` | `16.4.2` | | [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `4.1.12` | Updates `@better-auth/drizzle-adapter` from 1.7.3 to 1.7.10 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/drizzle-adapter/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/drizzle-adapter) Updates `better-auth` from 1.7.3 to 1.7.10 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.7.10/packages/better-auth) Updates `drizzle-orm` from 0.45.2 to 0.45.4 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4) Updates `lucide-react` from 1.41.0 to 1.59.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react) Updates `next` from 16.3.4 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.4...v16.4.2) Updates `nodemailer` from 10.0.0 to 10.1.2 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.0.0...v10.1.2) Updates `radix-ui` from 1.6.7 to 1.8.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `react` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `shadcn` from 4.21.0 to 4.22.0 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.22.0/packages/shadcn) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@testing-library/dom` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/testing-library/dom-testing-library/releases) - [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2) Updates `@testing-library/user-event` from 14.6.7 to 14.6.8 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.7...v14.6.8) Updates `@types/node` from 26.4.1 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/nodemailer` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitest/coverage-v8` from 4.1.11 to 4.1.12 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/coverage-v8) Updates `eslint-config-next` from 16.3.4 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next) Updates `jsdom` from 30.0.1 to 30.1.3 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.0.1...v30.1.3) Updates `vitest` from 4.1.11 to 4.1.12 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/vitest) --- updated-dependencies: - dependency-name: "@better-auth/drizzle-adapter" dependency-version: 1.7.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: better-auth dependency-version: 1.7.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: drizzle-orm dependency-version: 0.45.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: lucide-react dependency-version: 1.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: next dependency-version: 16.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: nodemailer dependency-version: 10.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: radix-ui dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: shadcn dependency-version: 4.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@testing-library/dom" dependency-version: 10.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: "@testing-library/user-event" dependency-version: 14.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@types/nodemailer" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-version-updates - dependency-name: eslint-config-next dependency-version: 16.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: jsdom dependency-version: 30.1.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-version-updates - dependency-name: vitest dependency-version: 4.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-21T05:17:21Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openissue-dev	Ready	Preview	Oct 21, 2026 5:18am UTC

sonarqubecloud · 2026-10-21T05:19:09Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

vercel Bot deployed to Preview October 21, 2026 05:18

View deployment

Navigation Menu

Repository navigation

build(deps): bump the all-version-updates group across 1 directory with 21 updates - #93

build(deps): bump the all-version-updates group across 1 directory with 21 updates#93
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-version-updates-2f70584d55

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Oct 21, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Oct 21, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.7.10

better-auth

Bug Fixes

@better-auth/oauth-provider

Features

Bug Fixes

@better-auth/core

Bug Fixes

@better-auth/mongo-adapter

Bug Fixes

1.7.10

1.7.9

1.7.8

Patch Changes

1.7.7

Patch Changes

1.7.6

Patch Changes

1.7.5

Patch Changes

1.7.4

Patch Changes

v1.7.10

better-auth

Bug Fixes

@better-auth/oauth-provider

Features

Bug Fixes

@better-auth/core

Bug Fixes

@better-auth/mongo-adapter

Bug Fixes

1.7.10

Patch Changes

1.7.9

Patch Changes

0.45.4

0.45.3

New Netlify DB Driver

Version 1.59.0

What's Changed

Version 1.58.0

What's Changed

New Contributors

Version 1.57.0

What's Changed

New Contributors

Version 1.56.0

What's Changed

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

Misc Changes

v10.1.2

10.1.2 (2026-10-16)

Bug Fixes

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

Features

Bug Fixes

Performance Improvements

10.1.2 (2026-10-16)

Bug Fixes

10.1.1 (2026-10-14)

Bug Fixes

10.1.0 (2026-10-10)

Features

Bug Fixes

Performance Improvements

10.0.16 (2026-10-07)

Bug Fixes

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

`better-auth`

`@better-auth/oauth-provider`

`@better-auth/core`

`@better-auth/mongo-adapter`

`better-auth`

`@better-auth/oauth-provider`

`@better-auth/core`

`@better-auth/mongo-adapter`

vercel Bot commented Oct 21, 2026 •

edited

Loading