the-human-mustachio · the-human-mustachio · Jan 6, 2026 · Jan 6, 2026 · Jan 6, 2026
diff --git a/.changeset/merge-upstream-updates.md b/.changeset/merge-upstream-updates.md
diff --git a/.changeset/popular-geese-reply.md b/.changeset/popular-geese-reply.md
diff --git a/.changeset/stupid-boats-play.md b/.changeset/stupid-boats-play.md
diff --git a/.changeset/ten-pans-invent.md b/.changeset/ten-pans-invent.md
diff --git a/examples/client/sveltekit/package.json b/examples/client/sveltekit/package.json
@@ -11,7 +11,7 @@
     "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch"
   },
   "devDependencies": {
-    "@openauthjs/openauth": "^0.4.3",
+    "@openauthjs/openauth": "^0.5.0",
     "@sveltejs/adapter-auto": "^4.0.0",
     "@sveltejs/kit": "^2.16.0",
     "@sveltejs/vite-plugin-svelte": "^5.0.0",

diff --git a/packages/openauth/CHANGELOG.md b/packages/openauth/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @openauthjs/openauth
 
+## 0.5.0
+
+### Minor Changes
+
+- d16751e: Merge upstream PRs including:
+  - Passkey authentication support (#270)
+  - Refresh token callback for claim updates (#319)
+  - Add `iat` claim to access tokens (#258)
+  - Security fixes for redirect URI validation (#305) and JWT audience validation
+  - Various bug fixes and type improvements
+
+### Patch Changes
+
+- 872a4cf: update google icon to comply with branding guidelines
+- 4214416: allow auth style autodetection
+- e89f282: add linkedin adapter
+
 ## 0.4.3
 
 ### Patch Changes

diff --git a/packages/openauth/package.json b/packages/openauth/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openauthjs/openauth",
-  "version": "0.4.3",
+  "version": "0.5.0",
   "license": "MIT",
   "type": "module",
   "scripts": {