Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 5 updates - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-de2375dec6
Open

chore(deps): bump the minor-and-patch group across 1 directory with 5 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-de2375dec6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 14, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
@auth/core 0.37.4 0.41.1
@convex-dev/auth 0.0.90 0.0.91
@convex-dev/better-auth 0.10.13 0.11.1
@mmailaender/convex-better-auth-svelte 0.5.3 0.6.2
better-auth 1.4.9 1.5.5

Updates @auth/core from 0.37.4 to 0.41.1

Release notes

Sourced from @​auth/core's releases.

@​auth/core@​0.41.1

Bugfixes

  • security issue from nodemailer (#13305)

Other

  • update links for Credentials-based Authentication (#13258)

@​auth/core@​0.41.0

Features

  • providers: support custom baseURL for Gitlab (#13260) (745751e9)

Other

  • fix build
  • adjust default fusionauth provider details (#10868)

@​auth/core@​0.40.0

Features

  • providers: Mailgun region selection (#13027) (e0168ed1)

Bugfixes

  • core: undefined providerId (#12947) (dd211c56)
  • providers: Microsoft Entra ID (#12616) (e16b07b8)
  • providers: enable OIDC capabilities for Keycloak (#12964) (0adbd101)

Other

  • docs: fix typo Avaliable Scopes -> Available Scopes (#13009) (22c1b8b0)
  • typo succesful -> successful (#12973)
  • fix typo profie -> profile (#12987)
Commits
Maintainer changes

This version was pushed to npm by bekacru, a new releaser for @​auth/core since your current version.


Updates @convex-dev/auth from 0.0.90 to 0.0.91

Changelog

Sourced from @​convex-dev/auth's changelog.

0.0.91

  • feat: add jwt.customClaims hook for custom JWT claims (#298) @​Hades32
  • feat: add beforeSessionCreation callback hook (#296) @​focus-stefano
  • fix: password reset code not validated against email (#285)
  • fix: restore isLoading guard during URL code sign-in (#288)
  • fix: window is undefined bug (#277) @​nyoung697
  • fix: use shx for cross-platform build scripts (#290)
  • fix: remove clean git tree requirement from setup CLI (#297)
  • docs: update nextjsMiddlewareRedirect (#244) @​johncmunson
  • docs: update server.mdx createAccount() (#247) @​CodeZeno
Commits
  • 3e1a426 0.0.91
  • 49d78a1 Move npm auth check to preversion for early failure
  • 21476eb Add release and alpha npm scripts
  • 553220a Add jwt.customClaims hook for custom JWT claims (#298)
  • fbfad52 Remove clean git tree requirement from setup CLI (#297)
  • 50ac5c4 Add beforeSessionCreation callback hook (#296)
  • d32b5d0 fix(deps): update dependency next [security] (#293)
  • 2af0394 chore(deps): update dependency vitest to v1.6.1 [security] (#292)
  • c9aa9a9 chore(deps): update dependency vite to v5.4.21 [security] (#291)
  • 0607fd9 Configure Renovate (#258)
  • Additional commits viewable in compare view

Updates @convex-dev/better-auth from 0.10.13 to 0.11.1

Changelog

Sourced from @​convex-dev/better-auth's changelog.

0.11.1

  • chore: add missing generated types

0.11.0

Commits
  • 55cd661 0.11.1
  • cd236ff chore: commit missing types
  • f9352d7 0.11.0
  • f5c4e18 chore: drop vercel config
  • f0d8a5c fix: prevent proxy compression from breaking server-side token fetch (#295)
  • fb25767 docs: add callout to betterAuth/auth.ts usage in local install for v0.10 migr...
  • fe2dba0 feat: migrate to Better Auth 1.5 (#292)
  • 69867c6 docs: update convex-svelte package references to @​mmailaender/convex-svelte (...
  • 3b43116 chore: fix npm login publish race condition
  • See full diff in compare view

Updates @mmailaender/convex-better-auth-svelte from 0.5.3 to 0.6.2

Changelog

Sourced from @​mmailaender/convex-better-auth-svelte's changelog.

0.6.2

Patch Changes

  • fix: resolve auth cookie behind reverse proxy when cookie name prefix differs (__Secure- vs non-secure)
    • getToken now returns the alternative cookie variant when the primary lookup fails, instead of only logging a warning. This fixes SSR treating users as unauthenticated when the app runs behind a reverse proxy where the external URL (HTTPS) differs from the internal origin.
    • Follows the same fallback pattern used by Better Auth's own getSessionCookie.

0.6.1

Patch Changes

  • fix: allow token fetch during SSR hydration before session atom settles
    • During initial hydration, getSessionData() returns null because the Better Auth session atom hasn't loaded yet. The old code skipped the token fetch in this case, causing the Convex client's synchronous setAuth() to receive no token — resulting in unauthenticated query subscriptions and a flash of null data overriding initialData.
    • Track sessionHasBeenAvailable flag: only skip token fetches when the session was previously available and is now cleared (sign-out). During hydration, browser cookies are still valid for the token endpoint.

0.6.0

Minor Changes

  • feat: migrate to @mmailaender/convex-svelte

    • switch peer dependency to @mmailaender/convex-svelte
    • refactor to use primitives now provided by the extended Convex Svelte client
    • move shared primitives out of this package into @mmailaender/convex-svelte
    • keep convex-better-auth-svelte focused on Better Auth integration
  • chore: internal architecture cleanup

Commits
  • a58ba2a chore: bump version to 0.6.2
  • 74e572c Add fallback cookie handling for reverse proxy scenarios
  • a532680 chore: bump version to 0.6.1
  • fdc0f20 Add sessionHasBeenAvailable guard to prevent flash of unauthenticated state d...
  • 433c0c9 Add @​mmailaender/convex-svelte as devDependencies
  • 582fb70 Merge pull request #24 from mmailaender/feat/migrate-to-convex-svelte-fork
  • a035730 chore: bump version to 0.6.0
  • 7a5d3c8 Add e2e tests for sign-out state transitions and update convex-svelte dependency
  • See full diff in compare view

Updates better-auth from 1.4.9 to 1.5.5

Release notes

Sourced from better-auth's releases.

v1.5.5

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v1.5.4

   🐞 Bug Fixes

    View changes on GitHub

v1.5.3

   🐞 Bug Fixes

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

... (truncated)

Commits
  • db5a444 chore: release v1.5.5
  • 497b1db fix: add origin check middleware to password reset request (#8392)
  • ff352c6 fix(oidc-provider): validate redirect_uri for prompt=none (#8398)
  • b9e54c9 fix(db): use CREATE INDEX for postgres migration (#8538)
  • c03666a fix(oauth-provider): avoid fetch redirect CORS after login (#8519)
  • e3e6664 fix: throw on duplicate email when autoSignIn: false without `requireEmailV...
  • b6222b2 chore(client): re-export necessary types (#8497)
  • 2bd994b fix: preserve custom session fields on focus refresh (#8354)
  • eb848c4 fix(adapters): restore deprecated createAdapter and type exports for backcomp...
  • 1221a2b docs(2fa): fix OTP server API method names (#8477)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth/core](https://github.com/nextauthjs/next-auth) | `0.37.4` | `0.41.1` |
| [@convex-dev/auth](https://github.com/get-convex/convex-auth) | `0.0.90` | `0.0.91` |
| [@convex-dev/better-auth](https://github.com/get-convex/better-auth) | `0.10.13` | `0.11.1` |
| [@mmailaender/convex-better-auth-svelte](https://github.com/mmailaender/convex-better-auth-svelte) | `0.5.3` | `0.6.2` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.4.9` | `1.5.5` |



Updates `@auth/core` from 0.37.4 to 0.41.1
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/core@0.37.4...@auth/core@0.41.1)

Updates `@convex-dev/auth` from 0.0.90 to 0.0.91
- [Changelog](https://github.com/get-convex/convex-auth/blob/main/CHANGELOG.md)
- [Commits](get-convex/convex-auth@v0.0.90...v0.0.91)

Updates `@convex-dev/better-auth` from 0.10.13 to 0.11.1
- [Changelog](https://github.com/get-convex/better-auth/blob/main/CHANGELOG.md)
- [Commits](get-convex/better-auth@v0.10.13...v0.11.1)

Updates `@mmailaender/convex-better-auth-svelte` from 0.5.3 to 0.6.2
- [Changelog](https://github.com/mmailaender/convex-better-auth-svelte/blob/main/CHANGELOG.md)
- [Commits](mmailaender/convex-better-auth-svelte@v0.5.3...v0.6.2)

Updates `better-auth` from 1.4.9 to 1.5.5
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.5.5/packages/better-auth)

---
updated-dependencies:
- dependency-name: "@auth/core"
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@convex-dev/auth"
  dependency-version: 0.0.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@convex-dev/better-auth"
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@mmailaender/convex-better-auth-svelte"
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: better-auth
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-de2375dec6 branch from 05cb830 to b3a8839 Compare April 4, 2026 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants