chore(deps): bump the patch-updates group across 1 directory with 4 updates

[dependabot]

Bumps the patch-updates group with 4 updates in the / directory: better-auth, source-map-support, fumadocs-core and fumadocs-ui.

Updates better-auth from 1.4.17 to 1.4.18

Release notes

Sourced from better-auth's releases.

v1.4.18

   🚀 Features

• Add disableImplicitLinking to accountLinking  -  by @​Paola3stefania and @​himself65 in better-auth/better-auth#7270 (a7740)
• Mark /forget-password/email-otp as deprecation  -  by @​bytaesu in better-auth/better-auth#7645 (8f333)
• device-authorization:
  • Add user id checks  -  by @​himself65 in better-auth/better-auth#7632 (4d79c)
• one-tap:
  • Add button mode for Google sign-in  -  by @​himself65 and Alex Yang in better-auth/better-auth#7482 (aeb92)
• sso:
  • Support multi-domain providers  -  by @​Paola3stefania in better-auth/better-auth#7541 (5be34)
  • Add provider list and detail endpoints  -  by @​Paola3stefania and @​himself65 in better-auth/better-auth#6967 (d0ed1)

   🐞 Bug Fixes

• Correctly handle OAuth callback and Apple email field  -  by @​bytaesu in better-auth/better-auth#7181 (c918e)
• Centralize cookie parsing and handle Expires dates correctly  -  by @​bytaesu, @​cursoragent, taesu and @​himself65 in better-auth/better-auth#7556 (d598b)
• Refresh account_data cookie when session is refreshed  -  by @​bytaesu and @​himself65 in better-auth/better-auth#7576 (5d3f7)
• Remove duplicate secondary storage writes from setSessionCookie  -  by @​bytaesu in better-auth/better-auth#7592 (7a4bc)
• Set default logger level to "warn"  -  by @​bytaesu, @​cursoragent and taesu in better-auth/better-auth#7597 (5d0e7)
• Respect the explicitly set sendOnSignUp option  -  by @​bytaesu in better-auth/better-auth#7593 (33619)
• Handle serial and false cases in generateId  -  by @​bytaesu in better-auth/better-auth#7474 (949cd)
• Log error when misconfigured  -  by @​himself65 in better-auth/better-auth#7584 (16201)
• Update google oauth endpoints  -  by @​bytaesu in better-auth/better-auth#7442 (d401b)
• Consistent api version for facebook provider  -  by @​bytaesu in better-auth/better-auth#7445 (cf619)
• Check jsconfig.json in getPathAliases  -  by @​jycouet in better-auth/better-auth#7650 (9cb45)
• 2fa:
  • Server-side trust device expiration and configurable maxAge  -  by @​Paola3stefania and @​himself65 in better-auth/better-auth#7644 (5d15b)
• anonymous:
  • Export types  -  by @​CalLavicka and @​himself65 in better-auth/better-auth#7661 (133a2)
• cli:
  • Use inkeep remote mcp url  -  by @​Bekacru in better-auth/better-auth#7543 (27af8)
  • Update MCP URL from Chonkie to Inkeep  -  by @​Paola3stefania in better-auth/better-auth#7585 (79621)
• core:
  • Consolidate rateLimit table schema definition  -  by @​bytaesu in better-auth/better-auth#7551 (ea589)
• email-otp:
  • Add stricter default rate limits for password reset endpoints  -  by @​bytaesu in better-auth/better-auth#7658 (dcc28)
• expo:
  • Prevent null cookie key when redirect URL has no cookie param  -  by @​bytaesu in better-auth/better-auth#7555 (d2ca0)
  • Prevent duplicate listener notifications in FocusManager and OnlineManager  -  by @​kimchi-developer and @​himself65 in better-auth/better-auth#7552 (a3ffb)
• github:
  • Surface OAuth token exchange errors  -  by @​Paola3stefania in better-auth/better-auth#7186 (94b75)
• mcp:
  • Remove local mpc  -  by @​Paola3stefania in better-auth/better-auth#7574 (d6d62)
• multi-session:
  • Prevent duplicate cookies when same user signs in multiple times  -  by @​Paola3stefania and @​himself65 in better-auth/better-auth#7256 (9db76)
• oauth-provider:
  • Properly handle metadata field in client registration  -  by @​Paola3stefania in better-auth/better-auth#7232 (33015)
• okta:
  • Userinfo route mismatch  -  by @​psigen in better-auth/better-auth#7602 (acf77)

... (truncated)

Commits

• d99d3ce chore: release v1.4.18
• 5d15bf4 fix(2fa): server-side trust device expiration and configurable maxAge (#7644)
• c6f8f3b fix(saml): IdP-Initiated Callback Routing (#6675)
• 040c624 chore: improve rate limiting type definitions (#7313)
• 133a2b2 fix(anonymous): export types (#7661)
• dcc289e fix(email-otp): add stricter default rate limits for password reset endpoints...
• 8f3330d feat: mark /forget-password/email-otp as deprecation (#7645)
• 4d79c43 feat(device-authorization): add user id checks (#7632)
• a7740bc feat: add disableImplicitLinking to accountLinking (#7270)
• 9db76ab fix(multi-session): prevent duplicate cookies when same user signs in multipl...
• Additional commits viewable in compare view

Updates source-map-support from 0.5.13 to 0.5.21

Release notes

Sourced from source-map-support's releases.

🚢 0.5.16

• 🐛 Fix "cannot read property 'name' of undefined" error

🚢 0.5.15

• 🐛 Adapt to node's removal of the module header

🚢 0.5.14

• 🐛 Fix extraction of function name from next frame’s position

Commits

• 8883393 0.5.21
• b2b82e0 Merge pull request #257 from brettz9/register-hook-require
• a2b5e50 0.5.20
• db131af Update built files
• 3c02b8f Add back missing unlink call
• 3ce709b Merge pull request #297 from tapjs/isaacs/do-not-break-on-missing-global-process
• dd868f6 fix: do not crash if process is not set
• 121090f fix(test): fix writeFileSync on newer node versions
• c41333d fix: replace build.js curl call with node https
• d058745 Merge pull request #282 from evanw/dependabot/npm_and_yarn/http-proxy-1.18.1
• Additional commits viewable in compare view

Updates fumadocs-core from 16.4.9 to 16.4.10

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.4.10

Patch Changes

• 099fde7: [Page Tree] Extract index page from folder
• 6fd7e63: handle circular reference in page tree

Commits

• c98fd7e Version Packages (#2945)
• 4a4cfde second try
• 5278eaa update test snapshots
• eb3d763 OpenAPI: implement collapsible info tag (#2950)
• 65ff886 CLI: Improve CLI interactive experience
• 887d072 Nitro: fix vercel preset
• 430a5f1 UI: support on on docs layout
• 6fd7e63 Core: handle circular reference in page tree
• 71287e1 Core: fix recursive case for page tree builder
• 22417ed configure Nitro on Tanstack Start templates
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.4.9 to 16.4.10

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.4.10

Patch Changes

• 430a5f1: support on on docs layout
• Updated dependencies [099fde7]
• Updated dependencies [6fd7e63]
  • fumadocs-core@16.4.10
  • @​fumadocs/ui@​16.4.10

Commits

• c98fd7e Version Packages (#2945)
• 4a4cfde second try
• 5278eaa update test snapshots
• eb3d763 OpenAPI: implement collapsible info tag (#2950)
• 65ff886 CLI: Improve CLI interactive experience
• 887d072 Nitro: fix vercel preset
• 430a5f1 UI: support on on docs layout
• 6fd7e63 Core: handle circular reference in page tree
• 71287e1 Core: fix recursive case for page tree builder
• 22417ed configure Nitro on Tanstack Start templates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectos	Ready	Preview, Comment	Feb 1, 2026 9:03am

[github-actions]

⚠️ This PR is very large. Consider breaking it down into smaller, more focused changes for easier review.

[github-actions]

⚠️ This PR is very large. Consider breaking it down into smaller, more focused changes for easier review.

[github-actions]

⚠️ This PR is very large. Consider breaking it down into smaller, more focused changes for easier review.

[github-actions]

⚠️ This PR is very large. Consider breaking it down into smaller, more focused changes for easier review.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.