Update dependency @auth/core to ^0.41.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@auth/core (source)	^0.40.0 → ^0.41.0

---

Release Notes

nextauthjs/next-auth (@​auth/core)

v0.41.3

Compare Source

Bugfixes

• core: getToken() now returns null instead of throwing when the Authorization header contains a malformed Bearer value
• core: OAuth state, nonce, and PKCE check cookies are now bound to the provider that created them and are rejected when a different provider handles the callback
• core: email addresses are Unicode-normalized (NFKC) before validation in the default email normalizer, closing a homoglyph @ bypass

Other

• deps: resolve Dependabot alerts via cross-major dependency upgrades (#​13449)
• deps: resolve Dependabot security advisories via pnpm overrides (#​13441)
• deps: allow nodemailer 8 in peer dependency ranges (#​13434)
• CI formatting and proxy deploy repairs (#​13444)

v0.41.2

Compare Source

Bugfixes

• providers: add issuer to GitHub provider for RFC 9207 compliance (#​13410)

Other

• sync package versions with npm registry (#​13414)

v0.41.1

Compare Source

Bugfixes

• security issue from nodemailer (#​13305)

Other

• update links for Credentials-based Authentication (#​13258)

v0.41.0

Compare Source

Features

• providers: support custom baseURL for Gitlab (#​13260) (745751e)

Other

• fix build
• adjust default fusionauth provider details (#​10868)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 3e17fcd3-29fe-4ae3-af47-fefc4e55a349

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}