Skip to content

chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 - #57

Open
dependabot[bot] wants to merge 1 commit into
stablefrom
dependabot/npm_and_yarn/next-auth-5.0.0-beta.32
Open

chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32#57
dependabot[bot] wants to merge 1 commit into
stablefrom
dependabot/npm_and_yarn/next-auth-5.0.0-beta.32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps next-auth from 5.0.0-beta.30 to 5.0.0-beta.32.

Release notes

Sourced from next-auth's releases.

next-auth@5.0.0-beta.32

Beta release for the v5 line.

Picks up the @​auth/core@​0.41.3 security fixes (malformed Bearer token handling in getToken, provider-bound OAuth check cookies, and NFKC email normalization).

Fixes auth checks failing open on provider configuration errors: a non-OK session response now yields no session instead of an error object, so checks like !!auth fail closed.

next-auth@5.0.0-beta.31

Bugfixes (via @​auth/core@​0.41.2)

  • providers: add issuer to GitHub provider for RFC 9207 compliance (#13410).
    • Supports both github.com and GitHub Enterprise Server (dynamic ${baseUrl}/login/oauth).
  • signin/send-token: stricter email address validation (rejects quoted, multi-@, and empty-domain inputs).

Dependency bump

  • @auth/core: 0.41.00.41.2. Resolves a peer-dep inconsistency in 5.0.0-beta.30 where next-auth declared nodemailer: ^7.0.7 while pinning @auth/core@0.41.0 (which wanted ^6.8.0). Both now align at ^7.0.7.

No changes to next-auth's own source.

Commits
  • e293b37 chore(release): next-auth@5.0.0-beta.32 [skip ci]
  • b690d91 chore: add npm bugs metadata and fix repository field format (#13452)
  • 5af7357 chore(release): bump package version(s) [skip ci]
  • 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
  • 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
  • 1116034 Chore/nodemailer 8 peer deps (#13434)
  • 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
  • b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
  • a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
  • d008b9b Merge commit from fork
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for next-auth since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
@dependabot
dependabot Bot requested a review from aleksnick as a code owner July 26, 2026 19:32
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch 6 times, most recently from c12ba44 to 15f7c2c Compare August 2, 2026 08:09
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch 6 times, most recently from 079adde to c838b9b Compare August 7, 2026 19:29
@dependabot dependabot Bot changed the title chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 build(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch 12 times, most recently from 6e6cf2f to 6535bc8 Compare August 15, 2026 16:10
@dependabot dependabot Bot changed the title build(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch from 6535bc8 to 8df9327 Compare August 17, 2026 12:33
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch 18 times, most recently from 9083061 to 30771a9 Compare August 21, 2026 11:10
Bumps [next-auth](https://github.com/nextauthjs/next-auth) from 5.0.0-beta.30 to 5.0.0-beta.32.
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@5.0.0-beta.30...next-auth@5.0.0-beta.32)

---
updated-dependencies:
- dependency-name: next-auth
  dependency-version: 5.0.0-beta.32
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch from 30771a9 to add72e5 Compare August 21, 2026 11:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants