[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@better-auth/passkey (source)	^1.7.10 → ^1.7.12
@better-auth/redis-storage (source)	^1.7.10 → ^1.7.12
@commitlint/cli (source)	^21.2.3 → ^21.2.4
@commitlint/config-conventional (source)	^21.2.3 → ^21.2.4
better-auth (source)	^1.7.10 → ^1.7.12
eslint (source)	^10.12.0 → ^10.13.0
resend	^6.33.0 → ^6.34.1
typescript-eslint (source)	^8.71.2 → ^8.72.0

---

Release Notes

better-auth/better-auth (@​better-auth/passkey)

v1.7.12

Compare Source

better-auth/better-auth (@​better-auth/redis-storage)

v1.7.12

Compare Source

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.4

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v21.2.4

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

better-auth/better-auth (better-auth)

v1.7.12

Compare Source

Patch Changes

• #​11925 fb48619 Thanks @​bytaesu! - The JWT plugin now verifies JWTs and session cookie-cache JWTs with the algorithm of the stored key instead of the one named in the token header, and logs a warning when it signs or verifies a JWT without an issuer or audience.

• #​11924 681aa5c Thanks @​bytaesu! - auth.api.getSession() now keeps the original database error as error.cause when the session lookup fails, so server code can tell a transient failure from a bug.

• #​11930 b18e3b8 Thanks @​bytaesu! - OAuth callbacks completed through the OAuth proxy now run the same checks as the standard OAuth callback, including issuer and ID token nonce validation.

• Updated dependencies [681aa5c, 4bc78ba, 876608d, 083a743, 492134a]:

  • @​better-auth/core@1.7.12
  • @​better-auth/drizzle-adapter@1.7.12
  • @​better-auth/kysely-adapter@1.7.12
  • @​better-auth/memory-adapter@1.7.12
  • @​better-auth/mongo-adapter@1.7.12
  • @​better-auth/prisma-adapter@1.7.12
  • @​better-auth/telemetry@1.7.12

eslint/eslint (eslint)

v10.13.0

Compare Source

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#​21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#​21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#​21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#​21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#​21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#​21390) (ESLint Bot)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.72.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.