Skip to content

build(deps): bump the npm-dependencies group with 18 updates - #1417

Merged
ibrunotome merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-bb6d142f9e
Aug 14, 2026
Merged

build(deps): bump the npm-dependencies group with 18 updates#1417
ibrunotome merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-bb6d142f9e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 18 updates:

Package From To
@aws-sdk/client-s3 3.1100.0 3.1105.0
@better-auth/drizzle-adapter 1.6.25 1.6.26
@fullcalendar/core 6.1.21 7.0.2
@fullcalendar/react 6.1.21 7.0.2
@supabase/supabase-js 2.111.0 2.112.2
@tanstack/react-table 8.21.3 9.0.1
@wagmi/core 2.22.1 3.6.4
better-auth 1.6.25 1.6.26
fumadocs-core 16.14.0 16.14.1
fumadocs-mdx 15.2.1 15.2.2
fumadocs-openapi 11.2.2 11.2.3
lucide-react 1.28.0 1.30.0
next-intl 4.13.4 4.13.5
viem 2.55.10 2.55.11
@testing-library/user-event 14.6.1 14.6.3
knip 6.30.0 6.32.0
oxfmt 0.61.0 0.62.0
oxlint 1.76.0 1.77.0

Updates @aws-sdk/client-s3 from 3.1100.0 to 3.1105.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

For list of updated packages, view updated-packages.md in assets-3.1105.0.zip

v3.1104.0

3.1104.0(2026-08-05)

New Features
  • client-deadline: AWS Deadline Cloud now reports persistent volume costs alongside compute and license costs. Customers can view per-fleet storage costs in Usage Explorer by selecting the Usage Type grouping, helping them better understand the costs of their infrastructure. (f6649b9d)
  • client-bedrock-agentcore-control: Adding support for fine-grained access control for AgentCore Memory through managed AgentCore Gateway HTTP Connectors. (448fc0f7)
  • client-glue: Added the PutDataCatalogExportConfiguration to export Glue Data Catalog metadata to systems tables stored in S3 Tables. (31c69446)
  • client-acm-pca: Private Certificate Authority service now supports RSASSA-PSS signing algorithm. (203b57d1)
  • client-ecs: New enum values added for Agent Connectivity issues (13e0f989)

For list of updated packages, view updated-packages.md in assets-3.1104.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1105.0 (2026-08-06)

Features

  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-s3

3.1101.0 (2026-07-31)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @better-auth/drizzle-adapter from 1.6.25 to 1.6.26

Release notes

Sourced from @​better-auth/drizzle-adapter's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

Changelog

Sourced from @​better-auth/drizzle-adapter's changelog.

1.6.26

Patch Changes

  • Updated dependencies [a30e274]:
    • @​better-auth/core@​1.6.26
Commits

Updates @fullcalendar/core from 6.1.21 to 7.0.2

Release notes

Sourced from @​fullcalendar/core's releases.

v7.0.2

  • FEATURE: Restored Bootstrap 5 support (originally omitted from v7) (#8040)
  • FIX: Vue 3 types for template ref for getApi (#8086)
  • FIX: Angular DOM-insertion JS error with #eventContent (#8085)

v7.0.1

  • Better screen reader experience for users of Resource Timeline view
  • printMaxRows setting to control print-rendering cutoff for Resource Timeline view
  • Salesforce LWC component (beta), zip files on each release (#6196)

v7.0.0

V7 is finally released! 🎉

[!NOTE] Please install packages using the @7 postfix. For example @fullcalendar/react@7. This is because v7 is not marked as the "latest" release yet in NPM. More information.

Changes since v7 pre-releases

  • FEATURE: Angular 22 support (#8074)
  • FIX: Resource timeline rows keep a stale height after their events are removed (#8078)
  • FIX: With showNonCurrentDates, events on first or last week of month disappear upon navigation (#8077)
  • FIX: With virtualization, resource invisible after adding resource manually (#8072)
  • BREAKING: Need temporal-polyfill@^1.0.1 as peerDependency
  • BREAKING: Some CDN URLs changed:
    • /all.global.js -> /all/global.js
    • /locales-all.global.js -> /locales-all/global.js
    • /locales/es.global.js -> /locales/es/global.js (and other locales)
Changelog

Sourced from @​fullcalendar/core's changelog.

v7.0.2

  • FEATURE: Restored Bootstrap 5 support (originally omitted from v7) (#8040)
  • FIX: Vue 3 types for template ref for getApi (#8086)
  • FIX: Angular DOM-insertion JS error with #eventContent (#8085)

v7.0.1

  • Better screen reader experience for users of Resource Timeline view
  • printMaxRows setting to control print-rendering cutoff for Resource Timeline view
  • Salesforce LWC component (beta), zip files on each release (#6196)

v7.0.0

Changes since v6

Lots! 🎉

Changes since v7 pre-releases

  • FEATURE: Angular 22 support (#8074)
  • FIX: Resource timeline rows keep a stale height after their events are removed (#8078)
  • FIX: With showNonCurrentDates, events on first or last week of month disappear upon navigation (#8077)
  • FIX: With virtualization, resource invisible after adding resource manually (#8072)
  • BREAKING: Need temporal-polyfill@^1.0.1 as peerDependency
  • BREAKING: Some CDN URLs changed:
    • /all.global.js -> /all/global.js
    • /locales-all.global.js -> /locales-all/global.js
    • /locales/es.global.js -> /locales/es/global.js (and other locales)

v7.0.0-rc.3

  • FIX: In React, event flicker after event drag-n-drop
  • FIX: In React/Preact, expose the CalendarRef type
  • FIX: In TimeGrid view, when snapDuration smaller than slotDuration, incorrect date-selection coordinates
  • FIX: With custom slotHeaderFormats, navLinks sometimes disabled (#8064)
  • FIX: For Shadcn/MUI toolbars, or users of CalendarController, button hints wrong for certain locales
  • FEATURE: Warn on unknown options
  • FEATURE: Warn on invalid class-name inputs
  • BREAKING: Renamed a few things for consistency. Apologies. Please update any forked themes.
    • Renamed info-prop .multiMonthColumnCount to .multiMonthColumns
    • Renamed type MountData to MountInfo

... (truncated)

Commits

Updates @fullcalendar/react from 6.1.21 to 7.0.2

Release notes

Sourced from @​fullcalendar/react's releases.

v7.0.2

  • FEATURE: Restored Bootstrap 5 support (originally omitted from v7) (#8040)
  • FIX: Vue 3 types for template ref for getApi (#8086)
  • FIX: Angular DOM-insertion JS error with #eventContent (#8085)

v7.0.1

  • Better screen reader experience for users of Resource Timeline view
  • printMaxRows setting to control print-rendering cutoff for Resource Timeline view
  • Salesforce LWC component (beta), zip files on each release (#6196)

v7.0.0

V7 is finally released! 🎉

[!NOTE] Please install packages using the @7 postfix. For example @fullcalendar/react@7. This is because v7 is not marked as the "latest" release yet in NPM. More information.

Changes since v7 pre-releases

  • FEATURE: Angular 22 support (#8074)
  • FIX: Resource timeline rows keep a stale height after their events are removed (#8078)
  • FIX: With showNonCurrentDates, events on first or last week of month disappear upon navigation (#8077)
  • FIX: With virtualization, resource invisible after adding resource manually (#8072)
  • BREAKING: Need temporal-polyfill@^1.0.1 as peerDependency
  • BREAKING: Some CDN URLs changed:
    • /all.global.js -> /all/global.js
    • /locales-all.global.js -> /locales-all/global.js
    • /locales/es.global.js -> /locales/es/global.js (and other locales)
Changelog

Sourced from @​fullcalendar/react's changelog.

v7.0.2

  • FEATURE: Restored Bootstrap 5 support (originally omitted from v7) (#8040)
  • FIX: Vue 3 types for template ref for getApi (#8086)
  • FIX: Angular DOM-insertion JS error with #eventContent (#8085)

v7.0.1

  • Better screen reader experience for users of Resource Timeline view
  • printMaxRows setting to control print-rendering cutoff for Resource Timeline view
  • Salesforce LWC component (beta), zip files on each release (#6196)

v7.0.0

Changes since v6

Lots! 🎉

Changes since v7 pre-releases

  • FEATURE: Angular 22 support (#8074)
  • FIX: Resource timeline rows keep a stale height after their events are removed (#8078)
  • FIX: With showNonCurrentDates, events on first or last week of month disappear upon navigation (#8077)
  • FIX: With virtualization, resource invisible after adding resource manually (#8072)
  • BREAKING: Need temporal-polyfill@^1.0.1 as peerDependency
  • BREAKING: Some CDN URLs changed:
    • /all.global.js -> /all/global.js
    • /locales-all.global.js -> /locales-all/global.js
    • /locales/es.global.js -> /locales/es/global.js (and other locales)

v7.0.0-rc.3

  • FIX: In React, event flicker after event drag-n-drop
  • FIX: In React/Preact, expose the CalendarRef type
  • FIX: In TimeGrid view, when snapDuration smaller than slotDuration, incorrect date-selection coordinates
  • FIX: With custom slotHeaderFormats, navLinks sometimes disabled (#8064)
  • FIX: For Shadcn/MUI toolbars, or users of CalendarController, button hints wrong for certain locales
  • FEATURE: Warn on unknown options
  • FEATURE: Warn on invalid class-name inputs
  • BREAKING: Renamed a few things for consistency. Apologies. Please update any forked themes.
    • Renamed info-prop .multiMonthColumnCount to .multiMonthColumns
    • Renamed type MountData to MountInfo

... (truncated)

Commits

Updates @supabase/supabase-js from 2.111.0 to 2.112.2

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)

❤️ Thank You

v2.112.1

2.112.1 (2026-08-05)

🩹 Fixes

  • auth: preserve 5xx error message (#2587)
  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

v2.112.1-canary.1

2.112.1-canary.1 (2026-08-05)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

Commits
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • See full diff in compare view

Updates @tanstack/react-table from 8.21.3 to 9.0.1

Release notes

Sourced from @​tanstack/react-table's releases.

@​tanstack/react-table-devtools@​9.0.1

Patch Changes

  • #6516 2d5d6c5 - Hotfix: Fixes TableDevtoolsPanel rendering while using as a standalone component in TanStack Devtools

  • Updated dependencies [2d5d6c5]:

    • @​tanstack/table-devtools@​9.0.1

@​tanstack/react-table@​9.0.1

Patch Changes

  • #6521 10accb2 - Column defs built with legacyCreateColumnHelper now accept the built-in filterFn, sortFn, and aggregationFn names, matching the registries useLegacyTable registers at runtime.

  • Updated dependencies []:

    • @​tanstack/table-core@​9.0.1

@​tanstack/react-table-devtools@​9.0.0

Major Changes

  • #6512 2327f80 - TanStack Table v9 stable release. See the "Migrating to V9" guide for your framework (e.g. React) for upgrade instructions.

Patch Changes

  • Updated dependencies [2327f80]:
    • @​tanstack/table-devtools@​9.0.0

@​tanstack/react-table@​9.0.0

Major Changes

  • #6512 2327f80 - TanStack Table v9 stable release. See the "Migrating to V9" guide for your framework (e.g. React) for upgrade instructions.

Patch Changes

  • Updated dependencies [2327f80]:
    • @​tanstack/table-core@​9.0.0
Changelog

Sourced from @​tanstack/react-table's changelog.

9.0.1

Patch Changes

  • #6521 10accb2 - Column defs built with legacyCreateColumnHelper now accept the built-in filterFn, sortFn, and aggregationFn names, matching the registries useLegacyTable registers at runtime.

  • Updated dependencies []:

    • @​tanstack/table-core@​9.0.1

9.0.0

Major Changes

  • #6512 2327f80 - TanStack Table v9 stable release. See the "Migrating to V9" guide for your framework (e.g. React) for upgrade instructions.

Patch Changes

  • Updated dependencies [2327f80]:
    • @​tanstack/table-core@​9.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tanstack/react-table since your current version.


Updates @wagmi/core from 2.22.1 to 3.6.4

Release notes

Sourced from @​wagmi/core's releases.

@​wagmi/core@​3.6.4

Patch Changes

  • Fixed getBalance and getTransactionCount querying the wrong block for blockNumber: 0n (genesis), which is a valid input but was treated as falsy and fell back to blockTag: 'latest'. (#5203)

  • Breaking (@wagmi/core/tempo): Removed Actions.zone.getDepositStatus to align with the current Tempo Zone API. Use Actions.zone.waitForTempoBlock to wait for a block import, or use Actions.zone.getZoneInfo and inspect tempoBlockNumber for a one-shot read. (#5204)

@​wagmi/core@​3.6.3

Patch Changes

  • Fixed getTransaction query being disabled for transaction index: 0, which is a valid input (the first transaction in a block) but was treated as falsy. (#5197)

@​wagmi/core@​3.6.2

Patch Changes

  • Fixed Tempo Zone action compatibility with Viem 2.55.2. (#5198)

@​wagmi/core@​3.6.1

Patch Changes

  • Fixed waitForTransactionReceipt staying pending for reverted transactions when revert-reason lookup hangs behind a fallback transport. (#5190)

@​wagmi/core@​3.6.0

Minor Changes

  • Breaking (@​wagmi/core/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

@​wagmi/core@​3.5.5

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)

@​wagmi/core@​3.5.4

Patch Changes

  • Fixed Tempo Zone types for optional fields. (#5167)

@​wagmi/core@​3.5.3

Patch Changes

  • Added connector-specific subpath exports and marked optional connector dependency imports as optional for Turbopack resolution. (#5165)

@​wagmi/core@​3.5.2

Patch Changes

  • Bumped accounts peer version (3e12a5e)

@​wagmi/core@​3.5.0

Minor Changes

... (truncated)

Changelog

Sourced from @​wagmi/core's changelog.

3.6.4

Patch Changes

  • Fixed getBalance and getTransactionCount querying the wrong block for blockNumber: 0n (genesis), which is a valid input but was treated as falsy and fell back to blockTag: 'latest'. (#5203)

  • Breaking (@wagmi/core/tempo): Removed Actions.zone.getDepositStatus to align with the current Tempo Zone API. Use Actions.zone.waitForTempoBlock to wait for a block import, or use Actions.zone.getZoneInfo and inspect tempoBlockNumber for a one-shot read. (#5204)

3.6.3

Patch Changes

  • Fixed getTransaction query being disabled for transaction index: 0, which is a valid input (the first transaction in a block) but was treated as falsy. (#5197)

3.6.2

Patch Changes

  • Fixed Tempo Zone action compatibility with Viem 2.55.2. (#5198)

3.6.1

Patch Changes

  • Fixed waitForTransactionReceipt staying pending for reverted transactions when revert-reason lookup hangs behind a fallback transport. (#5190)

3.6.0

Minor Changes

  • Breaking (@​wagmi/core/tempo): Updated Tempo APIs for viem 2.54.0: token balance and allowance reads now return Amount objects. (#5188)

3.5.5

Patch Changes

  • Fixed Tempo types so transaction override parameters are optional. (#5171)

3.5.4

Patch Changes

  • Fixed Tempo Zone types for optional fields. (#5167)

3.5.3

Patch Changes

  • Added connector-specific subpath exports and marked optional connector dependency imports as optional for Turbopack resolution. (#5165)

... (truncated)

Commits

Updates better-auth from 1.6.25 to 1.6.26

Release notes

Sourced from better-auth's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

Changelog

Sourced from better-auth's changelog.

1.6.26

Patch Changes

  • #10619 9ede805 Thanks @​jeroenvandermerwe! - Ensure database rate-limit cleanup completes when no background task handler is configured.

  • #10608 5a811f1 Thanks @​bytaesu! - Pass the email verification type to custom OTP generators after email sign-up.

  • #10605 d8327f1 Thanks @​XXMOHAMED012! - The email OTP verification check no longer reveals whether an email is registered before the OTP itself is verified.

  • #10513 e2c73fb Thanks @​mrosberghaus! - Fix jwtClient() collapsing createAuthClient type inference when combined with other client plugins such as inferAdditionalFields. Additional user fields (for example on updateUser) are preserved again.

  • #10635 af50c45 Thanks @​krish-vachhani! - Fix oneTapClient() collapsing createAuthClient type inference when combined with other client plugins. The oneTap action is available on the client again.

  • #10633 701cd43 Thanks @​gustavovalverde! - Minting or reading a JWKS signing key inside an active database transaction now uses the transaction-scoped adapter instead of the root connection. On a single-connection SQLite database with native transactions enabled, this no longer deadlocks, and on Postgres and MySQL the key commits with the surrounding transaction instead of independently of it.

  • #10599 e7b0eba Thanks @​bytaesu! - Preserve Apple user data from form_post callbacks when using oAuthProxy.

  • #10552 2b4a14f Thanks @​bytaesuDescription has been truncated

    Summary by cubic

    Updates npm deps with minor/patch releases and pins Dependabot to avoid breaking majors. Also re-enables preload for the openSauceOne local font (previously disabled), which can change initial font loading.

    • Rolled back @fullcalendar/* v7 and @tanstack/react-table v9; added Dependabot ignores for @fullcalendar/*@7 and @wagmi/core@3. We remain on @fullcalendar/*@6 and @tanstack/react-table@8.
    • Validate calendars and tables build and render unchanged.
    • Font: verify no layout shift regressions from openSauceOne now preloading.
    • Dev setup: update to pnpm@11.21.0 to install.
    • Smoke test S3, Supabase (realtime/auth), auth adapter, viem, icons, and i18n; no code migrations expected.

    Written for commit 7f99203537a29b9b430f3a32b6566b51f0839230. Summary will update on new commits.

@dependabot
build(deps): bump the npm-dependencies group with 18 updates
1dbd5fb 
Bumps the npm-dependencies group with 18 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1100.0` | `3.1105.0` |
| [@better-auth/drizzle-adapter](https://github.com/better-auth/better-auth/tree/HEAD/packages/drizzle-adapter) | `1.6.25` | `1.6.26` |
| [@fullcalendar/core](https://github.com/fullcalendar/fullcalendar/tree/HEAD/packages/core-types) | `6.1.21` | `7.0.2` |
| [@fullcalendar/react](https://github.com/fullcalendar/fullcalendar/tree/HEAD/packages/react) | `6.1.21` | `7.0.2` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.111.0` | `2.112.2` |
| [@tanstack/react-table](https://github.com/TanStack/table/tree/HEAD/packages/react-table) | `8.21.3` | `9.0.1` |
| [@wagmi/core](https://github.com/wevm/wagmi/tree/HEAD/packages/core) | `2.22.1` | `3.6.4` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.25` | `1.6.26` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.14.1` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.2.1` | `15.2.2` |
| [fumadocs-openapi](https://github.com/fuma-nama/fumadocs) | `11.2.2` | `11.2.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.30.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.13.5` |
| [viem](https://github.com/wevm/viem) | `2.55.10` | `2.55.11` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.30.0` | `6.32.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.61.0` | `0.62.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.76.0` | `1.77.0` |


Updates `@aws-sdk/client-s3` from 3.1100.0 to 3.1105.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1105.0/clients/client-s3)

Updates `@better-auth/drizzle-adapter` from 1.6.25 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/drizzle-adapter/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/drizzle-adapter)

Updates `@fullcalendar/core` from 6.1.21 to 7.0.2
- [Release notes](https://github.com/fullcalendar/fullcalendar/releases)
- [Changelog](https://github.com/fullcalendar/fullcalendar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fullcalendar/fullcalendar/commits/v7.0.2/packages/core-types)

Updates `@fullcalendar/react` from 6.1.21 to 7.0.2
- [Release notes](https://github.com/fullcalendar/fullcalendar/releases)
- [Changelog](https://github.com/fullcalendar/fullcalendar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fullcalendar/fullcalendar/commits/v7.0.2/packages/react)

Updates `@supabase/supabase-js` from 2.111.0 to 2.112.2
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.2/packages/core/supabase-js)

Updates `@tanstack/react-table` from 8.21.3 to 9.0.1
- [Release notes](https://github.com/TanStack/table/releases)
- [Changelog](https://github.com/TanStack/table/blob/main/packages/react-table/CHANGELOG.md)
- [Commits](https://github.com/TanStack/table/commits/@tanstack/react-table@9.0.1/packages/react-table)

Updates `@wagmi/core` from 2.22.1 to 3.6.4
- [Release notes](https://github.com/wevm/wagmi/releases)
- [Changelog](https://github.com/wevm/wagmi/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/wevm/wagmi/commits/@wagmi/core@3.6.4/packages/core)

Updates `better-auth` from 1.6.25 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/better-auth)

Updates `fumadocs-core` from 16.14.0 to 16.14.1
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.14.0...fumadocs@16.14.1)

Updates `fumadocs-mdx` from 15.2.1 to 15.2.2
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.2.1...fumadocs-mdx@15.2.2)

Updates `fumadocs-openapi` from 11.2.2 to 11.2.3
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-openapi@11.2.2...fumadocs-openapi@11.2.3)

Updates `lucide-react` from 1.28.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `next-intl` from 4.13.4 to 4.13.5
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.13.4...v4.13.5)

Updates `viem` from 2.55.10 to 2.55.11
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.10...viem@2.55.11)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.3
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.3)

Updates `knip` from 6.30.0 to 6.32.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.0/packages/knip)

Updates `oxfmt` from 0.61.0 to 0.62.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.62.0/npm/oxfmt)

Updates `oxlint` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.77.0/npm/oxlint)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1105.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@better-auth/drizzle-adapter"
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@fullcalendar/core"
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@fullcalendar/react"
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/react-table"
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@wagmi/core"
  dependency-version: 3.6.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: better-auth
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fumadocs-core
  dependency-version: 16.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fumadocs-mdx
  dependency-version: 15.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fumadocs-openapi
  dependency-version: 11.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: next-intl
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: viem
  dependency-version: 2.55.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: knip
  dependency-version: 6.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: oxfmt
  dependency-version: 0.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: oxlint
  dependency-version: 1.77.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2026 14:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
@socket-security

socket-security Bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedfumadocs-mdx@​15.2.2981007396100
Addedfumadocs-openapi@​11.2.3981007396100
Addedfumadocs-core@​16.14.1981007796100
Addedlucide-react@​1.30.0100100989680
Addedbetter-auth@​1.6.26981008596100
Addedoxfmt@​0.62.0861008896100
Added@​supabase/​supabase-js@​2.112.28810010098100
Added@​testing-library/​user-event@​14.6.310010010090100
Addedoxlint@​1.77.0991009196100
Addednext-intl@​4.13.51001009396100
Addedknip@​6.32.0991009596100
Added@​aws-sdk/​client-s3@​3.1105.010010010098100

View full report

@ibrunotome
ibrunotome merged commit 04c0b11 into main Aug 14, 2026
8 checks passed
@ibrunotome
ibrunotome deleted the dependabot/npm_and_yarn/npm-dependencies-bb6d142f9e branch August 14, 2026 17:45
github-actions Bot added a commit to maximumbeast777888-lang/prediction-market that referenced this pull request Aug 14, 2026
@github-actions
build(deps): bump the npm-dependencies group with 18 updates (kuestco…
12b3499 
…m#1417)

Upstream: 04c0b11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ibrunotome