Skip to content

chore(deps): bump the minor-and-patch group in /compliance-firewall-agent with 17 updates - #319

Merged
thecelestialmismatch merged 1 commit into
mainfrom
dependabot/npm_and_yarn/compliance-firewall-agent/minor-and-patch-27c5ec5bbf
Aug 31, 2026
Merged

chore(deps): bump the minor-and-patch group in /compliance-firewall-agent with 17 updates#319
thecelestialmismatch merged 1 commit into
mainfrom
dependabot/npm_and_yarn/compliance-firewall-agent/minor-and-patch-27c5ec5bbf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /compliance-firewall-agent with 17 updates:

Package From To
@remotion/player 4.0.512 4.0.515
@remotion/three 4.0.512 4.0.515
better-auth 1.6.29 1.7.1
framer-motion 13.1.0 13.1.1
lucide-react 1.31.0 1.33.0
next 16.3.1 16.3.2
posthog-js 1.417.1 1.418.10
react-hook-form 7.85.0 7.86.0
remotion 4.0.512 4.0.515
resend 6.20.0 6.22.0
viem 2.55.16 2.55.19
@types/pg 8.21.0 8.23.1
@vitejs/plugin-react 6.0.5 6.1.0
@vitest/coverage-v8 4.1.10 4.1.11
@vitest/ui 4.1.10 4.1.11
eslint-config-next 16.3.1 16.3.2
vitest 4.1.10 4.1.11

Updates @remotion/player from 4.0.512 to 4.0.515

Release notes

Sourced from @​remotion/player's releases.

v4.0.515

What's Changed

Elements

Internal and experimental

Full Changelog: remotion-dev/remotion@v4.0.514...v4.0.515

v4.0.514

What's Changed

... (truncated)

Commits
  • febd00d v4.0.515
  • b510019 Elements: Add product collection (#10644)
  • debd167 @remotion/web-renderer: Preserve SVG gradient strokes (#10680)
  • e54bcd7 @remotion/browser-studio: Install packages outside the Element flow (#10681)
  • 9ac34ea @remotion/browser-studio: Prebundle Studio dependencies (#10675)
  • f1518dc @remotion/browser-studio: Fix links and File menu divider (#10678)
  • 46672cc @remotion/captions: Add CommonJS export (#10674)
  • 0efa19c @remotion/browser-studio: Load GitHub projects (#10673)
  • 275e116 @remotion/studio: Only show 3D rotation cursor in 3D mode (#10671)
  • cf85a1d @remotion/studio: Distinguish expanded timeline rows (#10672)
  • Additional commits viewable in compare view

Updates @remotion/three from 4.0.512 to 4.0.515

Release notes

Sourced from @​remotion/three's releases.

v4.0.515

What's Changed

Elements

Internal and experimental

Full Changelog: remotion-dev/remotion@v4.0.514...v4.0.515

v4.0.514

What's Changed

... (truncated)

Commits
  • febd00d v4.0.515
  • b510019 Elements: Add product collection (#10644)
  • debd167 @remotion/web-renderer: Preserve SVG gradient strokes (#10680)
  • e54bcd7 @remotion/browser-studio: Install packages outside the Element flow (#10681)
  • 9ac34ea @remotion/browser-studio: Prebundle Studio dependencies (#10675)
  • f1518dc @remotion/browser-studio: Fix links and File menu divider (#10678)
  • 46672cc @remotion/captions: Add CommonJS export (#10674)
  • 0efa19c @remotion/browser-studio: Load GitHub projects (#10673)
  • 275e116 @remotion/studio: Only show 3D rotation cursor in 3D mode (#10671)
  • cf85a1d @remotion/studio: Distinguish expanded timeline rows (#10672)
  • Additional commits viewable in compare view

Updates better-auth from 1.6.29 to 1.7.1

Release notes

Sourced from better-auth's releases.

v1.7.1

better-auth

Bug Fixes

  • Added native database transaction support to test instances for PostgreSQL and MySQL.
  • Updated bundled dependencies (jose, nanostores, noble crypto packages, SimpleWebAuthn) to their latest compatible releases, with no changes required to existing projects.

For detailed changes, see CHANGELOG

@better-auth/scim

Bug Fixes

  • Fixed case-insensitive parsing of string Boolean values for SCIM User active and the primary sub-attribute of emails, phoneNumbers, addresses, roles, and entitlements at the HTTP ingress, improving Microsoft Entra interoperability.
  • Added an optional SCIM-owned connection and credential catalog: configure managedConnections to allow trusted server code to create runtime tenant connections and issue, rotate, and revoke bearer credentials through server-only auth.api methods, without a code-defined connection or an application-owned verifier.
  • Fixed an issue where trusted server code could not retain a terminal connection binding before a dynamic SCIM connection's first authenticated request when supplying a provisioning domain during decommissioning.

For detailed changes, see CHANGELOG

@better-auth/sso

Bug Fixes

  • Fixed SSO provider registration to allow reusing a SCIM connection ID, as SCIM connections no longer participate in the authentication provider namespace.
  • Fixed SAML assertion signature verification to validate signatures on the raw assertion instead of trusting an already-parsed response, and enforced signing policy and size limits on SP metadata. wantAssertionsSigned now correctly controls whether the SP requires signed assertions, matching real-world IdP signing behavior.

For detailed changes, see CHANGELOG

@better-auth/cimd

Bug Fixes

  • Fixed Client ID Metadata Document caching to follow shared-cache freshness rules: the plugin now prefers s-maxage over max-age and Expires, honors s-maxage=0, conditionally revalidates with ETag or Last-Modified, and treats invalid or duplicate freshness directives as immediately stale. Concurrent refreshes now converge on a single client-resource link instead of failing on a unique constraint.

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

  • Fixed native adapter transactions for raw database instances (better-sqlite3, node:sqlite, bun:sqlite, mysql2, pg) passed directly as database, matching the behavior of the explicit { db }/{ dialect } config shapes. Plugins requiring native transactions (such as @better-auth/scim) now work correctly when using the quickstart database: new Database(...) form.

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

  • Fixed scope error responses so MCP clients now receive a 403 with an RFC 6750 insufficient_scope WWW-Authenticate challenge naming every missing scope, allowing clients to request all needed scopes in a single authorization request.

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.7.1

Patch Changes

  • #10863 845bbd1 Thanks @​gustavovalverde! - auth migrate no longer attempts to add a required column with no default value to a table that already has rows. It stops with an error naming the column and the backfill to run first. Previously the generated statement failed on SQLite, Postgres, and SQL Server; on MySQL it filled the new column with an empty string for every existing row and reported success. If auth migrate already ran against a MySQL database on 1.7, run the check in the upgrade guide's account identity section.

    getMigrations throws the new UnsafeMigrationError (exported from better-auth/db/migration) for this refusal, so callers can distinguish it from other migration errors such as an index-definition conflict.

    auth generate still emits the statements for external migration tooling, with a comment banner naming any column that needs a manual backfill first.

    A required field whose database column is still nullable logs a warning instead of blocking the migration.

    A CLI command that fails now prints its error and exits with a non-zero code instead of an unhandled promise rejection.

  • Updated dependencies []:

    • @​better-auth/core@​1.7.1
    • @​better-auth/drizzle-adapter@​1.7.1
    • @​better-auth/kysely-adapter@​1.7.1
    • @​better-auth/memory-adapter@​1.7.1
    • @​better-auth/mongo-adapter@​1.7.1
    • @​better-auth/prisma-adapter@​1.7.1
    • @​better-auth/telemetry@​1.7.1

1.7.0

Minor Changes

  • #8733 4e8e4c7 Thanks @​bytaesu! - Add hydrateSession to seed the client with a server-fetched session so useSession returns data on the first render.

  • #9930 0cbaf81 Thanks @​gustavovalverde! - Anonymous account linking now works after social and generic OAuth sign-in in Expo and other in-app browsers, where the OAuth callback returns without the session cookie. onLinkAccount fires and the anonymous user is migrated; before, it was silently skipped.

    Plugins can now carry server-trusted data across an OAuth redirect with the new addOAuthServerContext API, read back on the callback via getOAuthState().serverContext. Unlike additionalData, it cannot be set from the request body, so it is the right place for values the server must trust.

    For @better-auth/oauth-provider, the post-login authorization query now travels through that server-only channel, so it can no longer be injected through additionalData.

  • #10004 b36c38f Thanks @​bytaesu! - The captcha plugin now requires endpoint entries to match full auth paths unless they use wildcard patterns. This prevents requests like /sign-in//email from bypassing captcha while preserving trailing-slash matches like /sign-in/email/. To protect multiple routes, replace partial paths like /sign-in with explicit wildcards such as /sign-in/* or /sign-in/**.

  • #10746 6782647 Thanks @​gustavovalverde! - OAuth device grants now use oauthDeviceAuthorization() alongside oauthProvider() or mcp(). This single integration replaces both the standalone deviceCodeGrant() plugin and the shared-grant configuration. Standalone Device Authorization no longer accepts or stores RFC 8707 resources, and onDeviceAuthRequest receives only clientId and scope. The OAuth integration rejects resource indicators that are not absolute, fragment-free URIs.

    The OAuth integration replaces the optional resource column with oauthClientId and resources. Regenerate and apply the schema when using it. Before upgrading from an earlier 1.7 prerelease, let pending OAuth device codes expire or delete them because they cannot be exchanged through the new integration.

  • #10402 763a267 Thanks @​gustavovalverde! - Plugin database schemas can now define named or generated table-level indexes across multiple fields. SQL migrations and generated Drizzle or Prisma schemas resolve configured table and column names consistently, while the MongoDB adapter creates the same indexes before the first index-enforcing write.

  • #9766 bf39cbf Thanks @​GautamBytes! - Add a server-only auth.api.consumePhoneNumberOTP API for custom phone OTP flows that need to verify and consume a code without creating or updating users or sessions.

  • #10330 081d3c3 Thanks @​ping-maxwell! - Allow the username plugin's separate displayUsername field to be omitted by setting displayUsername: false on both the server and client plugins.

  • #10059 49b5cf6 Thanks @​GautamBytes! - Device Authorization now creates unique database indexes for deviceCode and userCode, so each generated code must be unique in its column. Existing installations on every adapter must resolve duplicate values before applying the migration. MySQL and SQL Server installations must also convert both columns to bounded strings and clean up values longer than 191 characters before running it.

... (truncated)

Commits

Updates framer-motion from 13.1.0 to 13.1.1

Changelog

Sourced from framer-motion's changelog.

[13.1.1] 2026-08-18

Fixed

  • Guard animation window access in non-browser runtimes.
  • AnimatePresence: Improved compat with React 19 strict mode.
Commits
  • 1b037b0 v13.1.1
  • d734481 Updating changelog
  • 9b9190d Latest
  • c07d12e Merge pull request #3752 from motiondivision/fix-3746-animatepresence-strictm...
  • b497f1d Merge branch 'main' into fix-3746-animatepresence-strictmode-remount
  • bbabb00 Merge pull request #3751 from motiondivision/worktree-fix-issue-3735
  • 06540fa Merge branch 'main' into worktree-fix-issue-3735
  • See full diff in compare view

Updates lucide-react from 1.31.0 to 1.33.0

Release notes

Sourced from lucide-react's releases.

Version 1.33.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.32.0...1.33.0

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

Updates next from 16.3.1 to 16.3.2

Release notes

Sourced from next's releases.

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

Commits
  • d0ac882 v16.3.2
  • 81deb92 [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • cd714d9 [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • 5ac2327 [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • 0ccb3e7 [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • f4dc7c8 [backport] Fix catch-all index page being served for every other slug (#97416)
  • eba236b [backport] Scope app-entry export validation to files inside the app director...
  • See full diff in compare view

Updates posthog-js from 1.417.1 to 1.418.10

Release notes

Sourced from posthog-js's releases.

posthog-js@1.418.10

1.418.10

Patch Changes

  • #4451 e1d993c Thanks @​posthog! - Guard the replayer's hover handling against non-element and detached hover targets, which previously threw an unhandled TypeError (querySelectorAll on a node without that method) and stopped session recording playback mid-stream. (2026-08-21)

  • #4557 4451274 Thanks @​posthog! - Keep replay playback running when a recording adopts constructed stylesheets across a document swap. A constructed stylesheet can only be adopted by the document that created it, so a sheet held over a swap is rejected and the error previously stopped the player. Adoption now falls back to whatever is already applied. (2026-08-21)

posthog-js@1.418.9

1.418.9

Patch Changes

  • #4588 c8df61c Thanks @​clr182! - fix(replay): attribute the backdated sessionIdle marker to the session that went idle, so a rotation-born session's recording no longer starts hours before its first snapshot (2026-08-21)

posthog-js@1.418.8

1.418.8

Patch Changes

  • #4583 6322f09 Thanks @​turnipdabeets! - Fix logs and metrics being silently dropped when an attribute holds a very large integer, a function, a symbol, a sparse array, or a truncated emoji. Cap log and metric attributes at 20 levels of nesting, 1,000 entries per object and 10,000 values in total, marking anything beyond as [Truncated]. Type OtlpAnyValue.intValue as string | number — code reading that field must handle both. (2026-08-21)
  • Updated dependencies [6322f09]:
    • @​posthog/core@​1.48.7
    • @​posthog/types@​1.405.1

posthog-js@1.418.7

1.418.7

Patch Changes

  • #4459 caed377 Thanks @​posthog! - fix(browser): stop the $posthog_cookieless sentinel from leaking into identify() and real events. A tab that missed a cross-tab consent flip could emit the sentinel as a durable distinct_id — merging distinct real users into a single person. It now adopts the identity persisted by the tab that handled consent, falling back to a fresh anonymous device id when persistence is not shared. (2026-08-21)

  • #4567 5bd2c8d Thanks @​github-actions! - Render React component stacks as linked exception causes so error tracking identifies the crashing component. (2026-08-21)

posthog-js@1.418.6

1.418.6

Patch Changes

  • #4578 bae46bf Thanks @​marandaneto! - Drop events when a before-send hook throws instead of sending the unmodified event. (2026-08-20)

... (truncated)

Commits
  • 3508c05 chore: update versions and lockfile [version bump]
  • 557140e feat(node): isEnabled() accepts a caller-supplied default value (#4484)
  • 4451274 fix(replay): keep playback alive when a stylesheet adoption is rejected (#4557)
  • e1d993c fix(replay): keep playback alive when a hover target is not an element (#4451)
  • ab5c30c chore: update versions and lockfile [version bump]
  • 556d235 fix(core): settle displaced flag reloads against a request that carried their...
  • 6ccc78e chore: update versions and lockfile [version bump]
  • 00d22ea fix(node): return undefined instead of null variant in getFeatureFlagResult (...
  • c81aeb8 chore: update versions and lockfile [version bump]
  • c8df61c fix(replay): keep backdated idle lifecycle markers out of rotation-born sessi...
  • Additional commits viewable in compare view

Updates react-hook-form from 7.85.0 to 7.86.0

Release notes

Sourced from react-hook-form's releases.

Version 7.86.0

✨ Features

🐞 Fixes

  • Fix useWatch returning stale values when the watched name changes to null. (#13668)
  • Fix unregister keepDirty behavior. (#13669)
  • Fix setValues for fields registered under object or array values. (#13667)
  • Fix Controller notifications for field array item roots. (#13665)
  • Fix validation state checks. (#13661)
  • Fix setCustomValidity with criteriaMode: 'all'. (#13655)
  • Fix File, Blob, and FileList handling in flatten. (#13652)
  • Fix stale errors and touched state after updating a field array item. (#13650)
  • Fix stale field names leaking into persisted formState. (#13649)

🚀 Performance

  • Improve createFormControl performance. (#13648)
  • Improve cloneObject performance.
  • Avoid unnecessary value cloning in unregister. (#13662)
  • Improve performance in onChange-heavy workloads.

🧹 Chores & Refactoring

  • Remove unnecessary any usage. (#13660)
  • Improve TypeScript handling around checkbox values. (#13659)
  • Improve UUID generation. (#13658)
  • Clean up repo...

    Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group
6d65d69 
Bumps the minor-and-patch group in /compliance-firewall-agent with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [@remotion/player](https://github.com/remotion-dev/remotion) | `4.0.512` | `4.0.515` |
| [@remotion/three](https://github.com/remotion-dev/remotion) | `4.0.512` | `4.0.515` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.29` | `1.7.1` |
| [framer-motion](https://github.com/motiondivision/motion) | `13.1.0` | `13.1.1` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.33.0` |
| [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.2` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.417.1` | `1.418.10` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.85.0` | `7.86.0` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.512` | `4.0.515` |
| [resend](https://github.com/resend/resend-node) | `6.20.0` | `6.22.0` |
| [viem](https://github.com/wevm/viem) | `2.55.16` | `2.55.19` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.21.0` | `8.23.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.10` | `4.1.11` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.1` | `16.3.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |


Updates `@remotion/player` from 4.0.512 to 4.0.515
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.512...v4.0.515)

Updates `@remotion/three` from 4.0.512 to 4.0.515
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.512...v4.0.515)

Updates `better-auth` from 1.6.29 to 1.7.1
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.1/packages/better-auth)

Updates `framer-motion` from 13.1.0 to 13.1.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v13.1.0...v13.1.1)

Updates `lucide-react` from 1.31.0 to 1.33.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react)

Updates `next` from 16.3.1 to 16.3.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.1...v16.3.2)

Updates `posthog-js` from 1.417.1 to 1.418.10
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.417.1...posthog-js@1.418.10)

Updates `react-hook-form` from 7.85.0 to 7.86.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.85.0...v7.86.0)

Updates `remotion` from 4.0.512 to 4.0.515
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.512...v4.0.515)

Updates `resend` from 6.20.0 to 6.22.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.20.0...v6.22.0)

Updates `viem` from 2.55.16 to 2.55.19
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.16...viem@2.55.19)

Updates `@types/pg` from 8.21.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/ui)

Updates `eslint-config-next` from 16.3.1 to 16.3.2
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.2/packages/eslint-config-next)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@remotion/player"
  dependency-version: 4.0.515
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/three"
  dependency-version: 4.0.515
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: better-auth
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: framer-motion
  dependency-version: 13.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: posthog-js
  dependency-version: 1.418.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-hook-form
  dependency-version: 7.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: remotion
  dependency-version: 4.0.515
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: resend
  dependency-version: 6.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: viem
  dependency-version: 2.55.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026
@vercel

vercel Bot commented Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
compliance-firewall-agent Error Error Aug 25, 2026 7:09pm

@thecelestialmismatch
thecelestialmismatch merged commit bfcbe54 into main Aug 31, 2026
7 of 10 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/compliance-firewall-agent/minor-and-patch-27c5ec5bbf branch August 31, 2026 06:01
thecelestialmismatch pushed a commit that referenced this pull request Aug 31, 2026
@claude
fix(auth): narrow twoFactor.enable union to unbreak main
17cb6ce 
The better-auth bump in #319 changed `authClient.twoFactor.enable` to return
a union — `{ method: "otp" }` or `{ method: "totp"; totpURI; backupCodes }` —
so the unconditional `data?.backupCodes` no longer typechecks:

  TwoFactorSettings.tsx(110,29): error TS2339: Property 'backupCodes' does
  not exist on type '{ method: "otp"; }'.

This is red on main, not on any one pull request: CI run 593 (#319's own
merge) and run 594 both fail on it, and every open PR inherits it. Narrow on
the discriminant before reading the codes. Behavior is unchanged for the otp
flow, which never carried backup codes.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MY76prYspKYEqrmoJiyXde
@thecelestialmismatch thecelestialmismatch mentioned this pull request Aug 31, 2026
Merged
29 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thecelestialmismatch