chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates #1359
Conversation
dependabot
bot
added
dependencies
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
There was a problem hiding this comment.
Greptile Summary
This PR is an automated Dependabot update that bumps two dependencies across the monorepo: Next.js from 15.4.1 to 15.4.7 in the docs application (apps/docs/package.json) and better-auth from 1.2.9 to 1.2.10 in the sim application (apps/sim/package.json).
The Next.js update includes multiple bug fixes across versions 15.4.2 through 15.4.7, addressing critical issues such as router handling when setting location response headers, API JSON stripping problems, i18n fallback collisions, font loading with deployment prefixes, and image optimization improvements. These are all backward-compatible bug fixes with no breaking changes.
The better-auth update brings new features and fixes, including support for a Hugging Face authentication provider, account linking with ID tokens, exposed headers override in the JWT plugin, fixes for phone number verification triggers, GitHub refresh token endpoints, and user deletion respecting freshAge configuration.
Both updates fit into the codebase's maintenance strategy of keeping dependencies current with security patches and bug fixes. The docs application uses Next.js for its documentation site built with FumaDocs, while the sim application uses better-auth for authentication services. These updates ensure both applications benefit from the latest stability improvements and security patches.
Confidence score: 2/5
- This PR has a critical issue that could cause dependency conflicts in the monorepo
- Score lowered due to version override configuration in sim app that prevents Next.js updates from taking effect
- Pay close attention to
apps/sim/package.jsonoverrides section that pins Next.js to 15.4.1 while docs will use 15.4.7
2 files reviewed, 1 comment
…updates Bumps the npm_and_yarn group with 1 update in the /apps/docs directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /apps/sim directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth). Updates `next` from 15.4.1 to 15.4.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.4.1...v15.4.7) Updates `better-auth` from 1.2.9 to 1.2.10 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/canary/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.2.10/packages/better-auth) --- updated-dependencies: - dependency-name: next dependency-version: 15.4.7 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: better-auth dependency-version: 1.2.10 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/apps/docs/npm_and_yarn-2141a42bc1
branch
from
0961354 to
669bf6b
Compare
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the npm_and_yarn group with 1 update in the /apps/docs directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/sim directory: better-auth.
Updates
nextfrom 15.4.1 to 15.4.7Release notes
Sourced from next's releases.
... (truncated)
Commits
f30d815v15.4.71a026e3fix router handling when setting a location response header (#82588)be4aafdv15.4.691e5b6bBackport "fix: add?dplto fonts in/_next/static/media(#82384)" (#82421)f1629d9Backport "[Pages] fix:_errorpage'sreq.urlcan be overwritten t… (#82377)b9aab5dv15.4.5a8c93c4Disable test new tests jobsed2a6c7[backport]: fix(next/image): improve and simplify detect-content-type (#82118...f00fcc9[backport]: fix(next/image): fix image-optimizer.ts headers (#82114) (#82175)55a7568Backport: Turbopack: update mimalloc (#81993) (#82166)Updates
better-authfrom 1.2.9 to 1.2.10Commits
08d9295chore: release v1.2.106304efafeat: add Hugging Face provider (#3089)38e422efeat: link account with idToken (#1830)de6b53cfix: expose headers override in jwt plugin (#3019)88573aafix: onLinkAccount trigger on phone number verification (#3007)7eded3dchore: fix typo in authorize comment (#3106)1b0aef5fix: use correct refresh token endpoint for github (#3095)9714131feat: Allow passingidin DB hookcreate(#3048)f12e345chore(org): add comments explaining what shimContext does (#3098)7c72824fix: delete user should respect freshAge config (#3075)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.