Bump @better-auth/oauth-provider from 1.6.9 to 1.6.23

[dependabot]

Bumps @better-auth/oauth-provider from 1.6.9 to 1.6.23.

Release notes

Sourced from @​better-auth/oauth-provider's releases.

v1.6.23

better-auth

Features

• Added Yandex as a social OAuth provider (#9138)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Fixed affected row counting for D1 and postgres-js adapters (#10257)

For detailed changes, see CHANGELOG

@better-auth/stripe

Bug Fixes

• Fixed organization subscription actions (cancel, upgrade, restore, and the billing portal) that could act on the wrong organization.

For detailed changes, see CHANGELOG

auth

Bug Fixes

• Fixed string default values not being properly escaped in the generated Drizzle schema (#10259)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​vladflotsky

Full changelog: v1.6.22...v1.6.23

v1.6.22

better-auth

Bug Fixes

• Fixed unproven credentials not being revoked during magic link and email OTP sign-in (#10239)
• Fixed server-side OAuth requests to refuse redirect responses instead of following them (#10241)

For detailed changes, see CHANGELOG

... (truncated)

Changelog

Sourced from @​better-auth/oauth-provider's changelog.

1.6.23

Patch Changes

• Updated dependencies [8581f97]:
  • better-auth@1.6.23
  • @​better-auth/core@​1.6.23

1.6.22

Patch Changes

• Updated dependencies [c06a56d, 8bd43d9, 3a035e9]:
  • better-auth@1.6.22
  • @​better-auth/core@​1.6.22

1.6.21

Patch Changes

• Updated dependencies [e0762a1, 882cf9e, f52e1ab, 90d509e, b5bec19, 816d7f9, 239bcc8, 1bc370a, 570267c, 461ca6f, 88409b0, 5953157, b046f9e, ae647b4]:
  • better-auth@1.6.21
  • @​better-auth/core@​1.6.21

1.6.20

Patch Changes

• Updated dependencies [21448b1, 8ecf238, 930f534]:
  • better-auth@1.6.20
  • @​better-auth/core@​1.6.20

1.6.19

Patch Changes

• #10086 5bd5e1c Thanks @​gustavovalverde! - Refresh-token rotation and token revocation, two-factor backup-code regeneration, device-code claiming, and organization invitation acceptance now work on Prisma. Concurrent or repeat requests in these flows could previously return an error on Prisma instead of the expected result.

  On MongoDB servers older than 5.0, these flows and other guarded value updates (rate-limit window resets, API-key refills) no longer fail with an empty-update error.

  @better-auth/core: incrementOne now reports a clear error when called with no increment and no set.

• Updated dependencies [de4aa52, b4b0266, 5bd5e1c, 581f827, 8407885, c1a8a64, 635f190, a787e0b, c2f718f, 7d18175]:

  • better-auth@1.6.19
  • @​better-auth/core@​1.6.19

1.6.18

Patch Changes

... (truncated)

Commits

• 9dfceee chore: release v1.6.23 (#10260)
• a90d061 chore: release v1.6.22 (#10245)
• 414169d chore: release v1.6.21 (#10184)
• c342f42 chore: release v1.6.20 (#10108)
• ac4d81d chore: release v1.6.19 (#10034)
• 5bd5e1c fix: make guarded state transitions portable on Prisma (#10086)
• 04debbf chore: release v1.6.18 (#10026)
• 729fd84 fix(oauth-provider): canonicalize signed OAuth query params (#9941)
• 0d8b238 chore: release v1.6.17 (#9984)
• 7343284 fix: jwks caching, oauth id mapping, team invitations, account cookie, and sc...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5e51d76

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR