Arunavo Ray 2f6af22e25 fix(security): upgrade better-auth family to 1.7.0-rc.4 ...

Fixes the @better-auth/oauth-provider advisory (unbound resource
indicators could yield access tokens for unauthorized audiences,
Dependabot #55). No patched 1.6.x exists; 1.7.0-rc.4 is the first
patched line.

The 1.7 oauth-provider expects a wider schema: new nullable columns on
oauth_clients / oauth_access_tokens / oauth_refresh_tokens /
oauth_consents (back-channel logout, DPoP, resource indicators, refresh
token rotation) and three new tables (oauth_resources,
oauth_client_resources, oauth_client_assertions). Migration 0014 is
purely additive; validate-migrations gains the matching upgrade fixture.

2026-08-06 07:00:03 +05:30

..

components

Move canonical docs to the website (#354)

2026-08-03 11:56:51 +05:30

data

🎉 Gitea Mirror: Added

2025-05-18 09:31:23 +05:30

hooks

feat(ui): add 12h/24h time format option with locale-aware default (#342) (#346)

2026-07-16 20:57:48 +05:30

layouts

Move canonical docs to the website (#354)

2026-08-03 11:56:51 +05:30

lib

fix(security): upgrade better-auth family to 1.7.0-rc.4

2026-08-06 07:00:03 +05:30

pages

Move canonical docs to the website (#354)

2026-08-03 11:56:51 +05:30

styles

Added basic responsive layout

2025-07-07 17:34:54 +05:30

tests

fix: honor GH_API_URL across all Octokit call sites (#269) (#273)

2026-04-20 13:02:34 +05:30

types

feat: add generic webhook notification provider (#352)

2026-08-03 08:06:26 +05:30

middleware.ts

fix: bridge header auth into a real Better Auth session (#303)

2026-05-27 14:53:16 +05:30