chore(deps): update dependency @better-auth/api-key to v1.5.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@better-auth/api-key (source)	1.5.1 → 1.5.6

---

Release Notes

better-auth/better-auth (@​better-auth/api-key)

v1.5.6

Compare Source

   🚀 Features

• Agent auth plugin  -  by @​Bekacru in #​8696 (a0b53)
• core: Add experimental opentelemetry instrumentation  -  by @​jonathansamines and @​bytaesu in #​8027 (1ed42)
• email-otp: Add resendStrategy option to reuse existing OTP  -  by @​bytaesu in #​8560 (98c8e)
• magic-link: Add request metadata to sendMagicLink  -  by @​mrgrauel in #​8571 (cb240)
• mongo-adapter: Store UUIDs as native BSON UUID  -  by @​bytaesu in #​8681 (d1bff)
• oauth-provider: Public client prelogin endpoint  -  by @​dvanmali in #​8214 (a0eb1)
• organization: Explicit organizationId in team endpoints  -  by @​xiaoyu2er and @​himself65 in #​5062 (8f470)
• social-provider: Add wechat social provider  -  by @​Eric-Song-Nop, Claude and @​himself65 in #​5189 (c4402)
• stripe: Allow customizable prorationBehavior per plan  -  by @​bytaesu in #​8525 (98cea)
• test-utils: Export adapter test suites from @better-auth/test-utils/adapter  -  by @​bytaesu in #​8564 (6be0f)
• two-factor: Add twoFactorPage in config  -  by @​wuzgood98 in #​5329 (4f41b)

   🐞 Bug Fixes

• Handle skipOriginCheck array  -  by @​jslno in #​8582 (331c4)
• Prevent revoked sessions from being restored via database fallback  -  by @​bytaesu in #​8708 (d4efa)
• api:
  • Return Response for HTTP request contexts  -  by @​gustavovalverde in #​7521 (9e3e8)
• client:
  • Handle throw:true in session refresh  -  by @​bytaesu in #​8610 (275ca)
• core:
  • Prioritize generateId "uuid" over adapter customIdGenerator  -  by @​bytaesu in #​8679 (fc0bc)
• docs:
  • Improve AI chat security and cleanup  -  by @​himself65 in #​8597 (5c0c8)
  • Add missing Encore icon to sidebar icons  -  by @​himself65 in #​8663 (cd5b8)
• electron:
  • Handle safeStorage encryption failures gracefully  -  by @​jslno in #​8530 (04766)
• oauth-provider:
  • Support prompt=none  -  by @​dvanmali in #​8554 (812fd)
  • Improve allowed paths for oauth_query for client plugin  -  by @​dvanmali in #​8320 (ccded)
  • Fix dist declaration type errors  -  by @​gustavovalverde in #​8701 (ec79f)
• organization:
  • Filter null organizations in listUserInvitations  -  by @​raihanbrillmark and Raihan Sharif in #​8694 (a62cb)
• sso:
  • Use namespace import for samlify to fix ESM compatibility  -  by @​himself65 in #​8697 (71f70)
• stripe:
  • Replace {CHECKOUT_SESSION_ID} placeholder in success callbackURL  -  by @​bytaesu in #​8568 (32704)
  • Improve organization customer search by adding customerType check  -  by @​bytaesu in #​8609 (74ec7)

    View changes on GitHub

v1.5.5

Compare Source

   🚀 Features

• oauth-provider: Pairwise subject identifiers (OIDC Core §8)  -  by @​gustavovalverde and @​himself65 in #​8292 (6c09f)

   🐞 Bug Fixes

• Pass user field through idToken sign-in body for Apple name support  -  by @​bytaesu and Copilot in #​8417 (d364e)
• Add missing SubpageItem properties for docs-sidebar compatibility  -  by @​bytaesu (6bcd7)
• Add icon prop to SubpageLink component  -  by @​bytaesu (95538)
• Correct sign-in link to dash.better-auth.com  -  by @​bytaesu (058bb)
• Restore features.tsx and align import with canary  -  by @​bytaesu (e5ebb)
• Add suppressHydrationWarning to video elements  -  by @​bytaesu (8e0e5)
• Preserve custom session fields on focus refresh  -  by @​jslno in #​8354 (2bd99)
• Throw on duplicate email when autoSignIn: false without requireEmailVerification  -  by @​himself65 in #​8521 (e3e66)
• Add origin check middleware to password reset request  -  by @​jslno in #​8392 (497b1)
• adapters: Restore deprecated createAdapter and type exports for backcompat  -  by @​himself65 in #​8461 (eb848)
• blog: Fix RSS feed link path, image path and blog date  -  by @​0-Sandy in #​8483 (67c6d)
• cli: Resolve path aliases from extended tsconfig files  -  by @​himself65 in #​8520 (11ef0)
• client: Preserve stale session data on network or server errors  -  by @​bytaesu in #​8437 (9a229)
• db: Use CREATE INDEX for postgres migration  -  by @​himself65 in #​8538 (b9e54)
• oauth-provider: Avoid fetch redirect CORS after login  -  by @​GautamBytes in #​8519 (c0366)
• oidc-provider: Validate redirect_uri for prompt=none  -  by @​jslno in #​8398 (ff352)
• organization: Handle multi-role users in invite and member removal checks  -  by @​himself65 and Copilot Autofix powered by AI in #​8442 (23f18)
• prisma-adapter: Fall back to updateMany for non-unique updates  -  by @​himself65 in #​8524 (3f16e)
• sso: Handle bare domains in domain verification  -  by @​himself65 in #​8369 (fb7a0)
• telemetry: Use conditional exports to replace dynamic import hacks  -  by @​himself65 in #​8458 (3ecd2)
• two-factor: Wire twoFactorTable option to schema modelName  -  by @​himself65 in #​8443 (f4604)

    View changes on GitHub

v1.5.4

Compare Source

   🐞 Bug Fixes

• Move adapter packages to dependencies to fix missing module errors  -  by @​himself65 in #​8401 (56857)
• expo: Handle origin override across mutable and immutable requests  -  by @​NathanColosimo, Taesu and @​bytaesu in #​8405 (b7a31)

    View changes on GitHub

v1.5.3

Compare Source

   🐞 Bug Fixes

• account: Use accountId instead of id in accountInfo endpoint  -  by @​NathanColosimo and @​himself65 in #​8346 (efcc2)
• sso: Use internalAdapter for verification operations  -  by @​himself65 in #​8353 (e3bc6)

    View changes on GitHub

v1.5.2

Compare Source

   🐞 Bug Fixes

• Access control indexing type  -  by @​YevheniiKotyrlo and @​himself65 in #​8155 (5d7dd)
• Prevent double encoded cookie  -  by @​Oluwatobi-Mustapha and @​himself65 in #​8133 (55dd0)
• cookies:
  • Use lookahead heuristic for splitting Set-Cookie headers  -  by @​bytaesu in #​8301 (8959c)
• oauth-provider:
  • Allow localhost subdomains in isLocalhost function  -  by @​sicarius97 and @​himself65 in #​8286 (4b974)
  • CustomIdTokenClaims should override standard claims  -  by @​gustavovalverde in #​7865 (7425f)
• prisma-adapter:
  • Use deleteMany when deleting by non-unique field  -  by @​himself65 in #​8314 (e3ff2)
• sso:
  • Prefer UserInfo endpoint over ID token and map sub claim correctly  -  by @​himself65 and Copilot in #​8276 (f88bc)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[safedep]

SafeDep Report Summary

⚠ 1 packages are identified as suspicious, human review is recommended.

Package Details

Package	Malware	Vulnerability	Risky License	Report
prettier @ 3.8.3 pnpm-lock.yaml				🔗
@better-auth/api-key @ 1.5.6 pnpm-lock.yaml				🔗
citty @ 0.2.2 pnpm-lock.yaml				🔗
defu @ 6.1.7 pnpm-lock.yaml				🔗
libphonenumber-js @ 1.12.41 pnpm-lock.yaml				🔗
tinyexec @ 1.1.1 pnpm-lock.yaml				🔗
validator @ 13.15.35 pnpm-lock.yaml				🔗

View complete scan results →

_{This report is generated by SafeDep Github App}