Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps/sim/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -110,7 +110,7 @@
"@tanstack/react-virtual": "3.13.24",
"@trigger.dev/sdk": "4.4.3",
"ajv": "8.18.0",
"better-auth": "1.3.12",
"better-auth": "1.6.2",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Companion packages have incompatible peer dependency on old version

High Severity

better-auth is bumped from 1.3.12 to 1.6.2, but the companion packages @better-auth/sso and @better-auth/stripe remain at 1.3.12. The lockfile shows both have an exact peer dependency on "better-auth": "1.3.12". These ecosystem packages are released in lockstep and share internal APIs, so this version mismatch is likely to cause runtime failures in SSO and Stripe authentication/billing flows.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit b197db0. Configure here.

"better-auth-harmony": "1.3.1",
"binary-extensions": "3.1.0",
"browser-image-compression": "^2.0.2",
Expand Down
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@
"husky": "9.1.7",
"json-schema-to-typescript": "15.0.4",
"lint-staged": "16.0.0",
"turbo": "2.9.12",
"turbo": "2.9.14",
"yaml": "^2.8.1"
},
"lint-staged": {
Expand Down
2 changes: 1 addition & 1 deletion packages/auth/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
},
"dependencies": {
"@sim/db": "workspace:*",
"better-auth": "1.3.12"
"better-auth": "1.6.2"
},
"devDependencies": {
"@sim/tsconfig": "workspace:*",
Expand Down
Loading