Skip to content

chore(deps): bump the all-npm group across 1 directory with 8 updates - #286

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/all-npm-5bc60472ee
Open

chore(deps): bump the all-npm group across 1 directory with 8 updates#286
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/all-npm-5bc60472ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-npm group with 8 updates in the / directory:

Package From To
@better-auth/core 1.6.23 1.6.26
@better-auth/oauth-provider 1.6.23 1.6.26
@marsidev/react-turnstile 1.5.3 1.5.5
@modelcontextprotocol/sdk 1.29.0 1.30.0
better-auth 1.6.23 1.6.26
motion 12.43.0 13.0.0
@biomejs/biome 2.5.4 2.5.7
@cloudflare/workers-types 4.20260702.1 5.20260807.2

Updates @better-auth/core from 1.6.23 to 1.6.26

Release notes

Sourced from @​better-auth/core's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

v1.6.25

better-auth

Bug Fixes

  • Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)
  • Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)

... (truncated)

Changelog

Sourced from @​better-auth/core's changelog.

1.6.26

Patch Changes

  • #10576 a30e274 Thanks @​bytaesu! - Add a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain.

1.6.25

Patch Changes

  • #10294 0ffd1fb Thanks @​jsj! - Send Apple OAuth PKCE code challenges during authorization so callback token exchanges include a matching code verifier.

1.6.24

Patch Changes

  • #9862 54fab08 Thanks @​OrangeManLi! - Fix a request-state AsyncLocalStorage initialization race that could intermittently throw No request state found. Please make sure you are calling this function within a runWithRequestState callback. ensureAsyncStorage() now memoizes its in-flight initialization so concurrent first-callers share a single AsyncLocalStorage instance instead of each constructing one and the last write winning. This surfaced on serverless cold start (e.g. Cloudflare Workers) where the first requests arrive before the lazy node:async_hooks import settles, causing runWithRequestState().run() and a nested getCurrentRequestState() to land on different instances.

  • #10376 c4d1dda Thanks @​ping-maxwell! - Pass the request endpoint context as a third argument to verifyIdToken, so custom ID token verifiers can read request headers (for example Apple's user-agent requirement).

Commits

Updates @better-auth/oauth-provider from 1.6.23 to 1.6.26

Release notes

Sourced from @​better-auth/oauth-provider's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

v1.6.25

better-auth

Bug Fixes

  • Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)
  • Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)

... (truncated)

Changelog

Sourced from @​better-auth/oauth-provider's changelog.

1.6.26

Patch Changes

1.6.25

Patch Changes

1.6.24

Patch Changes

Commits

Updates @marsidev/react-turnstile from 1.5.3 to 1.5.5

Release notes

Sourced from @​marsidev/react-turnstile's releases.

@​marsidev/react-turnstile@​1.5.5

   🐞 Bug Fixes

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.4

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 4ce2451 chore: version packages (#247)
  • 50ce83e refactor: derive execute-mode container style from a single rule (#246)
  • 6d25968 fix: show widget after calling execute() in execute mode (#245)
  • ee55051 chore: bump postcss from 8.5.22 to 8.5.23 (#242)
  • 1feea9e chore: bump typescript from 6.0.3 to 7.0.2 (#222)
  • c97de7c chore: bump @​tanstack/intent from 0.3.5 to 0.3.6 (#224)
  • 20bc41f chore: bump oxlint-tsgolint from 0.24.0 to 0.25.0 (#223)
  • 65f2db4 chore: bump tsdown from 0.22.2 to 0.22.14 (#221)
  • 54cdd01 chore: bump oxfmt from 0.57.0 to 0.61.0 (#220)
  • c6758fd Update Star History section (#240)
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates better-auth from 1.6.23 to 1.6.26

Release notes

Sourced from better-auth's releases.

v1.6.26

better-auth

Bug Fixes

  • Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)
  • Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)
  • Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)
  • Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)
  • Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)
  • Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)
  • Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)
  • Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)
  • Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)
  • Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)
  • Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

  • Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

  • Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​bytaesu, @​Emmaccen, @​gustavovalverde, @​jashkarangiya, @​jeroenvandermerwe, @​jlucaso1, @​krish-vachhani, @​mrosberghaus, @​XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

v1.6.25

better-auth

Bug Fixes

  • Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)
  • Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.6.26

Patch Changes

  • #10619 9ede805 Thanks @​jeroenvandermerwe! - Ensure database rate-limit cleanup completes when no background task handler is configured.

  • #10608 5a811f1 Thanks @​bytaesu! - Pass the email verification type to custom OTP generators after email sign-up.

  • #10605 d8327f1 Thanks @​XXMOHAMED012! - The email OTP verification check no longer reveals whether an email is registered before the OTP itself is verified.

  • #10513 e2c73fb Thanks @​mrosberghaus! - Fix jwtClient() collapsing createAuthClient type inference when combined with other client plugins such as inferAdditionalFields. Additional user fields (for example on updateUser) are preserved again.

  • #10635 af50c45 Thanks @​krish-vachhani! - Fix oneTapClient() collapsing createAuthClient type inference when combined with other client plugins. The oneTap action is available on the client again.

  • #10633 701cd43 Thanks @​gustavovalverde! - Minting or reading a JWKS signing key inside an active database transaction now uses the transaction-scoped adapter instead of the root connection. On a single-connection SQLite database with native transactions enabled, this no longer deadlocks, and on Postgres and MySQL the key commits with the surrounding transaction instead of independently of it.

  • #10599 e7b0eba Thanks @​bytaesu! - Preserve Apple user data from form_post callbacks when using oAuthProxy.

  • #10552 2b4a14f Thanks @​bytaesu! - Allow users to retry email OTP password resets after entering an invalid password.

  • #10467 7552a3b Thanks @​jlucaso1! - Improve nextCookies performance in instrumented Next.js applications.

  • #10580 ea38fca Thanks @​Emmaccen! - Skip invalid secondary-storage session entries without discarding other valid sessions.

  • #10520 a03e4c1 Thanks @​bytaesu! - Ensure deleting a user also removes their sessions from secondary storage.

  • Updated dependencies [a30e274]:

    • @​better-auth/core@​1.6.26
    • @​better-auth/drizzle-adapter@​1.6.26
    • @​better-auth/kysely-adapter@​1.6.26
    • @​better-auth/memory-adapter@​1.6.26
    • @​better-auth/mongo-adapter@​1.6.26
    • @​better-auth/prisma-adapter@​1.6.26
    • @​better-auth/telemetry@​1.6.26

1.6.25

Patch Changes

  • #10479 5124c34 Thanks @​krish-vachhani! - Prevent Google One Tap from creating new users when sign-up is disabled for the Google provider.

  • #10444 7439359 Thanks @​birkskyum! - Expose the real $fetch instance and $store atoms from the Solid client instead of resolving them as dynamic API routes.

  • Updated dependencies [0ffd1fb]:

    • @​better-auth/core@​1.6.25
    • @​better-auth/drizzle-adapter@​1.6.25
    • @​better-auth/kysely-adapter@​1.6.25
    • @​better-auth/memory-adapter@​1.6.25
    • @​better-auth/mongo-adapter@​1.6.25
    • @​better-auth/prisma-adapter@​1.6.25

... (truncated)

Commits
  • a16b30e chore: release v1.6.26 (#10521)
  • 9ede805 fix(rate-limit): await database cleanup by default (#10619)
  • af50c45 fix(one-tap): preserve client plugin inference with oneTapClient (#10635)
  • 222facf fix(jwt): resolve the transaction-scoped adapter when signing (#10623)
  • d8327f1 fix(email-otp): verify OTP before revealing whether the email exists (#10605)
  • e7b0eba fix(oauth-proxy): preserve Apple user data (#10599)
  • 5a811f1 fix(email-otp): pass verification type on sign-up (#10608)
  • e18606b chore(deps): upgrade OpenTelemetry to v2 (#10601)
  • ea38fca fix(db): skip null-parsed session token in findSessions instead of returning ...
  • 7552a3b perf(next-js): reuse the next/headers import promise in production (#10467)
  • Additional commits viewable in compare view

Updates motion from 12.43.0 to 13.0.0

Changelog

Sourced from motion's changelog.

[13.0.0] 2026-08-05

Changed

  • Removed optional @emotion/is-prop-valid dependency in favour of explicit <MotionConfig isValidProp={isPropValid}>.

Fixed

  • Hardware-accelerated SVG elements correctly apply final style on animation complete.
  • AnimatePresence: Ensure nodes are marked as safe to remove when rendering propagate with no motion children.
Commits
  • e4029ce v13.0.0
  • c862954 Updating changelog
  • b2bc637 Merge pull request #3781 from motiondivision/fix/3779-svg-duration-zero-indep...
  • 96d35b6 Merge pull request #3783 from motiondivision/fix/2652-remove-external-is-vali...
  • 165541a Fix #3779: read SVG CSS properties from styles
  • e0be524 Fix #2652: scope custom prop validation
  • 34058c2 Merge pull request #3784 from motiondivision/fix/3777-empty-propagate
  • 0851575 Fix #3777: complete propagated exits without children
  • 6acedcc Fix #2652: remove automatic prop validator loading
  • 233593b Fix #3779: consolidate SVG style properties
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.4 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.7


Patch Changes


    

  • 

    #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.
    

    • 

  • 

    #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.
    

    • 

  • 

    #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.
    

    • 

  • 

    #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
    

    • 

  • 

    #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in
stdin mode didn't work correctly when handling files in projects with nested
configurations. For example, with the following structure,
--stdin-file-path=subdirectory/... would not use the nested configuration in
subdirectory/biome.json:
    

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
    

    Now, the nested configuration is correctly picked up and applied.
    

    In addition, Biome now shows a warning if --stdin-file-path is provided but
that path is ignored and therefore not formatted or fixed.
    

    • 

  • 

    #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.
    

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
    

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
    

    The following code is also now invalid, because map(() => 42) returns 42:
    

    type Mapper<T> = () => T;
declare function map<T>(mapper: Mapper<T>): T;
    

    • 






... (truncated)





Commits


    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the all-npm group across 1 directory with 8 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          b00e7b1
        
      

    

  

    

      
Bumps the all-npm group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@better-auth/core](https://github.com/better-auth/better-auth/tree/HEAD/packages/core) | `1.6.23` | `1.6.26` |
| [@better-auth/oauth-provider](https://github.com/better-auth/better-auth/tree/HEAD/packages/oauth-provider) | `1.6.23` | `1.6.26` |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.5.3` | `1.5.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.23` | `1.6.26` |
| [motion](https://github.com/motiondivision/motion) | `12.43.0` | `13.0.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.4` | `2.5.7` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20260702.1` | `5.20260807.2` |



Updates `@better-auth/core` from 1.6.23 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/core)

Updates `@better-auth/oauth-provider` from 1.6.23 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/oauth-provider/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/oauth-provider)

Updates `@marsidev/react-turnstile` from 1.5.3 to 1.5.5
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](https://github.com/marsidev/react-turnstile/compare/@marsidev/react-turnstile@1.5.3...@marsidev/react-turnstile@1.5.5)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `better-auth` from 1.6.23 to 1.6.26
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/better-auth)

Updates `motion` from 12.43.0 to 13.0.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.43.0...v13.0.0)

Updates `@biomejs/biome` from 2.5.4 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome)

Updates `@cloudflare/workers-types` from 4.20260702.1 to 5.20260807.2
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: "@better-auth/core"
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@better-auth/oauth-provider"
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: better-auth
  dependency-version: 1.6.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: motion
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260807.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Aug 10, 2026

    

  



  
    

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Aug 10, 2026

    

  








      

  
        









  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    


      

          


  
      @FrkAk
  
    FrkAk


          Awaiting requested review from FrkAk


                    FrkAk is a code owner
      

      

          


  
      @ulascanzorer
  
    ulascanzorer


          Awaiting requested review from ulascanzorer


                    ulascanzorer is a code owner
      

      

          


  
      @ZeyNor
  
    ZeyNor


          Awaiting requested review from ZeyNor


                    ZeyNor is a code owner
      



        

      At least 1 approving review is required to merge this pull request.
  









    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants