Skip to content

chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32 - #79

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-auth-5.0.0-beta.32
Aug 29, 2026
Merged

chore(deps): bump next-auth from 5.0.0-beta.30 to 5.0.0-beta.32#79
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-auth-5.0.0-beta.32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps next-auth from 5.0.0-beta.30 to 5.0.0-beta.32.

Release notes

Sourced from next-auth's releases.

next-auth@5.0.0-beta.32

Beta release for the v5 line.

Picks up the @​auth/core@​0.41.3 security fixes (malformed Bearer token handling in getToken, provider-bound OAuth check cookies, and NFKC email normalization).

Fixes auth checks failing open on provider configuration errors: a non-OK session response now yields no session instead of an error object, so checks like !!auth fail closed.

next-auth@5.0.0-beta.31

Bugfixes (via @​auth/core@​0.41.2)

  • providers: add issuer to GitHub provider for RFC 9207 compliance (#13410).
    • Supports both github.com and GitHub Enterprise Server (dynamic ${baseUrl}/login/oauth).
  • signin/send-token: stricter email address validation (rejects quoted, multi-@, and empty-domain inputs).

Dependency bump

  • @auth/core: 0.41.00.41.2. Resolves a peer-dep inconsistency in 5.0.0-beta.30 where next-auth declared nodemailer: ^7.0.7 while pinning @auth/core@0.41.0 (which wanted ^6.8.0). Both now align at ^7.0.7.

No changes to next-auth's own source.

Commits
  • e293b37 chore(release): next-auth@5.0.0-beta.32 [skip ci]
  • b690d91 chore: add npm bugs metadata and fix repository field format (#13452)
  • 5af7357 chore(release): bump package version(s) [skip ci]
  • 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
  • 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
  • 1116034 Chore/nodemailer 8 peer deps (#13434)
  • 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
  • b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
  • a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
  • d008b9b Merge commit from fork
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for next-auth since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch from 39f10a2 to b025407 Compare August 29, 2026 06:59
Bumps [next-auth](https://github.com/nextauthjs/next-auth) from 5.0.0-beta.30 to 5.0.0-beta.32.
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@5.0.0-beta.30...next-auth@5.0.0-beta.32)

---
updated-dependencies:
- dependency-name: next-auth
  dependency-version: 5.0.0-beta.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch from b025407 to 4035165 Compare August 29, 2026 07:41
@github-actions
github-actions Bot merged commit 874cfd6 into main Aug 29, 2026
1 check passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/next-auth-5.0.0-beta.32 branch August 29, 2026 07:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants