Bump the minor-and-patch group across 1 directory with 30 updates#224

Sourced from @​effect/tsgo's releases.

@​effect/tsgo@​0.67.4

Patch Changes

• dd69d48: Update the TypeScript next tag to typescript@next, which ships typescript-go commit c46bcd6089ea2e5e84e7fcc60845ac884a5b0ac1, update the TypeScript beta tag to typescript@beta, and update the TypeScript latest tag to typescript@latest.

@​effect/tsgo-linux-arm@​0.67.4

No release notes provided.

@​effect/tsgo@​0.67.3

Patch Changes

• 1477f2e: Fix preferEffectArray, preferEffectRecord, preferEffectString, promiseInEffectSuccess and anyUnknownInErrorContext skipping everything inside a class extends expression. Their walks stop at type nodes, and the extends clause of a class is an ExpressionWithTypeArguments, which counts as one, so the make of a service class was never checked. The walks now visit the expression of a class extends clause; its type arguments, implements clauses and interface extends clauses are still skipped.

  import { Context, Effect } from "effect"
  const xs: ReadonlyArray<number> = [1, 2, 3]
  export class Doubled extends Context.Service<Doubled, { readonly all: ReadonlyArray<number> }>()("Doubled", {
  make: Effect.gen(function*() {
  // now reported by preferEffectArray
  return { all: xs.map((n) => n * 2) }
  })
  }) {}
  

  effectFnOpportunity had the same blind spot when checking whether a function declaration is used before it is declared: a call inside an earlier class extends expression was ignored, so it offered to convert a hoisted function into a const that the class would then read before initialization. That opportunity is no longer offered.

  export class Early extends Context.Service<Early, { readonly value: number }>()("Early", {
    make: makeEarly(1) // runs when the class is defined
  }) {}
  // no longer suggested as Effect.fn: the const would not be initialized yet
  function makeEarly(n: number) {
  return Effect.gen(function*() {
  return { value: n }
  })
  }
  

@​effect/tsgo-linux-arm@​0.67.3

No release notes provided.

@​effect/tsgo@​0.67.1

Patch Changes

• 71b16e4: CI: cap the Go build cache saved by the TypeScript validation and release jobs at 2 GB. The cache had grown to about 3.5 GB compressed per TypeScript version, and jobs that restore it were running out of disk. The new repoctl go-cache trim command keeps the most recently used files of go env GOCACHE up to the size limit and removes the rest:

... (truncated)

Sourced from @​effect/tsgo's changelog.

0.67.4

Patch Changes

• dd69d48: Update the TypeScript next tag to typescript@next, which ships typescript-go commit c46bcd6089ea2e5e84e7fcc60845ac884a5b0ac1, update the TypeScript beta tag to typescript@beta, and update the TypeScript latest tag to typescript@latest.

0.67.3

Patch Changes

• 1477f2e: Fix preferEffectArray, preferEffectRecord, preferEffectString, promiseInEffectSuccess and anyUnknownInErrorContext skipping everything inside a class extends expression. Their walks stop at type nodes, and the extends clause of a class is an ExpressionWithTypeArguments, which counts as one, so the make of a service class was never checked. The walks now visit the expression of a class extends clause; its type arguments, implements clauses and interface extends clauses are still skipped.

  import { Context, Effect } from "effect"
  const xs: ReadonlyArray<number> = [1, 2, 3]
  export class Doubled extends Context.Service<Doubled, { readonly all: ReadonlyArray<number> }>()("Doubled", {
  make: Effect.gen(function*() {
  // now reported by preferEffectArray
  return { all: xs.map((n) => n * 2) }
  })
  }) {}
  

  effectFnOpportunity had the same blind spot when checking whether a function declaration is used before it is declared: a call inside an earlier class extends expression was ignored, so it offered to convert a hoisted function into a const that the class would then read before initialization. That opportunity is no longer offered.

  export class Early extends Context.Service<Early, { readonly value: number }>()("Early", {
    make: makeEarly(1) // runs when the class is defined
  }) {}
  // no longer suggested as Effect.fn: the const would not be initialized yet
  function makeEarly(n: number) {
  return Effect.gen(function*() {
  return { value: n }
  })
  }
  

0.67.2

Patch Changes

• 87042ed: Fix truncated output from tools run through the CLI proxy (effect-tsgo tsc, tsrs, oxlint, vp) when their stdio is a pipe. The proxy built NodeServices.layer to resolve the tool, and its NodeTerminal read process.stdin and process.stdout, which leaves piped stdio non-blocking; execve handed that to the tool, whose writes then failed once the pipe filled, sometimes with exit code 0. For example, effect-tsgo tsrs --listFilesOnly captured by another process stopped after 64 KiB. The proxy now provides only the FileSystem and Path services it needs.

0.67.1

Patch Changes

... (truncated)

• bf34a20 Version Packages (#1012)
• dd69d48 chore: update upstreams (#1011)
• 11414d1 chore: update upstreams (#1010)
• 35c35db Version Packages (#1009)
• 1c8e970 Version Packages (#1007)
• 87042ed fix(cli): provide only FileSystem and Path to the proxy so piped stdio stays ...
• ed1b917 Version Packages (#1001)
• 3922483 chore: update upstreams (#993)
• 3cbaa7b Version Packages (#1000)
• 45e777b feat(cli): run Oxlint's type-aware rules on tsrs with effect-tsgo --tsrs-lint...
• Additional commits viewable in compare view

Sourced from @​oxlint/plugins's releases.

oxlint v1.92.0

🚀 Features

• 4a52ba2 oxlint: Discover tsrs for type-aware linting (#28751) (camc314)
• b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option (#28816) (Cam McHenry)

🐛 Bug Fixes

• fa66fde oxlint,oxfmt: Resolve Vite+ config root from the config file directory (#28801) (MK (fengmk2))
• 2091564 linter/jsdoc/require-param: Ignore enclosing function JSDoc (#28866) (camc314)
• c6ec50b linter/react/only-export-components: Classify JSX values as non-components (#28761) (camc314)
• 3c051ab linter/vitest/prefer-called-exactly-once-with: Preserve neighboring code in autofix (#28864) (camc314)
• 674b962 linter/eslint/no-misleading-character-class: Use lazy regex for combining marks (#28822) (Sysix)
• 838d339 linter/vitest/prefer-called-exactly-once-with: Avoid panic on non-ASCII text (#28850) (YT)
• 8d24c26 linter/jsx-a11y/aria-role: Allow role={undefined} (#28804) (Abhay Godavarthy)
• a7143bf linter/eslint/no-restricted-imports: Respect allowTypeImports correctly for empty patterns (#28842) (Cam McHenry)
• 3d3a6f4 react-compiler: Ignore callback-local reassignments (#28820) (camc314)
• 0cc6515 linter/unicorn/prefer-type-error: Report throws in unbraced if branches (#28819) (camc314)
• ae43c80 linter/unicorn/prefer-single-call: Remove duplicate fix status (#28763) (Mikhail Baev)
• a8a621a linter/eslint/no-fallthrough: Ignore unreachable exits from infinite loops (#28755) (camc314)
• 7a17a80 linter/eslint/prefer-spread: Report calls on non-member expressions (#28753) (camc314)
• 28442f7 oxlint: Prevent --init from overwriting existing configs (#28754) (camc314)
• 0ae350d linter/unicorn/no-zero-fractions: Preserve exponent case (#28752) (camc314)
• b5b3f3f linter/eslint/no-misleading-character-class: Detect more combining characters (#28733) (Sysix)

⚡ Performance

• 74d50c1 linter: Overlap import graph batches instead of polling on a pool worker (#28323) (Dunqing)

oxlint v1.91.0

🚀 Features

• 004647a track_memory_allocs: Add allocation tracking for linter rules (#28470) (Cam McHenry)
• 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

🐛 Bug Fixes

• a205cd3 linter/eslint/no-control-regex: Detect raw control characters (#28548) (camc314)
• 7c65777 linter/unicorn/prefer-global-this: Align typeof and worker API handling (#28549) (camc314)
• 987d5f1 linter/unicorn/no-invalid-fetch-options: Avoid treating unknown methods as GET (#28547) (camc314)
• e234dc8 linter/unicorn/no-useless-error-capture-stack-trace: Move to suspicious category (#28545) (camc314)
• b3dc411 linter/typescript/no-non-null-asserted-nullish-coalescing: Move to suspicious category (#28546) (camc314)
• cb64638 regular_expression: Reject incomplete Unicode atom escapes (#28448) (Boshen)
• c67167e linter: Only run React Compiler rules on files with top-level components or hooks (Boshen)
• 4c9d5aa linter: Treat Reanimated shared values as ref-like in React Compiler rules (Boshen)
• 61fe2af linter/react: Ignore impure calls in async components in react/purity (Rahul Kashyap)
• ed7df7d ast/estree: Include comments in TS Program span (#28326) (camc314)
• 31cbe37 linter: Make gitlab fingerprints unique per diagnostic (#28307) (camc314)

⚡ Performance

... (truncated)

• 29daf90 release(apps): oxlint v1.92.0 && oxfmt v0.77.0 (#28906)
• f3fcdcc release(apps): oxlint v1.91.0 && oxfmt v0.76.0 (#28718)
• 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
• See full diff in compare view

Sourced from oxlint's releases.

oxlint v1.92.0

🚀 Features

• 4a52ba2 oxlint: Discover tsrs for type-aware linting (#28751) (camc314)
• b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option (#28816) (Cam McHenry)

🐛 Bug Fixes

• fa66fde oxlint,oxfmt: Resolve Vite+ config root from the config file directory (#28801) (MK (fengmk2))
• 2091564 linter/jsdoc/require-param: Ignore enclosing function JSDoc (#28866) (camc314)
• c6ec50b linter/react/only-export-components: Classify JSX values as non-components (#28761) (camc314)
• 3c051ab linter/vitest/prefer-called-exactly-once-with: Preserve neighboring code in autofix (#28864) (camc314)
• 674b962 linter/eslint/no-misleading-character-class: Use lazy regex for combining marks (#28822) (Sysix)
• 838d339 linter/vitest/prefer-called-exactly-once-with: Avoid panic on non-ASCII text (#28850) (YT)
• 8d24c26 linter/jsx-a11y/aria-role: Allow role={undefined} (#28804) (Abhay Godavarthy)
• a7143bf linter/eslint/no-restricted-imports: Respect allowTypeImports correctly for empty patterns (#28842) (Cam McHenry)
• 3d3a6f4 react-compiler: Ignore callback-local reassignments (#28820) (camc314)
• 0cc6515 linter/unicorn/prefer-type-error: Report throws in unbraced if branches (#28819) (camc314)
• ae43c80 linter/unicorn/prefer-single-call: Remove duplicate fix status (#28763) (Mikhail Baev)
• a8a621a linter/eslint/no-fallthrough: Ignore unreachable exits from infinite loops (#28755) (camc314)
• 7a17a80 linter/eslint/prefer-spread: Report calls on non-member expressions (#28753) (camc314)
• 28442f7 oxlint: Prevent --init from overwriting existing configs (#28754) (camc314)
• 0ae350d linter/unicorn/no-zero-fractions: Preserve exponent case (#28752) (camc314)
• b5b3f3f linter/eslint/no-misleading-character-class: Detect more combining characters (#28733) (Sysix)

⚡ Performance

• 74d50c1 linter: Overlap import graph batches instead of polling on a pool worker (#28323) (Dunqing)

oxlint v1.91.0

🚀 Features

• 004647a track_memory_allocs: Add allocation tracking for linter rules (#28470) (Cam McHenry)
• 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

🐛 Bug Fixes

• a205cd3 linter/eslint/no-control-regex: Detect raw control characters (#28548) (camc314)
• 7c65777 linter/unicorn/prefer-global-this: Align typeof and worker API handling (#28549) (camc314)
• 987d5f1 linter/unicorn/no-invalid-fetch-options: Avoid treating unknown methods as GET (#28547) (camc314)
• e234dc8 linter/unicorn/no-useless-error-capture-stack-trace: Move to suspicious category (#28545) (camc314)
• b3dc411 linter/typescript/no-non-null-asserted-nullish-coalescing: Move to suspicious category (#28546) (camc314)
• cb64638 regular_expression: Reject incomplete Unicode atom escapes (#28448) (Boshen)
• c67167e linter: Only run React Compiler rules on files with top-level components or hooks (Boshen)
• 4c9d5aa linter: Treat Reanimated shared values as ref-like in React Compiler rules (Boshen)
• 61fe2af linter/react: Ignore impure calls in async components in react/purity (Rahul Kashyap)
• ed7df7d ast/estree: Include comments in TS Program span (#28326) (camc314)
• 31cbe37 linter: Make gitlab fingerprints unique per diagnostic (#28307) (camc314)

⚡ Performance

... (truncated)

Sourced from oxlint's changelog.

[1.92.0] - 2026-11-06

🚀 Features

• b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option (#28816) (Cam McHenry)

[1.91.0] - 2026-11-02

🚀 Features

• 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

[1.90.0] - 2026-10-27

🚀 Features

• 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
• d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
• 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

[1.89.0] - 2026-10-19

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

• 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
• e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

• 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

• d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

... (truncated)

• 29daf90 release(apps): oxlint v1.92.0 && oxfmt v0.77.0 (#28906)
• b7d2c75 feat(linter/eslint/no-redeclare): add ignoreDeclarationMerge option (#28816)
• f3fcdcc release(apps): oxlint v1.91.0 && oxfmt v0.76.0 (#28718)
• 419c1b0 feat(linter): add allow and allowPattern options to react/capitalized-calls
• 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
• 831cdf1 feat(oxlint): require mininum oxlint-tsgolint version v7.0.2005 (#28118)
• d1b00f4 feat(linter/typescript): implement no-unsafe-enum-assignment rule (#28117)
• 165c91f feat(linter/typescript/await-thenable): support allowMixedPromiseArrays opt...
• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
• Additional commits viewable in compare view

Sourced from oxlint-tsgolint's releases.

v7.0.2006

What's Changed

• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1324
• chore(deps): require Go 1.26.10 by @​camc314 in oxc-project/tsgolint#1332

Full Changelog: https://github.com/oxc-project/tsgolint/compare/v7.0.2005...v7.0.2006

v7.0.2005

What's Changed

• chore(deps): update github actions by @​renovate[bot] in oxc-project/tsgolint#1273
• chore(deps): update gomod by @​renovate[bot] in oxc-project/tsgolint#1274
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1275
• chore(deps): update oxc-project/security-action action to v1.0.9 by @​renovate[bot] in oxc-project/tsgolint#1276
• fix(unbound-method): respect this: void on class properties by @​baevm in oxc-project/tsgolint#1277
• docs(security): inherit organization security policy by @​Boshen in oxc-project/tsgolint#1295
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1301
• fix(no-deprecated): avoid infinite loop on circular alias chains by @​magurotuna in oxc-project/tsgolint#1309
• feat(await-thenable): add allowMixedPromiseArrays option by @​camc314 in oxc-project/tsgolint#1307
• chore: remove update-typescript-go.yml by @​camc314 in oxc-project/tsgolint#1311
• ci: pin just version in setup and autofix by @​camc314 in oxc-project/tsgolint#1312
• fix(no-unnecessary-type-parameters): count generic type arguments by @​farnoodma in oxc-project/tsgolint#1297
• feat(no-unsafe-enum-assignment): add rule by @​camc314 in oxc-project/tsgolint#1316
• fix(require-array-sort-compare): report tuples by @​baevm in oxc-project/tsgolint#1317

New Contributors

• @​magurotuna made their first contribution in oxc-project/tsgolint#1309
• @​farnoodma made their first contribution in oxc-project/tsgolint#1297

Full Changelog: https://github.com/oxc-project/tsgolint/compare/v7.0.2004...v7.0.2005

v7.0.2004

What's Changed

• chore(deps): update taiki-e/install-action action to v2.87.20 by @​renovate[bot] in oxc-project/tsgolint#1246
• chore(deps): update dependency dprint-json to v0.25.0 by @​renovate[bot] in oxc-project/tsgolint#1247
• fix(no-unsafe-return): preserve deferred indexed return type by @​camc314 in oxc-project/tsgolint#1248
• chore(deps): update crate-ci/typos action to v1.50.3 by @​renovate[bot] in oxc-project/tsgolint#1250
• fix(no-misused-promises): don't report comma expressions as conditionals by @​geniusmonir in oxc-project/tsgolint#1254
• chore(deps): update gomod by @​renovate[bot] in oxc-project/tsgolint#1257
• chore(deps): update dprint plugins by @​renovate[bot] in oxc-project/tsgolint#1256
• chore(deps): update taiki-e/install-action action to v2.87.22 by @​renovate[bot] in oxc-project/tsgolint#1258
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1259
• fix(no-floating-promises): respect safe-call declaration sources by @​camc314 in oxc-project/tsgolint#1261
• fix(no-unsafe-return): avoid panic on JSDoc callbacks without returns by @​camc314 in oxc-project/tsgolint#1264
• fix(no-deprecated): include reasons for variable declarations by @​camc314 in oxc-project/tsgolint#1266
• fix(no-unnecessary-type-parameters): parenthesize constraint in optional tuple elements by @​baevm in oxc-project/tsgolint#1267
• chore(deps): update crate-ci/typos action to v1.51.0 by @​renovate[bot] in oxc-project/tsgolint#1268
• chore(deps): update crate-ci/typos action to v1.51.1 by @​renovate[bot] in oxc-project/tsgolint#1269
• fix: restore line disable comments for type-aware diagnostics by @​camc314 in oxc-project/tsgolint#1271

... (truncated)

• 420f4f1 chore(deps): require Go 1.26.10 (#1332)
• 9081583 chore(deps): update npm packages (#1324)
• 4ebf80f fix(require-array-sort-compare): report tuples (#1317)
• 62e97c9 feat(no-unsafe-enum-assignment): add rule (#1316)
• e649c1e fix(no-unnecessary-type-parameters): count generic type arguments (#1297)
• e333787 ci: pin just version in setup and autofix (#1312)
• bcab203 chore: remove update-typescript-go.yml (#1311)
• bb8225c feat(await-thenable): add allowMixedPromiseArrays option (#1307)
• 086f19a fix(no-deprecated): avoid infinite loop on circular alias chains (#1309)
• a180371 chore(deps): update npm packages (#1301)
• Additional commits viewable in compare view

Sourced from portless's releases.

v0.16.0

New Features

• Docker Compose: Added portless compose to run a Compose project with named URLs. Each published HTTP port moves to a fixed port on 127.0.0.1 and gets a <service>.<project>.localhost route, so two projects can publish the same host port. Database, cache, and UDP ports keep their published port. Configure services with the portless.enable, portless.name, and portless.ports labels. (#543, #547)

Bug Fixes

• Self-daemonizing commands: Keep the route when a command starts a server in the background and exits, as Astro 7 does in agentic environments. The route moves to the server's PID, portless list shows it, and it drops once the server stops. (#444)
• Upstream connections: Pool connections to the dev server and limit concurrent dials per backend, so a cold HTTP/2 page load no longer overflows the server's accept backlog. Long-lived responses like SSE don't block other requests. (#477)
• HTTP/2 request bodies: Send HTTP/2 request bodies that have no content-length with chunked encoding, so GET, DELETE, and OPTIONS requests with a body no longer get a 400. (#478)

Contributors

• @​Railly
• @​Umbranoxio
• @​Tiancheng-Xu
• @​ctate

v0.15.13

New Features

• Unprivileged proxy mode: Added --unprivileged and PORTLESS_UNPRIVILEGED=1 to bind supported low ports without sudo, accept only loopback peers, and preserve the mode across restarts and service installation. (#529)

Bug Fixes

• Proxy privileges: Check whether the requested listener needs root before asking for sudo. If elevation fails, stop with an error instead of silently switching ports. (#528)

Documentation

• Added shared technical writing guidance for documentation changes. (#524)

Contributors

• @​Railly
• @​ctate
• @​bensabic

v0.15.12

New Features

• MCP server: Added portless mcp with tool profiles for route lookup, static aliases, proxy management, and diagnostics. (#513)
• VitePress support: Inject the assigned port and bind address for VitePress dev, serve, and preview commands. (#508)
• Wrangler support: Inject the assigned port and --ip bind address for wrangler dev. (#509)

Bug Fixes

• npm exec framework flags: Pass injected framework options through npm exec and npm x after npm's option separator, while leaving ambiguous commands untouched. (#511)

... (truncated)

Sourced from portless's changelog.

0.16.0

New Features

• Docker Compose: Added portless compose to run a Compose project with named URLs. Each published HTTP port moves to a fixed port on 127.0.0.1 and gets a <service>.<project>.localhost route, so two projects can publish the same host port. Database, cache, and UDP ports keep their published port. Configure services with the portless.enable, portless.name, and portless.ports labels. (#543, #547)

Bug Fixes

• Self-daemonizing commands: Keep the route when a command starts a server in the background and exits, as Astro 7 does in agentic environments. The route moves to the server's PID, portless list shows it, and it drops once the server stops. (#444)
• Upstream connections: Pool connections to the dev server and limit concurrent dials per backend, so a cold HTTP/2 page load no longer overflows the server's accept backlog. Long-lived responses like SSE don't block other requests. (#477)
• HTTP/2 request bodies: Send HTTP/2 request bodies that have no content-length with chunked encoding, so GET, DELETE, and OPTIONS requests with a body no longer get a 400. (#478)

Contributors

• @​Railly
• @​Umbranoxio
• @​Tiancheng-Xu
• @​ctate

0.15.13

New Features

• Unprivileged proxy mode: Added --unprivileged and PORTLESS_UNPRIVILEGED=1 to bind supported low ports without sudo, accept only loopback peers, and preserve the mode across restarts and service installation. (#529)

Bug Fixes

• Proxy privileges: Check whether the requested listener needs root before asking for sudo. If elevation fails, stop with an error instead of silently switching ports. (#528)

Documentation

• Added shared technical writing guidance for documentation changes. (#524)

Contributors

• @​Railly
• @​ctate
• @​bensabic

0.15.12

New Features

• MCP server: Added portless mcp with tool profiles for route lookup, static aliases, proxy management, and diagnostics. (#513)
• VitePress support: Inject the assigned port and bind address for VitePress dev, serve, and preview commands. (#508)
• Wrangler support: Inject the assigned port and --ip bind address for wrangler dev. (#509)

Bug Fixes

• npm exec framework flags: Pass injected framework options through npm exec and npm x after npm's option separator, while leaving ambiguous commands untouched. (#511)

... (truncated)

• d6326ef Prepare v0.16.0 release (#549)
• 5569a5d fix: keep routes for commands that self-daemonize (#444)
• 6452f3a fix(compose): keep routed host ports stable across container restarts (#547)
• 8496c69 feat: add portless compose for Docker Compose projects (#543)
• 73f4011 fix(proxy): pool upstream connections and limit concurrent dials (#477)
• 65ee228 fix(proxy): frame HTTP/2 request bodies that have no content-length (#478)
• 0220646 Route feature requests and questions to Discussions
• 96a3bbb Prepare v0.15.13 release (#530)
• 5758ac5 fix(proxy): elevate only when the bind needs root (#528)
• 7ac0f51 feat(proxy): add --unprivileged to take a port below 1024 without sudo (#529)
• Additional commits viewable in compare view

Sourced from better-auth's releases.

v1.7.18

[!IMPORTANT] Action required

• If you use getTestInstance with testWith: "mysql", run a MySQL server at 127.0.0.1:3306 with the root password set to root_password. (#12244)

better-auth

Bug Fixes

• Fixed "revoke all sessions" with secondaryStorage and storeSessionInDatabase to also revoke sessions created while the revocation is running, except sessions created by a session.delete.after hook, which stay active (#12259)
• Fixed getTestInstance from better-auth/test to close its own Postgres connection pool and SQLite database when the test file finishes, while with Vitest's default sequence.hooks: "stack" your afterAll hooks still run first and can keep using the instance (#12250)
• Fixed getTestInstance with testWith: "mysql" hanging, and added a separate database per instance so several instances can run in one test file (#12244)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

• fix(core): accept introspected tokens when verifyOptions.typ is set (#12249)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​gustavovalverde

Full changelog: v1.7.17...v1.7.18

v1.7.17

better-auth

Bug Fixes

• Fixed sessions created by a session.delete.after hook being treated as revoked during "revoke all sessions" when using secondaryStorage with storeSessionInDatabase (#12212)
• Fixed remembered sign-ins and sign-ups to refresh their session even if an earlier sign-in in the same browser used rememberMe: false (#12181)
• Fixed denying a device authorization request to reject a revoked session that is still in the cookie cache (#12216)
• Fixed IP wildcard trusted origins such as exp://192.168.*.*:* matching custom-scheme hosts with out-of-range or zero-padded octets (#12217)
• Fixed the phone number plugin storing an empty phoneNumber on sign-up and replacing a verified number when linking an account with an empty phone number (#12219)
• Fixed TOTP verification rejecting API key sessions so they can now finish two-factor enrollment (#12211)
• Fixed trusted devices being ignored when an app runs the two-factor sign-in step from its own hook on another sign-in path, such as email OTP (#12228)

For detailed changes, see CHANGELOG

@better-auth/expo

Bug Fixes

... (truncated)

Sourced from better-auth's changelog.

1.7.18

Patch Changes

• #12259 9e2a0ec Thanks @​gustavovalverde! - Fixed "revoke all sessions" with secondaryStorage and storeSessionInDatabase so that sessions created while the revocation runs are revoked too. Sessions created by a session.delete.after hook still stay active.

• #12244 85f4342 Thanks @​gustavovalverde! - getTestInstance with testWith: "mysql" no longer hangs. It expects a MySQL server at 127.0.0.1:3306 whose root password is root_password, and it creates and drops a separate database for each instance, so several instances can run in one test file.

• #12250 278bb28 Thanks @​gustavovalverde! - getTestInstance from better-auth/test now closes the Postgres connection pool and the SQLite database it created when the test file finishes. Previously both stayed open until the test worker exited. With Vitest's default sequence.hooks: "stack", afterAll hooks in your test files still run before this cleanup and can keep using the instance.

• Updated dependencies [9342a73]:

  • @​better-auth/core@​1.7.18
  • @​better-auth/drizzle-adapter@​1.7.18
  • @​better-auth/kysely-adapter@​1.7.18
  • @​better-auth/memory-adapter@​1.7.18
  • @​better-auth/mongo-adapter@​1.7.18
  • @​better-auth/prisma-adapter@​1.7.18
  • @​better-auth/telemetry@​1.7.18

1.7.17

Patch Changes

• #12181 b6a87ad Thanks @​aliamanatali! - A remembered sign-in or sign-up now refreshes its session like any other remembered session, even if an earlier sign-in in the same browser used rememberMe: false. Previously the earlier choice stayed in a dont_remember cookie until the browser closed, so the new session stopped sliding and expired expiresIn after it...