chore: update better-auth dependencies to version 1.5.4 and refactor …#3969
chore: update better-auth dependencies to version 1.5.4 and refactor …#3969Siumauricio merged 1 commit intocanaryfrom
Conversation
…imports in auth-client and auth modules
| @@ -59,7 +61,6 @@ | |||
| "drizzle-dbml-generator": "0.10.0", | |||
| "drizzle-orm": "0.45.1", | |||
There was a problem hiding this comment.
better-call major version bump may trigger peer dependency warnings
better-call is upgraded from 1.3.2 to 2.0.2 here, but both @better-auth/core@1.5.4 and @better-auth/sso@1.5.4 still declare an exact peer dependency on better-call: 1.3.2 in the lockfile:
'@better-auth/core@1.5.4':
peerDependencies:
better-call: 1.3.2 ← exact version, but 2.0.2 is installed
'@better-auth/sso@1.5.4':
peerDependencies:
better-call: 1.3.2 ← same
A major version bump (1.x → 2.x) normally signals breaking changes and falls outside semver compatibility. pnpm will likely emit peer dependency mismatch warnings on fresh installs (pnpm install), and CI environments with --strict-peer-dependencies will fail outright.
If the better-auth ecosystem intentionally moved to better-call@2.0.2 in v1.5.4, the peer dep declarations in the published packages appear to be stale/incorrect. It would be worth verifying against the official better-auth v1.5.4 release notes or issue tracker to confirm this upgrade is expected and that no peer-dep warnings are surfaced during install.
…imports in auth-client and auth modules
What is this PR about?
Please describe in a short paragraph what this PR is about.
Checklist
Before submitting this PR, please make sure that:
canarybranch.Issues related (if applicable)
Screenshots (if applicable)
Greptile Summary
This PR graduates
better-authand its ecosystem from the1.5.0-beta.16pre-release to the stable1.5.4release, and refactors theapiKeyplugin and its client counterpart to import from the new standalone@better-auth/api-keypackage instead of the monolithicbetter-auth/plugins/better-auth/client/pluginspaths.Key changes:
better-auth,@better-auth/ssoupdated from1.5.0-beta.16→1.5.4in bothapps/dokployandpackages/server@better-auth/api-key@1.5.4added as an explicit dependency in both packagespackages/server/src/lib/auth.ts:apiKeynow imported from@better-auth/api-keyapps/dokploy/lib/auth-client.ts:apiKeyClientnow imported from@better-auth/api-key/clientbetter-callbumped from1.3.2→2.0.2inpackages/server— a major version jump that conflicts with the exact peer dependency (better-call: 1.3.2) declared by both@better-auth/core@1.5.4and@better-auth/sso@1.5.4in the lockfile, which could produce peer dependency warnings on fresh installs or fail in strict-peer-dependency CI environmentsConfidence Score: 4/5
better-auth@1.5.4upgrade is straightforward, but thebetter-callmajor version bump should be verified against peer dependency expectations.@better-auth/api-keypackage layout, and the underlying auth logic is unchanged. The only notable concern is thebetter-call1.3.2 → 2.0.2major version bump inpackages/serverwhile@better-auth/core@1.5.4and@better-auth/sso@1.5.4still declare an exact peer dependency onbetter-call: 1.3.2, which may surface peer dependency warnings or cause install failures in strict environments.packages/server/package.json— verify thebetter-call@2.0.2upgrade is intentional and confirm no peer-dependency warnings are generated duringpnpm install.Last reviewed commit: 3042805