Sourced from @​better-auth/api-key's releases.

v1.7.7

better-auth

Magic Link upgrade: Upgrade servers sharing verification storage together, request new Magic Links, and restart pending OAuth/SAML sign-ins. No database migration is required. See the critical advisory for affected configurations and custom storage changes.

Bug Fixes

• Fixed a critical Magic Link account-takeover vulnerability. (#11494)
• Fixed ID-token sign-in ignoring the social provider’s disableSignUp setting. (#11491)
• Fixed OAuth Proxy accepting sign-in state as a provider profile. (#11494) Upgrade all OAuth Proxy participants together; see the OAuth Proxy upgrade guidance.
• Fixed CAPTCHA errors missing the JSON Content-Type header. (#11476)
• Fixed the active organization failing to refresh after sign-in when a session hook selects the initial organization. (#11375)
• Fixed rate-limit errors missing the JSON Content-Type header. (#11469)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Features

• Added optional validateRedirectUri validation for trusted deployments with dynamic OAuth redirect URIs. (#8686)
• Added verifyOAuthQueryParams to verify signed authorization queries before rendering a custom consent page. (#11402)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

• Fixed concurrent PostgreSQL requests exceeding database-backed rate limits. (#11331)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

• Fixed consumeOne deleting a record after a concurrent write invalidates its original condition. (#11495)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@​aryan1306, @​bytaesu, @​gitmotion, @​gustavovalverde, @​lennondotw

Full changelog: v1.7.6...v1.7.7

... (truncated)

Sourced from @​better-auth/api-key's changelog.

1.7.7

1.7.6

1.7.5

1.7.4

1.7.3

1.7.2

1.7.1

1.7.0

1.7.0-rc.6

1.7.0-rc.5

1.7.0-rc.4

1.7.0-rc.3

1.7.0-rc.2

1.7.0-rc.1

1.7.0-rc.0

1.7.0-beta.10

1.7.0-beta.9

Patch Changes

• Updated dependencies []:
  • better-auth@1.7.0-beta.9
  • @​better-auth/core@​1.7.0-beta.9

1.7.0-beta.8

Patch Changes

• Updated dependencies [7c7313c, 06daf70, a83152e, 97903c9, 3a79aff]:
  • better-auth@1.7.0-beta.8
  • @​better-auth/core@​1.7.0-beta.8

1.7.0-beta.7

... (truncated)

• db02f23 chore: release v1.7.7 (#11413)
• 229a02a chore: release v1.7.6 (#11322)
• 5468e6b chore: release v1.7.5 (#11245)
• 735008f chore: release v1.7.4 (#11216)
• 597d39c chore: release v1.7.3 (#11032)
• c0444dc fix: align OpenAPI required fields with Zod 4.5 (#11066)
• ba12fcd chore: release v1.7.2 (#10870)
• 2344536 chore: release v1.7.1 (#10864)
• f577ec5 chore: exit pre-release mode for v1.7.0
• 69258d1 chore: sync main to next
• Additional commits viewable in compare view

Sourced from @​content-collections/core's releases.

@​content-collections/core@​0.15.3

Patch Changes

• 8691108 Thanks @​sdorra! - Replace gray-matter with @​11ty/gray-matter, see issue #798

Sourced from @​content-collections/core's changelog.

0.15.3

Patch Changes

• 8691108 Thanks @​sdorra! - Replace gray-matter with @​11ty/gray-matter, see issue #798

• f400907 chore(release): version packages
• f492198 build(deps-dev): bump vitest from 4.0.6 to 4.1.11
• a8c5b19 chore(core): update core dependecies
• 030fac1 chore(core): update core runtime dependencies
• 26f7cd5 fix(core): #798 replace gray-matter with @​11ty/gray-matter
• See full diff in compare view

Sourced from @​content-collections/vite's releases.

@​content-collections/vite@​0.3.1

Patch Changes

• #807 e0574ed Thanks @​sdorra! - Stop the content watcher when the Vite server closes

• Updated dependencies []:

  • @​content-collections/integrations@​0.5.0

Sourced from @​content-collections/vite's changelog.

0.3.1

Patch Changes

• #807 e0574ed Thanks @​sdorra! - Stop the content watcher when the Vite server closes

• Updated dependencies []:

  • @​content-collections/integrations@​0.5.0

• f400907 chore(release): version packages
• f492198 build(deps-dev): bump vitest from 4.0.6 to 4.1.11
• e0574ed fix(vite): #806 unsubscribe watcher when vite closes
• See full diff in compare view

• See full diff in compare view

Sourced from @​hono/zod-openapi's releases.

@​hono/zod-openapi@​1.6.3

Patch Changes

• #2087 3b0860026438694e76c3155737cf0b8df32384f5 Thanks @​WolfieLeader! - fix: return 415 when a JSON or form request body's Content-Type matches none of the route's declared media types, instead of validating an empty object

@​hono/zod-openapi@​1.6.2

Patch Changes

• #2115 525564dc5c275bfe8468b330902ea12dc450f54d Thanks @​scttcper! - Flatten batched route type inference so large openapiRoutes tuples do not hit TypeScript's recursive instantiation limit.

• #2116 38232db06e1c366e5eb1fb7cf6949c2541debd8c Thanks @​scttcper! - Reuse projected response types between openapi() route handlers and returned schemas to reduce TypeScript checker work.

• #1986 28f1d39cd2a480d9d3bd557df9037c054a674279 Thanks @​VihaanAgarwal! - fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler

@​hono/zod-openapi@​1.6.1

Patch Changes

• #1988 4fce28c6fbba41795b316becaf7d8cffa11fb521 Thanks @​thekiwi! - Reduce route-typing type instantiations (~54% on TS6, ~48% on TS7 in a 100-route benchmark) by binding expensive sub-expressions once and sharing the input intersection / response-shape conditional.

@​hono/zod-openapi@​1.6.0

Minor Changes

• #2086 1dc1a4a5418be24d571652e1013b8a6a925824c0 Thanks @​WolfieLeader! - feat: support the HTTP QUERY method in createRoute() by bumping @asteasolutions/zod-to-openapi to v9

@​hono/zod-openapi@​1.5.3

Patch Changes

• #2084 9a9324937cfa77db210a966be33e8c73bbbe33e3 Thanks @​kamaal111! - Revert the local z binding export because it causes zod types to degrade to any when built with tsdown.

@​hono/zod-openapi@​1.5.2

Patch Changes

• #2069 fc0377c5595bde3147d181e5013a3fc710175e40 Thanks @​edenbuilds! - fix(zod-openapi): keep the z import edge so .openapi() survives bundling

  Re-exporting zod's z as a pass-through let esbuild code-splitting resolve import { z } from '@hono/zod-openapi' straight to zod and drop the edge to the module that runs extendZodWithOpenApi(z), so schemas could be built before the patch applied and .openapi() was undefined at runtime. Export z as an alias declaration instead: it compiles to a binding local to the module, which keeps that edge, while still carrying zod's type namespace so z.infer, z.ZodType and the rest continue to work. Fixes #2051.

Sourced from @​hono/zod-openapi's changelog.

1.6.3

Patch Changes

• #2087 3b0860026438694e76c3155737cf0b8df32384f5 Thanks @​WolfieLeader! - fix: return 415 when a JSON or form request body's Content-Type matches none of the route's declared media types, instead of validating an empty object

1.6.2

Patch Changes

• #2115 525564dc5c275bfe8468b330902ea12dc450f54d Thanks @​scttcper! - Flatten batched route type inference so large openapiRoutes tuples do not hit TypeScript's recursive instantiation limit.

• #2116 38232db06e1c366e5eb1fb7cf6949c2541debd8c Thanks @​scttcper! - Reuse projected response types between openapi() route handlers and returned schemas to reduce TypeScript checker work.

• #1986 28f1d39cd2a480d9d3bd557df9037c054a674279 Thanks @​VihaanAgarwal! - fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler

1.6.1

Patch Changes

• #1988 4fce28c6fbba41795b316becaf7d8cffa11fb521 Thanks @​thekiwi! - Reduce route-typing type instantiations (~54% on TS6, ~48% on TS7 in a 100-route benchmark) by binding expensive sub-expressions once and sharing the input intersection / response-shape conditional.

1.6.0

Minor Changes

• #2086 1dc1a4a5418be24d571652e1013b8a6a925824c0 Thanks @​WolfieLeader! - feat: support the HTTP QUERY method in createRoute() by bumping @asteasolutions/zod-to-openapi to v9

1.5.3

Patch Changes

• #2084 9a9324937cfa77db210a966be33e8c73bbbe33e3 Thanks @​kamaal111! - Revert the local z binding export because it causes zod types to degrade to any when built with tsdown.

1.5.2

Patch Changes

• #2069 fc0377c5595bde3147d181e5013a3fc710175e40 Thanks @​edenbuilds! - fix(zod-openapi): keep the z import edge so .openapi() survives bundling

  Re-exporting zod's z as a pass-through let esbuild code-splitting resolve import { z } from '@hono/zod-openapi' straight to zod and drop the edge to the module that runs extendZodWithOpenApi(z), so schemas could be built before the patch applied and .openapi() was undefined at runtime. Export z as an alias declaration instead: it compiles to a binding local to the module, which keeps that edge, while still carrying zod's type namespace so z.infer, z.ZodType and the rest continue to work. Fixes #2051.

• bc7d9e6 Version Packages (#2123)
• 3b08600 fix(zod-openapi): return 415 for request bodies with undeclared content type ...
• b125de5 Version Packages (#2121)
• 28f1d39 fix(zod-openapi): infer route middleware env in defineOpenAPIRoute handler (#...
• 525564d perf(zod-openapi): Flatten batched route schemas (#2115)
• 38232db perf(zod-openapi): Reuse route response projections (#2116)
• fdad95a Version Packages (#2101)
• 4fce28c fix(zod-openapi): reduce route type instantiations (#1988)
• eb5f75d Version Packages (#2088)
• 1dc1a4a feat(zod-openapi): support the HTTP QUERY method (#2086)
• Additional commits viewable in compare view

Sourced from @​llamaindex/llama-cloud's releases.

v2.18.0

2.18.0 (2026-10-09)

Features

• sdk: publish Verify as client.alpha.verify (PROD-10334) (3006cd4)

Chores

• stlc: seal custom-code tracking files (f4e293b)

v2.17.0

2.17.0 (2026-10-07)

Features

• add redline prompt changes to new prod version (#27635) (707e112)
• chat: let a chat session refuse queries from its share link (#27012) (d280021)
• parse: add detected_form_types to the per-page enriched forms output (#26052) (bd48711)
• parse: add option to include hidden PPTX slides (#27938) (6bca4de)
• parse: agentic 2026-09-09 — cache-stable prompt order + Flash Lite MINIMAL thinking (#26273) (ec4e4a6)
• parse: apply watermark_handling to text output; add watermark e2e test (#27932) (ffdb962)
• parse: display enriched Forms granular highlights (#26366) (f3bd48f)
• parse: remove_watermark output option with 2026-09-28 tier versions (#27813) (f578a05)
• parse: ship the illegible-classification prompts as agentic_plus 2026-09-11 (latest) (#26490) (7fbc672)
• sdk: publish beta.attachments list and get (d5c9d25)
• split: accept a parse config or parse_job_id like extract_v2 (#26303) (d7d3283)

Bug Fixes

• chat: report every index a chat turn could not query (#26981) (37ecf9d)
• classifier: drop the dead classify v1 job mappings (methods were removed from the SDKs in 2.16.0 / 1.7.0) (5a74795)
• extract: refuse to delete a non-terminal job (LI-8700) (#23793) (eb97463)
• split: process target_pages in the order written, matching Extract (#28173) (9f29030)

Documentation

• changelog: record the classify v1 removal in 2.16.0 (f65c1b3)
• changelog: record the classify v1 removal in 2.16.0 (e3d9c9a)
• update Extract versions and pricing (#28128) (7a3dd36)

v2.16.0

2.16.0 (2026-09-08)

... (truncated)

Sourced from @​llamaindex/llama-cloud's changelog.

2.18.0 (2026-10-09)

Features

• sdk: publish Verify as client.alpha.verify (PROD-10334) (3006cd4)

Chores

• stlc: seal custom-code tracking files (f4e293b)

2.17.0 (2026-10-07)

Features

• add redline prompt changes to new prod version (#27635) (707e112)
• chat: let a chat session refuse queries from its share link (#27012) (d280021)
• parse: add detected_form_types to the per-page enriched forms output (#26052) (bd48711)
• parse: add option to include hidden PPTX slides (#27938) (6bca4de)
• parse: agentic 2026-09-09 — cache-stable prompt order + Flash Lite MINIMAL thinking (#26273) (ec4e4a6)
• parse: apply watermark_handling to text output; add watermark e2e test (#27932) (ffdb962)
• parse: display enriched Forms granular highlights (#26366) (f3bd48f)
• parse: remove_watermark output option with 2026-09-28 tier versions (#27813) (f578a05)
• parse: ship the illegible-classification prompts as agentic_plus 2026-09-11 (latest) (#26490) (7fbc672)
• sdk: publish beta.attachments list and get (d5c9d25)
• split: accept a parse config or parse_job_id like extract_v2 (#26303) (d7d3283)

Bug Fixes

• chat: report every index a chat turn could not query (#26981) (37ecf9d)
• classifier: drop the dead classify v1 job mappings (methods were removed from the SDKs in 2.16.0 / 1.7.0) (5a74795)
• extract: refuse to delete a non-terminal job (LI-8700) (#23793) (eb97463)
• split: process target_pages in the order written, matching Extract (#28173) (9f29030)

Documentation

• changelog: record the classify v1 removal in 2.16.0 (f65c1b3)
• changelog: record the classify v1 removal in 2.16.0 (e3d9c9a)
• update Extract versions and pricing (#28128) (7a3dd36)

2.14.1 (2026-08-20)

Features

• parse: expose legal-document preset in v2 (#24192) (e80af33)

... (truncated)

• 33db6c5 Merge pull request #107 from run-llama/release-please--branches--main--compon...
• 1f066e6 release: 2.18.0
• 2714d1d Merge pull request #106 from run-llama/stainless/release
• f4e293b chore(stlc): seal custom-code tracking files
• 3006cd4 feat(sdk): publish Verify as client.alpha.verify (PROD-10334)
• 6479de2 Merge pull request #24 from run-llama/stlc/from-prod
• 142761c Build SDK
• 9ce967e Build SDK
• 8dd3ecf Index sync_in_progress behind expand, read from job rows before Temporal (#28...
• 98aff0b Merge pull request #104 from run-llama/release-please--branches--main--compon...
• Additional commits viewable in compare view

Sourced from @​mistralai/mistralai's releases.

typescript - v2.7.0 - 2026-09-09 13:10:23

Generated by Speakeasy CLI

2026-09-09 10:26:10

API changes

Removed (19):

• betaConnectorsCreateOrUpdateOrganizationCredentials
• betaConnectorsCreateOrUpdateUserCredentials
• betaConnectorsCreateOrUpdateWorkspaceCredentials
• betaObservabilityCampaignsCreate
• betaObservabilityCampaignsDelete
• betaObservabilityCampaignsFetch
• betaObservabilityCampaignsFetchStatus
• betaObservabilityCampaignsList
• betaObservabilityCampaignsListEvents
• betaObservabilityChatCompletionEventsFetch
• betaObservabilityChatCompletionEventsFetchSimilarEvents
• betaObservabilityChatCompletionEventsFieldsFetchOptionCounts
• betaObservabilityChatCompletionEventsFieldsFetchOptions
• betaObservabilityChatCompletionEventsFieldsList
• betaObservabilityChatCompletionEventsJudge
• betaObservabilityChatCompletionEventsSearch
• betaObservabilityChatCompletionEventsSearchIds
• betaObservabilityDatasetsImportFromCampaign
• betaObservabilityDatasetsImportFromExplorer

Added (17):

• betaConnectorsCreateCredentials
• betaConnectorsShareToOrganization
• betaConnectorsUnshareFromOrganization
• betaConnectorsUpdateCredentials
• betaObservabilityEvaluationsCreatePipelineConfig
• betaObservabilityEvaluationsDeletePipelineConfig
• betaObservabilityEvaluationsGetPipelineConfig
• betaObservabilityEvaluationsListPipelineConfigs
• betaObservabilityEvaluationsUpdatePipelineConfig
• betaServiceAccountsCreate
• betaServiceAccountsDelete
• betaServiceAccountsGet
• betaServiceAccountsList
• betaServiceAccountsListAssignableRoles
• betaServiceAccountsListRoles
• betaServiceAccountsSetRoles
• betaServiceAccountsUpdate

Breaking changes

Connectors

• connectors.create now takes a single request object, and connectors.update

... (truncated)

Sourced from @​mistralai/mistralai's changelog.

2024-08-07 14:12:46

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.356.0 (2.388.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.0] .

Releases

• [NPM v1.0.0] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.0 - .

2024-08-07 17:09:34

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.356.0 (2.388.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.1] .

Releases

• [NPM v1.0.1] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.1 - .

2024-08-08 18:05:34

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.357.4 (2.390.6) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.2] .

Releases

• [NPM v1.0.2] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.2 - .

2024-08-20 08:43:27

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.376.0 (2.402.5) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.3] .

Releases

• [NPM v1.0.3] https://www.npmjs.com/package/@​mistralai/mistralai/v/1.0.3 - .

2024-08-23 13:33:36

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.378.0 (2.404.3) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.0.4] .

Releases

... (truncated)

• d8f2d25 Merge pull request #270 from mistralai/sdk-sync
• 93e8eb8 docs: note the breaking changes in this release
• daa76db chore: sync generated SDK from upstream @ 6a7ee233
• f669ec8 Use named OpenTelemetry semantic convention imports (#269)
• f4f52c0 Merge pull request #265 from mistralai/julienbirgand/obs-2122-document-typesc...
• bf8b9bf docs(observability): add serverless telemetry example
• 7ed5ba7 ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.763.6 (#263)
• 1fdbf62 Merge pull request #262 from mistralai/julienbirgand/obs-2121-port-flushtelem...
• d357763 feat(observability): add flushTelemetry to drain spans without shutdown
• bd70158 Merge pull request #261 from mistralai/speakeasy-sdk-regen-1786636243
• Additional commits viewable in compare view

Sourced from @​tanstack/react-devtools's releases.

@​tanstack/react-devtools@​0.10.12

Patch Changes

• Updated dependencies [4ecd46e]:
  • @​tanstack/devtools@​0.14.2

@​tanstack/react-devtools@​0.10.11

Patch Changes

• Updated dependencies [cf8e678, cf8e678, cf8e678]:
  • @​tanstack/devtools@​0.14.1

@​tanstack/react-devtools@​0.10.10

Patch Changes

• Updated dependencies [a46d1f5, a46d1f5]:
  • @​tanstack/devtools@​0.14.0

@​tanstack/react-devtools@​0.10.9

Patch Changes

• Updated dependencies [d061f0c]:
  • @​tanstack/devtools@​0.13.0

Sourced from @​tanstack/react-devtools's changelog.

0.10.13

Patch Changes

• Updated dependencies [02a67f1, 589304f, dc61e1e, 45f39ee]:
  • @​tanstack/devtools@​0.15.0

0.10.12

Patch Changes

• Updated dependencies [4ecd46e]:
  • @​tanstack/devtools@​0.14.2

0.10.11

Patch Changes

• Updated dependencies [cf8e678, cf8e678, cf8e678]:
  • @​tanstack/devtools@​0.14.1

0.10.10

Patch Changes

• Updated dependencies [a46d1f5, a46d1f5]:
  • @​tanstack/devtools@​0.14.0

0.10.9

Patch Changes

• Updated dependencies [d061f0c]:
  • @​tanstack/devtools@​0.13.0

• ba7842e ci: Version Packages (#295)
• f58a87b ci: prepare for trusted publishing (#288)
• f4ae997 ci: Version Packages (#287)
• 946bfb2 ci: Version Packages (#285)
• e0d58d5 feat: add preact devtools (#283)
• 66722f5 docs: correct local relative links (#282)
• 8e354af ci: Version Packages (#273)
• 87764c2 ci: Version Packages (#260)
• cf1b57a ci: Version Packages (#251)
• d524864 Custom Trigger Component for devtools (#228)
• Additional commits viewable in compare view

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-next-experimental@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query-persist-client@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.1
  • @​tanstack/react-query@​5.104.1

@​tanstack/react-query@​5.104.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

... (truncated...

Description has been truncated

^{Need help on this PR? Tag @codesmith-bot with what you need.}

Polylane reviews this pull request when you ask:

Summary by cubic

Bumps 41 production and dev dependencies across the app, CLI, filerouter, and native parser services, including major version updates for TypeScript, vitest, vite-plus, and @types/node.

Needs attention

• better-auth 1.7.7 fixes a critical Magic Link account-takeover vulnerability and requires the OAuth Proxy upgrade guidance; no database migration is needed.
• @mistralai/mistralai 2.7.0 removes 19 beta APIs and changes connectors.create/connectors.update to accept a single request object.
• Major version jumps to typescript 7, vitest 5, vite-plus 1.x, and @types/node 26 may require migration and code changes.