fix(deps): update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@iconify-json/material-symbols	1.2.17 -> 1.2.20
@next/bundle-analyzer (source)	15.2.4 -> 15.2.5
@radix-ui/react-avatar (source)	1.1.3 -> 1.1.7
@radix-ui/react-dialog (source)	1.1.6 -> 1.1.11
@radix-ui/react-dropdown-menu (source)	2.1.6 -> 2.1.12
@radix-ui/react-label (source)	2.1.2 -> 2.1.4
@radix-ui/react-scroll-area (source)	1.2.3 -> 1.2.6
@radix-ui/react-select (source)	2.1.6 -> 2.1.7
@radix-ui/react-switch (source)	1.1.3 -> 1.1.4
@radix-ui/react-tabs (source)	1.1.3 -> 1.1.9
@shikijs/transformers (source)	3.2.1 -> 3.2.2
@types/node (source)	22.14.0 -> 22.14.1
@upstash/redis	1.34.6 -> 1.34.8
better-auth (source)	1.2.5 -> 1.2.7
code-inspector-plugin (source)	0.20.7 -> 0.20.10
eslint-config-hyoban	3.2.1 -> 3.2.2
jotai	2.12.2 -> 2.12.3
katex (source)	^0.16.21 -> ^0.16.22
lint-staged	15.5.0 -> 15.5.1
marked (source)	^15.0.7 -> ^15.0.11
marked (source)	15.0.7 -> 15.0.11
motion	12.6.3 -> 12.6.5
postcss-preset-env (source)	10.1.5 -> 10.1.6
react-router-dom (source)	7.5.0 -> 7.5.2
shiki (source)	3.2.1 -> 3.2.2
unplugin-macros	0.16.2 -> 0.16.3
zx (source)	8.5.0 -> 8.5.3

---

Release Notes

vercel/next.js (@​next/bundle-analyzer)

v15.2.5

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Update swc_core and use rayon instead of chili (#​77338)
• Update swc_core to v16.6.2 (#​77194)
• Update swc_core to v16.6.0 (#​77155)
• [og] fix vercel og build issue on windows (#​77650)
• clean up useReducer code re dev indicator (#​77354)
• [dev-overlay] ensure stripping overlay bundle in prod build (#​76976)

Credits

Huge thanks to @​huozhi, @​gaojude and @​kdy1 for helping!

radix-ui/primitives (@​radix-ui/react-avatar)

v1.1.7

v1.1.6

v1.1.5

v1.1.4

Compare Source

shikijs/shiki (@​shikijs/transformers)

v3.2.2

Compare Source

   🚀 Features

• Add handling for FontStyle.Strikethrough  -  by @​dhruvkb in https://github.com/shikijs/shiki/issues/976 (f14f2)

    View changes on GitHub

upstash/upstash-redis (@​upstash/redis)

v1.34.8

Compare Source

What's Changed

• DX-1780: add hash expiration commands by @​CahidArda in https://github.com/upstash/redis-js/pull/1371

Full Changelog: upstash/redis-js@v1.34.7...v1.34.8

v1.34.7

Compare Source

What's Changed

Features:

• DX-1660: Add EVAL_RO and EVALSHA_RO commands by @​yunusemreozdemir in https://github.com/upstash/redis-js/pull/1365
• DX-1780: Add HEXPIRE by @​CahidArda in https://github.com/upstash/redis-js/pull/1367
• Add json.merge command by @​CahidArda in https://github.com/upstash/redis-js/pull/1368

Fixes:

• Add expire options to PEXPIREAT, PEXPIRE, EXPIREAT by @​CahidArda in https://github.com/upstash/redis-js/pull/1370

Full Changelog: upstash/redis-js@v1.34.6...v1.34.7

better-auth/better-auth (better-auth)

v1.2.7

Compare Source

   🚀 Features

• Error code support for haveibeenpwned  -  by @​Kinfe123 (2ee92)
• plugin: Error code support for haveibeenpwned plugin  -  by @​Kinfe123 (86e81)

   🐞 Bug Fixes

• Added c.authentication to refresh token  -  by @​CodeWithAlexander (48d62)
• Authentication type missing on refershToken options  -  by @​Kinfe123 (01d1b)
• Prevent a user from created on haveibeenpwned  -  by @​Kinfe123 (7dff5)
• adapter:
  • Improve field lookup logic in createAdapter  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2245 (53c71)
• cli:
  • Schema gen with Drizzle for PG to generate text instead of uuid  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2248 (c6eb1)
• drizzle-adapter:
  • Correct count retrieval in the update function  -  by @​okxiaoliang4 in https://github.com/better-auth/better-auth/issues/2244 (f5b86)
• haveIBeenPwned:
  • Add proper error code  -  by @​JE4GLE in https://github.com/better-auth/better-auth/issues/2255 (adecf)
• organization:
  • Checking if User is intended recipient of Invite is casesensetive  -  by @​SNRSE in https://github.com/better-auth/better-auth/issues/2251 (5689d)
• plugin:
  • Prevent user from being created on compromised password  -  by @​Kinfe123 (e777b)
• stripe:
  • Force post method for subscription restore  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2259 (ffde0)
  • Adding ability to restore cancelled trialing subscriptions  -  by @​Konixy in https://github.com/better-auth/better-auth/issues/2262 (d341f)

    View changes on GitHub

v1.2.6

Compare Source

   🚀 Features

• MapProfileToUser in vk social-provider  -  by @​MagicFun1241 in https://github.com/better-auth/better-auth/issues/1944 (8d357)
• One-time token plugin  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2151 (155d9)
• createAdapter and useNumberId  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/1926 (98661)
• Support user data mapping in id token social sign-in  -  by @​Bekacru (a4267)
• Update hover style for light mode in community page  -  by @​sudoskys (8955d)
• Zoom social provider  -  by @​nktnet1 in https://github.com/better-auth/better-auth/issues/1671 (4590b)
• (captcha plugin) adding support for Google ReCAPTCHA v3 and hCaptcha  -  by @​0scrm in https://github.com/better-auth/better-auth/issues/1836 (bf281)
• Openapi spec update  -  by @​solarsoft0 in https://github.com/better-auth/better-auth/issues/1699 (27b40)
• Have-i-been-pwned plugin  -  by @​moshetanzer in https://github.com/better-auth/better-auth/issues/1978 (99ffa)
• Support custom issuer totp  -  by @​Siumauricio in https://github.com/better-auth/better-auth/issues/2113 (b2660)
• Delete token expiry configuration  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2138 (3b659)
• Add option to disable session refresh on use  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2126 (9e951)
• admin:
  • Add support for passing multiple roles as array  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/1907 (df727)
• email-otp:
  • Support attempt numbers for email-otp  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2146 (880a5)
• facebook:
  • Add support for business login using config ids  -  by @​arlyon in https://github.com/better-auth/better-auth/issues/1990 (6b22e)
• generic-oauth:
  • Added field discoveryHeaders to GenericOAuthConfig  -  by @​RyanWSweeney in https://github.com/better-auth/better-auth/issues/2205 (c6d59)
• jwt:
  • Add sub claim and getSubject  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2194 (04937)
• oauth2:
  • Override user info on provider sign-in  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2148 (f9b96)
• organization:
  • Add invitation limit  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2014 (81e45)
  • Support multiple permissions check  -  by @​rxri in https://github.com/better-auth/better-auth/issues/2227 (cb900)
• phone-number:
  • Add attempts check  -  by @​Bekacru (1369d)
  • Add number of attempts configuration  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2046 (5591e)
  • Add phone number verification requirement before sign-in  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/1984 (e24a6)
• provider:
  • Twitter email support  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2176 (48efd)
• react-start:
  • Add react-start integration for cookie handling  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2119 (06ddd)
• socialLink:
  • Add support for custom scopes in social account linking  -  by @​leoleducq in https://github.com/better-auth/better-auth/issues/2074 (c14f1)
• stripe:
  • Restore subscription  -  by @​JNLei in https://github.com/better-auth/better-auth/issues/1705 (82633)
• two-factor:
  • Refactor two-factor authentication with better error handling, configurable otp limits and verification  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2234 (de91c)
• username:
  • Export the correct error codes for the plugin  -  by @​Bekacru (e09ce)

   🐞 Bug Fixes

• Import orders and alias to avoid conflict in ac code examples  -  by @​AmagiDDmxh (e0b34)
• Fallback to checking main db on session retrieval when storeSessionInDatabase is enabled  -  by @​Bekacru (f0e8f)
• Export oAuth types  -  by @​hyoban in https://github.com/better-auth/better-auth/issues/2028 (0b6a2)
• Og image compat  -  by @​Kinfe123 (e2d6b)
• Og image compatibility on multiple link previews  -  by @​Kinfe123 (a2174)
• Tooltip arrow  -  by @​Kinfe123 (1c605)
• Tooltip arrow pointer  -  by @​Kinfe123 (e62ea)
• Forget password flow failing because of id conversion  -  by @​sosweetham in https://github.com/better-auth/better-auth/issues/2083 (75faf)
• Dep issue  -  by @​Kinfe123 (4ff81)
• Deployment compat issue  -  by @​Kinfe123 (3b6d8)
• Verify github email when profile has an email  -  by @​erquhart in https://github.com/better-auth/better-auth/issues/2078 (fcb43)
• Docs syntax spacing  -  by @​Kinfe123 (11166)
• GenericOAuth default redirectURI for account linking  -  by @​dbworku in https://github.com/better-auth/better-auth/issues/2147 (d2453)
• Missing disableRefresh type in server side getSession  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2141 (fb431)
• Redirect to defaultErrorURL if errorURL doens't exist  -  by @​Bekacru (6a089)
• Plugin middleware docs  -  by @​Kinfe123 (bfdb2)
• Improve header value retrieval for IP address extraction  -  by @​ozgurozalp in https://github.com/better-auth/better-auth/issues/1865 (cbbd6)
• Prisma client docs  -  by @​Kinfe123 (f4a38)
• Community page interaction  -  by @​Kinfe123 (ea465)
• Community page interaction  -  by @​Kinfe123 (171fa)
• Hover style for light mode in community page  -  by @​Kinfe123 (06d65)
• IpAddress and userAgent missing on server authentication  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2121 (a9274)
• Missing export one time token plugin  -  by @​wadefletch in https://github.com/better-auth/better-auth/issues/2222 (b7c72)
• Delete from session table when stopImpersonate called  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2230 (3f4af)
• Filter out fields with returned: false from session cookie cache  -  by @​Kinfe123 in https://github.com/better-auth/better-auth/issues/2232 (78f18)
• Rethrow error from db hooks if it is APIError instances  -  by @​Bekacru (45f43)
• admin:
  • Pass where clause to adapter.count to fix total value on listUser  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/2109 (38128)
  • DefaultRoles, adminRoles + others not applying user config  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2128 (4dcb9)
  • 'dontRememberMe' cookie handling during impersonation  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2236 (2249f)
• api-key:
  • Return value of permissions should be object, not string  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/1757 (f633d)
  • Update rateLimitEnabled default to consider options  -  by @​ismael-iskauskas in https://github.com/better-auth/better-auth/issues/1887 (b2def)
• apple:
  • Update responseType to include code and id_token  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2091 (c0f15)
• custom-session:
  • Custom session failing to set cookies  -  by @​Bekacru in https://github.com/better-auth/better-auth/issues/2124 (61dc4)
• generic-oauth:
  • Should check for email after mapProfileToUser  -  by @​Bekacru (0b5c1)
• oauth:
  • Encode clientId and clientSecret in authorization header  -  by @​xinyao27 in https://github.com/better-auth/better-auth/issues/2120 (ffa24)
• oauth-proxy:
  • Extend callback and sign-in path matchers to include /oauth2/callback and /sign-in/oauth2  -  by @​Bekacru (7987d)
• oidc-provider:
  • Add cookie options for path and sameSite in authorize  -  by @​Bekacru (dbe66)
• open-api:
  • Hide disabled paths  -  by @​CrutchTheClutch in https://github.com/better-auth/better-auth/issues/2144 (f257f)
• organization:
  • Update default invitation expiration time to use seconds  -  by @​Bekacru (834e3)
  • Fix conditional teamId inference  -  by @​Netrifier in https://github.com/better-auth/better-auth/issues/2133 (a6860)
  • UpdateMemberRole failing if issuer has multiple roles  -  by @​dustin-we in https://github.com/better-auth/better-auth/issues/2104 (72631)
• stripe:
  • Allow customizing subscription schema  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2105 (10893)
  • Throw err if passed referenceId when no subscription authorizeReference` is defined  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2129 (9efcd)
  • Update referenceId in checkout session to use client_reference_id instead of metadata  -  by @​Bekacru (08130)
• two-factor:
  • 2fa error codes failing to infer  -  by @​ping-maxwell in https://github.com/better-auth/better-auth/issues/2102 (f7199)

    View changes on GitHub

hyoban/eslint-config-hyoban (eslint-config-hyoban)

v3.2.2

Compare Source

   🐞 Bug Fixes

• Update deps  -  by @​hyoban (7f30e)

    View changes on GitHub

pmndrs/jotai (jotai)

v2.12.3

Compare Source

This introduces an internal capability for jotai-devtools.

What's Changed

• fix: expose an internal function for devtools by @​dai-shi in https://github.com/pmndrs/jotai/pull/3045
• fix(react): experimental option to make attaching promise status controllable by @​dai-shi in https://github.com/pmndrs/jotai/pull/3026

New Contributors

• @​siyou made their first contribution in https://github.com/pmndrs/jotai/pull/3029

Full Changelog: pmndrs/jotai@v2.12.2...v2.12.3

KaTeX/KaTeX (katex)

v0.16.22

Compare Source

Bug Fixes

• \relax in base or exponent of super/subscript (#​4045) (1f43c84)

lint-staged/lint-staged (lint-staged)

v15.5.1

Compare Source

Patch Changes

• #​1533 5d53534 Thanks @​iiroj! - Improve listing of staged files so that lint-staged doesn't crash when encountering an uninitialized submodule. This should result in less errors like:

  ✖ Failed to get staged files!
  

markedjs/marked (marked)

v15.0.11

Compare Source

Bug Fixes

• fix image alt text rendered to match common mark (#​3668) (2c0e47a)

v15.0.10

Compare Source

Bug Fixes

• fix non-breaking space in link url (#​3667) (e071e25)

v15.0.9

Compare Source

Bug Fixes

• fix link url with no closing parenthesis (#​3664) (72b6373)

v15.0.8

Compare Source

Bug Fixes

• fix emstrong inside escaped backticks (#​3652) (721dc58)

motiondivision/motion (motion)

v12.6.5

Compare Source

Fixed

• Polyfilled sync and cancelSync exports.

v12.6.4

Compare Source

Added

• Global injection of WillChangeMotionValue for internal Framer use.

csstools/postcss-plugins (postcss-preset-env)

v10.1.6

[Compare Source](https://redirect.github.com/csstools/postcss-plugins/compare/4125d147214

---

Configuration

📅 Schedule: Branch creation - "after 9pm,before 9am" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
shiro	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 28, 2025 1:38pm

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +17 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +14 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +15 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +14 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +13 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +14 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +12 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +11 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

[github-actions]

📦 Next.js Bundle Analysis for Shiro

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page	Size (compressed)
global	88.87 KB (🟡 +11 B)

Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!