chore: sync upstream v3.4.0 + bump btst to 1.2.3#7
Merged
olliethedev merged 22 commits intomainfrom Apr 6, 2026
Merged
Conversation
This should prevent default GET behavior when JavaScript is loading or has issues
ua-parser-js v2.0.0+ is licensed under AGPLv3, which is incompatible with this project's MIT license. Replace it with bowser (MIT-licensed) which provides equivalent user-agent parsing functionality. Fixes better-auth-ui#346 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…m field-level error messages Adds an optional `errorMessage` property with `required`, `invalid`, and `validate` string fields to `AdditionalField`. When provided, these override the default concatenated messages (e.g. "termsAccepted is required") with user-specified text in sign-up and settings forms. Closes better-auth-ui#335 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add `method="POST"` to all form elements
Fix: Set Password asking for Missing CAPTCHA response
…e-ua-parser-js-with-bowser Replace ua-parser-js with bowser (AGPL -> MIT)
Add onUpdateComplete support to UpdateFieldCard
fix: Use correct `apiKeys` from nested key
…m-field-error-messages feat: custom field-level error messages
Update TanStack Start docs and provider setup: remove the note about installing @daveyplate/better-auth-tanstack in the intro. In app/providers.tsx replace AuthQueryProvider/AuthUIProviderTanstack with AuthUIProvider from @daveyplate/better-auth-ui/tanstack, remove the QueryClient import and the queryClient creation, and wrap children directly with AuthUIProvider while passing authClient, navigate, replace, and Link props.
Fix incorrect prop name passed to useHasPermission in two components. Renamed `permission` to `permissions` in MemberCell and OrganizationMembersContent so the hook receives the expected prop and member update permission checks work correctly.
Add a callbackURL prop and propagate it from AuthForm into SignInForm. Update SignInFormProps and the SignInForm component to accept and forward callbackURL into the sign-in request payload, enabling callers to supply a post-auth callback/redirect URL. Changes in src/components/auth/auth-form.tsx and src/components/auth/forms/sign-in-form.tsx.
Remove the getRedirectTo useCallback and inline its logic inside the onSuccess effect. The effect now computes redirectTo from redirectToProp, the search param, or contextRedirectTo and includes redirectToProp and contextRedirectTo in its dependency array. This avoids a stale-closure bug and simplifies the hook implementation (file: src/hooks/use-success-transition.ts).
Update package.json version from 3.3.15 to 3.4.0 to prepare a new minor release. No other changes were made in this commit.
…ter-auth-ui-sync-b8af # Conflicts: # package.json # pnpm-lock.yaml Co-authored-by: Ollie <olliethedev@users.noreply.github.com>
Co-authored-by: Ollie <olliethedev@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
8 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Weekly Upstream Sync — April 3, 2026
What's changing
better-auth-uiv3.4.0 into our fork (upstream was at 3.4.0, our merge base was 3.3.15)@btst/better-auth-uiversion:1.2.2→1.2.3(patch bump — pure upstream sync with no new btst additions)@btst/stackpeer dep:>=2.6.1→>=2.10.0(latest published version)pnpm-lock.yamlagainst upstream's lockfile baselineUpstream changes included (v3.4.0)
ua-parser-js(AGPL) withbowser— license fixAuthUIProvider, removeAuthQueryProvider)permissionsprop foruseHasPermission(waspermission)callbackURLtoSignInFormuseOnSuccessTransitionerrorMessageproperty toAdditionalFieldonUpdateCompletesupport toUpdateFieldCarduseListApiKeysreturn type ({ apiKeys: ApiKey[] })isRefetchingtoAuthHooktypeapiKeyClientimport to@better-auth/api-key/clientlucide-react^1.0.1,typescript^6.0.2,turbo^2.8.20,tailwind-merge^3.5.0,@tanstack/react-query^5.95.2No btst-specific changes required
AuthUIProviderPropsorAuthUIContextTypeprops → no bridge updates neededturbo build✓)anywarnings in test files)Note
Medium Risk
Upgrades core auth-related dependencies (e.g.,
better-authto^1.5.6) and adjusts integration guidance, which can introduce subtle runtime and type incompatibilities despite being mostly version bumps.Overview
Syncs to upstream and bumps
@btst/better-auth-uifrom1.2.2to1.2.3, updating a set of auth/UI/tooling dependencies (notablybetter-auth/@better-auth/*,@tanstack/react-query,typescript, and replacingua-parser-jswithbowser).Updates the TanStack Start integration docs to use the new
AuthUIProviderflow (droppingAuthQueryProvider/AuthUIProviderTanstackwiring) and removesbaseUrlfrom the docstsconfig.json.Reviewed by Cursor Bugbot for commit 9e812e9. Bugbot is set up for automated code reviews on this repo. Configure here.