ZacharyZhang-NY/ELY-Browser
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(cloudflare): upgrade vulnerable auth dependency

Browse Source
This commit is contained in:
ZacharyZhang-NY
2026-07-09 22:55:37 -04:00
parent 7d70db6da9
commit 3b528ab5c9
4 changed files with 92 additions and 87 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+4
View File
@@ -165,6 +165,10 @@ jobs:
run: npm ci run: npm ci
working-directory: cloudflare working-directory: cloudflare
- name: Audit production dependencies
run: npm audit --omit=dev --audit-level=high
working-directory: cloudflare
- name: Check worker types - name: Check worker types
run: npm run check run: npm run check
working-directory: cloudflare working-directory: cloudflare
cloudflare/package-lock.json
Generated
+86 -85
View File
@@ -8,7 +8,7 @@
"name": "@elydora/cloudflare-worker", "name": "@elydora/cloudflare-worker",
"version": "0.1.0", "version": "0.1.0",
"dependencies": { "dependencies": {
"better-auth": "^1.6.9" "better-auth": "1.6.23"
}, },
"devDependencies": { "devDependencies": {
"@cloudflare/workers-types": "4.20260508.1", "@cloudflare/workers-types": "4.20260508.1",
@@ -18,9 +18,9 @@
} }
}, },
"node_modules/@better-auth/core": { "node_modules/@better-auth/core": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/core/-/core-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/core/-/core-1.6.23.tgz",
"integrity": "sha512-ADFk5pwmLybmc+LvYvXJ6M1x2oY/EyYLkwLuH0x28FUq12DfjL0wnE7g+WRDf3yozDO+qIxTpFGXDGwLKbfz0w==", "integrity": "sha512-beEhOs0uVeOxYOZKUfIEBd/nQV2Bd4/6wyLxZ0OFkn6CMTK2Vi+hXuZLnyPBeB6RdHpebEoJWiHqwHxBIxgPDQ==",
"license": "MIT", "license": "MIT",
"dependencies": { "dependencies": {
"@opentelemetry/semantic-conventions": "^1.39.0", "@opentelemetry/semantic-conventions": "^1.39.0",
@@ -28,13 +28,13 @@
"zod": "^4.3.6" "zod": "^4.3.6"
}, },
"peerDependencies": { "peerDependencies": {
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"@better-fetch/fetch": "1.1.21", "@better-fetch/fetch": "1.3.1",
"@cloudflare/workers-types": ">=4", "@cloudflare/workers-types": ">=4",
"@opentelemetry/api": "^1.9.0", "@opentelemetry/api": "^1.9.0",
"better-call": "1.3.5", "better-call": "1.3.7",
"jose": "^6.1.0", "jose": "^6.1.0",
"kysely": "^0.28.5", "kysely": "^0.28.5 || ^0.29.0",
"nanostores": "^1.0.1" "nanostores": "^1.0.1"
}, },
"peerDependenciesMeta": { "peerDependenciesMeta": {
@@ -47,13 +47,13 @@
} }
}, },
"node_modules/@better-auth/drizzle-adapter": { "node_modules/@better-auth/drizzle-adapter": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/drizzle-adapter/-/drizzle-adapter-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/drizzle-adapter/-/drizzle-adapter-1.6.23.tgz",
"integrity": "sha512-Lcco5hOGrMgc4XKAkvB6x72eQm4wCcya8IevMg4wBHY9W9GVg8pu23rpRX6VsVQSO4Ux13S7lFwUWtF7/r9aKw==", "integrity": "sha512-2+/PTVfIP9E7iz6af8TB3lhnowHUj9ljC66kECmHaFEdUqPgzHoWux9epotKwO7XDg2ui4ttWQ8CMeNFLvQeKQ==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"drizzle-orm": "^0.45.2" "drizzle-orm": "^0.45.2"
}, },
"peerDependenciesMeta": { "peerDependenciesMeta": {
@@ -63,14 +63,14 @@
} }
}, },
"node_modules/@better-auth/kysely-adapter": { "node_modules/@better-auth/kysely-adapter": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/kysely-adapter/-/kysely-adapter-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/kysely-adapter/-/kysely-adapter-1.6.23.tgz",
"integrity": "sha512-gyjuuxJtZ4o9G9z9q4kqn24X2kvMSp7F+KHogYxF03SnXY/2WleAcuj57iC4wP3e9mGDbjPOrnM5K6Kr3Ktdpw==", "integrity": "sha512-zbNJsMbG09exfkGyvFqBLLqWoMPAUWjxCuUnEK5AsjbYoZeIjj/QGZgdf4CapVWryKxjA9Q6Jlr6fbiPpC3VAg==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"kysely": "^0.28.14" "kysely": "^0.28.17 || ^0.29.0"
}, },
"peerDependenciesMeta": { "peerDependenciesMeta": {
"kysely": { "kysely": {
@@ -79,23 +79,23 @@
} }
}, },
"node_modules/@better-auth/memory-adapter": { "node_modules/@better-auth/memory-adapter": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/memory-adapter/-/memory-adapter-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/memory-adapter/-/memory-adapter-1.6.23.tgz",
"integrity": "sha512-XmIG4tUnOXZ+KEcWjHUjOI9Z5donD09dC2t/AQTXifAUIqx7cySg86w0KTM09ArzAxRx1fCqO36Wkt5nULnrkQ==", "integrity": "sha512-krIiR0pIVkaKlAzm690n5bcMW4NGbqeMg0HQSD9fz/KcQF/eWLqcq9gG/BhHTj2i/y96qH+W5JWPmaSOS5iTgQ==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0" "@better-auth/utils": "0.4.2"
} }
}, },
"node_modules/@better-auth/mongo-adapter": { "node_modules/@better-auth/mongo-adapter": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/mongo-adapter/-/mongo-adapter-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/mongo-adapter/-/mongo-adapter-1.6.23.tgz",
"integrity": "sha512-h+AiRJ/TsBSi+ZDjySASBpbJ/9QCXBre34PSKgCz7QmTHrFM9Cg2EM4AM7LjR5lPXipEE+2rWPBc9wfnUBjhcw==", "integrity": "sha512-7+QdevitGlKBbP6JbiSk5SBnzPsKV/mDrQBGBn8hwByQLeJwqpqbuBPw7ZI8vzUlFfAAnyFiqwP3Eb8mxnp7pA==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"mongodb": "^6.0.0 || ^7.0.0" "mongodb": "^6.0.0 || ^7.0.0"
}, },
"peerDependenciesMeta": { "peerDependenciesMeta": {
@@ -105,13 +105,13 @@
} }
}, },
"node_modules/@better-auth/prisma-adapter": { "node_modules/@better-auth/prisma-adapter": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/prisma-adapter/-/prisma-adapter-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/prisma-adapter/-/prisma-adapter-1.6.23.tgz",
"integrity": "sha512-XHks01ntK20orqK/jICq8wmEbJ/zT6dct49Fk8zTQKN9QNGDc+Ix5+7z/Kvui0DXGFf790GfvRozquzaLtXa8Q==", "integrity": "sha512-2qSdzidq4tkb1eS5TTqb4Nzg0mdZWm3Qky9SYeXeb8PpVQbC2sxqJhEM5mK7y12uU6I8hc64wO9f7AFVNL+6UQ==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"@prisma/client": "^5.0.0 || ^6.0.0 || ^7.0.0", "@prisma/client": "^5.0.0 || ^6.0.0 || ^7.0.0",
"prisma": "^5.0.0 || ^6.0.0 || ^7.0.0" "prisma": "^5.0.0 || ^6.0.0 || ^7.0.0"
}, },
@@ -125,29 +125,30 @@
} }
}, },
"node_modules/@better-auth/telemetry": { "node_modules/@better-auth/telemetry": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/@better-auth/telemetry/-/telemetry-1.6.9.tgz", "resolved": "https://registry.npmjs.org/@better-auth/telemetry/-/telemetry-1.6.23.tgz",
"integrity": "sha512-0u5zkhSCAQFoN3DHvUkLHOF6MBbVTDAa6mU8mhPwiysdz1x21vMzhzfaAKN/ZGWaQ09v91/F+2qu42G/bhUV4A==", "integrity": "sha512-/R2Kb+z2BpDOOWwVHqOk+c0VNpuwfCv4Hp5Yr9003WIZPax/zyNraGLB9CFE8qF2gZW8Dsz419k4I8CPrGzpDA==",
"license": "MIT", "license": "MIT",
"peerDependencies": { "peerDependencies": {
"@better-auth/core": "^1.6.9", "@better-auth/core": "^1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"@better-fetch/fetch": "1.1.21" "@better-fetch/fetch": "1.3.1"
} }
}, },
"node_modules/@better-auth/utils": { "node_modules/@better-auth/utils": {
"version": "0.4.0", "version": "0.4.2",
"resolved": "https://registry.npmjs.org/@better-auth/utils/-/utils-0.4.0.tgz", "resolved": "https://registry.npmjs.org/@better-auth/utils/-/utils-0.4.2.tgz",
"integrity": "sha512-RpMtLUIQAEWMgdPLNVbIF5ON2mm+CH0U3rCdUCU1VyeAUui4m38DyK7/aXMLZov2YDjG684pS1D0MBllrmgjQA==", "integrity": "sha512-AUxrvu+HaaODsUyzDxFgwd/8RZ1yZaYo42LXKSrU2oGgR38pS1ij8nqQKNgtTWoYGpNevNXtCfgTy6loHveW9A==",
"license": "MIT", "license": "MIT",
"dependencies": { "dependencies": {
"@noble/hashes": "^2.0.1" "@noble/hashes": "^2.0.1"
} }
}, },
"node_modules/@better-fetch/fetch": { "node_modules/@better-fetch/fetch": {
"version": "1.1.21", "version": "1.3.1",
"resolved": "https://registry.npmjs.org/@better-fetch/fetch/-/fetch-1.1.21.tgz", "resolved": "https://registry.npmjs.org/@better-fetch/fetch/-/fetch-1.3.1.tgz",
"integrity": "sha512-/ImESw0sskqlVR94jB+5+Pxjf+xBwDZF/N5+y2/q4EqD7IARUTSpPfIo8uf39SYpCxyOCtbyYpUrZ3F/k0zT4A==" "integrity": "sha512-ABkD1WhyfPZprKRQI3bhATjeiFuNWC9PXhfGWqL+sg/gKrM977oFrYkdb4msM3hgUGonr7KlOsOFT5TU2rht9g==",
"license": "MIT"
}, },
"node_modules/@cloudflare/kv-asset-handler": { "node_modules/@cloudflare/kv-asset-handler": {
"version": "0.5.0", "version": "0.5.0",
@@ -281,9 +282,9 @@
} }
}, },
"node_modules/@emnapi/runtime": { "node_modules/@emnapi/runtime": {
"version": "1.10.0", "version": "1.11.2",
"resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz", "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.2.tgz",
"integrity": "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==", "integrity": "sha512-kyOl3X0DuTiT1h2ft8r2fYO8JYtU9a9Xis/zBSiGArNaagCOWx90N1k2wxp18czFDH+OgcWGb5ZP/XMt3dcyPA==",
"dev": true, "dev": true,
"license": "MIT", "license": "MIT",
"optional": true, "optional": true,
@@ -1324,9 +1325,9 @@
} }
}, },
"node_modules/@opentelemetry/semantic-conventions": { "node_modules/@opentelemetry/semantic-conventions": {
"version": "1.40.0", "version": "1.43.0",
"resolved": "https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.40.0.tgz", "resolved": "https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.43.0.tgz",
"integrity": "sha512-cifvXDhcqMwwTlTK04GBNeIe7yyo28Mfby85QXFe1Yk8nmi36Ab/5UQwptOx84SsoGNRg+EVSjwzfSZMy6pmlw==", "integrity": "sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==",
"license": "Apache-2.0", "license": "Apache-2.0",
"engines": { "engines": {
"node": ">=14" "node": ">=14"
@@ -1375,9 +1376,9 @@
} }
}, },
"node_modules/@speed-highlight/core": { "node_modules/@speed-highlight/core": {
"version": "1.2.15", "version": "1.2.17",
"resolved": "https://registry.npmjs.org/@speed-highlight/core/-/core-1.2.15.tgz", "resolved": "https://registry.npmjs.org/@speed-highlight/core/-/core-1.2.17.tgz",
"integrity": "sha512-BMq1K3DsElxDWawkX6eLg9+CKJrTVGCBAWVuHXVUV2u0s2711qiChLSId6ikYPfxhdYocLNt3wWwSvDiTvFabw==", "integrity": "sha512-Z92FwKpCtfaW1V0jTU/fh3QzYEZN8wDwrzRIBoADCJfn4mJCNcJN/XegifX7BDrQ8/h9Xh/JnbyMchL0FqXrkg==",
"dev": true, "dev": true,
"license": "CC0-1.0" "license": "CC0-1.0"
}, },
@@ -1398,26 +1399,26 @@
} }
}, },
"node_modules/better-auth": { "node_modules/better-auth": {
"version": "1.6.9", "version": "1.6.23",
"resolved": "https://registry.npmjs.org/better-auth/-/better-auth-1.6.9.tgz", "resolved": "https://registry.npmjs.org/better-auth/-/better-auth-1.6.23.tgz",
"integrity": "sha512-EBFURtglyiEZxbx4NJBoqUD8J65dX24yC+6I9AUbIXNgUkt76mshzGbHkxZ3n/lB7Dwq3kBC+hHt0hUQsnL7HA==", "integrity": "sha512-4vOaRd9UiKGKm9R+ej0jjU1es3MiJIiNc9Qq3VCnYqOZ4/nb5272QqTxWYoDxyUXl5x6A2x2we5KZKQO9teTQQ==",
"license": "MIT", "license": "MIT",
"dependencies": { "dependencies": {
"@better-auth/core": "1.6.9", "@better-auth/core": "1.6.23",
"@better-auth/drizzle-adapter": "1.6.9", "@better-auth/drizzle-adapter": "1.6.23",
"@better-auth/kysely-adapter": "1.6.9", "@better-auth/kysely-adapter": "1.6.23",
"@better-auth/memory-adapter": "1.6.9", "@better-auth/memory-adapter": "1.6.23",
"@better-auth/mongo-adapter": "1.6.9", "@better-auth/mongo-adapter": "1.6.23",
"@better-auth/prisma-adapter": "1.6.9", "@better-auth/prisma-adapter": "1.6.23",
"@better-auth/telemetry": "1.6.9", "@better-auth/telemetry": "1.6.23",
"@better-auth/utils": "0.4.0", "@better-auth/utils": "0.4.2",
"@better-fetch/fetch": "1.1.21", "@better-fetch/fetch": "1.3.1",
"@noble/ciphers": "^2.1.1", "@noble/ciphers": "^2.1.1",
"@noble/hashes": "^2.0.1", "@noble/hashes": "^2.0.1",
"better-call": "1.3.5", "better-call": "1.3.7",
"defu": "^6.1.4", "defu": "^6.1.4",
"jose": "^6.1.3", "jose": "^6.1.3",
"kysely": "^0.28.14", "kysely": "^0.28.17 || ^0.29.0",
"nanostores": "^1.1.1", "nanostores": "^1.1.1",
"zod": "^4.3.6" "zod": "^4.3.6"
}, },
@@ -1503,9 +1504,9 @@
} }
}, },
"node_modules/better-call": { "node_modules/better-call": {
"version": "1.3.5", "version": "1.3.7",
"resolved": "https://registry.npmjs.org/better-call/-/better-call-1.3.5.tgz", "resolved": "https://registry.npmjs.org/better-call/-/better-call-1.3.7.tgz",
"integrity": "sha512-kOFJkBP7utAQLEYrobZm3vkTH8mXq5GNgvjc5/XEST1ilVHaxXUXfeDeFlqoETMtyqS4+3/h4ONX2i++ebZrvA==", "integrity": "sha512-Al51/hjp2SSp6CRTa3F2ptcx4yQVS1xWKoY6jcVXqNYOap6mHFP2jUBn5EwIL4iIed1/Sq4hlQ+Umm6EflZG+w==",
"license": "MIT", "license": "MIT",
"dependencies": { "dependencies": {
"@better-auth/utils": "^0.4.0", "@better-auth/utils": "^0.4.0",
@@ -1646,12 +1647,12 @@
} }
}, },
"node_modules/kysely": { "node_modules/kysely": {
"version": "0.28.17", "version": "0.29.3",
"resolved": "https://registry.npmjs.org/kysely/-/kysely-0.28.17.tgz", "resolved": "https://registry.npmjs.org/kysely/-/kysely-0.29.3.tgz",
"integrity": "sha512-nbD8lB9EB3wNdMhOCdx5Li8DxnLbvKByylRLcJ1h+4SkrowVeECAyZlyiKMThF7xFdRz0jSQ2MoJr+wXux2y0Q==", "integrity": "sha512-VHtBdW6XB/pgoTSqraM3UAa2rYoYdNXqnNPpX+8XXP+cwYbVEFuAp3HyPt1vpNfU9l7Y2kpUrA9QDPsy8uUqOQ==",
"license": "MIT", "license": "MIT",
"engines": { "engines": {
"node": ">=20.0.0" "node": ">=22.0.0"
} }
}, },
"node_modules/miniflare": { "node_modules/miniflare": {
@@ -1676,9 +1677,9 @@
} }
}, },
"node_modules/nanostores": { "node_modules/nanostores": {
"version": "1.3.0", "version": "1.4.0",
"resolved": "https://registry.npmjs.org/nanostores/-/nanostores-1.3.0.tgz", "resolved": "https://registry.npmjs.org/nanostores/-/nanostores-1.4.0.tgz",
"integrity": "sha512-XPUa/jz+P1oJvN9VBxw4L9MtdFfaH3DAryqPssqhb2kXjmb9npz0dly6rCsgFWOPr4Yg9mTfM3MDZgZZ+7A3lA==", "integrity": "sha512-i0tloweeudshAEuddpDxcg9Ik6pkPfVsHIgKyf143JrgG7/MOh0+q7BypdLXZPoOP7fOYt1eTcwGkyiVmhJFkA==",
"funding": [ "funding": [
{ {
"type": "github", "type": "github",
@@ -1711,9 +1712,9 @@
"license": "MIT" "license": "MIT"
}, },
"node_modules/semver": { "node_modules/semver": {
"version": "7.7.4", "version": "7.8.5",
"resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz", "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
"integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==", "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
"dev": true, "dev": true,
"license": "ISC", "license": "ISC",
"bin": { "bin": {
@@ -1724,9 +1725,9 @@
} }
}, },
"node_modules/set-cookie-parser": { "node_modules/set-cookie-parser": {
"version": "3.1.0", "version": "3.1.2",
"resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.0.tgz", "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-3.1.2.tgz",
"integrity": "sha512-kjnC1DXBHcxaOaOXBHBeRtltsDG2nUiUni+jP92M9gYdW12rsmx92UsfpH7o5tDRs7I1ZZPSQJQGv3UaRfCiuw==", "integrity": "sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==",
"license": "MIT" "license": "MIT"
}, },
"node_modules/sharp": { "node_modules/sharp": {
cloudflare/package.json
+1 -1
View File
@@ -16,6 +16,6 @@
"wrangler": "4.90.0" "wrangler": "4.90.0"
}, },
"dependencies": { "dependencies": {
"better-auth": "^1.6.9" "better-auth": "1.6.23"
} }
} }
cloudflare/wrangler.toml
+1 -1
View File
@@ -1,7 +1,7 @@
name = "ely-browser-cloud" name = "ely-browser-cloud"
main = "src/index.ts" main = "src/index.ts"
compatibility_date = "2026-05-08" compatibility_date = "2026-05-08"
compatibility_flags = ["nodejs_als"] compatibility_flags = ["nodejs_compat"]
[[d1_databases]] [[d1_databases]]
binding = "ELY_DB" binding = "ELY_DB"