[AIDE-121] Update Packages - #94
Merged
Merged
Conversation
Upgrade dependencies across the workspace, including next, react, prisma, better-auth, and the control-agent SDKs, to pick up security and bug fixes.
Update better-auth 1.6.29 -> 1.7.0 and jira.js 5.4.0 -> 6.1.0, migrating call sites to the new APIs: - better-auth: replace signInWithOAuth2 with signInSocial, rename providerId to provider, and adopt renamed OIDC options (issuer -> accountIssuer, requireIssuerValidation -> requireIdTokenVerification); drop the deprecated genericOAuthClient plugin. - jira.js: build Cloud/Agile clients from a shared createClient() instance, replace comment with body, and use nextPageToken/isLast pagination with structured search warnings instead of startAt/total. - Update ncu reject list for the new transitive toolchain packages.
Add .aikido and .npmrc configuration to enforce a minimum release age for package upgrades, and update the upgrade scripts to apply the release-age gate when installing and upgrading dependencies.
chandlerhuff
force-pushed
the
feature/AIDE-121-update-packages
branch
from
August 28, 2026 17:25
8f0a84a to
2d4d169
Compare
Better Auth 1.7 scopes provider identities by issuer and account ID, so add a required issuer column and migrate existing accounts into a stable local namespace that preserves the previous providerId-based identity. Also redact tokens, passwords, and secrets from Better Auth log output and standalone test logs.
Bump next to 16.3.3, prisma to 7.10.0, better-auth to 1.7.2, and other patch/minor releases across root and control-agent packages.
Remove the user-agent protocol version check from the Codex app-server handshake and its tests. The supported-version whitelist is no longer needed for the updated app-server dependency.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Upgrades the project's dependencies to current versions — most notably better-auth 1.6 → 1.7, jira.js 5.4 → 6.1, Next.js 16.2 → 16.3, Prisma 7.8 → 7.9, React 19.2.7 → 19.2.8, plus radix-ui, recharts, lucide-react, undici, and many dev tooling packages — and adapts the codebase to the breaking API changes introduced by the major bumps.
Changes
signInWithOAuth2/{providerId} →signInSocial/{provider} in the mobile OAuth start route (src/app/api/auth/mobile/oauth/start/route.ts) and the client-side login form (src/components/auth/auth-form.tsx). Updated the generic OIDC provider config:issuer→accountIssuer,requireIssuerValidation→requireIdTokenVerification, and removed the obsoletegenericOAuthClientclient plugin.Version3Client/AgileClientclass constructors to the new factory pattern — a single sharedcreateClient()(jira.js/core) with the newauth.type: "basic"config shape, wrapped bycreateCloudClient()andcreateAgileClient()(src/services/jira/jira.service.ts). Renamedversion3tocloudacross the service and all tests.searchForIssuesUsingJqlEnhancedSearch→searchAndReconsileIssuesUsingJql, switchedgetProject/getAllStatusestoprojectIdOrKey, andaddCommentnow takesbodyinstead ofcomment.startAt/maxResults/total) with continuation tokens for JQL, board, and sprint issue loads — now driven bynextPageTokenandisLast. Added surfacing of structured JQL searchwarnings` and guards that stop pagination (with a warning) if Jira returns a repeated token..ncurc.jsonreject list (better-sqlite3, @babel/plugin-transform-runtime), added@babel/plugin-transform-runtimedevDependency, added anoverridesentry pinning@better-auth/coreto 1.7.0, and bumped control-agent SDKs (@opencode-ai/sdk,@openai/codex-sdk,@anthropic-ai/claude-agent-sdk).Ticket: AIDE-121