fix: update Better Auth dependencies

[eluce2]

Summary

• Updates Better Auth dependencies to patched/current releases for the reported CVEs.
• Regenerates the package manager lockfile.
• No application logic changes intended.

Advisory context

Addresses Better Auth CVE exposure from pre-1.6.11 packages and brings conditional later-version exposure forward to the current patched release where applicable.

Test plan

• Regenerated lockfile only with the repo's package manager (pnpm install --lockfile-only --ignore-scripts or Bun lockfile-only for Bun repos).

Not merged by request.

Summary by CodeRabbit

• Chores
  • Updated the Better Auth package dependency to a newer version to improve compatibility and ensure you get the latest upstream fixes and improvements.
  • Added a changeset to publish this update as a patch release.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
proofkit-docs	Ready	Preview, Comment	Jul 16, 2026 3:54pm

[changeset-bot]

🦋 Changeset detected

Latest commit: 788446b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@proofkit/better-auth	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 2519ab50-de86-4d2a-b8ef-94adcba70278

📥 Commits

Reviewing files that changed from the base of the PR and between 58d2343 and 788446b.

📒 Files selected for processing (1)

• .changeset/neat-rocks-laugh.md

---

📝 Walkthrough

Walkthrough

The better-auth dependency is updated from ^1.5.4 to ^1.6.23, and a patch changeset is added for @proofkit/better-auth.

Changes

Better Auth dependency update

Layer / File(s)	Summary
Update dependency and release metadata packages/better-auth/package.json, .changeset/neat-rocks-laugh.md	The better-auth dependency range is updated to ^1.6.23, and a patch changeset records the update for @proofkit/better-auth.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and accurately summarizes the main change: updating Better Auth dependencies.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch comet/fix-better-auth-cves

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@proofkit/better-auth

pnpm add https://pkg.pr.new/@proofkit/better-auth@299

@proofkit/fmdapi

pnpm add https://pkg.pr.new/@proofkit/fmdapi@299

@proofkit/fmodata

pnpm add https://pkg.pr.new/@proofkit/fmodata@299

@proofkit/typegen

pnpm add https://pkg.pr.new/@proofkit/typegen@299

@proofkit/webviewer

pnpm add https://pkg.pr.new/@proofkit/webviewer@299

commit: 788446b