Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps @auth0/nextjs-auth0 from 3.6.0 to 4.14.1.

Release notes

Sourced from @​auth0/nextjs-auth0's releases.

v4.14.1

Fixed

  • fix: do not throw ERR_JWE_DECRYPTION_FAILED, but catch it and ignore the cookie. #2487 (frederikprijck)
  • fix: avoid headers.append error when using getAccessToken with refresh in Next.js 16 proxy #2495 (nandan-bhat)
  • fix: removed un-intended class/type exports from the SDK #2475 (nandan-bhat)

v4.14.0

v4.14.0 (2025-12-15)

Added

v4.13.3

v4.13.3 (2025-12-12)

Fixed

  • bugfix: session write not happening for pages router with chunked cookies #2447 (tusharpandey13)

Security

v4.13.2

Changed

  • Updated peer dependency
    • Next: ^14.2.25 || ~15.0.5 || ~15.1.9 || ~15.2.6 || ~15.3.6 || ~15.4.8 || ~15.5.7 || ^16.0.7
    • React: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1
    • React-DOM: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1

v4.13.1

Added

Fixed

v4.13.0

Added

Fixed

v4.12.1

Changed

  • Remove TokenRequestCache when calling getAccessToken

v4.12.0

... (truncated)

Changelog

Sourced from @​auth0/nextjs-auth0's changelog.

v4.14.1 (2026-01-24)

Full Changelog

Fixed

  • fix: do not throw ERR_JWE_DECRYPTION_FAILED, but catch it and ignore the cookie. #2487 (frederikprijck)
  • fix: avoid headers.append error when using getAccessToken with refresh in Next.js 16 proxy #2495 (nandan-bhat)
  • fix: removed un-intended class/type exports from the SDK #2475 (nandan-bhat)

v4.14.0 (2025-12-15)

Full Changelog

Added

v4.13.3 (2025-12-12)

Full Changelog

Fixed

  • bugfix: session write not happening for pages router with chunked cookies #2447 (tusharpandey13)

Security

v4.13.2 (2025-12-05)

Full Changelog

Changed

  • Updated peer dependency
    • Next: ^14.2.25 || ~15.0.5 || ~15.1.9 || ~15.2.6 || ~15.3.6 || ~15.4.8 || ~15.5.7 || ^16.0.7
    • React: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1
    • React-DOM: ^18.0.0 || ~19.0.1 || ~19.1.2 || ^19.2.1

v4.13.1 (2025-11-19)

Full Changelog

Added

Fixed

v4.13.0 (2025-11-17)

Full Changelog

Added

Fixed

... (truncated)

Commits
  • c01f8a9 Release v4.14.1 (#2499)
  • 4609485 fix: do not throw ERR_JWE_DECRYPTION_FAILED, but catch it and ignore the cook...
  • 21c165f fix: avoid headers.append error when using getAccessToken with refresh in Nex...
  • 427664d chore(deps-dev): bump typescript-eslint from 8.53.0 to 8.53.1 (#2492)
  • 4e5efa6 chore(deps-dev): bump @​testing-library/react from 16.3.1 to 16.3.2 (#2498)
  • e78d278 chore(deps-dev): bump typedoc from 0.28.15 to 0.28.16 (#2483)
  • 0b660fc chore(deps-dev): bump typescript-eslint from 8.50.1 to 8.53.0 (#2486)
  • 227133a chore(deps): bump undici from 7.16.0 to 7.18.2 in /examples/with-dpop (#2490)
  • 376181f chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 (#2491)
  • c9b13ad chore: Add commit hooks (#2481)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) from 3.6.0 to 4.14.1.
- [Release notes](https://github.com/auth0/nextjs-auth0/releases)
- [Changelog](https://github.com/auth0/nextjs-auth0/blob/main/CHANGELOG.md)
- [Commits](auth0/nextjs-auth0@v3.6.0...v4.14.1)

---
updated-dependencies:
- dependency-name: "@auth0/nextjs-auth0"
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 26, 2026
@netlify
Copy link

netlify bot commented Jan 26, 2026

Deploy Preview for fxms-skylight failed. Why did it fail? →

Name Link
🔨 Latest commit 53e5120
🔍 Latest deploy log https://app.netlify.com/projects/fxms-skylight/deploys/69778364b7a8610008e44b10

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants