chore(deps): bump better-auth from 1.3.30 to 1.4.11 in the better-auth group

[dependabot]

Bumps the better-auth group with 1 update: better-auth.

Updates better-auth from 1.3.30 to 1.4.11

Release notes

Sourced from better-auth's releases.

v1.4.11

   🚀 Features

• Add auth.api.verifyPassword  -  by @​SaviruFr and @​himself65 in better-auth/better-auth#6934 (c0414)
• anonymous: Delete anonymous user endpoint  -  by @​ping-maxwell in better-auth/better-auth#6377 (cf2b3)
• generic-oauth: Add Gumroad login support  -  by @​ptaberg and @​himself65 in better-auth/better-auth#7100 (3c5d5)
• saml: Reject SAML responses containing multiple assertions  -  by @​Paola3stefania and Alexander Asomba in better-auth/better-auth#6836 (40a82)
• stripe: Enhance stripe plugin with organization customer support  -  by @​bytaesu and Cmion in better-auth/better-auth#7142 (6937f)

   🐞 Bug Fixes

• Filter null values from dynamic trusted origins  -  by @​bytaesu and @​himself65 in better-auth/better-auth#7080 (0e7a5)
• Call hooks on change-email-verification flow  -  by @​bytaesu in better-auth/better-auth#7160 (740b2)
• Clean up expired rate-limit entries on memory storage  -  by @​ping-maxwell in better-auth/better-auth#7161 (89567)
• Set Location header on redirected responses  -  by @​GautamBytes and @​ping-maxwell in better-auth/better-auth#6232 (59643)
• anonymous:
  • Prevent Convex cleanup from deleting fresh sessions  -  by @​RodrigoRafaelSantos7 and @​ping-maxwell in better-auth/better-auth#5825 (5630b)
• api-key:
  • Remove strict length pre-check in verifyApiKey  -  by @​GautamBytes and @​ping-maxwell in better-auth/better-auth#6259 (06db3)
  • Remove double stringify/parse of metadata field  -  by @​xiaoyu2er, @​ping-maxwell and @​himself65 in better-auth/better-auth#7076 (4d769)
  • Log key verification errors  -  by @​ping-maxwell and @​himself65 in better-auth/better-auth#7174 (65ea3)
• core:
  • Detect dual module error  -  by @​himself65 in better-auth/better-auth#7097 (1baaa)
  • Separate CSRF and origin checks  -  by @​Paola3stefania and @​himself65 in better-auth/better-auth#7204 (35caa)
• docs:
  • Correct tos and policy types in oauth-provider  -  by @​GautamBytes, Gautam Manchandani and @​ping-maxwell in better-auth/better-auth#7194 (8ec99)
• email-otp:
  • Call afterEmailVerification hook on verification  -  by @​GautamBytes and Gautam Manchandani in better-auth/better-auth#7121 (396d7)
• email-verification:
  • Sending email verification of another user fails with EMAIL_ALREADY_VERIFIED  -  by @​ping-maxwell in better-auth/better-auth#7215 (bb5d0)
• mcp:
  • Restore ctx.query from cookie in OAuth flow  -  by @​bytaesu in better-auth/better-auth#6974 (7bd13)
• one-tap:
  • Respect user dismiss actions in prompt retry logic  -  by @​bytaesu in better-auth/better-auth#7211 (eb8a5)
• open-api:
  • Correctly infer type for ZodDefault fields  -  by @​MuzzaiyyanHussain and Taesu in better-auth/better-auth#7150 (6fa91)
• organization:
  • Use opts pattern to enable hook injection  -  by @​bytaesu in better-auth/better-auth#7130 (53776)
• passkey:
  • Add error logs during client verification error  -  by @​ping-maxwell in better-auth/better-auth#7193 (28329)
• prisma-adapter:
  • Lift eq AND conditions to root so update detects unique where field  -  by @​ping-maxwell in better-auth/better-auth#7096 (b3241)
• stripe:
  • Improve error handling and subscriptionSuccess route  -  by @​bytaesu in better-auth/better-auth#7087 (14fc9)
  • Pass metadata to subscription object in upgrade method  -  by @​bytaesu in better-auth/better-auth#7090 (d1c3a)
  • Prevent duplicate subscription creation when a subscription already exists  -  by @​bytaesu in better-auth/better-auth#7104 (46ac1)
• two-factor:
  • Prisma issue  -  by @​okisdev, @​Bekacru, @​ping-maxwell and ping-maxwell in better-auth/better-auth#5347 (e4d72)
  • Add missing POST endpoints to client pathMethods  -  by @​theonlypal in better-auth/better-auth#7284 (63d67)

... (truncated)

Commits

• 3b8db34 chore: release v1.4.11
• 63d6721 fix(two-factor): add missing POST endpoints to client pathMethods (#7284)
• 1359f1c chore: add --coverage.provider=istanbul to coverage script (#7262)
• 65ea323 fix(api-key): log key verification errors (#7174)
• 35caa43 fix(core): separate CSRF and origin checks (#7204)
• e4d7250 fix(two-factor): prisma issue (#5347)
• 4d76903 fix(api-key): remove double stringify/parse of metadata field (#7076)
• 1e0adc0 docs: clarify MongoDB adapter transaction default behavior (#7241)
• 037b81b chore: release v1.4.11-beta.2
• d4dcea0 chore: release v1.4.11-beta.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}