chore(deps): upgrade better-auth from 1.3.12 to 1.4.18

[waleedlatif1]

Summary

• Upgrade better-auth, @better-auth/sso, @better-auth/stripe from 1.3.12 to 1.4.18
• Rename auth.api.forgetPassword → auth.api.requestPasswordReset (breaking rename in 1.4)
• Migrate organizationCreation.afterCreate → organizationHooks.afterCreateOrganization
• Fix oneTimeToken expiresIn from 86400 (60 days) to 1440 (24 hours) — unit is minutes not seconds
• Update sendResetPassword callback signature (request → ctx)

Type of Change

• Dependency upgrade

Testing

• All 3,997 tests passing
• TypeScript compilation clean

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Feb 19, 2026 0:45am

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Duplicate dependencies added to root monorepo package.json

Low Severity

better-auth, @better-auth/sso, and @better-auth/stripe were added as runtime dependencies in the root monorepo package.json, but they already exist in apps/sim/package.json. The root previously had no dependencies section at all — only devDependencies and overrides. This looks like the upgrade command was accidentally run from the repo root instead of from apps/sim/. Having these duplicated at both levels is unnecessary and inconsistent with the monorepo convention used by this project.

Additional Locations (1)

• bun.lock#L6-L11

 

[greptile-apps]

Greptile Summary

This PR upgrades better-auth and related packages from 1.3.12 to 1.4.18, addressing breaking API changes introduced in version 1.4.

Key Changes:

• Renamed auth.api.forgetPassword → auth.api.requestPasswordReset across API routes and tests
• Updated sendResetPassword callback signature from request to ctx parameter
• Migrated organizationCreation.afterCreate → organizationHooks.afterCreateOrganization with updated parameters
• Fixed oneTimeToken expiresIn from 86400 (incorrectly interpreted as 60 days in seconds) to 1440 (24 hours in minutes) - the plugin expects minutes, not seconds
• All tests passing (3,997), TypeScript compilation clean

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• All breaking changes from better-auth 1.4 upgrade have been properly handled with correct API renames, parameter updates, and bug fix for token expiration. All 3,997 tests pass, TypeScript compiles cleanly, and changes follow a systematic pattern across files.
• No files require special attention

Important Files Changed

Filename	Overview
apps/sim/package.json	Upgraded better-auth, @better-auth/sso, @better-auth/stripe from 1.3.12 to 1.4.18
apps/sim/lib/auth/auth.ts	Updated API signatures: sendResetPassword callback parameter and organizationCreation → organizationHooks, fixed oneTimeToken expiresIn to use minutes
apps/sim/app/api/auth/forget-password/route.ts	Renamed auth.api.forgetPassword → auth.api.requestPasswordReset to match breaking change

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[better-auth v1.3.12] -->|Upgrade| B[better-auth v1.4.18]
    B --> C[API Rename: forgetPassword to requestPasswordReset]
    B --> D[Callback Update: sendResetPassword parameter]
    B --> E[Hook Migration: organizationCreation to organizationHooks]
    B --> F[Bug Fix: oneTimeToken expiresIn units]
    C --> G[Update route.ts]
    C --> H[Update test files]
    D --> I[Change request to ctx]
    E --> J[Update afterCreate to afterCreateOrganization]
    F --> K[86400 seconds to 1440 minutes]

Loading

_{Last reviewed commit: 248b513}

[greptile-apps]

_{7 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}