supabase / auth / 29502468463

Builds Branch Commit Type Ran Committer Via Coverage
29502468463 master chore: add lint rule to ensure Go versions stay in sync (#2627) Adds lint rule to ensure Go versions remain in sync across go.mod files and Dockerfiles. Errors would show up as follows: <img width="807" height="199" alt="Screenshot 2026-07-16 a... push web-flow github
71.72
29502596841 release-please--branches--master chore(master): release 2.193.1 Pull #2626 web-flow github
71.72
29493610908 fm/go-version-lint chore: align Go versions across Dockerfiles and go.mod Pull #2627 fadymak github
71.73
29354944929 release-please--branches--master chore(master): release 2.193.1 Pull #2626 web-flow github
71.7
29354833746 master fix: build darwin-arm64 release binaries with GOOS=darwin (#2618) ## What Every `auth-v*-darwin-arm64.tar.gz` release asset since `rc2.189.0-rc.1` contains a **Linux ELF binary** under the darwin name, so it can never execute on macOS: ``` $ fi... push web-flow github
71.72
29354347778 fix/darwin-arm64-release-goos chore: remove phony target Pull #2618 Chris Stockton github
71.72
29354167054 fix/darwin-arm64-release-goos chore: remove release-verify target Pull #2618 Chris Stockton github
71.72
29353189889 fix/darwin-arm64-release-goos Merge branch 'master' into fix/darwin-arm64-release-goos Pull #2618 web-flow github
71.7
29353177623 master fix(siwe): return false instead of panicking on malformed signatures (#2625) ## Problem `SIWEMessage.VerifySignature` (`internal/utilities/siwe/parser.go`) returns `bool`, but **panics** on two attacker-controlled inputs instead of returning `fa... push web-flow github
71.73
29353283925 release-please--branches--master chore(master): release 2.193.1 Pull #2626 web-flow github
71.72
29352800723 release-please--branches--master chore(master): release 2.193.1 Pull #2626 web-flow github
71.7
29352689280 master fix(oauth): prevent authorization-code replay race at /oauth/token (#2612) # fix(oauth): prevent authorization-code replay race at `/oauth/token` ## What Fixes an authorization-code replay race (TOCTOU) in the `authorization_code` grant at `POS... push web-flow github
71.7
29345470489 fix/replay-race-2026-07-02 Merge branch 'master' into fix/replay-race-2026-07-02 Pull #2612 web-flow github
71.71
29343340618 master fix: ensure legacy refresh token revoked (#2624) ## What kind of change does this PR introduce? Bug fix ## What is the current behavior? FindTokenBySessionID did not exclude revoked tokens from its lookup. Allowing a refresh token to be reused... push web-flow github
71.36
29343486937 release-please--branches--master chore(master): release 2.193.1 Pull #2626 web-flow github
71.36