chore(deps-dev): bump @auth/core from 0.35.3 to 0.41.3

[dependabot]

Bumps @auth/core from 0.35.3 to 0.41.3.

Release notes

Sourced from @​auth/core's releases.

@​auth/core@​0.41.3

Bugfixes

• core: getToken() now returns null instead of throwing when the Authorization header contains a malformed Bearer value
• core: OAuth state, nonce, and PKCE check cookies are now bound to the provider that created them and are rejected when a different provider handles the callback
• core: email addresses are Unicode-normalized (NFKC) before validation in the default email normalizer, closing a homoglyph @ bypass

Other

• deps: resolve Dependabot alerts via cross-major dependency upgrades (#13449)
• deps: resolve Dependabot security advisories via pnpm overrides (#13441)
• deps: allow nodemailer 8 in peer dependency ranges (#13434)
• CI formatting and proxy deploy repairs (#13444)

@​auth/core@​0.41.2

Bugfixes

• providers: add issuer to GitHub provider for RFC 9207 compliance (#13410)

Other

• sync package versions with npm registry (#13414)

@​auth/core@​0.41.1

Bugfixes

• security issue from nodemailer (#13305)

Other

• update links for Credentials-based Authentication (#13258)

Commits

• 5af7357 chore(release): bump package version(s) [skip ci]
• 8a933f9 fix(core): document that getToken returns null for malformed authorization he...
• 5b1aa47 chore(ci): pin surrealdb test server to the v2 image for the 1.3 client (#13468)
• 1116034 Chore/nodemailer 8 peer deps (#13434)
• 7b35fc3 fix(docs): repair docs build broken by floating TypeScript resolution (#13450)
• b24abfa fix(proxy): override Vercel build command so it doesn't run turbo (#13448)
• a99514b chore(deps): resolve remaining Dependabot alerts via cross-major dependency u...
• d008b9b Merge commit from fork
• af42d8f chore: lint (#13446)
• e707770 Merge commit from fork
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by better-gustavo, a new releaser for @​auth/core since your current version.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6bdb5d0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.12%. Comparing base (15ddda6) to head (6bdb5d0).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2055   +/-   ##
=======================================
  Coverage   92.12%   92.12%           
=======================================
  Files         116      116           
  Lines        4104     4104           
  Branches     1072     1072           
=======================================
  Hits         3781     3781           
  Misses        287      287           
  Partials       36       36           

Flag	Coverage Δ
auth-js	64.34% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.