Version Packages

packages/nk-auth/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @ingram-tech/nk-auth
 
+## 0.16.0
+
+### Minor Changes
+
+- 592e71d: Ship the Better Auth 1.7 schema delta as `migrations/0002_better_auth_1_7.sql`,
+  and require `better-auth` / `@better-auth/passkey` `^1.7.2`.
+
+  Until now the chain held only the 1.6 baseline, so a site on better-auth 1.7 ran
+  against a schema missing what 1.7 reads and writes: the `account.issuer` column
+  it now keys accounts on (`(issuer, accountId)` unique), and the `jwks`
+  key-rotation columns (`expiresAt`, `alg`, `crv`). 0002 adds them and backfills
+  `issuer` on every pre-1.7 account row with exactly the value 1.7.2 writes for
+  that provider (`local:credential`, `https://accounts.google.com`,
+  `local:oauth:<providerId>`, …), so returning OAuth users keep their identity. A
+  provider whose issuer is per-tenant or discovered at runtime (`microsoft`,
+  `cognito`, `paybin`, generic-oauth) cannot be derived: the migration then raises
+  naming the `providerId`s and rolls back — set `issuer` on those rows by hand and
+  re-run. A site with password + built-in social sign-in has nothing to do beyond
+  bumping and running its usual `db:migrate`.
+
+  The migration test is now the deploy gate this exists for: it diffs the applied
+  chain against `getAuthTables()` of the pinned better-auth, and proves 0002
+  against a database seeded at 0001 through the real `nk-pg-migrate` runner.
+
+### Patch Changes
+
+- 4a9783e: Raise runtime dependency floors: zod ^4.5.4 (nk-auth, nk-billing, nk-blog,
+  nk-db), jose ^6.2.10 (nk-auth), stripe ^22.6.0 (nk-billing). No API change.
+- Updated dependencies [4a9783e]
+  - @ingram-tech/nk-db@2.1.2
+
 ## 0.15.0
 
 ### Minor Changes

packages/nk-auth/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-auth",
-	"version": "0.15.0",
+	"version": "0.16.0",
 	"description": "The Ingram Better Auth foundation: composable presets (org, dual-shape JWT, active-org hooks, pg pool) for Next.js sites.",
 	"license": "MIT",
 	"type": "module",

packages/nk-billing/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @ingram-tech/nk-billing
 
+## 0.3.7
+
+### Patch Changes
+
+- 4a9783e: Raise runtime dependency floors: zod ^4.5.4 (nk-auth, nk-billing, nk-blog,
+  nk-db), jose ^6.2.10 (nk-auth), stripe ^22.6.0 (nk-billing). No API change.
+
 ## 0.3.6
 
 ### Patch Changes

packages/nk-billing/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-billing",
-	"version": "0.3.6",
+	"version": "0.3.7",
 	"description": "The Ingram billing foundation: composable Stripe primitives (client, customers, prices, currency, checkout, subscriptions, webhooks) plus an injection-based Postgres credit ledger and event-dedup store.",
 	"license": "MIT",
 	"type": "module",

packages/nk-blog/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @ingram-tech/nk-blog
 
+## 0.1.10
+
+### Patch Changes
+
+- 4a9783e: Raise runtime dependency floors: zod ^4.5.4 (nk-auth, nk-billing, nk-blog,
+  nk-db), jose ^6.2.10 (nk-auth), stripe ^22.6.0 (nk-billing). No API change.
+
 ## 0.1.9
 
 ### Patch Changes

packages/nk-blog/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-blog",
-	"version": "0.1.9",
+	"version": "0.1.10",
 	"description": "File-based blog foundation for Next.js sites: frontmatter schema, build-time reader, limited-MDX rendering, a typed component contract with unstyled defaults, GitHub read/publish, and RSS.",
 	"license": "MIT",
 	"type": "module",

packages/nk-db/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @ingram-tech/nk-db
 
+## 2.1.2
+
+### Patch Changes
+
+- 4a9783e: Raise runtime dependency floors: zod ^4.5.4 (nk-auth, nk-billing, nk-blog,
+  nk-db), jose ^6.2.10 (nk-auth), stripe ^22.6.0 (nk-billing). No API change.
+
 ## 2.1.1
 
 ### Patch Changes

packages/nk-db/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-db",
-	"version": "2.1.1",
+	"version": "2.1.2",
 	"description": "The Ingram Postgres data layer: one TLS-aware pg pool, raw-SQL helpers, Drizzle wiring, and a PGlite (no-Docker) dev/test harness for Next.js sites.",
 	"license": "MIT",
 	"type": "module",

packages/nk-dev/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @ingram-tech/nk-dev
 
+## 0.14.1
+
+### Patch Changes
+
+- 86fb2e2: oxfmt 0.65. No formatting change on this repo's 300 files; a site may see
+  `nk format` touch a handful of lines on first run.
+- 4a9783e: Toolchain: oxlint 1.80, knip 6.33, vitest 4.1.11, @ast-grep/cli 0.45.2.
+  oxlint 1.80 adds `react/refs` (no ref reads during render) to the react
+  plugin's defaults; a site that had the pattern gets new findings from `nk lint`.
+
 ## 0.14.0
 
 ### Minor Changes

packages/nk-dev/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-dev",
-	"version": "0.14.0",
+	"version": "0.14.1",
 	"description": "The nextkit dev toolchain in one package: the `nk` CLI plus shared oxlint/oxfmt, TypeScript, and Vitest config, the format-on-commit hook, and the AI agent guide. `nk init` scaffolds a site to use it.",
 	"license": "MIT",
 	"type": "module",

packages/nk-i18n/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @ingram-tech/nk-i18n
 
+## 0.5.3
+
+### Patch Changes
+
+- 4a9783e: `useT` no longer writes its message sources to a ref during render (flagged by
+  oxlint 1.80's `react/refs`). The memo keyed on the locale already runs the
+  current render's closure when the locale changes, so the ref bought nothing;
+  behaviour is unchanged.
+
 ## 0.5.2
 
 ### Patch Changes

packages/nk-i18n/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-tech/nk-i18n",
-	"version": "0.5.2",
+	"version": "0.5.3",
 	"description": "Type-safe, English-as-key i18n for Ingram Next.js sites — ICU translator, scopes, locale config, Accept-Language negotiation, and locale URL routing.",
 	"license": "MIT",
 	"type": "module",