chore(deps): bump supertokens-node from 23.1.0 to 24.0.3

[dependabot]

Bumps supertokens-node from 23.1.0 to 24.0.3.

Release notes

Sourced from supertokens-node's releases.

supertokens-node 24.0.3

Fixed

• webauthn: fix sign in failing for counter-incrementing authenticators (e.g. Windows Hello) — the assertion was verified against the core twice.
• Handle OAuth redirects with Next.js App Router

Infrastructure

• Adopt shared reusable lint-pr workflow (semantic PR title + changelog fragment check); retire legacy CHANGELOG.md enforcer
• Adopt shared reusable dev-sync workflow; replace the local dev-sync with a thin caller of supertokens/actions dev-sync
• Mint short-lived GitHub App installation tokens in-workflow (actions/create-github-app-token) for the release-tag and check-docs pipelines, replacing the ALL_REPO_PAT org secret
• Adopt the shared reusable release-tag workflow from supertokens/actions (restores version registration with the SuperTokens API and post-release dev sync); keep only the docs/npm publish jobs as thin callers

v24.0.2

What's Changed

• fix: SAML login open redirect and test-server routes by @​porcellus in supertokens/supertokens-node#1045
• chore(deps): bump nodemailer from 6.9 to 8.0.2 to address CVE by @​davidkassa in supertokens/supertokens-node#1042
• fix: Handle null form field values instead of throwing by @​felipe-sme in supertokens/supertokens-node#1041
• chore: integrate external PRs with new changelog workflow by @​porcellus in supertokens/supertokens-node#1047
• chore: prepare release v24.0.2 by @​porcellus in supertokens/supertokens-node#1046

New Contributors

• @​davidkassa made their first contribution in supertokens/supertokens-node#1042
• @​felipe-sme made their first contribution in supertokens/supertokens-node#1041

Full Changelog: supertokens/supertokens-node@v24.0.1...v24.0.2

v24.0.1

What's Changed

• fix: saml exported function return types by @​porcellus in supertokens/supertokens-node#1039

Full Changelog: supertokens/supertokens-node@v24.0.0...v24.0.1

v24.0.0

What's Changed

• feat: SAML implementation by @​sattvikc in supertokens/supertokens-node#1035

Full Changelog: supertokens/supertokens-node@v23.1.0...v24.0.0

Changelog

Sourced from supertokens-node's changelog.

[24.0.3] - 2026-07-23

Fixed

• webauthn: fix sign in failing for counter-incrementing authenticators (e.g. Windows Hello) — the assertion was verified against the core twice.
• Handle OAuth redirects with Next.js App Router

Infrastructure

• Adopt shared reusable lint-pr workflow (semantic PR title + changelog fragment check); retire legacy CHANGELOG.md enforcer
• Adopt shared reusable dev-sync workflow; replace the local dev-sync with a thin caller of supertokens/actions dev-sync
• Mint short-lived GitHub App installation tokens in-workflow (actions/create-github-app-token) for the release-tag and check-docs pipelines, replacing the ALL_REPO_PAT org secret
• Adopt the shared reusable release-tag workflow from supertokens/actions (restores version registration with the SuperTokens API and post-release dev sync); keep only the docs/npm publish jobs as thin callers

[24.0.2] - 2026-03-20

Fixed

• Upgrade cross-fetch to v4.1.0 to fix XMLHttpRequest error in Cloudflare Workers edge runtime
• Handle null form field values in signup instead of throwing (fixes #1026)
• Add explicit GeneralErrorResponse handling to SAML login and callback API handlers

Infrastructure

• Add SAML test-server integration routes for the shared backend-sdk-testing suite

Security

• Bump nodemailer from 6.9 to 8.0.2 to address CVE
• Fix open redirect vulnerability in SAML login when client_id is invalid (RFC 6749 §4.1.2.1)

[24.0.1] - 2025-03-14

• Fix SAML exported function return types

[24.0.0] - 2025-12-02

• Adds support for SAML

Commits

• 9b82aef chore: fix version consistency
• e268c9d Merge pull request #1060 from supertokens/release/v24.0.3
• 1f4bc42 chore: prepare release v24.0.3
• 70f0883 Merge pull request #1050 from supertokens/fix/nextjs-oauth-redirect
• 035dee6 chore: move new changelog item to changie
• 9729c2b Merge branch 'dev' into fix/nextjs-oauth-redirect
• 6c7eae8 Merge pull request #1059 from supertokens/fix/webauthn_double_verify
• cd3c000 chore: fix changelog
• f82f451 chore: move changelog item to changie
• 76b0dfd fix: webauthn double verification of credentials at sign in
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

verification

Refreshed bun.lock with Bun 1.3.14. Frozen installation succeeds.

bun run verify --strict: VERDICT: PASS
Checks: core, backend fast suite, type-check, lint, knip. Full backend suite also passed (one existing skip).