Skip to content

Conversation

@AsakuraMizu
Copy link

Just upgrade many, many dependencies...

The only thing I haven't updated is @types/node.

Major changes

Use caret ranges for package versions

Update Next.js to fix CVE-2025-66478.

My server was attacked, but fortunately no damage was caused.

Upgrade Prisma to v7 and use prisma-client instead of prisma-client-js.

The biggest advantage is that you no longer need to use an engine written in Rust. Previously, I had to specify binaryTargets to deploy correctly on the server because my server's performance did not support building on it, and my local environment was different from the server's (my local environment was Arch Linux, corresponding to debian-openssl-3.0.x, but the server was Fedora, corresponding to rhel-openssl-3.0.x).

Upgrade better-auth

The passkey plugin was split to a separate package @better-auth/passkey.

Configure prettier

Otherwise, Prettier and ESLint will fight each other.

@vercel
Copy link

vercel bot commented Dec 7, 2025

@AsakuraMizu is attempting to deploy a commit to the besscroft's projects Team on Vercel.

A member of the Team first needs to authorize it.

@besscroft
Copy link
Owner

First of all, thank you very much for your contribution. This PR cannot be merged for the following reasons:
The dependency handling is inappropriate. Version numbers should not include the ^ symbol, as we need to pin exact versions to avoid compatibility risks.
We can't directly merge your Prisma upgrade because the project must be deployed across multiple different environments. In the past, we've encountered numerous compatibility issues that caused the project to fail at runtime, requiring extensive testing before any upgrade. (Adjustments to the database layer demand significant testing effort. If I have time, I’ll handle the upgrade myself—it’s genuinely quite troublesome and full of pitfalls.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants