chore(deps): bump supertokens-node from 23.1.0 to 24.0.3

[dependabot]

Bumps supertokens-node from 23.1.0 to 24.0.3.

Release notes

Sourced from supertokens-node's releases.

supertokens-node 24.0.3

Fixed

• webauthn: fix sign in failing for counter-incrementing authenticators (e.g. Windows Hello) — the assertion was verified against the core twice.
• Handle OAuth redirects with Next.js App Router

Infrastructure

• Adopt shared reusable lint-pr workflow (semantic PR title + changelog fragment check); retire legacy CHANGELOG.md enforcer
• Adopt shared reusable dev-sync workflow; replace the local dev-sync with a thin caller of supertokens/actions dev-sync
• Mint short-lived GitHub App installation tokens in-workflow (actions/create-github-app-token) for the release-tag and check-docs pipelines, replacing the ALL_REPO_PAT org secret
• Adopt the shared reusable release-tag workflow from supertokens/actions (restores version registration with the SuperTokens API and post-release dev sync); keep only the docs/npm publish jobs as thin callers

v24.0.2

What's Changed

• fix: SAML login open redirect and test-server routes by @​porcellus in supertokens/supertokens-node#1045
• chore(deps): bump nodemailer from 6.9 to 8.0.2 to address CVE by @​davidkassa in supertokens/supertokens-node#1042
• fix: Handle null form field values instead of throwing by @​felipe-sme in supertokens/supertokens-node#1041
• chore: integrate external PRs with new changelog workflow by @​porcellus in supertokens/supertokens-node#1047
• chore: prepare release v24.0.2 by @​porcellus in supertokens/supertokens-node#1046

New Contributors

• @​davidkassa made their first contribution in supertokens/supertokens-node#1042
• @​felipe-sme made their first contribution in supertokens/supertokens-node#1041

Full Changelog: supertokens/supertokens-node@v24.0.1...v24.0.2

v24.0.1

What's Changed

• fix: saml exported function return types by @​porcellus in supertokens/supertokens-node#1039

Full Changelog: supertokens/supertokens-node@v24.0.0...v24.0.1

v24.0.0

What's Changed

• feat: SAML implementation by @​sattvikc in supertokens/supertokens-node#1035

Full Changelog: supertokens/supertokens-node@v23.1.0...v24.0.0

Changelog

Sourced from supertokens-node's changelog.

[24.0.3] - 2026-07-23

Fixed

• webauthn: fix sign in failing for counter-incrementing authenticators (e.g. Windows Hello) — the assertion was verified against the core twice.
• Handle OAuth redirects with Next.js App Router

Infrastructure

• Adopt shared reusable lint-pr workflow (semantic PR title + changelog fragment check); retire legacy CHANGELOG.md enforcer
• Adopt shared reusable dev-sync workflow; replace the local dev-sync with a thin caller of supertokens/actions dev-sync
• Mint short-lived GitHub App installation tokens in-workflow (actions/create-github-app-token) for the release-tag and check-docs pipelines, replacing the ALL_REPO_PAT org secret
• Adopt the shared reusable release-tag workflow from supertokens/actions (restores version registration with the SuperTokens API and post-release dev sync); keep only the docs/npm publish jobs as thin callers

[24.0.2] - 2026-03-20

Fixed

• Upgrade cross-fetch to v4.1.0 to fix XMLHttpRequest error in Cloudflare Workers edge runtime
• Handle null form field values in signup instead of throwing (fixes #1026)
• Add explicit GeneralErrorResponse handling to SAML login and callback API handlers

Infrastructure

• Add SAML test-server integration routes for the shared backend-sdk-testing suite

Security

• Bump nodemailer from 6.9 to 8.0.2 to address CVE
• Fix open redirect vulnerability in SAML login when client_id is invalid (RFC 6749 §4.1.2.1)

[24.0.1] - 2025-03-14

• Fix SAML exported function return types

[24.0.0] - 2025-12-02

• Adds support for SAML

Commits

• 9b82aef chore: fix version consistency
• e268c9d Merge pull request #1060 from supertokens/release/v24.0.3
• 1f4bc42 chore: prepare release v24.0.3
• 70f0883 Merge pull request #1050 from supertokens/fix/nextjs-oauth-redirect
• 035dee6 chore: move new changelog item to changie
• 9729c2b Merge branch 'dev' into fix/nextjs-oauth-redirect
• 6c7eae8 Merge pull request #1059 from supertokens/fix/webauthn_double_verify
• cd3c000 chore: fix changelog
• f82f451 chore: move changelog item to changie
• 76b0dfd fix: webauthn double verification of credentials at sign in
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)