v2.16.1 v1.7.0

high risk

Leonxlnx/taste-skillAug 17, 2026 → Aug 18, 20260 days between releases

What's New

Older release is Linkwarden v2.16.1; newer release is Better Auth v1.7.0

Breaking Changes

  • Moved database joins from experimental to stable `advanced.database.joins` option
  • Scoped account identity by trusted issuer (requires migration)
  • Moved the MCP plugin into its own `@better-auth/mcp` package
  • Added OIDC back-channel logout (requires migration)
  • Required captcha endpoint entries to match full auth paths

New Features

  • Added `clientAssertion` support to the Microsoft Entra ID social provider
  • Made the `Auth` instance directly fetchable
  • Added `hydrateSession` for server-fetched data on first render
  • Added `allowIdpInitiated` support for IdP-initiated flows
  • Added RP-initiated logout support

Improvements

  • Generic OAuth plugin rewritten as a first-class social provider
  • Decoupled SCIM provisioning from the organization plugin
  • Improved database join stability
  • Added OIDC back-channel logout for security
  • Faster Docker builds (in older release)

Bug Fixes

  • Fixed manual installation on Windows
  • Fixed sign-in issues with Azure AD B2C and OIDC

Upgrade Notes

The newer release is for a different project (Better Auth) than the older release (Linkwarden). For Better Auth 1.7.0, replace `experimental: { joins: true }` with `advanced: { database: { joins: true } }` and update account identity logic to use `(issuer, accountId)`. Install `@better-auth/mcp` and regenerate schemas using `npx auth@latest generate`.

The Two Releases

v2.16.1

v2.16.1

Aug 17, 2026· 2 months ago

Improves authentication stability, build speed, and adds offline capabilities to the mobile application while fixing manual installation issues on Windows.

Full release notes
v1.7.0

v1.7.0

Aug 18, 2026· 2 months ago

A major release introducing significant architectural changes including stable database joins, scoped account identity by trusted issuer, OIDC back-channel logout, and the separation of the MCP plugin into its own package. The generic OAuth plugin was rewritten as a first-class social provider.

Full release notes