Update packages

[elie222]

Update dependency versions and add oauth.getOAuthClient dynamic registration metadata in oauth.ts

Bumps @modelcontextprotocol/sdk to 1.24.0, better-auth to 1.4.5, and nodemailer to 7.0.11 in package.json; adds logo_uri and tos_uri to oauth.getOAuthClient registration metadata in oauth.ts; removes the patchedDependencies entry from package.json; updates lockfile and version.

📍Where to Start

Start with the oauth.getOAuthClient implementation in oauth.ts.

---

Macroscope summarized 5a885f2.

Summary by CodeRabbit

• New Features

  • Enhanced OAuth client registration with branding metadata support.

• Chores

  • Updated core dependencies to latest versions.
  • Removed obsolete dependency patch configuration.
  • Version bumped to v2.21.37.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Updated (UTC)
inbox-zero	Ready	Preview	Dec 4, 2025 5:12am

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

Dependency version updates across the project stack, including upgrades to the Model Context Protocol SDK, better-auth, and nodemailer. Added branding metadata fields to OAuth client registration and removed an obsolete dependency patch reference. Version number incremented.

Changes

Cohort / File(s)	Summary
Dependency updates apps/web/package.json, package.json	Updated @modelcontextprotocol/sdk to 1.24.0, better-auth to 1.4.5, and nodemailer to 7.0.11; removed patchedDependencies entry for better-auth@1.3.28
OAuth branding enhancement apps/web/utils/mcp/oauth.ts	Added logo_uri and tos_uri fields to dynamic OAuth client registration metadata
Version bump version.txt	Incremented version from v2.21.36 to v2.21.37

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

• Verify that the removal of the better-auth patch is compatible with version 1.4.5 and does not reintroduce the original issue
• Confirm that logo_uri and tos_uri fields are properly formatted and align with OAuth metadata standards

Possibly related PRs

• Update packages #1061: Identical dependency bumps, patch removal, and OAuth branding field additions across the same files.

Poem

🐰 With carrot-colored code we hop so fast,
Dependencies updated, patches past!
OAuth now dons its finest brands,
While versions tick—the future stands! ✨

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch staging

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 95df16d and 5a885f2.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (4)

• apps/web/package.json (3 hunks)
• apps/web/utils/mcp/oauth.ts (1 hunks)
• package.json (0 hunks)
• version.txt (1 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​modelcontextprotocol/​sdk@​1.20.1 ⏵ 1.24.0		+22

View full report

[cubic-dev-ai]

No issues found across 5 files