fix(ci): keep better-auth on 1.6 across the workspace (#213)

Pin the customer-app, add a pnpm override, and ignore better-auth
>=1.7 in Dependabot so grouped updates cannot pull 1.7 and break
image builds again.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Author: santoshkumarradha

.github/dependabot.yml

@@ -53,6 +53,10 @@ updates:
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
+      # 1.7 removed genericOAuthClient and signIn.oauth2. Stay on 1.6
+      # until the dashboard/customer-app auth clients are migrated.
+      - dependency-name: "better-auth"
+        versions: [">=1.7.0"]
     labels:
       - type:chore
       - area:dashboard

apps/customer-app/package.json

@@ -16,7 +16,7 @@
     "@hookform/resolvers": "^5.4.0",
     "@types/pg": "^8.20.0",
     "bcryptjs": "^2.4.3",
-    "better-auth": "^1.6.22",
+    "better-auth": "1.6.29",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "lucide-react": "^1.17.0",

package.json

@@ -40,7 +40,8 @@
       "ip-address@<=10.3.0": ">=10.3.1",
       "nanoid@<3.3.18": "3.3.18",
       "postcss@<=8.5.22": ">=8.5.26",
-      "browserslist@<=4.28.6": ">=4.28.8"
+      "browserslist@<=4.28.6": ">=4.28.8",
+      "better-auth": "1.6.29"
     }
   }
 }