Fixed
- webauthn: fix sign in failing for counter-incrementing authenticators (e.g. Windows Hello) — the assertion was verified against the core twice.
- Handle OAuth redirects with Next.js App Router
Infrastructure
- Adopt shared reusable lint-pr workflow (semantic PR title + changelog fragment check); retire legacy CHANGELOG.md enforcer
- Adopt shared reusable dev-sync workflow; replace the local dev-sync with a thin caller of supertokens/actions dev-sync
- Mint short-lived GitHub App installation tokens in-workflow (actions/create-github-app-token) for the release-tag and check-docs pipelines, replacing the ALL_REPO_PAT org secret
- Adopt the shared reusable release-tag workflow from supertokens/actions (restores version registration with the SuperTokens API and post-release dev sync); keep only the docs/npm publish jobs as thin callers