[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@convex-dev/eslint-plugin (source)	2.0.0 → 5.0.0

---

Release Notes

get-convex/convex-backend (@​convex-dev/eslint-plugin)

v5.0.0

• Add a new rule @convex-dev/no-process-env (enabled by default as an error)
  that flags process.env in Convex code and, where it can, autofixes it to the
  typed env object exported by _generated/server. This is a major version
  bump because the new default-enabled rule can surface new errors in existing
  codebases.
• Add a new rule @convex-dev/no-duplicate-indexes (enabled by default as an
  error) that detects cases where indexes duplicate the same order of fields and
  can be combined.
• Add a new rule @convex-dev/require-access-control (disabled by default) that
  ensures that every public Convex function calls an access control helper (e.g.
  requireAdmin, assertIsLoggedIn, etc).

v4.0.0

• Add a new rule @convex-dev/no-schema-import-cycle (enabled by default as an
  error) that detects cases where schema.ts imports files that themselves
  depend on the schema.

v3.0.0

• Add a new rule @convex-dev/no-top-of-hour-crons (enabled by default as a
  warning) that flags cron jobs scheduled exactly on the hour. The top of the
  hour is the busiest time on the clock for most apps, so moving background work
  off-peak (or omitting minuteUTC to let Convex pick a minute) helps your app
  scale. This is a major version bump because the new default-enabled rule can
  surface new warnings in existing codebases.
• The @convex-dev/no-collect-in-query and @convex-dev/explicit-table-ids
  rules now work when type-aware linting is disabled.
• When type-aware linting is disabled, error messages now recommend enabling it.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
better-auth	Ready	Preview	Oct 14, 2026 11:18pm UTC

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/better-auth@443

commit: ad41a92