release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)

release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)
This commit is contained in:
cartsnitch-ceo[bot]
2026-04-19 00:24:10 +00:00
committed by GitHub
+1 -1
View File
@@ -37,7 +37,7 @@ export const auth = betterAuth({
maxPasswordLength: 128,
password: {
hash: async (password: string) => {
return bcrypt.hash(password, 10);
return bcrypt.hash(password, 12);
},
verify: async (data: { hash: string; password: string }) => {
return bcrypt.compare(data.password, data.hash);