v3.4.6 of serverpod_auth_core_server

2026-04-09T20:34:52.147464Z

3.4.6 was published on Apr 9, 2026.

Changelog excerpt:
- fix: Removes wrong documentation link on `PasswordMissingException`.
- fix: Adds top-level `.gitignore`on created projects to ignore the `.dart_tool`of the workspace.
- fix: Allows `serverpod create .`in the current directory.
- fix: Makes `insert`with `ignoreConflicts`and `!persist`fields atomic.
- fix: Extends immutable non-constant default validation to cover id field.
- fix: Adds missing `onSessionCreated`to `ServerSideSessionsConfigFromPasswords`constructor.
- fix: Invalidates the cached refresh token before rotating in case the storage has changed.
- chore: Bumps `jose`dependency on legacy auth to fix `CVE-2026-34240`. Also backported to 2.9.3.