You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@clerk/chrome-extension@3.1.0
Minor Changes
Remove remotely hosted code from new @clerk/ui package (#7983) by @royanger
Prevent modification of immutable attributes in UserProfile (#7931) by @dmoerner
Patch Changes
Narrow the error conditions that trigger the unauthenticated flow (sign-out) to only high-confidence authentication failures (401, 422). Previously, all 4xx errors — including 429 rate limits — were treated as auth failures, which could sign users out during transient rate limiting. Non-auth errors from setActive now propagate to the caller instead of being silently swallowed. (#8004) by @brkalow
Fix random sign-outs when the browser temporarily loses network connectivity. (#7912) by @bratsos
Add Frontend API proxy support to @clerk/fastify via the frontendApiProxy option on clerkPlugin. When enabled, requests matching the proxy path (default /__clerk) are forwarded to Clerk's Frontend API, allowing Clerk to work in environments where direct API access is blocked by ad blockers or firewalls. The proxyUrl for auth handshake is automatically derived from the request when frontendApiProxy is configured. (#7994) by @nikosdouvlis
Add Frontend API proxy support to @clerk/hono via the frontendApiProxy option on clerkMiddleware. When enabled, requests matching the proxy path (default /__clerk) are forwarded to Clerk's Frontend API, allowing Clerk to work in environments where direct API access is blocked by ad blockers or firewalls. The proxyUrl for auth handshake is automatically derived from the request when frontendApiProxy is configured. (#7994) by @nikosdouvlis
Prevent modification of immutable attributes in UserProfile (#7931) by @dmoerner
Patch Changes
Narrow the error conditions that trigger the unauthenticated flow (sign-out) to only high-confidence authentication failures (401, 422). Previously, all 4xx errors — including 429 rate limits — were treated as auth failures, which could sign users out during transient rate limiting. Non-auth errors from setActive now propagate to the caller instead of being silently swallowed. (#8004) by @brkalow
Add typesVersions fallback so that @clerk/shared/types resolves correctly under moduleResolution: "node" in TypeScript. (#7998) by @jacekradko
@clerk/ui@1.1.0
Minor Changes
Prevent modification of immutable attributes in UserProfile (#7931) by @dmoerner
Remove remotely hosted code from new @clerk/ui package (#7983) by @royanger
Fix clerkFrontendApiProxy to derive the Clerk-Proxy-Url header and Location rewrites from x-forwarded-proto/x-forwarded-host headers instead of the raw request.url. Behind a reverse proxy, request.url resolves to localhost, causing FAPI to receive an incorrect proxy URL. The fix uses the same forwarded-header resolution pattern as ClerkRequest. (#7994) by @nikosdouvlis
Remove experimental comment from Agent Tasks API (#7978) by @tmilewski
Fixed an issue where useOrganization would show an incorrect warning and dialog due to checking environment settings before Clerk was fully loaded. (#7982) by @wobsoriano
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@clerk/chrome-extension@3.1.0
Minor Changes
Patch Changes
776ee1b,e13fc29,7fb870d,398b7f9,09cb6d4,bd3409e]:@clerk/clerk-js@6.1.0
Minor Changes
Patch Changes
Narrow the error conditions that trigger the unauthenticated flow (sign-out) to only high-confidence authentication failures (401, 422). Previously, all 4xx errors — including 429 rate limits — were treated as auth failures, which could sign users out during transient rate limiting. Non-auth errors from
setActivenow propagate to the caller instead of being silently swallowed. (#8004) by @brkalowFix random sign-outs when the browser temporarily loses network connectivity. (#7912) by @bratsos
Updated dependencies [
776ee1b,7fb870d,09cb6d4]:@clerk/expo@3.1.0
Minor Changes
Add native React Native components (AuthView, UserButton, UserProfileView) with
useUserProfileModal()hook (#7843) by @chriscaninAdd native Google Sign-In via Credential Manager (Android) and ASAuthorization (iOS)
Update to Core-3 Signal APIs
Adds support for Expo SDK 55 (#8008) by @wobsoriano
Patch Changes
776ee1b,7fb870d,398b7f9,09cb6d4,bd3409e]:@clerk/fastify@3.1.0
Minor Changes
@clerk/fastifyvia thefrontendApiProxyoption onclerkPlugin. When enabled, requests matching the proxy path (default/__clerk) are forwarded to Clerk's Frontend API, allowing Clerk to work in environments where direct API access is blocked by ad blockers or firewalls. TheproxyUrlfor auth handshake is automatically derived from the request whenfrontendApiProxyis configured. (#7994) by @nikosdouvlisPatch Changes
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/hono@0.1.0
Minor Changes
@clerk/honovia thefrontendApiProxyoption onclerkMiddleware. When enabled, requests matching the proxy path (default/__clerk) are forwarded to Clerk's Frontend API, allowing Clerk to work in environments where direct API access is blocked by ad blockers or firewalls. TheproxyUrlfor auth handshake is automatically derived from the request whenfrontendApiProxyis configured. (#7994) by @nikosdouvlisPatch Changes
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/localizations@4.1.0
Minor Changes
Patch Changes
Add placeholder text "Enter your username" for username field in en-US locale (#8002) by @petiteoh
Updated dependencies [
776ee1b,7fb870d,09cb6d4]:@clerk/shared@4.1.0
Minor Changes
Patch Changes
Narrow the error conditions that trigger the unauthenticated flow (sign-out) to only high-confidence authentication failures (401, 422). Previously, all 4xx errors — including 429 rate limits — were treated as auth failures, which could sign users out during transient rate limiting. Non-auth errors from
setActivenow propagate to the caller instead of being silently swallowed. (#8004) by @brkalowAdd
typesVersionsfallback so that@clerk/shared/typesresolves correctly undermoduleResolution: "node"in TypeScript. (#7998) by @jacekradko@clerk/ui@1.1.0
Minor Changes
Prevent modification of immutable attributes in UserProfile (#7931) by @dmoerner
Remove remotely hosted code from new @clerk/ui package (#7983) by @royanger
Patch Changes
776ee1b,7fb870d,e7a25e8,de089c5,09cb6d4]:@clerk/agent-toolkit@0.3.2
Patch Changes
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/astro@3.0.2
Patch Changes
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/backend@3.0.2
Patch Changes
Fix
clerkFrontendApiProxyto derive theClerk-Proxy-Urlheader and Location rewrites fromx-forwarded-proto/x-forwarded-hostheaders instead of the rawrequest.url. Behind a reverse proxy,request.urlresolves to localhost, causing FAPI to receive an incorrect proxy URL. The fix uses the same forwarded-header resolution pattern asClerkRequest. (#7994) by @nikosdouvlisRemove experimental comment from Agent Tasks API (#7978) by @tmilewski
Updated dependencies [
776ee1b,7fb870d,09cb6d4]:@clerk/expo-passkeys@1.0.2
Patch Changes
776ee1b,7fb870d,09cb6d4]:@clerk/express@2.0.2
Patch Changes
Fix empty path fallback for
frontendApiProxyto prevent intercepting all requests whenpathresolves to an empty string (#8003) by @jacekradkoUpdated dependencies [
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/nextjs@7.0.2
Patch Changes
Fix build failures when using
cacheComponents: truewith dynamic routes (e.g.[id]) (#7989) by @jacekradkoUpdated dependencies [
a8c64cc,776ee1b,7fb870d,398b7f9,09cb6d4,09088ed]:@clerk/nuxt@2.0.2
Patch Changes
a8c64cc,98929f5,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/react@6.0.2
Patch Changes
Remove experimental tags on signal hooks (#7999) by @wobsoriano
Updated dependencies [
776ee1b,7fb870d,09cb6d4]:@clerk/react-router@3.0.2
Patch Changes
Upgrade
cookiedependency from v0.7.2 to v1.0.2 and remove deprecated@types/cookie(cookie v1 ships built-in types). (#7987) by @jacekradkoUpdated dependencies [
a8c64cc,776ee1b,7fb870d,398b7f9,09cb6d4,09088ed]:@clerk/tanstack-react-start@1.0.2
Patch Changes
a8c64cc,776ee1b,7fb870d,398b7f9,09cb6d4,09088ed]:@clerk/testing@2.0.2
Patch Changes
a8c64cc,776ee1b,7fb870d,09cb6d4,09088ed]:@clerk/vue@2.0.2
Patch Changes
Fixed an issue where
useOrganizationwould show an incorrect warning and dialog due to checking environment settings before Clerk was fully loaded. (#7982) by @wobsorianoUpdated dependencies [
776ee1b,7fb870d,09cb6d4]:@clerk/msw@0.0.2
Patch Changes
776ee1b,7fb870d,09cb6d4]: