You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Fix Cloudflare Pages compatibility by falling through to locals.runtime.env when cloudflare:workers env is missing the requested key (#8136) by @mlafeldt
Fix ERR_CONTENT_DECODING_FAILED when loading proxied assets by requesting uncompressed responses from FAPI and stripping Content-Encoding/Content-Length headers that fetch() invalidates through auto-decompression. (#8159) by @brkalow
Fix satelliteAutoSync to default to false as documented. Previously, not passing the prop resulted in undefined, which was treated as true due to a strict equality check (=== false). This preserved Core 2 auto-sync behavior instead of the intended Core 3 default. The check is now !== true, so both undefined and false skip automatic satellite sync. (#8001) by @nikosdouvlis
Fix an issue where multiple set-cookie headers were being dropped by the frontend API proxy. (#8162) by @brkalow
Fix dev browser token being read from a stale non-partitioned cookie when partitionedCookies is enabled. The token is now kept in memory so FAPI requests always use the authoritative value. (#8161) by @brkalow
Fix satelliteAutoSync to default to false as documented. Previously, not passing the prop resulted in undefined, which was treated as true due to a strict equality check (=== false). This preserved Core 2 auto-sync behavior instead of the intended Core 3 default. The check is now !== true, so both undefined and false skip automatic satellite sync. (#8001) by @nikosdouvlis
Fix token cache refresh timer leak that caused accelerating token refresh requests after session.touch() or organization switching. (#8098) by @jacekradko
Skip expired_token retry flow when Session Minter is enabled. When sessionMinter is on, the token is sent in the POST body, so the retry-with-expired-token fallback is unnecessary. The retry flow is preserved for non-Session Minter mode. (#8108) by @nikosdouvlis
Send force_origin=true body param on /tokens requests when skipCache is true, so FAPI Proxy routes to origin instead of Session Minter. (#8106) by @nikosdouvlis
@clerk/expo@3.1.5
Patch Changes
Add appleSignIn option to the Expo config plugin. Setting appleSignIn: false prevents the Sign in with Apple entitlement from being added unconditionally, allowing apps that do not use Apple Sign In to opt out. (#8113) by @chriscanin
fix(expo): use require.resolve in config plugin to find ClerkViewFactory.swift, resolving failures in pnpm workspaces nested 2+ levels deep (#8111) by @chriscanin
Add -Xskip-metadata-version-check Kotlin compiler flag to resolve metadata version mismatch errors when building Android apps with Expo SDK 54/55. The clerk-android dependency is compiled with Kotlin 2.3.x while Expo ships Kotlin 2.1.x, causing :app:compileDebugKotlin to fail. (#8152) by @chriscanin
fix(expo): restore TurboModuleRegistry.get pattern in NativeClerkModule spec to fix Android new architecture codegen error; handle web via NativeClerkModule.web.ts (#8112) by @chriscanin
Deprecate the signOutOptions prop on <SignOutButton /> in favor of top-level redirectUrl and sessionId props. The signOutOptions prop still works but now emits a deprecation warning. (#8147) by @jacekradko
Move react and react-dom from dependencies to peerDependencies (#8160) by @jacekradko
Fix minor internal issues with TypeScript types. (#8076) by @dstaley
Fix false positive in structural CSS detection where Clerk's own internal classes (.cl-internal-*) were incorrectly triggering the warning on fresh installs. (#8142) by @brkalow
Deprecate the signOutOptions prop on <SignOutButton /> in favor of top-level redirectUrl and sessionId props. The signOutOptions prop still works but now emits a deprecation warning. (#8148) by @jacekradko
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@clerk/agent-toolkit@0.3.7
Patch Changes
0288931,3efdd2c,486545c]:@clerk/astro@3.0.7
Patch Changes
Fix Cloudflare Pages compatibility by falling through to
locals.runtime.envwhencloudflare:workersenv is missing the requested key (#8136) by @mlafeldtUpdated dependencies [
0288931,3efdd2c,486545c]:@clerk/backend@3.2.3
Patch Changes
Fix
ERR_CONTENT_DECODING_FAILEDwhen loading proxied assets by requesting uncompressed responses from FAPI and strippingContent-Encoding/Content-Lengthheaders thatfetch()invalidates through auto-decompression. (#8159) by @brkalowFix
satelliteAutoSyncto default tofalseas documented. Previously, not passing the prop resulted inundefined, which was treated astruedue to a strict equality check (=== false). This preserved Core 2 auto-sync behavior instead of the intended Core 3 default. The check is now!== true, so bothundefinedandfalseskip automatic satellite sync. (#8001) by @nikosdouvlisFix an issue where multiple
set-cookieheaders were being dropped by the frontend API proxy. (#8162) by @brkalow@clerk/chrome-extension@3.1.5
Patch Changes
1cf76d1,2f52cad,7027e97,9ca9300,6fe4418,3efdd2c,857823e,25a73fb,d976a82]:@clerk/clerk-js@6.3.3
Patch Changes
Fix dev browser token being read from a stale non-partitioned cookie when
partitionedCookiesis enabled. The token is now kept in memory so FAPI requests always use the authoritative value. (#8161) by @brkalowFix
satelliteAutoSyncto default tofalseas documented. Previously, not passing the prop resulted inundefined, which was treated astruedue to a strict equality check (=== false). This preserved Core 2 auto-sync behavior instead of the intended Core 3 default. The check is now!== true, so bothundefinedandfalseskip automatic satellite sync. (#8001) by @nikosdouvlisFix token cache refresh timer leak that caused accelerating token refresh requests after
session.touch()or organization switching. (#8098) by @jacekradkoSkip
expired_tokenretry flow when Session Minter is enabled. WhensessionMinteris on, the token is sent in the POST body, so the retry-with-expired-token fallback is unnecessary. The retry flow is preserved for non-Session Minter mode. (#8108) by @nikosdouvlisSend
force_origin=truebody param on/tokensrequests whenskipCacheis true, so FAPI Proxy routes to origin instead of Session Minter. (#8106) by @nikosdouvlis@clerk/expo@3.1.5
Patch Changes
Add
appleSignInoption to the Expo config plugin. SettingappleSignIn: falseprevents the Sign in with Apple entitlement from being added unconditionally, allowing apps that do not use Apple Sign In to opt out. (#8113) by @chriscaninfix(expo): use
require.resolvein config plugin to findClerkViewFactory.swift, resolving failures in pnpm workspaces nested 2+ levels deep (#8111) by @chriscaninAdd
-Xskip-metadata-version-checkKotlin compiler flag to resolve metadata version mismatch errors when building Android apps with Expo SDK 54/55. Theclerk-androiddependency is compiled with Kotlin 2.3.x while Expo ships Kotlin 2.1.x, causing:app:compileDebugKotlinto fail. (#8152) by @chriscaninfix(expo): restore TurboModuleRegistry.get pattern in NativeClerkModule spec to fix Android new architecture codegen error; handle web via NativeClerkModule.web.ts (#8112) by @chriscanin
Updated dependencies [
7027e97,9ca9300,3efdd2c,857823e,25a73fb,d976a82]:@clerk/express@2.0.7
Patch Changes
0288931,3efdd2c,486545c]:@clerk/fastify@3.1.5
Patch Changes
0288931,3efdd2c,486545c]:@clerk/hono@0.1.5
Patch Changes
0288931,3efdd2c,486545c]:@clerk/localizations@4.2.4
Patch Changes
Add the missing Dutch translation for
organizationProfile.start.profileSection.primaryButton. (#7711) by @MaartenKollerThis updates the value from an empty string to
"Profiel bijwerken"so the primary button label is shown correctly in the organization profile section.No consumer code changes are required.
@clerk/nextjs@7.0.7
Patch Changes
7027e97,0288931,3efdd2c,486545c]:@clerk/nuxt@2.0.7
Patch Changes
c44f106,0288931,3efdd2c,486545c]:@clerk/react@6.1.3
Patch Changes
signOutOptionsprop on<SignOutButton />in favor of top-levelredirectUrlandsessionIdprops. ThesignOutOptionsprop still works but now emits a deprecation warning. (#8147) by @jacekradko@clerk/react-router@3.0.7
Patch Changes
7027e97,0288931,3efdd2c,486545c]:@clerk/tanstack-react-start@1.0.7
Patch Changes
7027e97,0288931,3efdd2c,486545c]:@clerk/testing@2.0.7
Patch Changes
0288931,3efdd2c,486545c]:@clerk/ui@1.2.4
Patch Changes
Move
reactandreact-domfromdependenciestopeerDependencies(#8160) by @jacekradkoFix minor internal issues with TypeScript types. (#8076) by @dstaley
Fix false positive in structural CSS detection where Clerk's own internal classes (
.cl-internal-*) were incorrectly triggering the warning on fresh installs. (#8142) by @brkalowUpdated dependencies [
46093fa]:@clerk/vue@2.0.7
Patch Changes
signOutOptionsprop on<SignOutButton />in favor of top-levelredirectUrlandsessionIdprops. ThesignOutOptionsprop still works but now emits a deprecation warning. (#8148) by @jacekradko