fix(expo): pin clerk-ios and dedupe Expo SPM refs by mikepitre · Pull Request #8689 · clerk/javascript

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

mikepitre · 2026-05-28T14:32:26Z

Summary

pin the generated iOS package ref for clerk-ios
dedupe Expo SPM package references in the config plugin
add iOS app plugin coverage for SPM package handling

Testing

Not run in this turn

vercel · 2026-05-28T14:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 28, 2026 2:39pm

changeset-bot · 2026-05-28T14:32:34Z

🦋 Changeset detected

Latest commit: 0a0c040

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@clerk/expo	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

pkg-pr-new · 2026-05-28T14:34:42Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8689

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8689

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8689

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8689

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8689

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8689

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8689

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8689

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8689

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8689

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8689

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8689

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8689

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8689

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8689

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8689

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8689

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8689

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8689

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8689

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8689

commit: 0a0c040

chriscanin · 2026-05-28T14:41:53Z

This PR looks good to me, I am not seeing any issues with the code. I am publishing this locally and running for a quick test & confirmation.

chriscanin

This is compiling, building, and working well. Code is looking good.

coderabbitai · 2026-05-28T15:03:21Z

📝 Walkthrough

Walkthrough

This PR updates the clerk-ios iOS native SDK version from 1.0.0 to 1.1.3 in the Expo config plugin and introduces robust deduplication helpers to prevent duplicate Swift package references. New functions enable idempotent find-or-create patterns for XCRemoteSwiftPackageReference and XCSwiftPackageProductDependency objects, and shared helpers remove duplicates from Xcode project arrays. The iOS plugin refactors its Swift package integration logic to use these helpers when configuring dependencies for both the main app target and the ClerkExpo pod target. A comprehensive Vitest suite verifies the helper behavior across four scenarios: updating existing references, removing duplicates, reusing product dependencies, and creating missing ones.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix(expo): pin clerk-ios and dedupe Expo SPM refs' directly summarizes the main changes: pinning the clerk-ios package and deduplicating SPM references in the Expo config plugin.
Description check	✅ Passed	The description clearly outlines the three main objectives of the PR: pinning the iOS package reference, deduplicating SPM references, and adding test coverage for SPM package handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

packages/expo/app.plugin.js (1)

31-33: ⚡ Quick win

Harden URL canonicalization before dedupe comparison.

Line 31 only strips wrapping quotes; URLs with trailing / or without .git will not match and can bypass deduplication. Normalize those variants before equality checks.

Suggested patch

 const CLERK_IOS_REPO = 'https://github.com/clerk/clerk-ios.git';
+const NORMALIZED_CLERK_IOS_REPO = normalizeRepositoryURL(CLERK_IOS_REPO);-const normalizeRepositoryURL = repositoryURL => String(repositoryURL || '').replace(/^"|"$/g, '');+const normalizeRepositoryURL = repositoryURL =>+ String(repositoryURL || '')+ .replace(/^"|"$/g, '')+ .replace(/\/+$/g, '')+ .replace(/\.git$/i, '')+ .toLowerCase();-const isClerkIOSPackageReference = ref => normalizeRepositoryURL(ref?.repositoryURL) === CLERK_IOS_REPO;+const isClerkIOSPackageReference = ref =>+ normalizeRepositoryURL(ref?.repositoryURL) === NORMALIZED_CLERK_IOS_REPO;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/expo/app.plugin.js` around lines 31 - 33, normalizeRepositoryURL
currently only strips wrapping quotes, so isClerkIOSPackageReference can miss
matches when URLs have trailing slashes or a .git suffix; update
normalizeRepositoryURL to also trim whitespace, remove any trailing slash, strip
a trailing ".git" (case-insensitive), and normalize case (toLowerCase) before
returning, and keep isClerkIOSPackageReference using
normalizeRepositoryURL(ref?.repositoryURL) to compare against CLERK_IOS_REPO so
all canonical URL variants match.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@packages/expo/app.plugin.js`:
- Around line 31-33: normalizeRepositoryURL currently only strips wrapping
quotes, so isClerkIOSPackageReference can miss matches when URLs have trailing
slashes or a .git suffix; update normalizeRepositoryURL to also trim whitespace,
remove any trailing slash, strip a trailing ".git" (case-insensitive), and
normalize case (toLowerCase) before returning, and keep
isClerkIOSPackageReference using normalizeRepositoryURL(ref?.repositoryURL) to
compare against CLERK_IOS_REPO so all canonical URL variants match.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 7dfd5c26-fe76-481c-9b26-4a6aded5b23c

📥 Commits

Reviewing files that changed from the base of the PR and between 5c68f3f and 0a0c040.

📒 Files selected for processing (3)

.changeset/fresh-clocks-pay.md
packages/expo/app.plugin.js
packages/expo/src/__tests__/appPlugin.ios.test.js

Pin clerk-ios and dedupe Expo SPM refs
b274e62

mikepitre assigned chriscanin May 28, 2026

github-actionsBot added the expo label May 28, 2026

codex: fix CI failure on PR#8689
0a0c040

vercelBotdeployed to Preview May 28, 2026 14:39 View deployment

chriscanin self-requested a review May 28, 2026 14:40

chriscanin approved these changes May 28, 2026
View reviewed changes

chriscanin marked this pull request as ready for review May 28, 2026 14:58

coderabbitaiBot reviewed May 28, 2026
View reviewed changes

wobsoriano approved these changes May 28, 2026
View reviewed changes

wobsoriano merged commit c24a965 into mainMay 28, 2026
74 checks passed

wobsoriano deleted the mike/expo-clerk-ios-package-dedeupe branch May 28, 2026 15:34

clerk-cookie mentioned this pull request May 28, 2026
ci(repo): Version packages #8679
Merged

wobsoriano mentioned this pull request May 28, 2026
Revert "fix(expo): pin clerk-ios and dedupe Expo SPM refs" #8692
Merged

mikepitre restored the mike/expo-clerk-ios-package-dedeupe branch May 28, 2026 19:14

mikepitre mentioned this pull request May 28, 2026
fix(expo): reapply clerk-ios SPM dedupe #8696
Closed

mikepitre added a commit that referenced this pull request May 28, 2026
codex: fix CI failure on PR#8689
0f47fe8

coderabbitaiBot mentioned this pull request Jun 2, 2026
chore(expo): bump native SDK pins #8728
Merged