Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Force GitHub README to respect dark mode (function() { var style = document.createElement('style'); style.textContent = ' .markdown-body { color-scheme: dark light; } .markdown-body pre { background: #161b22 !important; } .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; } .markdown-body table th, .markdown-body table td { border-color: #30363d !important; } .markdown-body img { background: #0d1117; } .markdown-body blockquote { border-left-color: #8b949e; } .markdown-body hr { border-color: #30363d; } '; document.head.appendChild(style); })(); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Highlight search terms from Google/DuckDuckGo/Bing referrer (function() { var ref = document.referrer; var terms = []; if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) { var url = new URL(ref); var q = url.searchParams.get('q') || url.searchParams.get('p'); if (q) { terms = q.split(/\s+/).filter(function(t) { return t.length > 2; }); } } if (terms.length === 0) return; var style = document.createElement('style'); style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }'; document.head.appendChild(style); function highlight(node) { if (node.nodeType === 3) { // text node var text = node.textContent; var found = false; terms.forEach(function(term) { var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ' ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7
, 'i'); if (__m === '*' || __re.test(location.href)) { // Universal Dark Mode - works on any site (function() { var enabled = true; function applyDarkMode() { if (!enabled) return; // Create style element if it doesn't exist var style = document.getElementById('universal-dark-mode-style'); if (!style) { style = document.createElement('style'); style.id = 'universal-dark-mode-style'; document.head.appendChild(style); } // Dark mode CSS - inverts colors but preserves images/video style.textContent = ' /* Invert everything except media */ html { filter: invert(1) hue-rotate(180deg) !important; background: #1a1a2e !important; } /* Restore images, videos, iframes, canvas */ img, video, iframe, canvas, svg, picture, [style*="background-image"] { filter: invert(1) hue-rotate(180deg) !important; } /* Preserve specific elements that should not be inverted */ .no-dark-mode, .no-dark-mode *, [data-theme="light"], [data-theme="light"], .ace_editor, .ace_editor *, .CodeMirror, .CodeMirror *, .monaco-editor, .monaco-editor *, .markdown-body pre, .markdown-body pre *, .highlight, .highlight *, pre code, pre code * { filter: none !important; } /* Fix common UI elements */ .modal, .popup, .dropdown-menu, .tooltip, .popover { filter: invert(1) hue-rotate(180deg) !important; background: #2d2d44 !important; border-color: #444 !important; } /* Scrollbars */ ::-webkit-scrollbar { background: #1a1a2e !important; } ::-webkit-scrollbar-thumb { background: #444 !important; } ::-webkit-scrollbar-thumb:hover { background: #555 !important; } /* Selection */ ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; } ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; } '; } function removeDarkMode() { var style = document.getElementById('universal-dark-mode-style'); if (style) style.remove(); } // Toggle with Alt+Shift+D document.addEventListener('keydown', function(e) { if (e.altKey && e.shiftKey && e.key === 'D') { e.preventDefault(); enabled = !enabled; if (enabled) { applyDarkMode(); console.log('[Universal Dark Mode] Enabled'); } else { removeDarkMode(); console.log('[Universal Dark Mode] Disabled'); } } }); // Apply on load applyDarkMode(); // Re-apply on dynamic content var observer = new MutationObserver(function(mutations) { if (enabled && !document.getElementById('universal-dark-mode-style')) { applyDarkMode(); } }); observer.observe(document.head, { childList: true }); console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle'); })(); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })(); ci(repo): Version packages by clerk-cookie · Pull Request #9262 · clerk/javascript · GitHub
Skip to content

ci(repo): Version packages - #9262

Merged
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main
Jul 29, 2026
Merged

ci(repo): Version packages#9262
NicolasLopes7 merged 1 commit into
mainfrom
changeset-release/main

Conversation

@clerk-cookie

@clerk-cookieclerk-cookie commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/nuxt@3.0.0

Major Changes

  • Drop support for Nuxt 3, which reaches end-of-life on July 31, 2026. @clerk/nuxt now requires Nuxt 4, and the minimum supported Node.js version is now ^20.19.0 || >=22.12.0 to match Nuxt 4's own requirement. If you are still on Nuxt 3, follow the Nuxt upgrade guide to upgrade your project before updating @clerk/nuxt. (#9258) by @wobsoriano

  • Remove createRouteMatcher from @clerk/nuxt/server and the auto-imported client-side createRouteMatcher. Middleware-based auth checks rely on path matching, which can diverge from how requests are actually routed and leave protected resources reachable. Move auth checks into the resources themselves. (#9258) by @wobsoriano

    Protect API routes inside the event handler itself:

    exportdefaultdefineEventHandler(event=>{const{ isAuthenticated, userId }=event.context.auth();if(!isAuthenticated){throwcreateError({statusCode: 401,statusMessage: 'Unauthorized'});}return{ userId };});

    Protect pages with a named route middleware and opt pages into it with definePageMeta(). Child routes inherit the middleware applied to their parent, so a single declaration can protect a whole section:

    // app/middleware/auth.tsexportdefaultdefineNuxtRouteMiddleware(()=>{const{ isSignedIn }=useAuth();if(!isSignedIn.value){returnnavigateTo('/sign-in');}});
    <script setup>definePageMeta({ middleware:'auth' });</script>

    If you want to hand this work to a coding agent, use this migration prompt:

    Migrate my Nuxt project away from Clerk's removed `createRouteMatcher` API.
    1. Find every matcher created with `createRouteMatcher`, along with the logic
    that uses it (throwing 401 errors, calling `navigateTo('/sign-in')`, etc.).
    Matchers can appear in Nitro server middleware (imported from
    `@clerk/nuxt/server`) or in Nuxt route middleware (auto-imported).
    2. For every API route those matchers protected, move the auth check into the
    event handler itself:
    const { isAuthenticated } = event.context.auth();
    if (!isAuthenticated) throw createError({ statusCode: 401, statusMessage: 'Unauthorized' });
    Keep any role or permission checks (`event.context.auth().has(...)`) with
    the resource as well.
    3. For every page those matchers protected, create a named route middleware in
    `app/middleware/` that checks `useAuth()` and redirects with `navigateTo()`,
    then opt pages into it with `definePageMeta({ middleware: 'auth' })`. Child
    routes inherit the middleware applied to their parent.
    4. Remove the `createRouteMatcher` imports and calls. Keep `clerkMiddleware()`
    itself. Middleware logic unrelated to auth protection (headers, locale
    redirects, etc.) may stay, using plain `getRequestURL(event).pathname`
    checks. Plain pathname checks do not normalize percent-encoding
    (`/api/%61dmin` will not match a check for `/api/admin`), so never use
    them for auth or security decisions. Those belong on the resource itself,
    as in steps 2 and 3.
    5. Make sure every route previously covered by a matcher pattern (including
    glob patterns like `/dashboard(.*)`) now has its own check, then verify the
    project builds.

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/vue@2.4.21

@clerk/backend@3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@clerk/ui@1.27.0

Minor Changes

  • Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @alexcarpenter

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/localizations@4.13.9
    • @clerk/shared@4.25.9

@clerk/astro@4.0.4

Patch Changes

@clerk/chrome-extension@3.1.61

Patch Changes

  • Updated dependencies [2974fb0, 9a52bc7, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/ui@1.27.0
    • @clerk/react@6.12.9

@clerk/clerk-js@6.25.11

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/electron@0.0.22

Patch Changes

  • Updated dependencies [2974fb0, e2dd4e2]:
    • @clerk/clerk-js@6.25.11
    • @clerk/shared@4.25.9
    • @clerk/react@6.12.9

@clerk/expo@4.1.1

Patch Changes

@clerk/expo-passkeys@2.0.3

Patch Changes

@clerk/express@2.1.48

Patch Changes

@clerk/fastify@3.1.58

Patch Changes

@clerk/hono@0.1.58

Patch Changes

@clerk/localizations@4.13.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

  • Updated dependencies [2974fb0, e2dd4e2]:

    • @clerk/shared@4.25.9

@clerk/nextjs@7.6.3

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/react@6.12.9

Patch Changes

@clerk/react-router@3.6.2

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/shared@4.25.9

Patch Changes

  • Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @NicolasLopes7

  • Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.25

Patch Changes

  • Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
    • @clerk/shared@4.25.9
    • @clerk/backend@3.14.0
    • @clerk/react@6.12.9

@clerk/testing@2.2.15

Patch Changes

@clerk/vue@2.4.21

Patch Changes

@clerk/headless@0.0.17

Patch Changes

@clerk/msw@0.0.53

Patch Changes

@clerk/swingset@0.0.26

Patch Changes

@vercel

vercelBot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 29, 2026 5:06pm
swingsetReadyReadyPreview, CommentJul 29, 2026 5:06pm

Request Review

@pkg-pr-new

pkg-pr-newBot commented Jul 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9262

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9262

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9262

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9262

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9262

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9262

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9262

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9262

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9262

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9262

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9262

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9262

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9262

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9262

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9262

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9262

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9262

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9262

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9262

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9262

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9262

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9262

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9262

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9262

commit: b675979

@github-actions

github-actionsBot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-07-29T17:09:51.452Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on b675979.

@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from f0d7daa to a95780dCompareJuly 28, 2026 16:39
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from a95780d to bd8c385CompareJuly 28, 2026 17:25
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from bd8c385 to 1653892CompareJuly 28, 2026 17:34
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 1653892 to 600249aCompareJuly 28, 2026 19:15
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch 2 times, most recently from 97acbee to 516d1c9CompareJuly 29, 2026 00:33
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 516d1c9 to 9ead6f8CompareJuly 29, 2026 14:00
@clerk-cookie
clerk-cookieforce-pushed the changeset-release/main branch from 9ead6f8 to 177fc6aCompareJuly 29, 2026 16:43
@NicolasLopes7
NicolasLopes7 merged commit c86b4bc into mainJul 29, 2026
53 checks passed
@NicolasLopes7
NicolasLopes7 deleted the changeset-release/main branch July 29, 2026 18:28
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@clerk-cookie@wobsoriano@NicolasLopes7