ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/expo@4.9.0

Minor Changes

• Deprecate useLocalCredentials(). It will be removed in the next major version. To keep the same flow, store the credentials with expo-secure-store and its requireAuthentication option, then sign in with the stored identifier and password. (#10104) by @wobsoriano

Patch Changes

• Bump the bundled clerk-ios SDK from 1.5.8 to 1.5.9. See the Clerk iOS release: https://github.com/clerk/clerk-ios/releases/tag/1.5.9. (#10083) by @clerk-cookie

• Bump the bundled clerk-ios SDK from 1.5.9 to 1.6.0. See the Clerk iOS release: https://github.com/clerk/clerk-ios/releases/tag/1.6.0. (#10101) by @clerk-cookie

• Bump the bundled clerk-ios SDK from 1.6.0 to 1.6.1. See the Clerk iOS release: https://github.com/clerk/clerk-ios/releases/tag/1.6.1. (#10123) by @clerk-cookie

• Fix the close button of a dismissible <AuthView /> doing nothing on iOS when the view is rendered inline instead of inside a modal. Tapping it now calls onDismiss. (#10079) by @mikepitre

• Updated dependencies [fc7d050, 568c668]:

  • @clerk/clerk-js@6.38.1
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1

@clerk/tanstack-react-start@1.7.0

Minor Changes

• Raise the minimum supported peer dependencies to @tanstack/react-start@^1.168.10 and @tanstack/react-router@^1.170.7. Start 1.168.10 is the first version where importing createCsrfMiddleware() works reliably during Vite SSR. (#10102) by @SarahSoutoul

  TanStack Start skips its default CSRF protection for server functions when your app has a src/start.ts, which clerkMiddleware() requires. Register createCsrfMiddleware() before clerkMiddleware() to restore it:

  import { clerkMiddleware } from '@clerk/tanstack-react-start/server';
  import { createCsrfMiddleware, createStart } from '@tanstack/react-start';
  
  const csrfMiddleware = createCsrfMiddleware({
    filter: ctx => ctx.handlerType === 'serverFn',
  });
  
  export const startInstance = createStart(() => {
    return {
      requestMiddleware: [csrfMiddleware, clerkMiddleware()],
    };
  });

Patch Changes

• Updated dependencies [fc7d050, 568c668]:
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/astro@4.1.11

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/backend@3.23.1

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1

@clerk/chrome-extension@3.1.92

Patch Changes

• Updated dependencies [fc7d050, 568c668]:
  • @clerk/clerk-js@6.38.1
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1
  • @clerk/ui@1.39.1

@clerk/clerk-js@6.38.1

Patch Changes

• Fix <HandleSSOCallback /> dropping the error when a Clerk Protect challenge fails on the SSO callback. The error is now available on errors from useSignIn() or useSignUp(), and a failed sign-up challenge calls navigateToSignUp instead of navigateToSignIn. (#10103) by @wobsoriano

• Updated dependencies [568c668]:

  • @clerk/shared@4.39.1

@clerk/electron@0.0.52

Patch Changes

• Updated dependencies [fc7d050, 568c668]:
  • @clerk/clerk-js@6.38.1
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1

@clerk/expo-passkeys@2.0.28

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1

@clerk/express@2.1.77

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/fastify@3.1.87

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/hono@0.1.87

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/localizations@4.22.1

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1

@clerk/mosaic@0.1.7

Patch Changes

• Rename the userButton.workspaces localization keys to userButton.organizations. Update any overrides of userButton.workspaces.* to use userButton.organizations.*. (#10072) by @alexcarpenter

• Show the active organization's name, instead of the account's email or username, under the user's name in the UserButton popover header when an organization is active in combined mode. (#10096) by @alexcarpenter

• Updated dependencies [568c668]:

  • @clerk/shared@4.39.1

@clerk/nextjs@7.9.12

Patch Changes

• Updated dependencies [fc7d050, 568c668]:
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/nuxt@3.1.11

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1
  • @clerk/vue@2.5.11

@clerk/react@6.17.7

Patch Changes

• Fix <HandleSSOCallback /> dropping the error when a Clerk Protect challenge fails on the SSO callback. The error is now available on errors from useSignIn() or useSignUp(), and a failed sign-up challenge calls navigateToSignUp instead of navigateToSignIn. (#10103) by @wobsoriano

• Updated dependencies [568c668]:

  • @clerk/shared@4.39.1

@clerk/react-router@3.6.32

Patch Changes

• Updated dependencies [fc7d050, 568c668]:
  • @clerk/react@6.17.7
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/shared@4.39.1

Patch Changes

• The missing and invalid key errors now say that npx clerk@latest init does not need a Clerk account and writes temporary dev keys. Readers previously saw init listed beside link, env pull and the Dashboard link, and assumed signing up was required before any of the steps would work. (#10099) by @eatmorespinach

@clerk/testing@2.2.44

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/backend@3.23.1

@clerk/ui@1.39.1

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1
  • @clerk/localizations@4.22.1

@clerk/vue@2.5.11

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1

@clerk/msw@0.0.78

Patch Changes

• Updated dependencies [568c668]:
  • @clerk/shared@4.39.1

@clerk/swingset@0.0.55

Patch Changes

• Updated dependencies [568c668, 55a1d5b, 31feefc]:
  • @clerk/shared@4.39.1
  • @clerk/mosaic@0.1.7
  • @clerk/nextjs@7.9.12

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 7, 2026 9:43pm UTC
swingset	Ready	Preview	Oct 7, 2026 9:43pm UTC

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository YAML (base), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 96056992-2dba-4c22-a878-e7a97623d8db

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10074

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10074

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10074

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10074

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10074

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10074

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10074

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10074

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10074

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10074

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10074

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10074

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10074

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10074

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10074

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10074

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10074

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10074

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10074

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10074

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10074

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10074

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10074

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10074

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10074

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10074

commit: d3603b0

[github-actions]

API Changes Report

Generated by Break Check on 2026-10-07T21:44:20.225Z

Summary

Metric	Count
Packages analyzed	19
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

---

Report generated by Break Check

_{Last ran on d3603b0.}