ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/backend@3.12.0

Minor Changes

• Fix a cross-origin handshake bypass where isKnownClerkReferrer() trusted overly broad referrer hosts as Clerk-owned: any accounts.* host (e.g. accounts.attacker.com), plus dev account-portal domains (*.accounts.dev and legacy suffixes) on production instances. These let unrelated origins skip the handshake and its session-freshness check. The referrer is now trusted only for the accounts portal derived from the instance's frontend API, plus dev account-portal domains on non-production instances. (#9145) by @dominic-clerk

• Add an optional orgId parameter to createSignInToken() for activating an Organization when the token is redeemed. (#9192) by @swolfand

Patch Changes

• Add the required provider field to CreateEnterpriseConnectionParams. The Backend API has always required provider when creating an enterprise connection, so calls to createEnterpriseConnection() without it type-checked but failed at runtime. The field is typed to the supported provider values ('saml_custom', 'saml_okta', 'saml_google', 'saml_microsoft', 'oidc_custom', 'oidc_github_enterprise', 'oidc_gitlab'), so unsupported values are also caught at compile time. (#9155) by @manovotny

• Add the remaining optional enterprise connection parameters supported by the Backend API. CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams now accept allowOrganizationAccountLinking, customAttributes, authenticatable, and disableJitProvisioning (update also accepts disableAdditionalIdentifications), and SAML params accept loginHint for configuring the login_hint sent to the IdP. (#9155) by @manovotny

• Align CreateEnterpriseConnectionParams and UpdateEnterpriseConnectionParams with the Backend API contract: (#9155) by @manovotny

  • name and domains are now required on CreateEnterpriseConnectionParams. The Backend API already rejected requests missing either of them, so calls that omitted these fields failed at runtime; the types now surface this at compile time.
  • Deprecated syncUserAttributes on CreateEnterpriseConnectionParams. The Backend API ignores this parameter on create; use updateEnterpriseConnection() to set it.
  • Deprecated provider on UpdateEnterpriseConnectionParams. The Backend API ignores this parameter on update; the provider cannot be changed after creation.

• Updated dependencies [c904fb4]:

  • @clerk/shared@4.25.6

@clerk/astro@3.4.20

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0

@clerk/chrome-extension@3.1.55

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6
  • @clerk/ui@1.25.6
  • @clerk/clerk-js@6.25.6
  • @clerk/react@6.12.6

@clerk/clerk-js@6.25.6

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/electron@0.0.17

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6
  • @clerk/clerk-js@6.25.6
  • @clerk/react@6.12.6

@clerk/expo@3.7.9

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6
  • @clerk/clerk-js@6.25.6
  • @clerk/react@6.12.6

@clerk/expo-passkeys@1.2.7

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/express@2.1.44

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0

@clerk/fastify@3.1.54

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0

@clerk/hono@0.1.54

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0

@clerk/localizations@4.13.6

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/nextjs@7.5.21

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0
  • @clerk/react@6.12.6

@clerk/nuxt@2.6.20

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0
  • @clerk/vue@2.4.18

@clerk/react@6.12.6

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/react-router@3.5.13

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0
  • @clerk/react@6.12.6

@clerk/shared@4.25.6

Patch Changes

• Add an experimental oidcSelfServe option to enable the self-serve OIDC configuration flow in <ConfigureSSO />. (#9198) by @NicolasLopes7

@clerk/tanstack-react-start@1.4.21

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0
  • @clerk/react@6.12.6

@clerk/testing@2.2.11

Patch Changes

• Updated dependencies [c904fb4, a009d91, ff5d991, a009d91, 26530ce, a009d91]:
  • @clerk/shared@4.25.6
  • @clerk/backend@3.12.0

@clerk/ui@1.25.6

Patch Changes

• Add an experimental oidcSelfServe option to enable the self-serve OIDC configuration flow in <ConfigureSSO />. (#9198) by @NicolasLopes7

• Updated dependencies [c904fb4]:

  • @clerk/shared@4.25.6
  • @clerk/localizations@4.13.6

@clerk/vue@2.4.18

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/headless@0.0.14

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/msw@0.0.50

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/shared@4.25.6

@clerk/swingset@0.0.21

Patch Changes

• Updated dependencies [c904fb4]:
  • @clerk/ui@1.25.6
  • @clerk/headless@0.0.14

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Jul 20, 2026 7:47pm
swingset	Ready	Preview, Comment	Jul 20, 2026 7:47pm

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Repository UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 043ea140-4aee-455b-99fd-72418383d6ea

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9195

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9195

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9195

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9195

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9195

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9195

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9195

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9195

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9195

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9195

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9195

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9195

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9195

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9195

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9195

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9195

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9195

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9195

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9195

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9195

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9195

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9195

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9195

commit: 2d081df

[github-actions]

API Changes Report

Generated by Break Check on 2026-07-20T19:49:07.073Z

Summary

Metric	Count
Packages analyzed	19
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

---

Report generated by Break Check

_{Last ran on 2d081df.}