ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/astro@3.4.19

Patch Changes

• Fix Astro initialization when bundled ui or prefetchUI: false is passed to the integration. (#8628) by @jescalan

• Escape <, >, and / when serializing the Clerk auth state into SSR <script> tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element (stored XSS). The embedded JSON still parses to identical values on the client. (#9166) by @dominic-clerk

• Updated dependencies [bcbdda6, e657d99]:

  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7

@clerk/backend@3.11.7

Patch Changes

• Reject machine tokens (M2M and OAuth JWTs) presented in the __session cookie. Previously such a token could pass session verification and produce a signed-in state with the machine identity as userId, defeating if (userId) authorization checks. The cookie path now mirrors the existing header-path guard and returns a signed-out state for these tokens. (#9168) by @dominic-clerk

• Updated dependencies [bcbdda6]:

  • @clerk/shared@4.25.5

@clerk/chrome-extension@3.1.54

Patch Changes

• Updated dependencies [2632d88, bcbdda6, b0ed361]:
  • @clerk/ui@1.25.5
  • @clerk/shared@4.25.5
  • @clerk/react@6.12.5
  • @clerk/clerk-js@6.25.5

@clerk/clerk-js@6.25.5

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/electron@0.0.15

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5
  • @clerk/react@6.12.5
  • @clerk/clerk-js@6.25.5

@clerk/expo@3.7.7

Patch Changes

• Fix Android native UI components crashing before window attachment or becoming unresponsive after navigation detaches and reattaches their views. (#9178) by @wobsoriano

• Prevent Expo apps from accumulating duplicate initialization requests while the Clerk API is unavailable or the app reloads. (#9173) by @mikepitre

• Updated dependencies [bcbdda6]:

  • @clerk/shared@4.25.5
  • @clerk/react@6.12.5
  • @clerk/clerk-js@6.25.5

@clerk/expo-passkeys@1.2.6

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/express@2.1.43

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7

@clerk/fastify@3.1.53

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7

@clerk/hono@0.1.53

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7

@clerk/localizations@4.13.5

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/nextjs@7.5.20

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7
  • @clerk/react@6.12.5

@clerk/nuxt@2.6.19

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7
  • @clerk/vue@2.4.17

@clerk/react@6.12.5

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/react-router@3.5.12

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7
  • @clerk/react@6.12.5

@clerk/shared@4.25.5

Patch Changes

• Escape <, >, and / when serializing the Clerk auth state into SSR <script> tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element (stored XSS). The embedded JSON still parses to identical values on the client. (#9166) by @dominic-clerk

@clerk/tanstack-react-start@1.4.20

Patch Changes

• Escape <, >, and / when serializing the Clerk auth state into SSR <script> tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element (stored XSS). The embedded JSON still parses to identical values on the client. (#9166) by @dominic-clerk

• Updated dependencies [bcbdda6, e657d99]:

  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7
  • @clerk/react@6.12.5

@clerk/testing@2.2.10

Patch Changes

• Updated dependencies [bcbdda6, e657d99]:
  • @clerk/shared@4.25.5
  • @clerk/backend@3.11.7

@clerk/ui@1.25.5

Patch Changes

• Fix pressing Escape while a Select is open inside a Drawer (for example the payment method picker in Checkout) dismissing the entire Drawer. Escape now closes only the open Select and leaves the Drawer open. The Select now wires up its floating interaction props so it handles Escape itself, and the Drawer roots a floating tree so nested floating elements are recognized as its children. (#9176) by @alexcarpenter

• Improve Select keyboard and screen reader support by routing navigation through floating-ui's interaction hooks. Pressing ArrowUp/ArrowDown on a focused, closed Select now opens the listbox, and the active option is announced via aria-activedescendant. The searchable variant (for example the PhoneInput country picker) now exposes a proper combobox: its input is marked role="combobox" with aria-controls, aria-autocomplete="list", and aria-activedescendant, while the plain variant keeps its listbox semantics. (#9179) by @alexcarpenter

• Updated dependencies [bcbdda6]:

  • @clerk/shared@4.25.5
  • @clerk/localizations@4.13.5

@clerk/vue@2.4.17

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/headless@0.0.13

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/msw@0.0.49

Patch Changes

• Updated dependencies [bcbdda6]:
  • @clerk/shared@4.25.5

@clerk/swingset@0.0.20

Patch Changes

• Updated dependencies [2632d88, b0ed361]:
  • @clerk/ui@1.25.5
  • @clerk/headless@0.0.13

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Jul 16, 2026 7:43pm
swingset	Ready	Preview, Comment	Jul 16, 2026 7:43pm

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Repository UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 402f60dc-716c-41ef-b9e1-a5c5ae1db841

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9175

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9175

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9175

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9175

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9175

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9175

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9175

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9175

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9175

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9175

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9175

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9175

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9175

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9175

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9175

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9175

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9175

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9175

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9175

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9175

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9175

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9175

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9175

commit: 2468c36

[github-actions]

API Changes Report

Generated by Break Check on 2026-07-16T19:45:16.139Z

Summary

Metric	Count
Packages analyzed	19
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

---

Report generated by Break Check

_{Last ran on 2468c36.}