ci(repo): Version packages #6377
Conversation
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
@clerk/agent-toolkit
@clerk/astro
@clerk/backend
@clerk/chrome-extension
@clerk/clerk-js
@clerk/dev-cli
@clerk/elements
@clerk/clerk-expo
@clerk/expo-passkeys
@clerk/express
@clerk/fastify
@clerk/localizations
@clerk/nextjs
@clerk/nuxt
@clerk/clerk-react
@clerk/react-router
@clerk/remix
@clerk/shared
@clerk/tanstack-react-start
@clerk/testing
@clerk/themes
@clerk/types
@clerk/upgrade
@clerk/vue
commit: |
📝 Walkthrough""" WalkthroughThis change set consists of version bumps and changelog updates across multiple packages. The updates primarily document dependency upgrades, especially for the Estimated code review effort🎯 1 (Trivial) | ⏱️ ~5 minutes Suggested labels
Suggested reviewers
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (48)
💤 Files with no reviewable changes (4)
✅ Files skipped from review due to trivial changes (13)
🚧 Files skipped from review as they are similar to previous changes (30)
🧰 Additional context used📓 Path-based instructions (3)**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Files:
packages/*/package.json📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)
Files:
**/*⚙️ CodeRabbit Configuration File
Files:
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
🔇 Additional comments (1)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (24)
packages/expo/package.json (1)
3-3: Patch bump looks correct; remember the changelog
2.14.10 → 2.14.11is a straight patch. Make surepackages/expo/CHANGELOG.md(usually auto-generated by Changesets) reflects this so consumers know why they’re upgrading.packages/shared/package.json (1)
3-3: Minor bump acknowledged; refresh lockfile after mergeAfter merging, run the workspace install to propagate
@clerk/[email protected]intopnpm-lock.yamlso downstream consumers get the new version.packages/chrome-extension/package.json (1)
3-3: Patch-level bump looks correct; verify accompanying CHANGELOG entry.
2.5.11 → 2.5.12is a semantic-versioning-compliant patch upgrade that syncs with dependency bumps across the workspace. Just double-check thatpackages/chrome-extension/CHANGELOG.md(or the monorepo root changelog) includes a corresponding entry so consumers see the update rationale.packages/react/CHANGELOG.md (1)
3-10: Changelog entry looks good – consider adding a date for uniformityEverything follows the existing format.
If prior sections normally include a release date, appending one here (e.g.## 5.35.5 – 2025-07-xx) would keep the file stylistically consistent.packages/expo-passkeys/CHANGELOG.md (1)
3-10: Clarify whether any runtime impact existsThe entry only lists dependency bumps. To help consumers quickly assess impact, add an explicit note such as “No runtime-level changes; this release only updates internal @clerk/* dependencies.”
## 0.3.22 ### Patch Changes +- No runtime changes; aligns dependencies with the rest of the monorepo.packages/vue/CHANGELOG.md (1)
3-10: Add an explicit “no functional changes” noteConsider appending a brief sentence so users know this patch is dependency-only.
## 1.8.20 ### Patch Changes - Updated dependencies [...] - @clerk/[email protected] - @clerk/[email protected] + - No functional changes in @clerk/vue.packages/fastify/CHANGELOG.md (1)
7-8: Deduplicate commit reference in dependency listCommit hash
cd59c0eis listed twice. Keeping a single reference is cleaner and consistent with earlier entries.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:packages/nuxt/CHANGELOG.md (1)
7-11: Remove duplicated commit hash in dependency listThe same commit hash
cd59c0eis listed twice. Keeping a single reference is cleaner and avoids the impression that two distinct changes occurred.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:packages/express/CHANGELOG.md (1)
7-9: Duplicate commit hash reference – consider trimming to one linkThe square-bracket list shows the same commit hash (
cd59c0e...) twice. Unless two different commits were intended, keeping both links adds noise.- Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:packages/astro/CHANGELOG.md (1)
7-10: Remove the duplicated commit reference to keep the changelog tidyThe same commit hash
cd59c0eis listed twice in the “Updated dependencies” bracket list. One is enough.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:packages/react-router/CHANGELOG.md (1)
7-8: Duplicate commit hash in dependency bullet – remove redundancy
The same commit hashcd59c0eis listed twice inside the square-bracket link array. One entry is enough.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:Tidying this up keeps the changelog concise and avoids confusion.
packages/expo/CHANGELOG.md (2)
3-12: Enrich the changelog entry with a concise description of the effect of the bumpThe entry for
2.14.11only lists dependency bumps. Given the guidelines that package changelogs should stay “detailed”, add a short sentence explaining why the bump matters (e.g. “syncs with Billing Beta top-level subscription changes”) so that consumers don’t have to inspect every downstream package.
7-8: Remove the duplicated commit hash
cd59c0eappears twice in the “Updated dependencies” list. Kill the duplicate to avoid noise.packages/tanstack-react-start/CHANGELOG.md (1)
7-11: Avoid repeating the same commit hash in the “Updated dependencies” listThe same commit (
cd59c0e) is listed twice in the bullet. Tidying this up keeps the changelog compact and easier to scan.- - Updated dependencies [[`cd59c0e`...], [`cd59c0e`...]]: + - Updated dependencies [[`cd59c0e`...]]:Please also verify that the corresponding
package.jsonreflects these exact dependency versions.packages/agent-toolkit/CHANGELOG.md (1)
7-11: Deduplicate the commit reference for clarityAs above, the same commit hash appears twice in the bracket list. One entry is sufficient.
- - Updated dependencies [[`cd59c0e`...], [`cd59c0e`...]]: + - Updated dependencies [[`cd59c0e`...]]:Confirm that
package.jsonfor@clerk/agent-toolkitis bumped to the same dependency versions to keep everything in sync.packages/elements/CHANGELOG.md (1)
7-10: Remove duplicate commit hash entry for clarity
The same commit hash (cd59c0e) appears twice in the brackets. One occurrence is sufficient and keeps the changelog concise.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:packages/testing/CHANGELOG.md (1)
7-7: Duplicate commit hash reference – drop the second linkThe “Updated dependencies” bullet shows the same commit (
cd59c0e) twice. One reference is enough and keeps the changelog tidy.packages/backend/CHANGELOG.md (1)
3-10: Add release date and remove duplicate commit hash
- We normally suffix the header with the publication date for easier history scanning.
- The same commit hash (
cd59c0e) appears twice in the dependency bullet – one entry is enough.-## 2.5.2 -### Patch Changes -- Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: +## 2.5.2 – 2025-07-XX +### Patch Changes +- Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:This keeps the changelog concise and consistent.
packages/shared/CHANGELOG.md (1)
3-13: Expand the 3.15.0 entry for completenessThe note only references the React hook rename, but the same release implicitly relies on the new top-level
CommerceSubscriptionJSONconcept and the deprecation ofbilling.getSubscriptions(). Mentioning these here (or linking to the@clerk/typeschangelog) will save consumers a trip across packages and keeps this changelog self-contained.Optionally, add the release date to stay in line with many OSS changelog conventions.
packages/chrome-extension/CHANGELOG.md (1)
7-7: Duplicated commit hash in bullet listThe same commit
cd59c0eis referenced twice in the dependency-update bullet. Unless this is intentional (e.g. multiple packages released off the same commit), consider removing the duplicate to keep the changelog concise.packages/nextjs/CHANGELOG.md (1)
7-11: Duplicate commit hash in the bullet listThe two commit hashes inside the square brackets are identical (
cd59c0e…). Unless both entries intentionally point to different changesets that happen to share the same hash prefix (highly unlikely), one of them can be safely removed to reduce noise.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:Minor but keeps the changelog concise.
packages/remix/CHANGELOG.md (2)
7-11: Avoid duplicate commit references in the same bulletThe square-bracket list repeats the exact commit hash
cd59c0etwice, which adds noise and slightly bloats the generated changelog.
Unless there really are two distinct commits with identical hashes (unlikely), keep only one reference.- - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5), [`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]: + - Updated dependencies [[`cd59c0e`](https://github.com/clerk/javascript/commit/cd59c0e5512a341dd8fb420aca583333c8243aa5)]:
3-6: Heading spacing looks off compared to previous entriesOlder entries separate the version header from the “Patch Changes” header by an empty line (see e.g. 4.10.5).
For 4.10.6 there are two empty lines, which breaks the visual rhythm. Consider aligning the spacing for consistency.packages/clerk-js/CHANGELOG.md (1)
3-20: Add release date to header for consistencyMost other packages in the repo include the release date after the version header (e.g.
## 5.75.0 – 2024-07-02).
Adding the date here helps readers quickly contextualize the release timeline and keeps the changelog formatting uniform.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (46)
.changeset/rare-readers-cough.md(0 hunks).changeset/wide-loops-decide.md(0 hunks)packages/agent-toolkit/CHANGELOG.md(1 hunks)packages/agent-toolkit/package.json(1 hunks)packages/astro/CHANGELOG.md(1 hunks)packages/astro/package.json(1 hunks)packages/backend/CHANGELOG.md(1 hunks)packages/backend/package.json(1 hunks)packages/chrome-extension/CHANGELOG.md(1 hunks)packages/chrome-extension/package.json(1 hunks)packages/clerk-js/CHANGELOG.md(1 hunks)packages/clerk-js/package.json(1 hunks)packages/elements/CHANGELOG.md(1 hunks)packages/elements/package.json(1 hunks)packages/expo-passkeys/CHANGELOG.md(1 hunks)packages/expo-passkeys/package.json(1 hunks)packages/expo/CHANGELOG.md(1 hunks)packages/expo/package.json(1 hunks)packages/express/CHANGELOG.md(1 hunks)packages/express/package.json(1 hunks)packages/fastify/CHANGELOG.md(1 hunks)packages/fastify/package.json(1 hunks)packages/localizations/CHANGELOG.md(1 hunks)packages/localizations/package.json(1 hunks)packages/nextjs/CHANGELOG.md(1 hunks)packages/nextjs/package.json(1 hunks)packages/nuxt/CHANGELOG.md(1 hunks)packages/nuxt/package.json(1 hunks)packages/react-router/CHANGELOG.md(1 hunks)packages/react-router/package.json(1 hunks)packages/react/CHANGELOG.md(1 hunks)packages/react/package.json(1 hunks)packages/remix/CHANGELOG.md(1 hunks)packages/remix/package.json(1 hunks)packages/shared/CHANGELOG.md(1 hunks)packages/shared/package.json(1 hunks)packages/tanstack-react-start/CHANGELOG.md(1 hunks)packages/tanstack-react-start/package.json(1 hunks)packages/testing/CHANGELOG.md(1 hunks)packages/testing/package.json(1 hunks)packages/themes/CHANGELOG.md(1 hunks)packages/themes/package.json(1 hunks)packages/types/CHANGELOG.md(1 hunks)packages/types/package.json(1 hunks)packages/vue/CHANGELOG.md(1 hunks)packages/vue/package.json(1 hunks)
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/tanstack-react-start/package.jsonpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/clerk-js/package.jsonpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/remix/package.jsonpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/shared/package.jsonpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
packages/*/package.json
📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)
All publishable packages should be placed under the packages/ directory
packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/tanstack-react-start/package.jsonpackages/clerk-js/package.jsonpackages/remix/package.jsonpackages/shared/package.json
**/*
⚙️ CodeRabbit Configuration File
**/*: If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.Whenever reviewing a pull request, if there are any changes that could impact security, always tag
clerk/securityin the PR.Security-impacting changes include, but are not limited to:
- Changes to authentication logic or mechanisms (e.g. login, session handling, token issuance)
- Any modification to access control, authorization checks, or role-based permissions
- Introduction or modification of hashing algorithms, signature verification, or cryptographic primitives
- Handling of sensitive data (e.g. passwords, tokens, secrets, PII)
- Integration with external identity providers (e.g. SSO, OAuth, OpenID Connect)
- Modifications to security headers, cookie flags, CORS policies, or CSRF protections
- Bypass mechanisms (e.g. feature flags, testing overrides) that could weaken protections
- Changes to rate limiting, abuse prevention, or input validation
If you're unsure whether a change is security-relevant, err on the side of caution and tag
clerk/security.Any time that you tag
clerk/security, please do so explicitly in a code comment, rather than within a collapsed section in a coderabbit comment, such as the "recent review details" section. If you do use the team name in any thinking or non-direct-code-comment content, it can be referred to as "clerk security team" to avoid accidentally printing the tag which sends a notification to the team.
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/tanstack-react-start/package.jsonpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/clerk-js/package.jsonpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/remix/package.jsonpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/shared/package.jsonpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
packages/localizations/**/*
📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)
Localization files must be placed in 'packages/localizations/'.
Files:
packages/localizations/package.jsonpackages/localizations/CHANGELOG.md
packages/**/CHANGELOG.md
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Maintain detailed changelogs
Files:
packages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
💤 Files with no reviewable changes (2)
- .changeset/wide-loops-decide.md
- .changeset/rare-readers-cough.md
🧰 Additional context used
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/tanstack-react-start/package.jsonpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/clerk-js/package.jsonpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/remix/package.jsonpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/shared/package.jsonpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
packages/*/package.json
📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)
All publishable packages should be placed under the packages/ directory
packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/tanstack-react-start/package.jsonpackages/clerk-js/package.jsonpackages/remix/package.jsonpackages/shared/package.json
**/*
⚙️ CodeRabbit Configuration File
**/*: If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.Whenever reviewing a pull request, if there are any changes that could impact security, always tag
clerk/securityin the PR.Security-impacting changes include, but are not limited to:
- Changes to authentication logic or mechanisms (e.g. login, session handling, token issuance)
- Any modification to access control, authorization checks, or role-based permissions
- Introduction or modification of hashing algorithms, signature verification, or cryptographic primitives
- Handling of sensitive data (e.g. passwords, tokens, secrets, PII)
- Integration with external identity providers (e.g. SSO, OAuth, OpenID Connect)
- Modifications to security headers, cookie flags, CORS policies, or CSRF protections
- Bypass mechanisms (e.g. feature flags, testing overrides) that could weaken protections
- Changes to rate limiting, abuse prevention, or input validation
If you're unsure whether a change is security-relevant, err on the side of caution and tag
clerk/security.Any time that you tag
clerk/security, please do so explicitly in a code comment, rather than within a collapsed section in a coderabbit comment, such as the "recent review details" section. If you do use the team name in any thinking or non-direct-code-comment content, it can be referred to as "clerk security team" to avoid accidentally printing the tag which sends a notification to the team.
Files:
packages/expo-passkeys/package.jsonpackages/react-router/package.jsonpackages/fastify/package.jsonpackages/nextjs/package.jsonpackages/backend/package.jsonpackages/react/package.jsonpackages/testing/package.jsonpackages/themes/package.jsonpackages/expo/package.jsonpackages/nuxt/package.jsonpackages/express/package.jsonpackages/elements/package.jsonpackages/chrome-extension/package.jsonpackages/agent-toolkit/package.jsonpackages/astro/package.jsonpackages/vue/package.jsonpackages/localizations/package.jsonpackages/types/package.jsonpackages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/tanstack-react-start/package.jsonpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/clerk-js/package.jsonpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/remix/package.jsonpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/shared/package.jsonpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
packages/localizations/**/*
📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)
Localization files must be placed in 'packages/localizations/'.
Files:
packages/localizations/package.jsonpackages/localizations/CHANGELOG.md
packages/**/CHANGELOG.md
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Maintain detailed changelogs
Files:
packages/themes/CHANGELOG.mdpackages/astro/CHANGELOG.mdpackages/nuxt/CHANGELOG.mdpackages/agent-toolkit/CHANGELOG.mdpackages/react-router/CHANGELOG.mdpackages/vue/CHANGELOG.mdpackages/tanstack-react-start/CHANGELOG.mdpackages/react/CHANGELOG.mdpackages/localizations/CHANGELOG.mdpackages/types/CHANGELOG.mdpackages/shared/CHANGELOG.mdpackages/backend/CHANGELOG.mdpackages/expo-passkeys/CHANGELOG.mdpackages/fastify/CHANGELOG.mdpackages/express/CHANGELOG.mdpackages/testing/CHANGELOG.mdpackages/elements/CHANGELOG.mdpackages/chrome-extension/CHANGELOG.mdpackages/remix/CHANGELOG.mdpackages/expo/CHANGELOG.mdpackages/nextjs/CHANGELOG.mdpackages/clerk-js/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)
- GitHub Check: semgrep-cloud-platform/scan
- GitHub Check: Formatting | Dedupe | Changeset
- GitHub Check: Build Packages
- GitHub Check: semgrep/ci
- GitHub Check: Analyze (javascript-typescript)
🔇 Additional comments (23)
packages/expo-passkeys/package.json (1)
3-3: Version bump LGTMPatch increment follows semver; no other manifest changes.
packages/themes/package.json (1)
3-3: Patch release version is appropriate
2.4.0 → 2.4.1properly reflects a non-breaking internal dependency update.packages/agent-toolkit/package.json (1)
3-3: Semver patch bump looks correctNo additional manifest changes detected; package path and namespace comply with guidelines.
packages/testing/package.json (1)
3-3: Testing package patch bump acknowledged
1.10.5 → 1.10.6maintains semver consistency across workspace.packages/fastify/package.json (1)
3-3: Fastify SDK patch bump verifiedChange aligns with internal dependency updates; nothing else to flag.
packages/elements/package.json (1)
3-3: Patch bump is appropriate and consistent with semverOnly dependency updates were introduced; a
0.0.1increment is correct.
No other concerns.packages/nuxt/package.json (1)
3-3: Patch version increment looks correctThe change is limited to internal-dependency bumps; sticking to
1.7.xis semver-compliant.
Everything else remains unchanged.packages/backend/package.json (1)
3-3: LGTM – patch release makes senseNothing besides workspace dependency updates changed.
Version2.5.2accurately reflects a non-breaking patch.packages/localizations/package.json (1)
3-3: Patch bump acceptedNo functional changes beyond bumping
@clerk/types; a0.0.1increment is correct.
File is otherwise untouched.packages/types/package.json (1)
3-3: Minor version bump (4.69.0→4.70.0) is justifiedNew non-breaking typings and deprecations warrant a minor increment.
Changelog entry already present; no further action required.packages/clerk-js/package.json (1)
3-3: Minor bump aligns with new Billing APIs—sanity-check dependents & docsGoing from
5.75.xto5.76.0is SemVer-minor and introduces new subscription helpers (billing.getSubscription,useSubscription).
Please verify:
• All internal packages usingworkspace:^resolve to5.76.0.
• Public docs & examples have been updated away from deprecated methods/hooks.
No code issues spotted—just a release-readiness check.packages/tanstack-react-start/package.json (1)
3-3: Patch increment is consistent with dependency bumps
0.21.1 → 0.21.2looks good and keeps SemVer contract intact.packages/nextjs/package.json (1)
3-3: Patch bump OK; peer range still valid
6.25.5 → 6.25.6poses no compatibility concerns; the existing peer range for Next.js already covers current versions.packages/express/package.json (1)
3-3: Version bump looks goodPatch bump
1.7.11 → 1.7.12is consistent with internal dependency bumps recorded in the changelog. No further issues spotted.packages/react-router/package.json (1)
3-3: Patch version increment acknowledged
1.8.5 → 1.8.6aligns with workspace dependency updates. LGTM.packages/remix/package.json (1)
3-3: Correct patch release
4.10.5 → 4.10.6is consistent with the coordinated set of updates. Nothing else changed. ✅packages/astro/package.json (1)
3-3: Astro SDK patch bump verified
2.10.9 → 2.10.10matches internal dependency bumps; no additional adjustments required.packages/themes/CHANGELOG.md (1)
3-9: Changelog entry added correctlyThe new
2.4.1section clearly documents the dependency bump to@clerk/[email protected]. Formatting remains consistent with previous entries.packages/vue/package.json (1)
3-3: Version bump LGTMThe version in
package.jsonmatches the new changelog entry (1.8.20).packages/react/package.json (1)
3-3: Version bump looks correct
5.35.4→5.35.5follows semver for a patch-level change and keeps the package insidepackages/with the correct@clerkscope. No further issues spotted.packages/localizations/CHANGELOG.md (1)
3-9: Changelog entry is minimal but sufficientThe entry clearly states this release is dependency-only (
@clerk/[email protected]). Nothing else required.packages/types/CHANGELOG.md (1)
3-11: Changelog entry looks solid.The new 4.70.0 notes are clear, correctly linked, and follow the existing formatting conventions. No issues spotted.
packages/clerk-js/CHANGELOG.md (1)
7-13: Excellent, clear description of Billing Beta changesThe bullet points concisely explain the type rename, API deprecation, and hook replacement. No further action needed.
github-actions
bot
force-pushed
the
changeset-release/main
branch
from
53a30ff to
067747c
Compare
github-actions
bot
force-pushed
the
changeset-release/main
branch
from
067747c to
7244332
Compare
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@clerk/[email protected]
Minor Changes
[Billing Beta] Introduce top level subscription. (#6317) by @panteliselef
Updated
CommerceSubscriptionJSONto describe the top level subscription and renamed the existing type toCommerceSubscriptionItemJSON.Deprecated
billing.getSubscriptions()in favour ofbilling.getSubscription.[Billing Beta] Replace
useSubscriptionItemswithuseSubscription. (#6317) by @panteliselefPatch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Minor Changes
<CheckoutButton/>,<SubscriptionDetailsButton/>,<PlanDetailsButton/>from@clerk/nextjs/experimental. (#6365) by @panteliselefPatch Changes
Improved machine auth verification within API routes (#6367) by @wobsoriano
Updated dependencies [
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Minor Changes
<CheckoutButton/>,<SubscriptionDetailsButton/>,<PlanDetailsButton/>from@clerk/clerk-react/experimental. (#6365) by @panteliselefPatch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Minor Changes
useSubscriptionItemswithuseSubscription. (#6317) by @panteliselefPatch Changes
cd59c0e]:@clerk/[email protected]
Minor Changes
[Billing Beta] Introduce top level subscription. (#6317) by @panteliselef
Updated
CommerceSubscriptionJSONto describe the top level subscription and renamed the existing type toCommerceSubscriptionItemJSON.Deprecated
billing.getSubscriptions()in favour ofbilling.getSubscription.@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
8feb59b,cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e]:@clerk/[email protected]
Patch Changes
cd59c0e,cd59c0e]:Summary by CodeRabbit
New Features
<CheckoutButton/>,<SubscriptionDetailsButton/>, and<PlanDetailsButton/>in select packages.Improvements
Chores