@clerk/nextjs 7.9.5 patch release
Fixed a React key warning in ClerkProvider with App Router and resolved a cross-request credential leak in clerkMiddleware when using dynamic secret keys. Each request now has its own isolated store to prevent secret key visibility across concurrent requests.
Patch Changes
-
Fix a development-only React key warning when using
ClerkProviderin the App Router. (#9816) by @joshrowley -
Fix a cross-request credential leak in
clerkMiddleware(). When using dynamic keys (an options callback that resolves a differentsecretKeyper request), aclerkClient()call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @dominic-clerk -
Updated dependencies [
804d3db,64c8e3e,f56a14b,07b4c2b,4e36687,917453a,3d6ed25,40f40f2,9e7485c]:- @clerk/shared@4.34.0
- @clerk/react@6.17.0
- @clerk/backend@3.19.0
Source: original entry ↗
More from Clerk
Follow Clerk to get its new changes in your feed and email digest.
@clerk/vue 1.17.26
Updated @clerk/types dependency to version 4.101.28.
@clerk/nuxt@1.13.34
Updated internal dependencies for @clerk/types, @clerk/backend, and @clerk/vue to latest patch versions.
@clerk/testing dependencies updated
Updated @clerk/types to 4.101.28 and @clerk/backend to 2.33.8 to ensure compatibility and include latest improvements.