Clerk — Auth, Security product updates and releases, tracked on megachangelog.
Updated the bundled clerk-android SDK from 1.0.39 to 1.1.0 and aligned Android OkHttp dependencies to compatible versions to prevent classpath conflicts when running Clerk native networking and React Native together.
Release of @clerk/backend version 3.16.4 with updates and improvements to the backend SDK.
Release of Clerk Expo SDK version 4.2.6 with updates and improvements for React Native authentication support.
Release of @clerk/express version 2.1.55 with updates and improvements to the Express authentication middleware.
Release of @clerk/hono version 0.1.65 for Hono framework integration.
Release of version 7.7.4 of the Clerk Next.js SDK.
Release of @clerk/nuxt version 3.0.7 with updates and improvements for Nuxt framework integration.
Release of @clerk/react-router version 3.6.9. This update contains bug fixes, performance improvements, and dependency updates for the React Router integration.
Released version 1.5.0 of the Clerk TanStack React Start integration with updates and improvements for React framework integration.
Release of @clerk/fastify version 3.1.65 with updates and fixes for Fastify integration.
@clerk/testing package released at version 2.2.22 with routine updates and improvements to the testing library.
Patch release updating dependencies including @clerk/shared, @clerk/backend, and @clerk/vue to their latest versions.
Updated @clerk/shared to version 4.28.1. This patch release includes dependency maintenance and updates.
Resolved an issue where native OAuth transport flows (e.g. in Electron) were breaking out of modal components and failing with "Redirect url mismatch" errors. OAuth callbacks now navigate within the component's own router and consistently use the registered transport callback URL, preventing production rejections of sign-in and sign-up requests.
Patch release with updated dependencies for @clerk/shared, @clerk/backend, and @clerk/react.
Patch release updating internal dependencies including @clerk/shared, @clerk/backend, and @clerk/react to their latest patch versions.
Updated @clerk/shared dependency to version 4.28.1 with changes from commit 131edec.
Patch release with updated dependencies for @clerk/shared, @clerk/backend, and @clerk/react packages.
Patch update to the @clerk/vue package with an updated @clerk/shared dependency to version 4.28.1.
Updated @clerk/shared and @clerk/backend dependencies to latest patch versions. This ensures compatibility with the latest backend and shared library improvements.
Fixed native OAuth transport flows (e.g. @clerk/electron) that were breaking out of modal components and failing with redirect URL mismatch errors. OAuth callback steps now navigate within the component's own router and use the registered transport callback URL for completion redirects.
The UI now hides the "Use another method" action during Device Trust and second-factor verification when no alternative verification methods are available, preventing users from encountering dead-end flows.
Updated dependencies for @clerk/backend, @clerk/shared, and @clerk/react to their latest patch versions for stability and compatibility improvements.
Patch release updating dependencies for @clerk/backend, @clerk/shared, and @clerk/react to their latest patch versions.
Updated @clerk/shared dependency to 4.27.1 to pull in latest shared utilities and improvements.
Updated @clerk/shared dependency to version 4.27.1 in @clerk/localizations package.
Patch release updating dependencies on @clerk/backend, @clerk/shared, and @clerk/react to their latest patch versions for compatibility and bug fixes.
Patch release that updates dependencies to @clerk/backend 3.16.1, @clerk/shared 4.27.1, and @clerk/vue 2.4.25.
Updated internal @clerk/shared dependency to version 4.27.1.
Patch release with updated dependencies for @clerk/backend and @clerk/shared packages.
Updated documentation to clarify that ClientResource.cookieExpiresAt is nullable, can change when Clerk refreshes the client cookie, and reflects the cookie used by Device Trust to recognize a browser.
Added a "Forgot password?" action on the sign-in start page when the password field is shown, improving account recovery UX when strict user enumeration protection is enabled.
@clerk/clerk-expo is now deprecated in favor of @clerk/expo. A runtime warning has been added with a link to the migration guide to help developers transition to the new package.
Updated dependencies to @clerk/clerk-js@5.127.2 for the Chrome extension package.
Updated dependencies including @clerk/backend to 3.15.0, @clerk/shared to 4.25.10, and @clerk/react to 6.12.10 to incorporate latest improvements and fixes.
Updated @clerk/shared dependency to version 4.25.10. This patch release includes dependency updates.
Patch release with updated dependencies across Clerk backend, shared utilities, and React libraries to ensure compatibility and incorporate upstream improvements.
Patch release updating dependencies including @clerk/backend, @clerk/shared, and @clerk/react to their latest versions.
Updated dependencies including @clerk/backend to 3.15.0 and @clerk/shared to 4.25.10 in a patch release.
Patch release updating dependencies, including @clerk/shared to version 4.25.10.
Fixed a TypeScript error that incorrectly rejected valid appearance properties like theme, variables, and elements with a "does not exist in type Appearance" message. This also resolves the same issue in @clerk/nuxt which derives options from @clerk/vue.
Organization admins can now select an OIDC provider in the OrganizationProfile Security tab without needing the experimental.oidcSelfServe option, and the option can be safely removed from ClerkProvider and Clerk.load().
Patch release updating dependencies for @clerk/backend, @clerk/shared, and @clerk/vue to their latest compatible versions.
Organization admins can now configure OIDC providers directly in the OrganizationProfile Security tab without requiring experimental flags. The experimental.oidcSelfServe option is no longer necessary and can be safely removed.
OAuth deep-link callbacks are now forwarded to the primary Electron process on Windows and Linux, and the signing-in window is brought to the front when the callback arrives. The createClerkBridge function now includes isPrimaryInstance flag and manageSingleInstanceLock option to control single-instance lock behavior.
Updated dependencies including @clerk/ui to 1.27.1 and @clerk/react to 6.12.9.
Fixed a crash in phone number and multi-email fields when paste events occur without clipboard data. This prevents the UI from breaking when users attempt to paste content.
Patch release with updated dependencies for @clerk/shared, @clerk/backend, and @clerk/react to fix bugs and improve compatibility.
Updated internal dependencies including @clerk/shared to 4.25.9 and @clerk/backend to 3.14.0.
Clerk's Nuxt integration now requires Nuxt 4 and Node.js 20.19+. The createRouteMatcher API has been removed; protect API routes with inline auth checks and pages with named route middleware instead.
Added support for configuring custom OpenID Connect enterprise connections through the Organization Profile. Also exposed deprovisioned member status and marked deprovisioned members as inactive in the Organization Profile.
Patch release with updated dependencies for Clerk shared, backend, and React packages.
Updated dependencies in @clerk/vue including @clerk/shared to 4.25.9 to incorporate latest fixes and improvements.
Added support for configuring custom OpenID Connect enterprise connections through the Organization Profile, and now exposes whether organization members have been deprovisioned, marking them as inactive accordingly.
Patch release with updated dependencies for @clerk/shared, @clerk/backend, and @clerk/react to ensure compatibility and incorporate latest improvements.
Added a new Mosaic Avatar compound component with Shape and size configuration, improved OpenID Connect enterprise connection configuration in Organization Profile, and exposed deprovisioning status for organization members.
Patch release of @clerk/react with updated dependencies, including @clerk/shared@4.25.9.
Updated @clerk/backend dependency to version 3.13.2 for improved compatibility and bug fixes.
Patch release updating dependencies for @clerk/backend and @clerk/vue packages to their latest versions.
Updated dependencies for @clerk/backend to 3.13.2 and @clerk/react to 6.12.8 to incorporate the latest fixes and improvements.
Updated dependencies to @clerk/backend@3.13.2 and @clerk/react@6.12.8 to bring in the latest patches and improvements.
Updated @clerk/backend dependency to version 3.13.2.
Updated dependencies for @clerk/backend and @clerk/react to their latest patch versions to maintain compatibility and receive recent improvements.
Fixed an issue where Clerk's ticket query parameters remained in the URL after completing a sign-up that was missing requirements. Users will now see a clean URL after the sign-up process completes.
Updated dependencies to the latest @clerk/backend version with internal improvements and fixes.
Updated @clerk/backend dependency to 3.13.2. This patch release includes dependency updates to maintain compatibility with the latest backend changes.
Fixed APIKeys component rendering issue when organization is active with selective API key settings, improved session token refresh to prioritize focused browser tabs with increased polling frequency in multi-tab scenarios, and added tab_state parameter to session token requests to distinguish foreground from background refreshes.
Updated dependencies including @clerk/clerk-js to version 6.25.9 to include latest patches and improvements.
Updated dependencies including @clerk/clerk-js to version 6.25.9 with latest patches and fixes.
Bumped the minimum supported React Router version to 8.3.0 to fix duplicate react-router instances during dev SSR that was breaking the Router context.
Patch release updating internal dependencies for @clerk/clerk-js to version 6.25.9.
Updated @clerk/shared dependency to version 4.25.8 for bug fixes and improvements.
Patch release with updated dependencies including @clerk/shared, @clerk/react, and @clerk/backend to their latest patch versions.
Updated internal dependencies including @clerk/shared, @clerk/react, and @clerk/backend to their latest patch versions.
Updated @clerk/shared to version 4.25.8 to ensure compatibility with the latest internal dependencies.
Updated dependencies including @clerk/shared and @clerk/backend to resolve transitive issues and maintain compatibility.
Exposes composable UserProfile and OrganizationProfile subcomponents from the experimental exports. Fixes a CardState error in OrganizationProfileGeneralPanel when handling leave/delete organization confirmations in no-children mode by providing proper CardStateProvider context.
Internal improvements to support composed UserProfile and OrganizationProfile subcomponents in @clerk/ui. Updated @clerk/shared dependency.
Patch release updating dependencies including @clerk/shared, @clerk/vue, and @clerk/backend to their latest patch versions.
Updated internal infrastructure in @clerk/shared to support composed UserProfile and OrganizationProfile subcomponents in @clerk/ui.
Updated dependencies for @clerk/shared, @clerk/react, and @clerk/backend to their latest patch versions.
Updated @clerk/shared dependency to version 4.25.7 to incorporate latest shared utilities and improvements.
Added fapiUrl option to Frontend API proxy helpers, allowing requests to target a custom Clerk Frontend API URL. Dependencies updated including @clerk/backend, @clerk/shared, and @clerk/react.
The internal patchRequest() helper has been moved to enable reuse across framework SDKs.
Internal patchRequest() helper moved for reuse across framework SDKs. Dependencies updated for backend, shared, and react packages.
Internal patchRequest() helper moved for reuse across framework SDKs. Dependencies updated including @clerk/backend, @clerk/shared, and @clerk/react.
Patch release updating dependencies including @clerk/backend, @clerk/shared, and @clerk/vue to their latest versions.
Updated dependencies including @clerk/shared to version 4.25.7.
Updated dependencies including @clerk/backend to 3.13.0 and @clerk/shared to 4.25.7.
Updated CSS properties in the organization members footer and MFA setup task header to use logical CSS for proper layout in right-to-left locales.
Updated @clerk/shared dependency to 4.25.7 to include the latest shared utilities and improvements.
Fixed a bug where the useSignInWithApple hook was dropping the user's first and last name during native sign-up. The hook now correctly captures the name from the Apple credential and handles sign-in fallback when the account already exists, including in restricted or waitlist sign-up modes.
Fixed the keyless prompt z-index to render above application content. OAuth consent screens now display recognizable brand marks for well-known OAuth clients when the application has not provided its own logo.
Patch release updating dependencies for @clerk/ui and @clerk/react to their latest versions.
Updated dependencies including @clerk/shared to version 4.25.6. This patch release includes maintenance updates to internal packages.
Updated clerkMiddleware() to permit Clerk abuse and fraud protection resources in Content Security Policy headers. Includes dependency updates for backend, shared, and react packages.
Updated dependencies including @clerk/backend, @clerk/shared, and @clerk/vue to their latest versions to incorporate bug fixes and improvements.
Updated internal dependencies in @clerk/react to the latest version of @clerk/shared for compatibility and bug fixes.
Patch release with updated dependencies including @clerk/backend 3.12.0, @clerk/shared 4.25.6, and @clerk/react 6.12.6.
Added an experimental oidcSelfServe option to enable self-serve OIDC configuration flow in the ConfigureSSO component. Updated dependencies for shared utilities and localizations.
97 more changes from Clerk. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.