ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/backend@3.26.0

Minor Changes

• Add webhook types for transactional email delivery, delays, bounces, complaints, failures, and suppressions. Bounce events distinguish Permanent, Transient, and Undetermined classifications. verifyWebhook() preserves the original event timestamp and instance ID for outcome handlers. These types prepare for the transactional email pilot; receiving the events requires the corresponding backend rollout. (#9776) by @jescalan

Patch Changes

• Clarify issuer validation for session tokens and document that machine token verification ignores the issuer option. (#10282) by @SarahSoutoul

• Updated dependencies [e5cfdff]:

  • @clerk/shared@4.41.0

@clerk/clerk-js@6.40.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/>
  components preselect it as the second factor, as they already do for the first
  factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This
  is on by default for instances created after 2026-07-08, and can be turned on
  in the Dashboard for older ones. Web apps also need to opt in to the passkey
  second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey.
  Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports
  that WebAuthn is unavailable (for example, Electron apps without passkey
  support enabled).

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0

@clerk/expo-native-components@0.3.0

Minor Changes

• Add native module support for the upcoming single-token client sync between @clerk/expo and the Clerk iOS and Android SDKs. The native SDK's stored device token becomes the one token both runtimes use, and each side is notified to reload its own client when the other changes it. Existing sync behavior is unchanged until @clerk/expo adopts it. (#9957) by @mikepitre

@clerk/localizations@4.24.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/>
  components preselect it as the second factor, as they already do for the first
  factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This
  is on by default for instances created after 2026-07-08, and can be turned on
  in the Dashboard for older ones. Web apps also need to opt in to the passkey
  second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey.
  Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports
  that WebAuthn is unavailable (for example, Electron apps without passkey
  support enabled).

Patch Changes

• Add a module field pointing to the ESM build, so bundlers that don't read exports (such as Parcel in Plasmo-based Chrome extensions) can tree-shake unused locales. (#10292) by @manovotny

• Updated dependencies [e5cfdff]:

  • @clerk/shared@4.41.0

@clerk/react@6.18.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/>
  components preselect it as the second factor, as they already do for the first
  factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This
  is on by default for instances created after 2026-07-08, and can be turned on
  in the Dashboard for older ones. Web apps also need to opt in to the passkey
  second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey.
  Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports
  that WebAuthn is unavailable (for example, Electron apps without passkey
  support enabled).

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0

@clerk/shared@4.41.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/>
  components preselect it as the second factor, as they already do for the first
  factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This
  is on by default for instances created after 2026-07-08, and can be turned on
  in the Dashboard for older ones. Web apps also need to opt in to the passkey
  second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey.
  Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports
  that WebAuthn is unavailable (for example, Electron apps without passkey
  support enabled).

@clerk/ui@1.41.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/>
  components preselect it as the second factor, as they already do for the first
  factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This
  is on by default for instances created after 2026-07-08, and can be turned on
  in the Dashboard for older ones. Web apps also need to opt in to the passkey
  second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey.
  Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports
  that WebAuthn is unavailable (for example, Electron apps without passkey
  support enabled).

Patch Changes

• Fix the OrganizationProfile sidebar to hide API keys when the user has neither org:sys_api_keys:read nor org:sys_api_keys:manage permission. (#10290) by @dstaley

• Updated dependencies [9066bf9, e5cfdff]:

  • @clerk/localizations@4.24.0
  • @clerk/shared@4.41.0

@clerk/astro@4.1.15

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0

@clerk/chrome-extension@3.1.97

Patch Changes

• Updated dependencies [e5cfdff, 7f4b9a8]:
  • @clerk/shared@4.41.0
  • @clerk/clerk-js@6.40.0
  • @clerk/ui@1.41.0
  • @clerk/react@6.18.0

@clerk/electron@0.1.2

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0
  • @clerk/clerk-js@6.40.0
  • @clerk/react@6.18.0

@clerk/expo@4.13.1

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0
  • @clerk/clerk-js@6.40.0
  • @clerk/react@6.18.0

@clerk/expo-passkeys@2.1.1

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0

@clerk/express@2.1.81

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0

@clerk/fastify@3.1.91

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0

@clerk/hono@0.1.91

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0

@clerk/mosaic@0.1.11

Patch Changes

• Add support for supplying an async function to renderTriggerBadge for UserButton and OrganizationSwitcher which allows supplying custom label text for the badge rendered alongside the trigger's label. (#10287) by @dstaley

• An organization joined by accepting an invitation in UserButton or OrganizationSwitcher now stays listed right away, even before it appears in the loaded memberships, and selecting it follows afterSelectOrganizationUrl. (#10280) by @alexcarpenter

• Menu items now use the secondary foreground color at rest and the primary foreground color on hover, matching the UserButton menu rows. (#10281) by @alexcarpenter

• Fix menus in Safari not opening on the first click when their trigger already had focus, such as right after a dialog closes and returns focus to it. (#10306) by @alexcarpenter

• Add PortalProvider to render Mosaic overlays into a custom container, and stop the page from shifting when a Mosaic overlay opens while another library has already locked scrolling. (#10299) by @alexcarpenter

• Stop the page from shifting when a Mosaic overlay opens on a page that does not scroll. (#10312) by @alexcarpenter

• Updated dependencies [e5cfdff]:

  • @clerk/shared@4.41.0

@clerk/nextjs@7.9.18

Patch Changes

• Fix the return type of auth.protect() when a predicate is passed together with the token option. The result is now typed from the accepted token types, so auth.protect(() => true, { token: 'api_key' }) resolves to the API key auth object instead of a session auth object. (#10211) by @wobsoriano

• Updated dependencies [85dec02, b799bad, e5cfdff]:

  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0
  • @clerk/react@6.18.0

@clerk/nuxt@3.1.15

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0
  • @clerk/vue@2.5.13

@clerk/react-router@3.6.36

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0
  • @clerk/react@6.18.0

@clerk/tanstack-react-start@1.7.4

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0
  • @clerk/react@6.18.0

@clerk/testing@2.2.48

Patch Changes

• Updated dependencies [85dec02, b799bad, e5cfdff]:
  • @clerk/backend@3.26.0
  • @clerk/shared@4.41.0

@clerk/vue@2.5.13

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0

@clerk/msw@0.0.80

Patch Changes

• Updated dependencies [e5cfdff]:
  • @clerk/shared@4.41.0

@clerk/swingset@0.0.61

Patch Changes

• Updated dependencies [33936e3, 0eb5e97, 7d1b1e5, 1486b17, 5e7a696, 9c08b0b, c348ce8, e5cfdff]:
  • @clerk/mosaic@0.1.11
  • @clerk/nextjs@7.9.18
  • @clerk/shared@4.41.0

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 20, 2026 5:55pm UTC
swingset	Ready	Preview	Oct 20, 2026 5:55pm UTC

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 1

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository YAML (base), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: cb1fe868-cdb6-4a55-95e6-e5ce97e5dc5c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10283

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10283

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10283

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10283

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10283

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10283

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10283

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10283

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10283

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10283

@clerk/expo-native-components

npm i https://pkg.pr.new/@clerk/expo-native-components@10283

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10283

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10283

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10283

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10283

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10283

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10283

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10283

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10283

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10283

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10283

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10283

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10283

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10283

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10283

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10283

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10283

commit: 89e3f04