-
Notifications
You must be signed in to change notification settings - Fork 371
ci(repo): Version packages #6454
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
📝 WalkthroughWalkthroughThis change updates version numbers and changelogs across multiple packages including Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Suggested labels
Suggested reviewers
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (56)
💤 Files with no reviewable changes (12)
✅ Files skipped from review due to trivial changes (13)
🚧 Files skipped from review as they are similar to previous changes (31)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 0
🧹 Nitpick comments (1)
packages/clerk-js/CHANGELOG.md (1)
3-10
: Clarify wording + highlight security-relevant change
- The sentence “Fix
touchSession
option to only affect session touch behavior to window focus events.” is grammatically awkward.
Proposed tweak:-Fix `touchSession` option to only affect session touch behavior to window focus events. +Fix `touchSession` option so that it only affects session-touch behavior **on** window-focus events.
Because this directly adjusts when sessions are “touched” (i.e., prolonged) it impacts auth/session-lifetime semantics. Tagging @clerk/security for visibility.
No automated tests accompany the fix; consider adding an integration test that verifies:
•setActive()
still touches the session whentouchSession: false
• Window-focus events respect the flag.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (7)
.changeset/yellow-radios-stop.md
(0 hunks)packages/chrome-extension/CHANGELOG.md
(1 hunks)packages/chrome-extension/package.json
(1 hunks)packages/clerk-js/CHANGELOG.md
(1 hunks)packages/clerk-js/package.json
(1 hunks)packages/expo/CHANGELOG.md
(1 hunks)packages/expo/package.json
(1 hunks)
💤 Files with no reviewable changes (1)
- .changeset/yellow-radios-stop.md
🧰 Additional context used
📓 Path-based instructions (4)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/chrome-extension/package.json
packages/clerk-js/package.json
packages/expo/package.json
packages/chrome-extension/CHANGELOG.md
packages/expo/CHANGELOG.md
packages/clerk-js/CHANGELOG.md
packages/*/package.json
📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)
All publishable packages should be placed under the packages/ directory
packages/*/package.json
: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.
Files:
packages/chrome-extension/package.json
packages/clerk-js/package.json
packages/expo/package.json
**/*
⚙️ CodeRabbit Configuration File
**/*
: If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.Whenever reviewing a pull request, if there are any changes that could impact security, always tag
@clerk/security
in the PR.Security-impacting changes include, but are not limited to:
- Changes to authentication logic or mechanisms (e.g. login, session handling, token issuance)
- Any modification to access control, authorization checks, or role-based permissions
- Introduction or modification of hashing algorithms, signature verification, or cryptographic primitives
- Handling of sensitive data (e.g. passwords, tokens, secrets, PII)
- Integration with external identity providers (e.g. SSO, OAuth, OpenID Connect)
- Modifications to security headers, cookie flags, CORS policies, or CSRF protections
- Bypass mechanisms (e.g. feature flags, testing overrides) that could weaken protections
- Changes to rate limiting, abuse prevention, or input validation
If you're unsure whether a change is security-relevant, err on the side of caution and tag
@clerk/security
.Any time that you tag
@clerk/security
, please do so explicitly in a code comment, rather than within a collapsed section in a coderabbit comment, such as the "recent review details" section. If you do use the team name in any thinking or non-direct-code-comment content, it can be referred to as "clerk security team" to avoid accidentally printing the tag which sends a notification to the team.
Files:
packages/chrome-extension/package.json
packages/clerk-js/package.json
packages/expo/package.json
packages/chrome-extension/CHANGELOG.md
packages/expo/CHANGELOG.md
packages/clerk-js/CHANGELOG.md
packages/**/CHANGELOG.md
📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)
Maintain detailed changelogs
Files:
packages/chrome-extension/CHANGELOG.md
packages/expo/CHANGELOG.md
packages/clerk-js/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)
- GitHub Check: semgrep-cloud-platform/scan
- GitHub Check: Formatting | Dedupe | Changeset
- GitHub Check: Build Packages
- GitHub Check: semgrep/ci
- GitHub Check: Analyze (javascript-typescript)
🔇 Additional comments (5)
packages/clerk-js/package.json (1)
3-3
: Patch version bump is appropriate and SemVer-compliant
5.79.0 → 5.79.1
correctly reflects a bug-fix release. No further action needed.packages/expo/package.json (1)
3-3
: Version increment aligns with dependency updateRaising
@clerk/clerk-expo
to2.14.15
keeps it in sync with the newclerk-js
patch. ✅packages/chrome-extension/package.json (1)
3-3
: Consistent patch bump
2.5.16
correctly mirrors the transitiveclerk-js
fix. Looks good.packages/expo/CHANGELOG.md (1)
3-9
: Changelog entry looks goodThe new 2.14.15 patch section is consistent with the file’s existing style and includes the required dependency bump reference. No further action needed.
packages/chrome-extension/CHANGELOG.md (1)
3-9
: Changelog entry looks goodVersion header, “Patch Changes” subsection, and dependency bump notation follow the existing style of the file. No content or formatting issues spotted.
@clerk/agent-toolkit
@clerk/astro
@clerk/backend
@clerk/chrome-extension
@clerk/clerk-js
@clerk/dev-cli
@clerk/elements
@clerk/clerk-expo
@clerk/expo-passkeys
@clerk/express
@clerk/fastify
@clerk/localizations
@clerk/nextjs
@clerk/nuxt
@clerk/clerk-react
@clerk/react-router
@clerk/remix
@clerk/shared
@clerk/tanstack-react-start
@clerk/testing
@clerk/themes
@clerk/types
@clerk/upgrade
@clerk/vue
commit: |
7a078d8
to
18bd6fe
Compare
18bd6fe
to
468dcbd
Compare
468dcbd
to
6f84ecb
Compare
6f84ecb
to
cd00f6d
Compare
cd00f6d
to
911876f
Compare
911876f
to
ab39a0c
Compare
ab39a0c
to
b77f348
Compare
b77f348
to
24f97db
Compare
24f97db
to
e2ed5a1
Compare
e2ed5a1
to
d5cbba3
Compare
d5cbba3
to
30e6af7
Compare
c1ae653
to
5e58a29
Compare
5e58a29
to
edfce53
Compare
edfce53
to
ee865c9
Compare
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@clerk/clerk-js@5.80.0
Minor Changes
'needs_confirmation' | 'completed'
instead ofstring
. (#6474) by @panteliselefPatch Changes
[Billing Beta] Stricter return type of
useCheckout
to improve inference of other properties. (#6473) by @panteliselefGuard against navigation to root sign-in route during
setActive
inSignInFactorOne
(#6462) by @LauraBeatrisFix invalid DOM element prop being passed down to Input (#6458) by @jacekradko
Fix iframe detetction and ensure we prefer the oauth popup flow when in an iframe. (#6455) by @brkalow
Fix multi-session navigation for hash routing (#6461) by @LauraBeatris
Fix
touchSession
option to only affect session touch behavior to window focus events. (#6444) by @LauraBeatrisPreviously, when
touchSession: false
was provided, it incorrectly prevented session touching duringsetActive()
calls when switching sessions or selecting organizations.Updated dependencies [
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/nextjs@6.29.0
Minor Changes
useCheckout
to improve inference of other properties. (#6473) by @panteliselefPatch Changes
Propagate
treatPendingAsSignedOut
toauth
fromclerkMiddleware
(#6477) by @LauraBeatrisUpdated dependencies [
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/clerk-react@5.39.0
Minor Changes
useCheckout
to improve inference of other properties. (#6473) by @panteliselefPatch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/shared@3.18.0
Minor Changes
useCheckout
to improve inference of other properties. (#6473) by @panteliselefPatch Changes
Improve
useCheckout
error messages on mount. (#6475) by @panteliselefUpdated dependencies [
f93965f
,7b6dcee
]:@clerk/types@4.73.0
Minor Changes
'needs_confirmation' | 'completed'
instead ofstring
. (#6474) by @panteliselefPatch Changes
form_param_type_invalid
errors. (#6457) by @dstaley@clerk/agent-toolkit@0.1.17
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/astro@2.10.14
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/backend@2.6.3
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/chrome-extension@2.5.16
Patch Changes
9368daf
,d30d566
,7b6dcee
,ef87617
,8afe342
,0b165f8
,e3d073e
,4602f18
]:@clerk/elements@0.23.49
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/clerk-expo@2.14.15
Patch Changes
9368daf
,d30d566
,f93965f
,7b6dcee
,ef87617
,8afe342
,0b165f8
,e3d073e
,4602f18
]:@clerk/expo-passkeys@0.3.26
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/express@1.7.16
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/fastify@2.4.16
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/localizations@3.20.7
Patch Changes
Add types for
form_param_type_invalid
errors. (#6457) by @dstaleyUpdated dependencies [
f93965f
,7b6dcee
]:@clerk/nuxt@1.8.2
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
,b637177
]:@clerk/react-router@1.8.10
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/remix@4.10.10
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/tanstack-react-start@0.21.6
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/testing@1.10.10
Patch Changes
9368daf
,f93965f
,7b6dcee
,ef87617
]:@clerk/themes@2.4.5
Patch Changes
f93965f
,7b6dcee
]:@clerk/vue@1.9.2
Patch Changes
Remove
treatPendingAsSignedOut
fromuseSession
and always return pending session (#6459) by @LauraBeatrisUpdated dependencies [
9368daf
,f93965f
,7b6dcee
,ef87617
]:Summary by CodeRabbit
New Features
Bug Fixes
Chores
Documentation