Skip to content

ci(repo): Version packages #6510

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

clerk-cookie
Copy link
Collaborator

@clerk-cookie clerk-cookie commented Aug 10, 2025

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/astro@2.11.0

Minor Changes

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/clerk-js@5.82.0

Minor Changes

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/localizations@3.20.9
    • @clerk/shared@3.18.2

@clerk/clerk-react@5.41.0

Minor Changes

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/types@4.75.0

Minor Changes

@clerk/vue@1.10.0

Minor Changes

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/agent-toolkit@0.1.19

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/backend@2.7.1

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/chrome-extension@2.5.18

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-js@5.82.0
    • @clerk/clerk-react@5.41.0
    • @clerk/shared@3.18.2

@clerk/elements@0.23.51

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/clerk-expo@2.14.17

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-js@5.82.0
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/expo-passkeys@0.3.28

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/shared@3.18.2

@clerk/express@1.7.18

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/fastify@2.4.18

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/localizations@3.20.9

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0

@clerk/nextjs@6.30.1

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/nuxt@1.8.4

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/vue@1.10.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/react-router@1.8.12

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/remix@4.10.12

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/shared@3.18.2

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0

@clerk/tanstack-react-start@0.21.8

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/clerk-react@5.41.0
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/testing@1.10.12

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

@clerk/themes@2.4.7

Patch Changes

  • Updated dependencies [6459f7d]:
    • @clerk/types@4.75.0

Summary by CodeRabbit

  • New Features

    • None.
  • Bug Fixes

    • None.
  • Chores

    • Updated multiple packages to use the latest dependency versions.
    • Removed the treatPendingAsSignedOut option from Clerk configuration across all relevant packages.
  • Documentation

    • Updated changelogs to reflect dependency updates and the removal of the treatPendingAsSignedOut option.

Copy link

vercel bot commented Aug 10, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
clerk-js-sandbox ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 10, 2025 5:24pm

Copy link

pkg-pr-new bot commented Aug 10, 2025

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@6510

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@6510

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@6510

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@6510

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@6510

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@6510

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@6510

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@6510

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@6510

@clerk/express

npm i https://pkg.pr.new/@clerk/express@6510

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@6510

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@6510

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@6510

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@6510

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@6510

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@6510

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@6510

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@6510

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@6510

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@6510

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@6510

@clerk/types

npm i https://pkg.pr.new/@clerk/types@6510

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@6510

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@6510

commit: 867ab3d

Copy link
Contributor

coderabbitai bot commented Aug 10, 2025

📝 Walkthrough

Walkthrough

This change updates the version numbers and changelogs for multiple Clerk packages, reflecting dependency bumps to internal packages such as @clerk/types, @clerk/shared, and others. It also documents the removal of the treatPendingAsSignedOut option in several changelogs and deletes a corresponding changeset file. No functional, API, or behavioral changes are introduced beyond the documented dependency updates and changelog modifications.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • ci(repo): Version packages #6454: This earlier PR added changelog entries and version bumps for the removal of the treatPendingAsSignedOut option; the current PR removes or updates those same changelog entries, making them directly related at the changelog and versioning level.

Suggested labels

types, clerk-js, nextjs, react, remix, backend, fastify, localizations, expo, chrome-extension, themes, elements, express, testing, tanstack, astro, react-router, nuxt, vue, agent-toolkit

Suggested reviewers

  • panteliselef
  • LauraBeatris

Note

🔌 MCP (Model Context Protocol) integration is now available in Early Access!

Pro users can now connect to remote MCP servers under the Integrations page to get reviews and chat conversations that understand additional development context.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 8

🔭 Outside diff range comments (2)
packages/nextjs/package.json (1)

1-104: Detected lingering treatPendingAsSignedOut references

The scan found references to the removed treatPendingAsSignedOut option in multiple files across packages. All occurrences must be removed or updated to fully eliminate this option:

  • packages/vue/src/types.ts
  • packages/vue/src/components/controlComponents.ts
  • packages/vue/src/composables/useAuth.ts
  • packages/types/src/session.ts
  • packages/react/src/components/controlComponents.tsx
  • packages/react/src/hooks/useAuth.ts
  • packages/react/src/hooks/tests/useAuth.type.test.ts
  • packages/react/src/hooks/tests/useAuth.test.tsx
  • packages/shared/src/authorization.ts
  • packages/nextjs/src/app-router/server/controlComponents.tsx
  • packages/nextjs/src/app-router/server/auth.ts
  • packages/nextjs/src/server/data/getAuthDataFromRequest.ts
  • packages/nextjs/src/server/clerkMiddleware.ts
  • packages/astro/src/server/get-auth.ts
  • packages/astro/src/server/clerk-middleware.ts
  • packages/astro/src/react/hooks.ts
  • packages/astro/src/react/controlComponents.tsx
  • packages/backend/src/tokens/authStatus.ts
  • packages/backend/src/tokens/authObjects.ts

Please remove or update all these references to align with the option’s removal.

packages/react-router/package.json (1)

1-109: Add missing CHANGELOG entry for 1.8.12

The packages/react-router/CHANGELOG.md is missing a ## 1.8.12 section, which is needed to document this release. Please add a heading (for example ## 1.8.12 – YYYY-MM-DD) along with the notes for this version.

• File: packages/react-router/CHANGELOG.md
• Missing heading: ## 1.8.12

🧹 Nitpick comments (7)
packages/express/package.json (1)

65-65: Nit: normalize spacing in script command

Double space before --sig. Not harmful, but easy to tidy.

-    "publish:local": "pnpm yalc push --replace  --sig",
+    "publish:local": "pnpm yalc push --replace --sig",
packages/elements/package.json (1)

71-71: Tests note

No tests were changed in this PR. If any user-facing behavior depends on updated internal packages (e.g., option removals), consider adding or updating minimal smoke tests in affected packages/examples to guard against regressions.

I can draft smoke tests for the examples/nextjs app or package-level vitest suites if helpful.

packages/vue/CHANGELOG.md (1)

3-14: Add explicit before/after usage to aid migration.

Consider adding a short snippet to show how apps should adapt:

  • Before: useSession({ treatPendingAsSignedOut: true/false }), <SignedIn treatPendingAsSignedOut={...} />
  • After: rely on default pending-session semantics (no option)

This helps consumers spot and remove obsolete config quickly.

packages/clerk-js/CHANGELOG.md (1)

3-8: Add a short migration note for the removed treatPendingAsSignedOut option

A brief “Migration” hint will help consumers adjust quickly (what to do if they previously set it to false).

 ## 5.82.0

 ### Minor Changes

-- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)
+- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)
+  - Migration: Pending sessions are now always treated as signed-out. If you previously relied on
+    `treatPendingAsSignedOut: false`, switch to explicit checks:
+    - Prefer `Clerk.isSignedIn` for signed-in state checks.
+    - Or check `Clerk.session?.status === 'active'` when you need to distinguish between `pending` and `active`.
packages/expo/CHANGELOG.md (1)

3-11: Add a brief heads-up about a potentially observable change from deps

Since this patch bumps @clerk/types@4.75.0 (which removes treatPendingAsSignedOut), consider noting this here to help Expo consumers diagnose type errors after upgrade.

Proposed addition:

 ## 2.14.17

 ### Patch Changes

 - Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
   - @clerk/clerk-js@5.82.0
   - @clerk/clerk-react@5.41.0
   - @clerk/types@4.75.0
   - @clerk/shared@3.18.2
+  
+  Note: `@clerk/types@4.75.0` removes the `treatPendingAsSignedOut` option. If your app passed this option to Clerk provider/components, please remove it to avoid type errors.
packages/react-router/CHANGELOG.md (1)

3-11: Call out removal of treatPendingAsSignedOut via dependency bump

This patch only updates deps, but @clerk/types@4.75.0 drops treatPendingAsSignedOut. React Router apps passing this option to <ClerkProvider> may see type errors. A one-liner here would prevent confusion.

Proposed addition:

 ## 1.8.12

 ### Patch Changes

 - Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
   - @clerk/clerk-react@5.41.0
   - @clerk/types@4.75.0
   - @clerk/backend@2.7.1
   - @clerk/shared@3.18.2
+
+  Note: `@clerk/types@4.75.0` removes the `treatPendingAsSignedOut` option. If you previously passed this option to `<ClerkProvider>`, remove it to resolve type errors.
packages/nextjs/CHANGELOG.md (1)

3-12: Nit: Consider adding a one-liner clarifying no functional changes.

Add “No functional or API changes; dependency updates only.” to make it explicit for consumers skimming the log.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6459f7d and 867ab3d.

📒 Files selected for processing (45)
  • .changeset/shiny-pants-jump.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (1)
  • .changeset/shiny-pants-jump.md
🧰 Additional context used
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/remix/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/agent-toolkit/package.json
  • packages/types/package.json
  • packages/localizations/package.json
  • packages/nextjs/package.json
  • packages/nuxt/package.json
  • packages/expo/package.json
  • packages/react/package.json
  • packages/vue/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/express/package.json
  • packages/astro/package.json
  • packages/testing/package.json
  • packages/backend/package.json
  • packages/localizations/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/elements/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/chrome-extension/package.json
  • packages/express/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/react-router/package.json
  • packages/testing/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/fastify/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/fastify/package.json
  • packages/backend/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/remix/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/agent-toolkit/package.json
  • packages/types/package.json
  • packages/localizations/package.json
  • packages/nextjs/package.json
  • packages/nuxt/package.json
  • packages/expo/package.json
  • packages/react/package.json
  • packages/vue/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/express/package.json
  • packages/astro/package.json
  • packages/testing/package.json
  • packages/backend/package.json
  • packages/elements/package.json
  • packages/chrome-extension/package.json
  • packages/react-router/package.json
  • packages/clerk-js/package.json
  • packages/fastify/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/remix/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/agent-toolkit/package.json
  • packages/types/package.json
  • packages/localizations/package.json
  • packages/nextjs/package.json
  • packages/nuxt/package.json
  • packages/expo/package.json
  • packages/react/package.json
  • packages/vue/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/express/package.json
  • packages/astro/package.json
  • packages/testing/package.json
  • packages/backend/package.json
  • packages/localizations/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/elements/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/chrome-extension/package.json
  • packages/express/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/react-router/package.json
  • packages/testing/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/fastify/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/fastify/package.json
  • packages/backend/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
packages/localizations/**/*

📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)

Localization files must be placed in 'packages/localizations/'.

Files:

  • packages/localizations/package.json
  • packages/localizations/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/localizations/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)
  • GitHub Check: Build Packages
  • GitHub Check: Formatting | Dedupe | Changeset
  • GitHub Check: semgrep/ci
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (48)
packages/themes/package.json (1)

3-3: Approve version 2.4.7 release

  • packages/themes/package.json correctly updated to "version": "2.4.7", with dependencies still workspace-pinned.
  • packages/themes/CHANGELOG.md contains a “## 2.4.7” heading and lists @clerk/types@4.75.0 under updated dependencies.
  • No code changes detected; proceed with CI smoke tests.
packages/shared/package.json (1)

3-3: Patch bump to 3.18.2 verified and approved
Changelog entry and workspace dependencies are correct:

  • packages/shared/CHANGELOG.md includes “## 3.18.2” on line 3
  • All downstream packages reference "@clerk/shared": "workspace:^" as expected
packages/expo-passkeys/package.json (1)

3-3: Patch bump to v0.3.28 verified

  • Changelog entry for 0.3.28 exists (packages/expo-passkeys/CHANGELOG.md:3).
  • Expo peer/dev dependency ranges unchanged (peerDependencies.expo: >=50 <54, devDependencies.expo: ~52.0.47).
packages/backend/package.json (1)

3-3: Patch bump to v2.7.1 verified – changelog entry and test scripts are in place

  • packages/backend/CHANGELOG.md contains the “## 2.7.1” entry (line 3).
  • packages/backend/package.json still defines the test script (run-s test:node test:edge-runtime test:cloudflare-miniflare).

Everything looks good—CI (Vitest) should pass.

packages/nextjs/package.json (1)

3-3: Patch bump looks correct; dependencies/peers remain consistent.

Version 6.30.1 is a patch bump aligned with workspace deps. Peer "next" range includes devDependency 14.2.31. All OK.

packages/tanstack-react-start/package.json (1)

3-3: Version bump to 0.21.8 looks good; peer ranges compatible.

Peers (^1.127.0) cover dev deps (1.128.x). No issues spotted.

packages/express/package.json (1)

3-3: Patch bump to 1.7.18 looks good and consistent with dependency updates.

packages/remix/package.json (1)

3-3: Version bump to 4.10.12 is appropriate; deps/peers remain aligned.

packages/elements/package.json (1)

3-3: Patch bump to 0.23.51 looks correct; workspace dependency alignment maintained.

packages/nuxt/package.json (1)

3-3: ✅ Nuxt Package 1.8.4 Bump Verified

  • CHANGELOG.md contains the “## 1.8.4” entry
  • No references to the removed treatPendingAsSignedOut option remain

All checks passed—this version bump is ready to merge.

packages/clerk-js/package.json (1)

3-3: Release bump to 5.82.0 approved; removal of treatPendingAsSignedOut confirmed

All checks passed:

  • packages/clerk-js/package.json is updated to version 5.82.0
  • CHANGELOG.md contains the “## 5.82.0” entry with the removal note
  • No remaining references to treatPendingAsSignedOut in code or docs
packages/localizations/package.json (1)

3-3: Patch bump for @clerk/localizations v3.20.9 verified

All consistency checks passed:

  • packages/localizations/package.json: name (@clerk/localizations) and version (3.20.9) are correct
  • packages/localizations/CHANGELOG.md: contains a “## 3.20.9” entry
  • packages/clerk-js/package.json: depends on "@clerk/localizations": "workspace:^"

✅ Approved.

packages/expo/package.json (1)

3-3: Patch bump approved: version 2.14.17 entry found in CHANGELOG and treatPendingAsSignedOut references removed.

packages/vue/package.json (1)

3-3: Changelog entry and version bump confirmed

I’ve verified that:

  • packages/vue/package.json is bumped to 1.10.0
  • packages/vue/CHANGELOG.md has a “## 1.10.0” section under Minor Changes with
    “Remove treatPendingAsSignedOut from Clerk options (#6497)”

Since treatPendingAsSignedOut was an opt-in/experimental flag and is now folded into the default behavior, its removal is non-breaking per our semver policy, and the changelog explicitly documents it.

Optional: as this PR doesn’t include runtime tests, consider adding or updating smoke tests in the Vue package/examples to guard against any regressions.

packages/agent-toolkit/package.json (2)

3-3: Patch bump LGTM

0.1.19 for dependency refresh matches semver expectations. No other metadata changes.


3-3: CHANGELOG entry for 0.1.19 verified

  • packages/agent-toolkit/CHANGELOG.md includes a “## 0.1.19” section
  • It lists the updated internal dependencies:
    • @clerk/types@4.75.0
    • @clerk/backend@2.7.1
    • @clerk/shared@3.18.2

No further action required.

packages/testing/package.json (2)

3-3: Patch bump LGTM

1.10.12 for dependency refresh is appropriate; no script/config changes.


3-3: Changelog entry for 1.10.12 verified
The packages/testing/CHANGELOG.md includes a “## 1.10.12” section and correctly lists the updated internal dependencies (@clerk/types@4.75.0, @clerk/backend@2.7.1, @clerk/shared@3.18.2). No further changes needed.

packages/react/package.json (1)

3-3: Confirm SemVer Bump & Changelog
The changelog in packages/react/CHANGELOG.md has a valid 5.41.0 entry and explicitly notes the removal of treatPendingAsSignedOut. Please confirm that removing this option is considered non-breaking under your versioning policy.
Consider adding a minimal smoke (or downstream e2e) test to verify initialization still works without that prop.

packages/chrome-extension/package.json (2)

3-3: Patch bump LGTM

2.5.18 for dependency updates is appropriate. No other package metadata changed.


3-3: Changelog verification passed for v2.5.18
packages/chrome-extension/CHANGELOG.md includes:

  • A ## 2.5.18 entry
  • Updated dependencies:
    • @clerk/clerk-js@5.82.0
    • @clerk/clerk-react@5.41.0
    • @clerk/shared@3.18.2

No further changes needed.

packages/fastify/package.json (1)

3-3: Patch bump looks good

Semantic versioning respected; metadata, engines, peer deps, and exports remain consistent.

packages/themes/CHANGELOG.md (1)

3-9: Changelog entry and package.json version are in sync

  • packages/themes/package.json version is 2.4.7
  • Top CHANGELOG entry is “## 2.4.7”
  • @clerk/types@4.75.0 is correctly referenced in the patch changes

All checks pass—no further action needed.

packages/elements/CHANGELOG.md (1)

3-11: Sanity check passed: version alignment and dependency mentions verified

  • packages/elements/package.json version is 0.23.51
  • Top changelog heading is “## 0.23.51”
  • Dependencies @clerk/clerk-react@5.41.0, @clerk/types@4.75.0, and @clerk/shared@3.18.2 are all listed

No further changes needed.

packages/shared/CHANGELOG.md (1)

3-9: Version bump coherence verified

All checks passed:

  • packages/shared/package.json version is 3.18.2
  • Top changelog entry is “## 3.18.2”
  • CHANGELOG.md mentions “@clerk/types@4.75.0”

No further action needed.

packages/localizations/CHANGELOG.md (1)

3-9: Changelog entry looks good

Patch-only dependency bump is clearly documented and consistent with prior formatting. Nothing else to change.

packages/expo-passkeys/CHANGELOG.md (1)

3-10: Changelog entry LGTM

Dependency bumps only; formatting and links look consistent with the repo’s conventions.

packages/react-router/package.json (1)

3-3: Semver patch bump is appropriate

No API changes here; version bump aligns with dependency updates across the repo.

packages/nuxt/CHANGELOG.md (2)

3-11: Nuxt changelog entry is clear and consistent

Dependency-only patch; formatting and commit linking are correct.


3-11: Verified: No treatPendingAsSignedOut in packages/nuxt
A scoped search of packages/nuxt returned zero matches for treatPendingAsSignedOut. Since this PR only bumps dependencies in the Nuxt integration, no lingering references to the removed option were reintroduced.

packages/agent-toolkit/CHANGELOG.md (1)

3-10: Changelog patch entry reads well

Dependency bump only; formatting and commit link are consistent with prior entries.

packages/testing/CHANGELOG.md (1)

3-11: Dependencies are workspace-aligned; no code changes needed

  • The packages/testing/package.json declares @clerk/types, @clerk/backend, and @clerk/shared as workspace:^, so they automatically resolve to v4.75.0, v2.7.1, and v3.18.2 respectively.
  • No occurrences of the removed helper option treatPendingAsSignedOut were found in the test code.
  • This is a pure dependency bump with no functional changes—consider adding a brief post-release smoke validation (e.g., importing @clerk/testing with the new versions to confirm type compatibility).
packages/fastify/CHANGELOG.md (3)

3-11: Patch entry looks correct and consistent.

Version 2.4.18 with dependency bumps only is appropriate and consistent with prior entries.


3-11: Add/confirm a minimal smoke test for Fastify v5 with updated backend SDK.

Given the dependency bumps, consider or confirm a simple integration test that registers the plugin on Fastify v5 (Node ≥ 20) and exercises a protected route to catch regressions early.


3-11: No changes needed—workspace protocol handles version resolution

All internal @clerk/* dependencies in package.json are intentionally specified as workspace:^. Both Yarn and pnpm will automatically replace the workspace protocol with the actual version number (as declared in each package’s version field) when publishing. You don’t need to manually pin @clerk/types@4.75.0, @clerk/backend@2.7.1, or @clerk/shared@3.18.2 in each package manifest.

packages/types/CHANGELOG.md (2)

3-8: Semver and scope are appropriate.

Minor bump (4.75.0) for removing an option is correct and the note is concise.


3-8: Ensure dependent packages updated tests accordingly.

Packages exposing useSession, useAuth, or client-control components should have tests updated for the new default behavior (pending sessions surfaced). If none changed in this PR, please schedule follow-ups.

packages/vue/CHANGELOG.md (3)

3-14: Changelog entry reads well; versioning is correct.

Minor for removal + patch dependency bumps to @clerk/types@4.75.0 and @clerk/shared@3.18.2 looks right.


3-14: Update component/composable tests to reflect pending-session defaults.

If component or composable tests asserted behavior gated by treatPendingAsSignedOut, adjust them to the new default pending-session semantics.


3-14: Dependencies are aligned via workspace protocol

Both packages/vue and packages/nuxt use workspace:^, which automatically pulls in the updated versions:

  • packages/vue/package.json → @clerk/types & @clerk/shared via workspace:^ (now at 4.75.0 & 3.18.2)
  • packages/nuxt/package.json → @clerk/vue via workspace:^ (now at 1.10.0)

No manual version bumps required.

packages/tanstack-react-start/CHANGELOG.md (1)

3-12: Changelog entry verified and consistent
The package version in packages/tanstack-react-start/package.json is 0.21.8, and each @clerk/* workspace package (clerk-react 5.41.0, types 4.75.0, backend 2.7.1, shared 3.18.2) matches the versions listed in the CHANGELOG. No further changes needed.

packages/backend/CHANGELOG.md (1)

3-10: Approve CHANGELOG entry
Changelog entry is accurate and follows repo conventions. The package.json intentionally uses workspace: dependencies for internal packages; the numeric versions (4.75.0 and 3.18.2) are applied during publish. No further changes needed.

packages/remix/CHANGELOG.md (1)

3-11: Changelog entry looks correct and consistent.

Patch bump with nested list formatting is clear and Prettier-friendly. Dependency versions align with the release train.

packages/clerk-js/CHANGELOG.md (2)

3-15: Changelog entry structure: LGTM

Version header, Minor/Patch sections, PR/commit links, and dependency versions are consistent and clear.


11-14: Changelog dependency versions are in sync with workspace packages

The workspace:^ protocol in packages/clerk-js/package.json ensures each dependency resolves to the current workspace package version. As verified:

  • @clerk/types → 4.75.0
  • @clerk/localizations → 3.20.9
  • @clerk/shared → 3.18.2

No changes needed.

packages/nextjs/CHANGELOG.md (3)

3-12: LGTM: Patch entry correctly lists dependency bumps only.

The structure and content match the repo’s changelog convention. No functional/API changes are implied here.


3-12: Confirm no Next.js-facing change from treatPendingAsSignedOut removal.

Other packages removed this option in this release train. If @clerk/nextjs is unaffected, current entry is fine; if there’s any indirect behavioral change (types or default behavior) surfacing here, consider adding a brief note.


7-11: Update verification to inspect subpackage versions

Next.js uses workspace:^ for all @clerk/* deps, so checking its package.json won’t surface explicit version numbers. Instead, confirm that each subpackage’s own version field matches the changelog:

• packages/clerk-react/package.json → version “5.41.0”
• packages/types/package.json → version “4.75.0”
• packages/backend/package.json → version “2.7.1”
• packages/shared/package.json → version “3.18.2”

You can run:

#!/usr/bin/env bash
set -euo pipefail

for pkg in clerk-react types backend shared; do
  file="packages/$pkg/package.json"
  ver=$(jq -r .version "$file")
  echo "$pkg$ver"
done

Ensure each printed version matches the changelog above.

Comment on lines +3 to +15
## 2.11.0

### Minor Changes

- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)

### Patch Changes

- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Clarify migration for the removed option and verify codebase parity

  • Add a concise “Migration” sub-bullet under “Minor Changes” stating that pending sessions remain treated as signed-out by default and the configuration option is no longer available. If users previously relied on treatPendingAsSignedOut: false via middleware helpers (e.g., getAuth/auth), mention the current recommended approach or link to docs.

Confirm no lingering references in the Astro package, and that dependencies match:

Also, since no tests were modified, consider a quick E2E/manual check list (middleware auth flow with pending session, basic rendering) to validate the default behavior after removal. I can provide a concise checklist if needed.


🏁 Script executed:

#!/bin/bash
# Ensure no stale references remain
rg -n --hidden --glob '!**/dist/**' --glob '!**/build/**' 'treatPendingAsSignedOut' packages/astro

# Validate dependency versions in @clerk/astro
jq '.dependencies, .peerDependencies, .devDependencies' packages/astro/package.json | rg '@clerk/(types|backend|shared)' -n

Length of output: 3766


Add migration instructions for removed treatPendingAsSignedOut option

  • Verified that there are no stale treatPendingAsSignedOut references outside the changelog and that @clerk/types, @clerk/backend, and @clerk/shared remain on workspace:^ in packages/astro/package.json.
  • In packages/astro/CHANGELOG.md, under ## 2.11.0### Minor Changes, insert a “Migration” sub-bullet:
 ### Minor Changes

 - Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)
+- Migration: Pending sessions are now treated as signed-out by default. To opt into treating pending sessions as authenticated, pass `treatPendingAsSignedOut: false` to middleware helpers (`getAuth`, `auth`) or client hooks/components (`useAuth`, `<SignedIn>`, `<Protect>`). See the migration guide in our docs: https://docs.clerk.dev/migration/treatPendingAsSignedOut
  • (Optional) Add/update an E2E test or manual checklist covering middleware and client hooks to confirm default signed-out behavior still works as expected.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
## 2.11.0
### Minor Changes
- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)
### Patch Changes
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2
## 2.11.0
### Minor Changes
- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)
- Migration: Pending sessions are now treated as signed-out by default. To opt into treating pending sessions as authenticated, pass `treatPendingAsSignedOut: false` to middleware helpers (`getAuth`, `auth`) or client hooks/components (`useAuth`, `<SignedIn>`, `<Protect>`). See the migration guide in our docs: https://docs.clerk.dev/migration/treatPendingAsSignedOut
### Patch Changes
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2
🤖 Prompt for AI Agents
In packages/astro/CHANGELOG.md between lines 3 and 15, add a migration note
under the Minor Changes section for version 2.11.0. Specifically, insert a new
sub-bullet titled "Migration" below the existing bullet about removing
`treatPendingAsSignedOut` that explains the removal and any necessary steps for
users to update their code. Optionally, add or update an E2E test or manual
checklist to verify that middleware and client hooks behave correctly with the
default signed-out state.

@@ -1,6 +1,6 @@
{
"name": "@clerk/astro",
"version": "2.10.15",
"version": "2.11.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Minor bump aligns with option removal; validate docs and changelog.

2.11.0 is appropriate for the removal of treatPendingAsSignedOut. Confirm CHANGELOG entry and no lingering references.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# 1) Confirm package name
jq -r .name packages/astro/package.json | grep -x '@clerk/astro' >/dev/null

# 2) CHANGELOG includes 2.11.0
if [ -f packages/astro/CHANGELOG.md ]; then
  rg -n $'^##\\s+2\\.11\\.0\\b' packages/astro/CHANGELOG.md -n || {
    echo "Missing CHANGELOG entry for 2.11.0 in packages/astro/CHANGELOG.md"; exit 1;
  }
fi

# 3) Ensure removed option isn't referenced in astro package
rg -n --hidden -S 'treatPendingAsSignedOut' packages/astro || true

echo "packages/astro checks passed."

Length of output: 3757


Remove all treatPendingAsSignedOut references from the Astro integration

The v2.11.0 changelog entry is in place, but the removed option still appears in both docs and code. Please strip out or update every occurrence before bumping the version:

• packages/astro/CHANGELOG.md
– Remove historical usage examples and mentions of treatPendingAsSignedOut under v2.11.0 (and earlier entries).
• packages/astro/src/react/controlComponents.tsx
– Props and useAuth calls on lines 12–13 and 21–22 still reference the option.
• packages/astro/src/react/hooks.ts
– Default parameter and option forwarding on lines 88 and 119.
• packages/astro/src/server/clerk-middleware.ts
locals.auth signature and forwarding on lines 255–256.
• packages/astro/src/server/get-auth.ts
– Function signature and spread of treatPendingAsSignedOut on lines 16 and 43.

Once these are cleaned up, the minor bump to 2.11.0 will correctly reflect the removal.

🤖 Prompt for AI Agents
In packages/astro/CHANGELOG.md, packages/astro/src/react/controlComponents.tsx
(lines 12-13, 21-22), packages/astro/src/react/hooks.ts (lines 88, 119),
packages/astro/src/server/clerk-middleware.ts (lines 255-256), and
packages/astro/src/server/get-auth.ts (lines 16, 43), remove all references to
the treatPendingAsSignedOut option including props, function parameters, calls,
and documentation mentions. This involves deleting or updating code and comments
to no longer include treatPendingAsSignedOut, ensuring the version bump to
2.11.0 accurately reflects its removal.

Comment on lines +3 to +11
## 2.5.18

### Patch Changes

- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/clerk-js@5.82.0
- @clerk/clerk-react@5.41.0
- @clerk/shared@3.18.2

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Dependency bump entry looks good; verify package.json sync

Lists the expected versions for this coordinated release. Please verify package.json entries match.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pkg="packages/chrome-extension/package.json"

echo "Checking @clerk/chrome-extension version matches changelog 2.5.18..."
jq -r '.version' "$pkg"

check_dep() {
  name="$1"; want="$2"
  have=$(jq -r --arg n "$name" '
    .dependencies[$n] // .peerDependencies[$n] // .devDependencies[$n] // ""' "$pkg" | sed -E 's/^[\^~]//')
  echo "$name => $have (expected: $want)"
  test "$have" = "$want"
}

check_dep "@clerk/clerk-js" "5.82.0"
check_dep "@clerk/clerk-react" "5.41.0"
check_dep "@clerk/shared" "3.18.2"

echo "OK"

Length of output: 681


Package.json dependencies are out of sync with CHANGELOG
The changelog lists these new versions under 2.5.18, but in packages/chrome-extension/package.json you're still pulling from the workspace. Please update to match:

• packages/chrome-extension/package.json

   "dependencies": {
-    "@clerk/clerk-js": "workspace:^",
+    "@clerk/clerk-js": "^5.82.0",
-    "@clerk/clerk-react": "workspace:^",
+    "@clerk/clerk-react": "^5.41.0",
-    "@clerk/shared":     "workspace:^"
+    "@clerk/shared":     "^3.18.2"
   }

After updating, re-run npm install (or yarn) and ensure everything builds as expected.

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
## 2.5.18
### Patch Changes
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/clerk-js@5.82.0
- @clerk/clerk-react@5.41.0
- @clerk/shared@3.18.2
"dependencies": {
- "@clerk/clerk-js": "workspace:^",
+ "@clerk/clerk-js": "^5.82.0",
- "@clerk/clerk-react": "workspace:^",
+ "@clerk/clerk-react": "^5.41.0",
- "@clerk/shared": "workspace:^"
+ "@clerk/shared": "^3.18.2"
}
🤖 Prompt for AI Agents
In packages/chrome-extension/CHANGELOG.md lines 3 to 11, the changelog lists
updated dependency versions for @clerk/clerk-js, @clerk/clerk-react, and
@clerk/shared under version 2.5.18, but packages/chrome-extension/package.json
still references these dependencies from the workspace. Update the package.json
dependencies to use the exact versions listed in the changelog (5.82.0, 5.41.0,
and 3.18.2 respectively), then run npm install or yarn to update the lockfile
and verify the build succeeds.

Comment on lines +3 to +11
## 1.7.18

### Patch Changes

- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Changelog entry looks good; verify package.json alignment

Entry correctly documents a patch bump of internal deps. Please verify the package.json matches these versions.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pkg="packages/express/package.json"

echo "Checking @clerk/express version matches changelog 1.7.18..."
jq -r '.version' "$pkg"

echo "Checking dependency versions (allowing ^ prefix)..."
check_dep() {
  name="$1"; want="$2"
  have=$(jq -r --arg n "$name" '
    .dependencies[$n] // .peerDependencies[$n] // .devDependencies[$n] // ""' "$pkg" | sed -E 's/^[\^~]//')
  echo "$name => $have (expected: $want)"
  test "$have" = "$want"
}

check_dep "@clerk/types" "4.75.0"
check_dep "@clerk/backend" "2.7.1"
check_dep "@clerk/shared" "3.18.2"

echo "OK"

Length of output: 734


Align package.json dependencies with CHANGELOG

The verification script indicates that packages/express/package.json is still using the Yarn workspace protocol ("workspace:^") instead of the explicit version ranges documented in the changelog. Please update it to match 1.7.18:

• packages/express/package.json

  • "@clerk/types": "^4.75.0"
  • "@clerk/backend": "^2.7.1"
  • "@clerk/shared": "^3.18.2"

Suggested diff:

--- a/packages/express/package.json
+++ b/packages/express/package.json
@@ dependencies {
-  "@clerk/types":   "workspace:^",
-  "@clerk/backend": "workspace:^",
-  "@clerk/shared":  "workspace:^",
+  "@clerk/types":   "^4.75.0",
+  "@clerk/backend": "^2.7.1",
+  "@clerk/shared":  "^3.18.2",
}

Committable suggestion skipped: line range outside the PR's diff.

🤖 Prompt for AI Agents
In packages/express/package.json around the dependency declarations, update the
versions of @clerk/types, @clerk/backend, and @clerk/shared from the Yarn
workspace protocol format ("workspace:^") to explicit version ranges matching
the changelog for version 1.7.18: set "@clerk/types" to "^4.75.0",
"@clerk/backend" to "^2.7.1", and "@clerk/shared" to "^3.18.2".

Comment on lines +3 to +14
## 5.41.0

### Minor Changes

- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)

### Patch Changes

- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/types@4.75.0
- @clerk/shared@3.18.2

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Add a brief migration note and verify removal coverage

  • Consider appending a one-liner under “Minor Changes” clarifying the behavioral outcome and what to do next. Example: “Pending sessions continue to be treated as signed-out by default; the option has been removed.” If there’s a recommended alternative for customizing pending-session handling, link it.
  • The entry already references the PR; adding a short “Migration” sub-bullet will reduce ambiguity for consumers skimming the changelog.

Run a quick sweep to ensure no remaining references to the removed option in this package:

Also confirm the dependency bumps reflected in the changelog match the package.json:

If you want, I can propose the exact “Migration” wording as a diff to the changelog.


🏁 Script executed:

#!/bin/bash
# Verify removed option isn't referenced in @clerk/clerk-react
rg -n --hidden --glob '!**/dist/**' --glob '!**/build/**' 'treatPendingAsSignedOut' packages/react

Length of output: 3863


🏁 Script executed:

#!/bin/bash
# Validate dependency versions in @clerk/clerk-react
jq '.dependencies, .peerDependencies, .devDependencies' packages/react/package.json | rg '@clerk/(types|shared)' -n

Length of output: 188


Add a concise migration note for the removed treatPendingAsSignedOut option

The changelog should briefly explain the new default behavior and point consumers to the alternative opt-out APIs. For example:

## 5.41.0

### Minor Changes

- Remove `treatPendingAsSignedOut` from ClerkProvider options ([#6497](https://github.com/clerk/javascript/pull/6497))
+ **Migration:** Pending sessions are now treated as signed-out by default.  
+ To restore previous behavior, pass `treatPendingAsSignedOut` to your hook or control component, e.g.  
+ ```tsx
+ const { session } = useSession({ treatPendingAsSignedOut: false });
+ // or
+ <Protect treatPendingAsSignedOut={false}>…</Protect>
+ ```

– This one-liner under “Minor Changes” clarifies what changed and where to apply the option now.

Verify removal coverage in the React package

Run a quick grep to ensure the prop was removed from the global provider API:

rg -n 'ClerkProvider.*treatPendingAsSignedOut' packages/react

If no hits are returned, you’ve successfully dropped it from <ClerkProvider>.

🤖 Prompt for AI Agents
In packages/react/CHANGELOG.md lines 3 to 14, add a concise migration note under
"Minor Changes" explaining the removal of the treatPendingAsSignedOut option,
its new default behavior, and how to opt out using useSession or Protect
components with treatPendingAsSignedOut set to false. Also, verify the option's
removal from the React package by running a grep search for
treatPendingAsSignedOut in ClerkProvider within packages/react to confirm it is
no longer present.

Comment on lines +7 to +11
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/clerk-react@5.41.0
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Surface the removed treatPendingAsSignedOut option for consumer awareness.

Since @clerk/types@4.75.0 removes this deprecated option and Remix apps often pass Clerk options via @clerk/clerk-react, adding a short note helps prevent type errors for consumers.

Apply this minimal addition under Patch Changes:

 ### Patch Changes

 - Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
   - @clerk/clerk-react@5.41.0
   - @clerk/types@4.75.0
   - @clerk/backend@2.7.1
   - @clerk/shared@3.18.2
+ - Note: `@clerk/types@4.75.0` removes the deprecated `treatPendingAsSignedOut` option. If your app passed this via `ClerkProvider` (or related helpers), remove it to avoid TypeScript errors.

Quick check for lingering usage across the repo:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Find references to the removed option outside changelogs/docs
rg -n --no-ignore -S 'treatPendingAsSignedOut' -g '!**/CHANGELOG.md' -g '!**/*.md'

Length of output: 7157


Add note about treatPendingAsSignedOut removal to CHANGELOG.md

Since bumping to @clerk/types@4.75.0 removes the deprecated treatPendingAsSignedOut option, Remix users passing this into ClerkProvider (or related helpers) will see TypeScript errors. Please update packages/remix/CHANGELOG.md:

• File: packages/remix/CHANGELOG.md
• Location: under “### Patch Changes”

Apply:

 ### Patch Changes

 - Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
   - @clerk/clerk-react@5.41.0
   - @clerk/types@4.75.0
   - @clerk/backend@2.7.1
   - @clerk/shared@3.18.2
+  - Note: `@clerk/types@4.75.0` removed the deprecated `treatPendingAsSignedOut` option. If you passed this via `ClerkProvider` (or through any helper), remove it to avoid TypeScript errors.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/clerk-react@5.41.0
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2
### Patch Changes
- Updated dependencies [[`6459f7d`](https://github.com/clerk/javascript/commit/6459f7dabe5f163f48ed73106bb901d8187da3e2)]:
- @clerk/clerk-react@5.41.0
- @clerk/types@4.75.0
- @clerk/backend@2.7.1
- @clerk/shared@3.18.2
- Note: `@clerk/types@4.75.0` removed the deprecated `treatPendingAsSignedOut` option. If you passed this via `ClerkProvider` (or through any helper), remove it to avoid TypeScript errors.
🤖 Prompt for AI Agents
In packages/remix/CHANGELOG.md around lines 7 to 11, add a note under the "###
Patch Changes" section about the removal of the deprecated
`treatPendingAsSignedOut` option in `@clerk/types@4.75.0`. Mention that Remix
users passing this option to `ClerkProvider` or related helpers will encounter
TypeScript errors due to this removal. Insert this information clearly to inform
users of the breaking change.

Comment on lines +3 to +8
## 4.75.0

### Minor Changes

- Remove `treatPendingAsSignedOut` from Clerk options ([#6497](https://github.com/clerk/javascript/pull/6497)) by [@LauraBeatris](https://github.com/LauraBeatris)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Add a short migration note and sweep stale references.

To reduce upgrade friction, consider adding one or two lines showing the before/after for apps that previously set treatPendingAsSignedOut. Also verify there are no lingering references in code, docs, or tests.

Run:

If any hits appear in public APIs or tests, update them to reflect that pending sessions are no longer treated as signed out by configuration.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Searching for deprecated option references..."
rg -n --hidden --glob '!**/dist/**' --glob '!**/build/**' 'treatPendingAsSignedOut|treat_pending_as_signed_out'

echo
echo "Checking for tests relying on prior behavior (pending vs signed-out)..."
rg -n --hidden --glob '!**/dist/**' --glob '!**/build/**' \
  -e 'useSession\(|useAuth\(' \
  -e '<SignedIn\b' -e '<Protect\b' \
  -e 'pending session' -e 'pending.*signed[- ]?out'

Length of output: 50765


Add migration note for removing treatPendingAsSignedOut and clean up stale references

The v4.75.0 entry in packages/types/CHANGELOG.md currently just says that we removed treatPendingAsSignedOut, but it doesn’t show users how to migrate. Please update it with a before/after snippet:

### Migration
If you were using `treatPendingAsSignedOut`, simply remove it—pending sessions are now returned by default.

Before (<= 4.74.x):
```js
useAuth({ treatPendingAsSignedOut: false });

After (4.75.0+):

useAuth();

Also, our global grep shows many lingering `treatPendingAsSignedOut` mentions across types, shared code, control components, tests, docs, and other CHANGELOGs. Please sweep these stale references (or confirm they should remain) to avoid confusion. Key locations include (but aren’t limited to):

- packages/types/src/session.ts  
- packages/shared/src/authorization.ts  
- packages/vue/src/components/controlComponents.ts  
- packages/react/src/hooks/useAuth.ts  
- Multiple CHANGELOG.md files in other packages

<details>
<summary>🤖 Prompt for AI Agents</summary>

In packages/types/CHANGELOG.md around lines 3 to 8, add a migration note under
the v4.75.0 entry explaining how to migrate from using treatPendingAsSignedOut
by showing a before and after code snippet. Additionally, perform a thorough
search across the codebase to remove or confirm removal of all stale
treatPendingAsSignedOut references in files like packages/types/src/session.ts,
packages/shared/src/authorization.ts,
packages/vue/src/components/controlComponents.ts,
packages/react/src/hooks/useAuth.ts, and other CHANGELOG.md files to prevent
confusion.


</details>

<!-- fingerprinting:phantom:triton:capybara -->

<!-- This is an auto-generated comment by CodeRabbit -->

@@ -1,6 +1,6 @@
{
"name": "@clerk/types",
"version": "4.74.0",
"version": "4.75.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Semver bump to 4.75.0 looks correct; ensure deprecation removal is reflected across the repo.
Minor bump aligns with removing a deprecated option. Confirm changelog entry exists and usages are removed.


🏁 Script executed:

#!/bin/bash
# Verify changelog entry exists for 4.75.0
rg -n $'^##\\s+4\\.75\\.0' packages/types/CHANGELOG.md

# Confirm no lingering references to removed option remain
rg -n --hidden --glob '!**/dist/**' 'treatPendingAsSignedOut'

# Sanity-check all publishable packages live under packages/ and use @clerk namespace
jq -r '.name' packages/*/package.json | sed 's/^/@/!q' >/dev/null && echo "OK: All packages appear under @clerk"

# Prettier check (format is enforced via repo script, but ensure JSON is valid)
jq . packages/types/package.json >/dev/null && echo "OK: JSON parses"

Length of output: 16101


Cleanup deprecation and finalize v4.75.0

  • ✅ Confirmed ## 4.75.0 entry in packages/types/CHANGELOG.md.
  • ✅ packages/types/package.json parses without errors.
  • ⚠️ A lingering treatPendingAsSignedOut?: boolean; remains in packages/types/src/session.ts (line 39). Remove this property to complete the deprecation.
  • ⚠️ The namespace check script errored on the sed expression—please verify all publishable packages in packages/ use the @clerk/… naming convention.
🤖 Prompt for AI Agents
In packages/types/src/session.ts at line 39, remove the deprecated property
`treatPendingAsSignedOut?: boolean;` to complete the deprecation cleanup. Also,
verify that all package names in the packages/ directory follow the `@clerk/`
namespace convention to fix the namespace check script error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant