Skip to content

ci(repo): Version packages #6525

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 13, 2025
Merged

ci(repo): Version packages #6525

merged 1 commit into from
Aug 13, 2025

Conversation

clerk-cookie
Copy link
Collaborator

@clerk-cookie clerk-cookie commented Aug 12, 2025

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/backend@2.8.0

Minor Changes

Patch Changes

@clerk/clerk-js@5.83.0

Minor Changes

  • [Billing Beta] Replace usage of top level amounts in plan with fees for displaying prices. (#6490) by @panteliselef

  • Add support for trials in <Checkout/> (#6494) by @panteliselef

    • Added freeTrialEndsAt property to CommerceCheckoutResource interface.
  • Update billing resources with trial properties. (#6492) by @panteliselef

  • Update PricingTable with trial info. (#6493) by @panteliselef

  • [Experimental] Signals reset password flow (#6520) by @dstaley

Patch Changes

  • Add optional isExternal to ApplicationLogo (#6447) by @jfoshee

    Add optional oAuthApplicationUrl parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).

    Harden Link component so it sanitizes the given href to avoid dangerous protocols.

  • Updated dependencies [69622af, 33e7a7b, 15fe106, 173837c, 8b52d7a, 854dde8, ae2e2d6, 037f25a, 6f73222, f8b38b7]:

    • @clerk/localizations@3.21.0
    • @clerk/types@4.76.0
    • @clerk/shared@3.20.0

@clerk/localizations@3.21.0

Minor Changes

  • Complete Persian (fa-IR) localization with all missing translations (#6533) by @hamidrezaghanbari

    This update completes the Persian localization by:

    • Translating all undefined API key management strings
    • Adding complete commerce/billing translations
    • Completing organization profile translations
    • Adding all missing error messages
    • Including form labels and placeholders
    • Adding fa-IR to package.json files array for proper publishing

    The Persian localization now provides a complete user experience for Persian-speaking users.

  • Add support for trials in <Checkout/> (#6494) by @panteliselef

    • Added freeTrialEndsAt property to CommerceCheckoutResource interface.
  • Update PricingTable with trial info. (#6493) by @panteliselef

Patch Changes

@clerk/shared@3.20.0

Minor Changes

  • Add support for trials in <Checkout/> (#6494) by @panteliselef

    • Added freeTrialEndsAt property to CommerceCheckoutResource interface.

Patch Changes

@clerk/types@4.76.0

Minor Changes

  • [Billing Beta] Replace usage of top level amounts in plan with fees for displaying prices. (#6490) by @panteliselef

  • Add support for trials in <Checkout/> (#6494) by @panteliselef

    • Added freeTrialEndsAt property to CommerceCheckoutResource interface.
  • Update billing resources with trial properties. (#6492) by @panteliselef

  • Update PricingTable with trial info. (#6493) by @panteliselef

  • [Experimental] Signals reset password flow (#6520) by @dstaley

Patch Changes

  • Convert LocalizationResource to interface for typedoc documentation (#6531) by @NWylynko

  • Add optional isExternal to ApplicationLogo (#6447) by @jfoshee

    Add optional oAuthApplicationUrl parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).

    Harden Link component so it sanitizes the given href to avoid dangerous protocols.

@clerk/agent-toolkit@0.1.20

Patch Changes

@clerk/astro@2.11.1

Patch Changes

@clerk/chrome-extension@2.5.19

Patch Changes

@clerk/elements@0.23.52

Patch Changes

@clerk/clerk-expo@2.14.18

Patch Changes

@clerk/expo-passkeys@0.3.29

Patch Changes

@clerk/express@1.7.19

Patch Changes

@clerk/fastify@2.4.19

Patch Changes

@clerk/nextjs@6.30.2

Patch Changes

  • Add new telemetry event KEYLESS_ENV_DRIFT_DETECTED to detect drift between publishable and secret keys in keyless apps and values in the .env file. (#6522) by @heatlikeheatwave

    This event only fires once as controlled with the .clerk/.tmp/telemetry.json file to prevent telemetry event noise

  • Updated dependencies [15fe106, df63e76, 173837c, 8b52d7a, 854dde8, ae2e2d6, 037f25a, f8b38b7]:

    • @clerk/types@4.76.0
    • @clerk/backend@2.8.0
    • @clerk/shared@3.20.0
    • @clerk/clerk-react@5.41.1

@clerk/nuxt@1.8.5

Patch Changes

@clerk/clerk-react@5.41.1

Patch Changes

@clerk/react-router@1.8.13

Patch Changes

@clerk/remix@4.10.13

Patch Changes

@clerk/tanstack-react-start@0.21.9

Patch Changes

@clerk/testing@1.10.13

Patch Changes

@clerk/themes@2.4.8

Patch Changes

@clerk/vue@1.10.1

Patch Changes

Summary by CodeRabbit

  • New Features
    • Checkout now supports trials; Pricing Table shows trial info.
    • Completed Persian (fa-IR) localization; added missing pt-BR entries.
    • Added optional isExternal for logos and OAuth consent homepage link support.
    • Exposed new backend resources for machine and M2M tokens.
  • Improvements
    • Hardened links to sanitize unsafe URLs.
    • Added telemetry to detect key drift in keyless Next.js setups.
  • Chores
    • Updated dependencies and bumped versions across packages (Astro, Express, Fastify, Next.js, Nuxt, Remix, Vue, React, Elements, Themes, Expo, Agent Toolkit, Testing, Types, Shared).

Copy link

vercel bot commented Aug 12, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Project Deployment Preview Comments Updated (UTC)
clerk-js-sandbox Ready Preview Comment Aug 13, 2025 6:01pm

Copy link

pkg-pr-new bot commented Aug 12, 2025

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@6525

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@6525

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@6525

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@6525

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@6525

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@6525

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@6525

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@6525

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@6525

@clerk/express

npm i https://pkg.pr.new/@clerk/express@6525

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@6525

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@6525

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@6525

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@6525

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@6525

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@6525

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@6525

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@6525

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@6525

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@6525

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@6525

@clerk/types

npm i https://pkg.pr.new/@clerk/types@6525

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@6525

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@6525

commit: 3fd17dd

Copy link
Contributor

coderabbitai bot commented Aug 12, 2025

📝 Walkthrough

Walkthrough

This PR removes multiple .changeset files, updates many packages' CHANGELOG.md entries, and bumps versions in numerous package.json files across the monorepo. It adds changelog entries and version bumps for packages including backend (2.8.0), types (4.76.0), shared (3.20.0), clerk-js (5.83.0), and many adapters. The backend changelog declares exports of Machine and M2MToken; types/additional changelogs declare additions such as freeTrialEndsAt on CommerceCheckoutResource and ApplicationLogo.isExternal / OAuth Consent oAuthApplicationUrl. Most edits are metadata or documentation-only.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

Suggested reviewers

  • panteliselef
  • wobsoriano
  • LauraBeatris

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Contributor

coderabbitai bot commented Aug 12, 2025

📝 Walkthrough

Walkthrough

This PR updates multiple packages with version bumps and changelog entries across the repo. It documents dependency updates (notably @clerk/types@4.76.0, @clerk/shared@3.19.1, and @clerk/backend@2.8.0) and adds new release entries for numerous packages. The backend changelog notes new public exports: Machine and M2MToken from @clerk/backend. Two changeset files are removed. No functional code changes are shown beyond metadata/changelog updates.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Suggested reviewers

  • panteliselef

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🧹 Nitpick comments (9)
packages/localizations/package.json (1)

3-3: Patch bump to 3.20.10 looks good.

Package is located under packages/localizations per guidelines; no API or exports changes here. Ensure CHANGELOG includes the 3.20.10 entry (the repo-wide script in another comment will verify).

Given this is a doc/dependency update-only release, ensure your release pipeline includes a smoke test that imports a couple of representative locales to catch packaging regressions.

packages/types/CHANGELOG.md (1)

3-8: LGTM; consider adding a brief note on which types gained “trial” fields.

The Minor entry is fine. For discoverability, a one-liner listing the specific type names or fields that were added would help downstream SDK authors.

packages/tanstack-react-start/package.json (1)

3-3: Patch bump to 0.21.9 is consistent. Small peer/dev dependency version alignment nit.

Dev deps are on ^1.128.0 while peer deps are ^1.127.0 for @tanstack/*; that’s fine (peers are minimums), but consider aligning peers to ^1.128.0 to reduce potential version mismatch warnings for consumers.

If you choose to align, update peerDependencies:

"peerDependencies": {
  "@tanstack/react-router": "^1.128.0",
  "@tanstack/react-start": "^1.128.0",
  "react": "catalog:peer-react",
  "react-dom": "catalog:peer-react"
}
packages/react/CHANGELOG.md (1)

3-10: No tests changed in this release PR.

Given this is a changesets publish sweep with no runtime code changes, additional tests aren’t required here. Ensure upstream feature PRs (e.g., billing trial props and backend exports) shipped with adequate tests before this release.

packages/chrome-extension/CHANGELOG.md (1)

3-10: Optional: add a release smoke check.

No tests changed in this PR. While this is a metadata-only bump, consider adding a lightweight CI smoke check that installs workspace deps and verifies the chrome-extension package builds/links against the updated @clerk/* versions. I can help wire up a minimal job if useful.

packages/clerk-js/CHANGELOG.md (2)

5-8: Clarify the “Minor Changes” with concrete details and impact

“Update billing resources with trial properties” is vague. Please briefly enumerate what changed (which resources gained which properties), any behavioral changes, and whether there is any migration or consumer impact (e.g., new fields being optional, default values, deprecations). If no migration is needed, explicitly state so for clarity, similar to past entries that include a “Migration” note.


3-15: No tests touched—ensure coverage exists for “trial properties” usage

Although this PR is a release/version bump, the underlying change introduces “trial” support in billing resources. Please ensure we have unit/E2E coverage in clerk-js for:

  • Rendering/formatting of the new properties in any UI components
  • Handling of null/undefined cases for new fields
  • Backwards compatibility with older API payloads

I can help draft test cases if needed.

packages/backend/CHANGELOG.md (1)

5-8: Add a quick usage hint for the new exports (optional).

A short import example reduces ambiguity for consumers scanning the changelog.

 ### Minor Changes

-- Exports `Machine` and `M2MToken` resource classes ([#6500](https://github.com/clerk/javascript/pull/6500)) by [@wobsoriano](https://github.com/wobsoriano)
+- Exports `Machine` and `M2MToken` resource classes ([#6500](https://github.com/clerk/javascript/pull/6500)) by [@wobsoriano](https://github.com/wobsoriano)
+  ```ts
+  import { Machine, M2MToken } from '@clerk/backend';
+  ```
packages/nextjs/CHANGELOG.md (1)

3-12: No tests changed: ensure CI and smoke tests cover the dep bumps.

Given this is a release/versioning PR, no new tests are expected; however, please ensure the integration/e2e suite runs against:

  • @clerk/backend@2.8.0 (new public exports)
  • @clerk/types@4.76.0
  • @clerk/clerk-react@5.41.1
  • @clerk/shared@3.19.1

I can help draft a minimal smoke plan if needed.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between ae2e2d6 and a56476f.

📒 Files selected for processing (46)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (2)
  • .changeset/nasty-colts-travel.md
  • .changeset/sour-lemons-talk.md
🧰 Additional context used
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/elements/package.json
  • packages/vue/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/expo/package.json
  • packages/nextjs/package.json
  • packages/react/CHANGELOG.md
  • packages/localizations/package.json
  • packages/express/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/chrome-extension/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/astro/package.json
  • packages/remix/CHANGELOG.md
  • packages/agent-toolkit/package.json
  • packages/localizations/CHANGELOG.md
  • packages/nuxt/package.json
  • packages/testing/package.json
  • packages/expo-passkeys/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/elements/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/types/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/remix/package.json
  • packages/shared/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/elements/package.json
  • packages/vue/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/expo/package.json
  • packages/nextjs/package.json
  • packages/localizations/package.json
  • packages/express/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/chrome-extension/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/astro/package.json
  • packages/agent-toolkit/package.json
  • packages/nuxt/package.json
  • packages/testing/package.json
  • packages/clerk-js/package.json
  • packages/types/package.json
  • packages/remix/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/elements/package.json
  • packages/vue/package.json
  • packages/tanstack-react-start/package.json
  • packages/themes/package.json
  • packages/expo/package.json
  • packages/nextjs/package.json
  • packages/react/CHANGELOG.md
  • packages/localizations/package.json
  • packages/express/package.json
  • packages/shared/package.json
  • packages/expo-passkeys/package.json
  • packages/chrome-extension/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/astro/package.json
  • packages/remix/CHANGELOG.md
  • packages/agent-toolkit/package.json
  • packages/localizations/CHANGELOG.md
  • packages/nuxt/package.json
  • packages/testing/package.json
  • packages/expo-passkeys/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/elements/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/types/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/remix/package.json
  • packages/shared/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/react/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
packages/localizations/**/*

📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)

Localization files must be placed in 'packages/localizations/'.

Files:

  • packages/localizations/package.json
  • packages/localizations/CHANGELOG.md
🔇 Additional comments (48)
packages/expo/package.json (1)

3-3: Patch version bump looks correct and consistent with changesets

Semver patch increment aligns with dependency-only updates; package location and namespace comply with repo standards. No formatting issues.

packages/astro/package.json (1)

3-3: Astro: patch bump is appropriate and semver-compliant

Matches a dependency-only release; package remains under packages/ and @clerk namespace. JSON formatting is consistent.

packages/elements/package.json (1)

3-3: Elements: patch bump validated

Versioning, package placement, and namespace are correct. No export or script changes implied here; Prettier-style formatting looks good.

packages/fastify/package.json (1)

3-3: Fastify: patch bump consistent with dependency updates

Semver and monorepo policies satisfied; exports and peerDependencies unchanged, which is expected for a patch release.

packages/backend/package.json (1)

3-3: Backend: Version bump to 2.8.0 is correct for exposing new exports (Machine, M2MToken)

Release-hygiene checks for all modified packages passed:

  • All @clerk/* names and semver-style versions are valid.
  • Each package’s CHANGELOG.md contains its new version.

To verify that internal @clerk/* dependencies use the workspace: protocol (excluding localizations and themes), you can run:

#!/bin/bash
set -euo pipefail

echo "Checking internal @clerk/* deps for non-workspace versions…"
rg -n '"@clerk/[^"]+":' packages -g '*/package.json' \
  | grep -v 'workspace:' \
  | grep -Ev '@clerk/(localizations|themes)' \
  || echo "✓ All internal @clerk/* deps use workspace: protocol"

If this prints no lines above the success message, you’re all set.

Finally, add a minimal import smoke test in packages/backend to ensure the new exports resolve post-publish:

// packages/backend/tests/smoke.test.js
const { Machine, M2MToken } = require('@clerk/backend');

test('Machine and M2MToken should be defined', () => {
  expect(Machine).toBeDefined();
  expect(M2MToken).toBeDefined();
});
packages/nextjs/package.json (1)

3-3: Patch bump to 6.30.2 is safe and Next devDependency is within peer range
The devDependency next@14.2.31 is covered by the peer range ^13.5.7 || ^14.2.25 || ^15.2.3. No further changes needed.

packages/nuxt/package.json (1)

3-3: ✅ Patch bump to v1.8.5 approved

  • packages/nuxt/package.json devDependency nuxt is ^3.17.7 (v3 major)
  • packages/nuxt/CHANGELOG.md contains a “## 1.8.5” entry

No further concerns.

packages/types/package.json (1)

3-3: Version bump approved and dependency consistency verified

All internal packages depend on @clerk/types using workspace:^, so there’s no risk of version skew. The minor bump to 4.76.0 correctly reflects type additions/updates.

• Consider adding or confirming CI steps that run a full type-check and minimal import smoke tests across dependents to validate the new typings surface.

packages/vue/package.json (1)

3-3: CHANGELOG entry verified for version 1.10.1
The packages/vue/CHANGELOG.md contains the ## 1.10.1 heading, matching the patch bump in package.json. All set to approve.

packages/fastify/CHANGELOG.md (1)

3-11: Changelog entry is well-formed and scoped as a patch dependency bump.

The entry references the correct updated dependency versions. No issues.

packages/chrome-extension/package.json (1)

3-3: ✅ CHANGELOG entry verified for version 2.5.19

  • packages/chrome-extension/package.json version 2.5.19
  • packages/chrome-extension/CHANGELOG.md contains heading ## 2.5.19 on line 3
packages/testing/package.json (1)

3-3: Approve version bump for packages/testing

  • “packages/testing/package.json” version updated to 1.10.13
  • “packages/testing/CHANGELOG.md” contains the ## 1.10.13 heading
  • Workspace dependencies, publish config, and engines remain unchanged
packages/vue/CHANGELOG.md (1)

3-10: Changelog entry 1.10.1 looks correct and semver-appropriate.

Patch release scoped to dependency bumps, consistent with repo conventions and guidelines for detailed changelogs.

packages/expo-passkeys/package.json (1)

3-3: Changelog Entry Verified for 0.3.29

The changelog in packages/expo-passkeys/CHANGELOG.md already contains a “## 0.3.29” entry. All other dependency ranges remain unchanged and consistent.

packages/clerk-js/package.json (1)

3-3: Approve version bump to 5.83.0

Confirmed the changelog entry for 5.83.0 in packages/clerk-js/CHANGELOG.md, which covers the billing trial properties and dependency updates.

(Optional) Run your usual release smoke tests (bundle builds, import/require checks, peer-dependency resolution) before merging.

packages/shared/package.json (1)

3-3: Patch version bump is correct and consistent with semver and repo conventions.

  • Name is under the @clerk namespace.
  • Publishing config and export map remain unchanged and valid.
packages/react/package.json (1)

3-3: Patch version bump looks good and aligns with the React changelog entry.

  • Namespace, workspace ranges, and publishConfig are intact.
  • No behavioral surface changes.
packages/themes/CHANGELOG.md (1)

3-9: Changelog entry is clear and properly scoped to a patch release.

  • Notes the dependency bump to @clerk/types@4.76.0.
  • Commit link resolves format-wise and follows prior entries’ style.
packages/react/CHANGELOG.md (2)

3-10: Changelog entry accurately documents a patch release with dependency bumps.

  • Matches package.json (5.41.1).
  • Dependencies reflect @clerk/types@4.76.0 and @clerk/shared@3.19.1 as expected.

3-10: All changelog headers match package.json versions

Verified that the first “## x.y.z” entry in each CHANGELOG.md aligns with the corresponding version in package.json for the impacted packages:

  • packages/shared → 3.19.1
  • packages/react → 5.41.1
  • packages/themes → 2.4.8
  • packages/react-router → 1.8.13

No discrepancies found; changelogs are up to date.

packages/react-router/package.json (1)

3-3: Patch version bump approved.

  • Package remains under @clerk namespace and in packages/ folder.
  • Peer and dev dependency ranges remain compatible (react-router peer ^7.1.2, dev 7.7.1).
packages/testing/CHANGELOG.md (1)

3-11: Approve testing changelog entry for v1.10.13 dependency bumps

The entry in packages/testing/CHANGELOG.md correctly documents the internal dependency updates and matches the actual package versions:

• packages/testing/package.json version is 1.10.13
• @clerk/backend → 2.8.0
• @clerk/types → 4.76.0
• @clerk/shared → 3.19.1

No user-facing changes; patch release is scoped to internal deps.

packages/shared/CHANGELOG.md (1)

3-9: Changelog entry for v3.19.1 is accurate

  • packages/shared is at version 3.19.1.
  • Monorepo workspace dependency @clerk/types points to the packages/types package.
  • packages/types is indeed at version 4.76.0, matching the changelog’s patch bump.
    All aligns with expectations—no changes needed.
packages/localizations/CHANGELOG.md (1)

3-9: ✅ Localization changelog entry for v3.20.10 is accurate

  • Confirmed packages/localizations/package.json is at version 3.20.10.
  • Verified @clerk/types is bumped to 4.76.0 in packages/types/package.json.
  • Changelog at packages/localizations/CHANGELOG.md correctly documents this patch-level dependency update.

No further changes required.

packages/agent-toolkit/CHANGELOG.md (1)

3-11: All dependencies and version verified
The packages/agent-toolkit/package.json is correctly at version 0.1.20, and the three updated Clerk packages are specified with the Yarn workspace protocol (workspace:^), which will resolve to the bumped workspace versions (backend 2.8.0, types 4.76.0, shared 3.19.1). No further changes are needed.

packages/express/CHANGELOG.md (2)

3-11: Changelog entry 1.7.19 looks correct and scoped to dependency bumps

Entry clearly documents patch-level dependency updates with commit refs. No API changes implied.


3-11: All version checks passed for the Express package

packages/express/package.json is at version 1.7.19, and @clerk/backend 2.8.0, @clerk/types 4.76.0, and @clerk/shared 3.19.1 are correctly set in their respective package.json files across the monorepo.

packages/astro/CHANGELOG.md (2)

3-11: Astro 2.11.1 patch entry is consistent with dependency bumps

Aligned with monorepo-wide updates; no functional changes described.


3-11: All checks passed: version and dependencies are correct
packages/astro/package.json is at 2.11.1 and @clerk/backend@2.8.0, @clerk/types@4.76.0, and @clerk/shared@3.19.1 all exist in their respective package.json files. No further changes needed.

packages/expo-passkeys/CHANGELOG.md (2)

3-10: Expo Passkeys 0.3.29 patch entry is accurate for dependency bumps

Docs-only update reflecting @clerk/types 4.76.0 and @clerk/shared 3.19.1. Good.


3-10: ✅ Version alignment and dependencies confirmed

packages/expo-passkeys/package.json is at version 0.3.29, and @clerk/types@4.76.0 plus @clerk/shared@3.19.1 are present in their respective package.json files. No further action required.

packages/agent-toolkit/package.json (2)

3-3: Version bump to 0.1.20 is appropriate and follows semver

No other manifest changes; package is correctly under packages/ and scoped to @clerk.


3-3: Verified CHANGELOG and package metadata for 0.1.20

All checks passed:

  • packages/agent-toolkit/CHANGELOG.md contains a “## 0.1.20” entry
  • package.json name is scoped to @clerk/agent-toolkit
  • publishConfig.access is set to public

No further action required.

packages/remix/CHANGELOG.md (1)

3-12: Changelog entry 4.10.13 is consistent and complete.

  • Dependency versions match the PR objective: backend 2.8.0, types 4.76.0, clerk-react 5.41.1, shared 3.19.1.
  • Commit references are included and formatted consistently with prior entries.

No functional code changes; nothing to test here.

packages/react-router/CHANGELOG.md (1)

3-12: Changelog entry 1.8.13 is accurate and aligned with repo-wide bumps.

  • Matches the dependency update set called out in the PR.
  • Commit references provided and consistent with repository conventions.

No code changes; tests are not applicable for this metadata-only update.

packages/chrome-extension/CHANGELOG.md (2)

3-10: Changelog entry looks accurate and consistent.

  • Version 2.5.19 is correctly placed above 2.5.18.
  • Patch section follows the established format.
  • Dependency versions match the PR summary: @clerk/clerk-js@5.83.0, @clerk/clerk-react@5.41.1, @clerk/shared@3.19.1.
  • Commit link style is consistent with prior entries.

3-10: All package.json versions are aligned with CHANGELOG.

Verified that:

  • packages/chrome-extension/package.json → @clerk/chrome-extension@2.5.19
  • packages/clerk-js/package.json → @clerk/clerk-js@5.83.0
  • packages/react/package.json → @clerk/clerk-react@5.41.1
  • packages/shared/package.json → @clerk/shared@3.19.1

No further changes required.

packages/expo/CHANGELOG.md (2)

3-12: Changelog entry looks correct and consistent.

  • Patch bump to 2.14.18 aligns with dependency-only updates.
  • Updated deps match PR objectives: @clerk/clerk-js@5.83.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, @clerk/shared@3.19.1.
  • Formatting and placement at the top are consistent with prior entries.

3-12: Verify package.json versions in packages/

The packages/expo/CHANGELOG.md lists these published versions:

  • @clerk/expo: 2.14.18
  • @clerk/clerk-js: 5.83.0
  • @clerk/types: 4.76.0
  • @clerk/shared: 3.19.1
  • @clerk/clerk-react: 5.41.1
  • @clerk/backend: 2.8.0
  • @clerk/nuxt: 1.8.5
  • @clerk/vue: 1.10.1
  • @clerk/tanstack-react-start: 0.21.9
  • @clerk/themes: 2.4.8

Please confirm that each corresponding packages/<name>/package.json file’s version field matches the changelog. For example, you can run locally:

#!/usr/bin/env bash
set -euo pipefail
declare -A expected=(
  ["@clerk/expo"]="2.14.18"
  ["@clerk/clerk-js"]="5.83.0"
  ["@clerk/types"]="4.76.0"
  ["@clerk/shared"]="3.19.1"
  ["@clerk/clerk-react"]="5.41.1"
  ["@clerk/backend"]="2.8.0"
  ["@clerk/nuxt"]="1.8.5"
  ["@clerk/vue"]="1.10.1"
  ["@clerk/tanstack-react-start"]="0.21.9"
  ["@clerk/themes"]="2.4.8"
)

find packages -type f -name package.json -print0 \
  | while IFS= read -r -d '' f; do
      name=$(jq -r '.name // empty' "$f")
      ver=$(jq -r '.version // empty' "$f")
      if [[ -n "${expected[$name]:-}" ]] && [[ "$ver" != "${expected[$name]}" ]]; then
        echo "Mismatch: $name — found $ver in $f, expected ${expected[$name]}"
      fi
    done
packages/nuxt/CHANGELOG.md (1)

3-12: Nuxt changelog entry is accurate and follows semver.

  • Patch bump to 1.8.5 is appropriate for dependency updates only.
  • Dependencies match PR goals: @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/shared@3.19.1, @clerk/vue@1.10.1.
  • Formatting is consistent with prior entries.
packages/themes/package.json (1)

3-3: Version bump is appropriate and compliant.

  • Patch bump from 2.4.7 to 2.4.8 aligns with dependency updates in the monorepo.
  • Package namespace, location under packages/, and semantic versioning all comply with guidelines.
packages/tanstack-react-start/CHANGELOG.md (1)

3-12: Changelog entry matches the coordinated dependency update.

  • Patch bump to 0.21.9 is appropriate.
  • Updated dependencies align with repo-wide versions: @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, @clerk/shared@3.19.1.
  • Entry placement and formatting are correct.
packages/clerk-js/CHANGELOG.md (2)

3-4: Changelog entry heading looks good

Version header and spacing are consistent with prior entries.


9-14: Dependencies are consistently aligned via workspace:^ across all packages

Confirmed that packages/clerk-js/package.json is at version 5.83.0 and declares its core Clerk deps (@clerk/types, @clerk/localizations, @clerk/shared) as workspace:^. A full scan of every package.json shows any package depending on these modules also uses workspace:^, with no explicit version pins. Playground demos use local yalc paths and are expected to differ.

No further action needed.

packages/elements/CHANGELOG.md (1)

3-11: Changelog entry looks good for 0.23.52 (deps-only patch).

Accurately reflects dependency bumps; no API claims. Placement and link formatting look consistent with prior entries.

packages/backend/CHANGELOG.md (2)

9-14: Deps bump note is consistent.

@clerk/types@4.76.0 and @clerk/shared@3.19.1 match the PR’s stated versions. No action needed.


3-8: Exports Verified: Machine and M2MToken Are Publicly Available

  • Both classes are defined in
    • packages/backend/src/api/resources/Machine.ts
    • packages/backend/src/api/resources/M2MToken.ts
  • They’re re-exported in the public API surface:
    • packages/backend/src/api/resources/index.ts (lines 33–36)
    • packages/backend/src/index.ts (lines 129–131)
  • The package’s main entrypoint (./dist/index.js) will include these exports when published.

No further changes are needed here.

packages/nextjs/CHANGELOG.md (1)

3-12: Changelog entry looks correct and consistent.

  • Version bump to 6.30.2 is appropriate as a patch.
  • Dependency versions match the PR objectives and follow the repo’s changelog format (commit links, bullets, spacing).

@@ -1,6 +1,6 @@
{
"name": "@clerk/remix",
"version": "4.10.12",
"version": "4.10.13",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Patch bump looks good; matches dependency updates noted in repo-wide changes.

Ensure the remix changelog’s newest entry is 4.10.13 and references the bumped deps.

Check:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pkg="packages/remix/package.json"
changelog="packages/remix/CHANGELOG.md"

ver=$(jq -r '.version' "$pkg")
echo "packages/remix version: $ver"
echo "Checking CHANGELOG heading…"

if rg -n "^## $ver$" "$changelog"; then
  echo "OK: CHANGELOG contains heading for $ver"
else
  echo "ERROR: Missing CHANGELOG entry for $ver in $changelog" >&2
  exit 1
fi

Length of output: 450


🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

changelog="packages/remix/CHANGELOG.md"
version="4.10.13"

# Extract the changelog entry for 4.10.13 (excluding the header line itself)
section=$(awk "/^## $version\$/,/^## /{ if (!/^## /) print }" "$changelog")

echo "Changelog entry for $version:"
echo "--------------------------------"
echo "$section"
echo "--------------------------------"
echo "Verifying that the entry references bumped dependencies…"

if printf '%s\n' "$section" | grep -Ei 'bump|update|upgrade|dependency'; then
  echo "OK: Found references to dependency changes in the changelog entry."
else
  echo "ERROR: No references to bumped dependencies found in the changelog entry." >&2
  exit 1
fi

Length of output: 745


CHANGELOG entry for v4.10.13 is empty – please add dependency-bump details

The ## 4.10.13 header in packages/remix/CHANGELOG.md exists but contains no content describing the bumped dependencies. Please update it to include the relevant entries.

• packages/remix/CHANGELOG.md (line 3): add bullet points under ## 4.10.13 to document each dependency bump.
• Example:

## 4.10.13

- Bump @remix-run/dev from 1.2.3 to 1.2.4
- Update remix-utils from 0.5.0 to 0.6.0
🤖 Prompt for AI Agents
In packages/remix/CHANGELOG.md around line 3 (the `## 4.10.13` header), the
changelog body is empty; add concise bullet points documenting each dependency
bump included in this release (one bullet per dependency, e.g. "- Bump
@remix-run/dev from X.Y.Z to A.B.C"). If you don't know the exact previous
versions, determine them from the PR diffs or package.json/package-lock changes
in this commit, then list package name and old→new version under the `##
4.10.13` header (optionally include a release date line above or below the
header if the file uses dates).

Copy link
Contributor

coderabbitai bot commented Aug 12, 2025

📝 Walkthrough

Walkthrough

This PR performs a release sweep across multiple packages: it bumps versions in package.json files, updates corresponding CHANGELOG entries, and removes two changeset files. It documents dependency updates across integrations and libraries (@clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/shared@3.19.1, etc.). The backend CHANGELOG notes newly exported public entities Machine and M2MToken. No source code modifications are shown in the diff; changes are metadata and documentation-oriented.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

Suggested reviewers

  • wobsoriano
  • panteliselef
  • LauraBeatris

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

🔭 Outside diff range comments (1)
packages/nextjs/package.json (1)

93-97: Align Next.js peerDependencies across all Clerk packages

The peer range for Next.js is inconsistent between packages:

  • packages/elements/package.json (@clerk/elements@0.23.52) declares:
    "next": "^13.5.4 || ^14.0.3 || ^15"
    
  • packages/nextjs/package.json (@clerk/nextjs@6.30.2) declares:
    "next": "^13.5.7 || ^14.2.25 || ^15.2.3"
    

Please update these so they exactly match (for example, using ^13.5.7 || ^14.2.25 || ^15.2.3) to avoid install-time peer warnings.

Suggested diff for packages/elements/package.json:

--- packages/elements/package.json
+++ packages/elements/package.json
@@ "peerDependencies": {
-   "next": "^13.5.4 || ^14.0.3 || ^15"
+   "next": "^13.5.7 || ^14.2.25 || ^15.2.3"
}
🧹 Nitpick comments (6)
packages/nextjs/package.json (1)

66-80: Optional: add/update smoke tests for integration surfaces.

No tests were added/changed. Given this is a dependency bump release, consider adding/expanding smoke tests that run minimal Next.js app flows against @clerk/nextjs to catch accidental regressions from upstream bumps.

I can scaffold a minimal Next.js app test harness using Vitest + playwrighteque requests if you’d like.

packages/expo-passkeys/package.json (1)

22-34: Consider adding a basic compatibility test.

No tests in this PR. A simple runtime smoke test that constructs and uses the exported passkey helpers against supported Expo SDK versions can help detect breakages from dependency updates.

Happy to add a lightweight matrix smoke test targeting Expo 50/51/52/53.

packages/backend/package.json (1)

88-110: Consider minimal tests for new exported resources.

No tests added in this PR. Since this release promotes new public classes, add a smoke test that imports Machine/M2MToken from '@clerk/backend' and exercises a trivial method to ensure API shape and types are stable.

I can draft a vitest that asserts types and instance creation without making network calls.

packages/express/CHANGELOG.md (1)

5-10: Consider adding a brief note: “No code changes; dependency updates only.”

This helps readers scanning the changelog quickly understand risk surface for this release. Also, since this PR doesn’t modify tests, ensure CI or smoke tests cover the updated dependency set for Express.

Apply this minimal addition after the “Patch Changes” heading:

 ### Patch Changes

+- No code changes in this release; dependency updates only.
+
 - Updated dependencies [[`df63e76`](https://github.com/clerk/javascript/commit/df63e76f2382c601d9a3b52a3a6dfaba26c4f36f), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1)]:
   - @clerk/backend@2.8.0
   - @clerk/types@4.76.0
   - @clerk/shared@3.19.1

If helpful, I can open a follow-up PR to apply this across all affected packages in this release train.

packages/remix/CHANGELOG.md (1)

3-12: Optional: add a brief rationale for the dependency bumps.

If possible, include a short note (one line) about what motivated these bumps (e.g., “billing trial props update” / “new backend exports”) to improve discoverability in this package’s changelog.

packages/react/package.json (1)

3-3: No tests changed — ensure CI release checks still cover import/usage smoke paths.

Given this is a metadata-only bump, code tests aren’t necessary, but please verify that our CI/publish pipeline runs a minimal smoke test against @clerk/clerk-react@next/latest (basic import, render, and peer resolution). If not present, consider adding one to catch accidental regressions in packaging/exports.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between ae2e2d6 and a56476f.

📒 Files selected for processing (46)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (2)
  • .changeset/sour-lemons-talk.md
  • .changeset/nasty-colts-travel.md
🧰 Additional context used
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/chrome-extension/package.json
  • packages/react-router/package.json
  • packages/nextjs/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/testing/package.json
  • packages/themes/package.json
  • packages/expo-passkeys/package.json
  • packages/expo/package.json
  • packages/vue/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/shared/CHANGELOG.md
  • packages/backend/package.json
  • packages/elements/package.json
  • packages/types/package.json
  • packages/chrome-extension/CHANGELOG.md
  • packages/astro/package.json
  • packages/express/package.json
  • packages/remix/package.json
  • packages/shared/package.json
  • packages/vue/package.json
  • packages/nuxt/package.json
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/localizations/package.json
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/agent-toolkit/package.json
  • packages/nextjs/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/tanstack-react-start/package.json
  • packages/expo-passkeys/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/backend/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/chrome-extension/package.json
  • packages/react-router/package.json
  • packages/nextjs/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/testing/package.json
  • packages/themes/package.json
  • packages/expo-passkeys/package.json
  • packages/expo/package.json
  • packages/clerk-js/package.json
  • packages/backend/package.json
  • packages/elements/package.json
  • packages/types/package.json
  • packages/astro/package.json
  • packages/express/package.json
  • packages/remix/package.json
  • packages/shared/package.json
  • packages/vue/package.json
  • packages/nuxt/package.json
  • packages/localizations/package.json
  • packages/agent-toolkit/package.json
  • packages/tanstack-react-start/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/chrome-extension/package.json
  • packages/react-router/package.json
  • packages/nextjs/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/testing/package.json
  • packages/themes/package.json
  • packages/expo-passkeys/package.json
  • packages/expo/package.json
  • packages/vue/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/shared/CHANGELOG.md
  • packages/backend/package.json
  • packages/elements/package.json
  • packages/types/package.json
  • packages/chrome-extension/CHANGELOG.md
  • packages/astro/package.json
  • packages/express/package.json
  • packages/remix/package.json
  • packages/shared/package.json
  • packages/vue/package.json
  • packages/nuxt/package.json
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/localizations/package.json
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/agent-toolkit/package.json
  • packages/nextjs/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/tanstack-react-start/package.json
  • packages/expo-passkeys/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/backend/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/vue/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/backend/CHANGELOG.md
packages/localizations/**/*

📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)

Localization files must be placed in 'packages/localizations/'.

Files:

  • packages/localizations/CHANGELOG.md
  • packages/localizations/package.json
🔇 Additional comments (48)
packages/shared/package.json (1)

3-3: Approve patch version bump to v3.19.1

All checks passed:

  • Namespace @clerk and semantic versioning are correct.
  • Package resides under packages/.
  • Verified no packages pin @clerk/shared to a non-workspace range.
packages/elements/package.json (1)

3-3: Changelog updated for 0.23.52

Confirmed that packages/elements/CHANGELOG.md includes the required entries:

  • Line 3: ## 0.23.52
  • Line 8: - @clerk/types@4.76.0
  • Line 10: - @clerk/shared@3.19.1

All set.

packages/testing/package.json (1)

3-3: Dependencies verified for testing package version bump
All three Clerk dependencies in packages/testing/package.json are set to workspace:^ and will resolve to the newly published 1.10.13 versions.

  • File: packages/testing/package.json
  • Dependencies:
    • @clerk/backend: "workspace:^"
    • @clerk/shared: "workspace:^"
    • @clerk/types: "workspace:^"
packages/themes/package.json (1)

3-3: Approved: themes package version bump to 2.4.8 is semver-correct

  • File updated: packages/themes/package.json → "version": "2.4.8"
  • Changelog verified: packages/themes/CHANGELOG.md contains a ## 2.4.8 header at line 3
  • No other breaking changes; exports and publishConfig remain intact
packages/expo/package.json (1)

3-3: ✅ All package version bumps and changelogs verified

The validation script confirmed for packages/expo, react-router, astro, express, and shared that:

  • package names start with @clerk/
  • version fields match the new releases
  • publishConfig.access is set to public
  • each CHANGELOG.md contains the corresponding ## <version> heading

No issues remain. Approving these changes.

packages/react-router/package.json (1)

3-3: Patch version bump looks correct and non-breaking.

No export map or peer range changes; aligns with dependency update-only release. Good to ship.

packages/astro/package.json (1)

3-3: Astro package patch bump is appropriate.

No API surface changes; engines, exports, and peers remain intact. OK.

packages/express/package.json (1)

3-3: Express package patch bump looks good.

Release metadata only; exports and peer ranges unchanged. Ready to publish.

packages/shared/CHANGELOG.md (1)

3-9: Changelog entry is clear and scoped as a patch with dependency updates.

The new 3.19.1 entry correctly references @clerk/types@4.76.0. This matches the PR objective.

packages/nextjs/package.json (1)

3-3: Version bump looks correct and consistent with semver.

Patch release aligns with the PR scope (dependency updates). No issues spotted.

packages/expo-passkeys/package.json (2)

3-3: Semver patch bump LGTM.

No other changes; aligns with dependency updates noted in the PR.


42-46: Peer dependency ranges are consistent

The only package declaring expo in its peerDependencies is:

  • packages/expo-passkeys/package.json (@clerk/expo-passkeys@0.3.29>=50 <54)

No other packages list expo, so there are no mismatched ranges.

packages/fastify/package.json (2)

3-3: Patch version bump is good.

Changelog reflects dependency updates only; package.json changes are minimal and correct.


77-79: Peer range check for Fastify

Currently in packages/fastify/package.json (lines 77–79) you have:

"peerDependencies": {
  "fastify": ">=5"
},

– Other adapters (e.g. @clerk/express) constrain to the current major (^4.17.0 || ^5.0.0).
– To avoid accidentally pulling in Fastify v6 (if it introduces breaking changes), consider tightening this to:

"peerDependencies": {
- "fastify": ">=5"
+ "fastify": ">=5 <6"
},

If you’ve confirmed that Fastify v6 will remain fully compatible, feel free to leave the range open.

packages/backend/package.json (2)

3-3: Minor version bump acknowledged.

Matches CHANGELOG messaging about new public exports (Machine, M2MToken). The manifest changes look correct.


27-79: New public exports Machine & M2MToken are properly exposed

Both Machine and M2MToken are re-exported from the package’s top-level entry and will be included in the generated type declarations:

  • packages/backend/src/index.ts lines 129–130 export both Machine and M2MToken
  • The compiled dist/index.d.ts will reflect those exports automatically via TypeScript’s declaration emit
  • CHANGELOG.md version (## 2.8.0) matches packages/backend/package.json version 2.8.0

No further action required.

packages/agent-toolkit/CHANGELOG.md (2)

3-11: Changelog entry is clear and properly references dependency bumps.

Matches the release intent; links and versions look correct.


3-11: CHANGELOG and package.json versions are in sync
Verified that packages/agent-toolkit/package.json reports version 0.1.20 and the top entry in packages/agent-toolkit/CHANGELOG.md is also ## 0.1.20. No action required.

packages/types/package.json (1)

3-3: Version bump to 4.76.0 verified – LGTM

Confirmed that:

  • packages/types/CHANGELOG.md contains the ## 4.76.0 entry.
  • All dependent packages’ changelogs (e.g., agent-toolkit, astro, backend, clerk-js, elements, expo-passkeys, expo, express, fastify, localizations, nextjs, nuxt, react-router, react, remix, shared, tanstack-react-start, testing, themes, vue) reference @clerk/types@4.76.0.
packages/nuxt/package.json (1)

3-3: Confirm version bump to 1.8.5 and changelog entry

The package version in packages/nuxt/package.json has been correctly updated to 1.8.5 to align with the dependency bumps (@clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/shared@3.19.1, @clerk/vue@1.10.1). The CHANGELOG.md contains the corresponding ## 1.8.5 entry. Semver and package placement under packages/nuxt are all correct.

packages/localizations/CHANGELOG.md (1)

3-9: Changelog entry 3.20.10 looks good

Doc-only patch entry correctly reflects dependency update to @clerk/types@4.76.0 and follows established format. Package lives under packages/localizations as required.

packages/agent-toolkit/package.json (1)

3-3: Confirm Node engine constraint bump to ≥20

I ran the inventory across all packages/*/package.json files and found only three packages targeting Node ≥20, while the rest use ≥18.17.0:

  • @clerk/agent-toolkit (engines.node: ">=20")
  • @clerk/fastify (engines.node: ">=20")
  • @clerk/react-router (engines.node: ">=20.0.0")

Please verify that raising the Node version floor for @clerk/agent-toolkit is intentional (e.g. due to new language/runtime features or dependencies) and update documentation or align constraints if necessary.

packages/remix/package.json (1)

3-3: Patch version bump to 4.10.13 approved — changelog entry exists
No API surface changes; dependency updates are documented. Semver, namespace, and package location are correct.

Locations checked:

  • packages/remix/package.json (version updated to 4.10.13)
  • packages/remix/CHANGELOG.md (## 4.10.13 entry present)

Consider adding a lightweight CI smoke check for release PRs (build all packages and perform an ESM/CJS import of main entry points) to catch accidental breakages even on metadata-only bumps.

packages/chrome-extension/package.json (1)

3-3: ✅ chrome-extension version bump verified

The package.json version (2.5.19), name (@clerk/chrome-extension), and publishConfig.access (public) all align with the ## 2.5.19 heading in packages/chrome-extension/CHANGELOG.md. Ready to merge.

packages/vue/CHANGELOG.md (1)

3-10: Changelog and package.json version aligned for v1.10.1

  • packages/vue/package.json: name “@clerk/vue” and version “1.10.1”
  • packages/vue/CHANGELOG.md: has a “## 1.10.1” heading on line 3

All good—CHANGELOG entry and version bump are in sync. ✅

packages/testing/CHANGELOG.md (1)

3-11: Verified @clerk/testing version and changelog

  • packages/testing/package.json is correctly bumped to 1.10.13
  • Internal dependencies (@clerk/backend, @clerk/types, @clerk/shared) use the expected workspace:^ ranges per monorepo conventions
  • CHANGELOG.md contains the “## 1.10.13” heading as required

All items align with the changelog entry.

packages/chrome-extension/CHANGELOG.md (1)

3-11: Chrome extension changelog entry aligns with dependency updates and package.json.

The 2.5.19 section documents updates to @clerk/clerk-js@5.83.0, @clerk/clerk-react@5.41.1, and @clerk/shared@3.19.1, and the version matches package.json. No further action needed.

packages/expo/CHANGELOG.md (1)

3-12: ✅ Changelog Entry Verified

  • packages/expo/package.json version is 2.14.18.
  • packages/expo/CHANGELOG.md lists ## 2.14.18 as the topmost entry.
  • Dependency bumps to
    • @clerk/clerk-js@5.83.0
    • @clerk/types@4.76.0
    • @clerk/clerk-react@5.41.1
    • @clerk/shared@3.19.1
      are correctly reflected.
packages/expo-passkeys/CHANGELOG.md (1)

3-10: package.json and CHANGELOG versions are in sync

  • packages/expo-passkeys/package.json version is 0.3.29
  • CHANGELOG.md top entry is ## 0.3.29

No further action needed.

packages/tanstack-react-start/package.json (1)

3-3: Verified: Version bump and changelog entry are in place, and the CI publish step will use the updated version

  • packages/tanstack-react-start/package.json shows "version": "0.21.9".
  • packages/tanstack-react-start/CHANGELOG.md has a ## 0.21.9 section documenting the dependency bumps.
  • The GitHub Actions release workflow invokes npm publish on each package, which reads the version directly from its package.json.
packages/nextjs/CHANGELOG.md (1)

3-11: Changelog entry 6.30.2 looks correct and consistent.

  • Patch release properly documents dependency bumps to @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, and @clerk/shared@3.19.1.
  • Commit references are included and formatted consistently with prior entries.
packages/localizations/package.json (1)

3-3: Version bump is appropriate and scoped as a patch.

  • @clerk/localizations moved 3.20.9 → 3.20.10, aligning with the related dependency refresh across the repo.
  • Package remains correctly namespaced under @clerk and located under packages/, complying with repo conventions.
  • engines.node constraint and exports remain unchanged and valid.
packages/elements/CHANGELOG.md (1)

3-11: New 0.23.52 entry correctly documents dependency updates.

  • Patch notes reference the expected bumps: @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, @clerk/shared@3.19.1.
  • Follows the established changelog structure and formatting for this package.
packages/types/CHANGELOG.md (1)

3-8: Confirm @clerk/types version alignment and downstream usage

  • ✅ packages/types/package.json and CHANGELOG.md are both at version 4.76.0.
  • ⚠️ No other package.json lists @clerk/types@4.76.0. Please verify whether downstream packages that should consume the new types package have been updated accordingly. [verify_review_comment
packages/tanstack-react-start/CHANGELOG.md (1)

3-12: Changelog version and dependencies are correctly reflected in package.json

  • packages/tanstack-react-start/package.json version 0.21.9 matches CHANGELOG.md.
  • Dependencies use workspace:^, and the workspace packages are at the expected versions:
    • @clerk/backend  2.8.0
    • @clerk/types  4.76.0
    • @clerk/clerk-react 5.41.1
    • @clerk/shared  3.19.1

All good to merge.

packages/express/CHANGELOG.md (2)

3-11: Changelog entry looks correct and aligned with the release plan.

Version 1.7.19 documents only dependency bumps to @clerk/backend@2.8.0, @clerk/types@4.76.0, and @clerk/shared@3.19.1. Formatting and nested list structure are consistent with prior entries.


3-11: No changes needed in packages/express/package.json
The Express package is correctly at version 1.7.19, and its dependencies use the Yarn “workspace:^” protocol to pull the matching @clerk/backend (2.8.0), @clerk/types (4.76.0), and @clerk/shared (3.19.1) from the monorepo. This aligns with monorepo conventions—no manual version pins are required here.

packages/clerk-js/CHANGELOG.md (2)

3-8: Changelog entry for 5.83.0 looks correct and consistent

  • Scope/title align with the change (trial properties for billing).
  • PR link and author attribution are present and match the repo’s convention.

9-15: Dependency updates read well; verify repo-wide sync

The listed versions match the PR objective summary. As a quick sanity check before merge, ensure:

  • package.json for these packages reflects the same versions.
  • Any consumer packages that pin these deps have been bumped by Changesets (looks like they have, per PR).

If all good, this section is ready to ship.

packages/vue/package.json (1)

3-3: Approve: Version bump and changelog entry verified

  • packages/vue/package.json version “1.10.1” matches the heading in CHANGELOG.md
  • Dependent packages exist with versions @clerk/types@4.76.0 and @clerk/shared@3.19.1
packages/backend/CHANGELOG.md (1)

3-14: Changelog v2.8.0 verification: exports and dependency bumps are correct

  • packages/backend is at version 2.8.0 as documented.
  • Machine is exported in packages/backend/src/api/resources/Machine.ts.
  • M2MToken is exported in packages/backend/src/api/resources/M2MToken.ts.
  • @clerk/types@4.76.0 and @clerk/shared@3.19.1 match the versions listed in the CHANGELOG.

All items align with the PR intent—no further changes required.

packages/astro/CHANGELOG.md (1)

3-11: Changelog version and dependency versions verified

All versions in packages/astro/CHANGELOG.md match packages/astro/package.json (2.11.1), and the referenced @clerk dependencies (@clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/shared@3.19.1) align with their respective package.json files.

packages/fastify/CHANGELOG.md (1)

3-11: Changelog entry is consistent and complete for 2.4.19

Version heading, Patch Changes section, dependency list, and commit anchors look correct and follow existing conventions.

packages/nuxt/CHANGELOG.md (2)

3-12: Nuxt changelog entry reads well and matches release sweep

Dependency versions align with the PR objectives, and formatting mirrors prior entries.


3-12: No changes needed for Nuxt package dependencies

The packages/nuxt/package.json intentionally uses the Yarn workspace protocol ("workspace:^") to inherit the bumped versions from the root. The changelog lists the actual published versions (2.8.0, 4.76.0, 3.19.1, 1.10.1), and the workspace references in Nuxt will resolve exactly to those. No manual version pins are required here.

packages/remix/CHANGELOG.md (1)

3-12: Changelog entry looks correct and aligned with the release sweep.

Patch entry lists the expected dependency bumps: @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, and @clerk/shared@3.19.1, with commit references. This matches the PR objectives and semantic versioning.

packages/react/package.json (1)

3-3: Version bump is consistent and semver-correct.

Patch bump to 5.41.1 is appropriate and matches referenced dependency updates elsewhere in the PR.

packages/react/CHANGELOG.md (1)

3-10: Changelog and Package.json Consistency Verified

  • package.json version (5.41.1) matches the ## 5.41.1 header in packages/react/CHANGELOG.md.
  • Internal dependencies use the workspace:^ protocol (per monorepo conventions) rather than explicit versions—this is expected and will resolve to the bumped versions at publish time.

No further changes are required.

@@ -1,6 +1,6 @@
{
"name": "@clerk/clerk-js",
"version": "5.82.0",
"version": "5.83.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Minor bump to 5.83.0 aligns with noted feature (billing trial properties) and dependency updates.

  • Namespace, semver, and publish location all good.
  • Given the minor change, ensure related tests/docs landed in the feature PR(s) and CHANGELOG is present.

Also confirm there are corresponding or prior tests covering the new billing trial props in:

  • packages/types (type surface)
  • packages/clerk-js (runtime behavior)

If missing, do you want me to open a follow-up to add targeted tests?


🏁 Script executed:

#!/bin/bash
set -e

# Verify CHANGELOG entries exist for all bumped packages in this PR.
rg -n '^##\s+5\.83\.0\b' packages/clerk-js/CHANGELOG.md
rg -n '^##\s+3\.19\.1\b' packages/shared/CHANGELOG.md
rg -n '^##\s+0\.23\.52\b' packages/elements/CHANGELOG.md
rg -n '^##\s+1\.10\.13\b' packages/testing/CHANGELOG.md
rg -n '^##\s+2\.4\.8\b' packages/themes/CHANGELOG.md

Length of output: 355


I’d like to verify that there are actually tests covering the new “trial” properties in both the type definitions and runtime code. Running a quick grep across each package should reveal any existing coverage:

This will confirm whether we already have test cases and type definitions for the billing-trial properties, or if a follow-up PR is needed to add them.


🏁 Script executed:

#!/bin/bash
set -e

echo "🔍 Searching for any mention of 'trial' in tests under packages/clerk-js..."
rg -n --color never 'trial' -g '*.{test,spec}.{ts,js,tsx,jsx}' packages/clerk-js || echo "⚠️ No 'trial' references found in clerk-js tests."

echo
echo "🔍 Searching for any mention of 'trial' in packages/clerk-js source..."
rg -n --color never 'trial' -C2 packages/clerk-js

echo
echo "🔍 Searching for any mention of 'trial' in packages/types..."
rg -n --color never 'trial' -C2 packages/types

Length of output: 3084


Missing Tests for Billing Trial Properties

The version bump to 5.83.0 and all CHANGELOG entries look good, but I didn’t find any test coverage for the new trial fields:

• packages/clerk-js – no trial references in any *.test.* or *.spec.* files
• packages/types – no tests validating the JSON-to-type mapping for is_free_trial / eligible_for_free_trial

Please add targeted unit tests for:

  • Runtime behavior in packages/clerk-js/src/core/resources/CommerceSubscription.ts
  • Type surface in packages/types/src/json.ts

Let me know if you’d like a follow-up PR drafted for these tests.

🤖 Prompt for AI Agents
In packages/clerk-js/package.json around line 3, the change introduced new trial
fields but there are no tests covering them; add unit tests that (1) in
packages/clerk-js create a new spec under
src/core/resources/CommerceSubscription.test.* that exercises runtime behavior:
build subscription fixtures including is_free_trial and eligible_for_free_trial,
call the CommerceSubscription constructor/mapper, and assert the resulting
object exposes the trial fields (boolean values and any derived properties) and
preserves expected behavior when fields are missing or null; and (2) in
packages/types add a test in src/json.test.* that validates the JSON-to-type
mapping for is_free_trial and eligible_for_free_trial by converting
representative JSON payloads to the TypeScript types and asserting the
types/values match (true/false/undefined) and that any naming/transformation is
correct.

Comment on lines 3 to 11
## 2.4.19

### Patch Changes

- Updated dependencies [[`df63e76`](https://github.com/clerk/javascript/commit/df63e76f2382c601d9a3b52a3a6dfaba26c4f36f), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1)]:
- @clerk/backend@2.8.0
- @clerk/types@4.76.0
- @clerk/shared@3.19.1

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Verify package.json versions match the changelog

Quick check to ensure the fastify package version and its deps align with this entry.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

PKG=packages/fastify/package.json

echo "Checking ${PKG} exists..."
test -f "$PKG"

version=$(jq -r '.version' "$PKG")
echo "fastify version: $version (expected: 2.4.19)"
test "$version" = "2.4.19"

# Helper to read a dep across the three sections
dep_ver() {
  local name=$1
  jq -r --arg n "$name" '
    .dependencies[$n] // .peerDependencies[$n] // .devDependencies[$n] // empty
  ' "$PKG"
}

check_dep() {
  local dep=$1 expected=$2
  local found
  found=$(dep_ver "$dep")
  echo "$dep: $found (expected: $expected)"
  test -n "$found" && test "$found" = "$expected"
}

check_dep "@clerk/backend" "2.8.0"
check_dep "@clerk/types" "4.76.0"
check_dep "@clerk/shared" "3.19.1"

echo "All checks passed."

Length of output: 853


Fix fastify package.json dependency versions

The packages/fastify/package.json is currently using workspace:^ placeholders for the Clerk deps, which no longer align with the versions listed in packages/fastify/CHANGELOG.md (2.4.19 patch):

• Update in packages/fastify/package.json dependencies:

  • Change "@clerk/backend": "workspace:^""@clerk/backend": "^2.8.0"
  • Change "@clerk/types": "workspace:^""@clerk/types": "^4.76.0"
  • Change "@clerk/shared": "workspace:^""@clerk/shared": "^3.19.1"

Once these are updated, the changelog entry and package.json will be in sync.

🤖 Prompt for AI Agents
In packages/fastify/CHANGELOG.md around lines 3 to 11, the changelog lists
specific versions for Clerk deps but packages/fastify/package.json still uses
"workspace:^" placeholders; update packages/fastify/package.json dependencies to
match the changelog by replacing "@clerk/backend": "workspace:^" with
"@clerk/backend": "^2.8.0", "@clerk/types": "workspace:^" with "@clerk/types":
"^4.76.0", and "@clerk/shared": "workspace:^" with "@clerk/shared": "^3.19.1",
then run a quick npm/yarn install or workspace sync to ensure lockfiles are
updated.

Comment on lines 3 to 9
## 2.4.8

### Patch Changes

- Updated dependencies [[`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1)]:
- @clerk/types@4.76.0

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Themes changelog entry is accurate; ensure dep bump is applied.

  • Patch entry 2.4.8 records the dependency update to @clerk/types@4.76.0, consistent with the rest of the release.

Run this to check the themes package version and dependency:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pkg_dir="packages/themes"
pkg_json="$pkg_dir/package.json"
changelog="$pkg_dir/CHANGELOG.md"

# 1) Verify versions align
pkg_ver=$(jq -r '.version' "$pkg_json")
cl_ver=$(gawk 'match($0,/^##[[:space:]]+([0-9]+\.[0-9]+\.[0-9]+)/,a){print a[1]; exit}' "$changelog")
echo "themes package.json: $pkg_ver"
echo "themes changelog:    $cl_ver"
test "$pkg_ver" = "$cl_ver" || { echo "Version mismatch in @clerk/themes"; exit 1; }

# 2) Confirm @clerk/types version pin
jq -r '(.dependencies // {} + .peerDependencies // {})["@clerk/types"]' "$pkg_json"
echo "Expected: 4.76.0"

Length of output: 620


Missing @clerk/types bump in packages/themes/package.json

The changelog for v2.4.8 correctly records the upgrade to @clerk/types@4.76.0, but the actual dependency in packages/themes/package.json is still using the workspace protocol. Please update it to match the changelog:

• packages/themes/package.json

   "dependencies": {
-    "@clerk/types": "workspace:^",
+    "@clerk/types": "^4.76.0",
     …  
   }

Committable suggestion skipped: line range outside the PR's diff.

🤖 Prompt for AI Agents
In packages/themes/CHANGELOG.md around lines 3 to 9 the changelog shows
@clerk/types@4.76.0 but packages/themes/package.json still references the
workspace protocol; update packages/themes/package.json to replace the workspace
dependency for @clerk/types with the explicit version "4.76.0" (in dependencies
or devDependencies where it appears), save the file and run the package manager
install to update the lockfile if applicable.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

♻️ Duplicate comments (1)
packages/astro/CHANGELOG.md (1)

3-11: Verify package.json alignment (version and internal dep ranges, avoid workspace:^)

This entry declares explicit internal versions. Ensure packages/astro/package.json:

  • is version 2.11.1
  • uses caret ranges matching the changelog for internal deps:
    • @clerk/backend: ^2.8.0
    • @clerk/types: ^4.76.0
    • @clerk/shared: ^3.19.1

Run the script below to confirm.

#!/bin/bash
set -euo pipefail

FILE="packages/astro/package.json"

if [ ! -f "$FILE" ]; then
  echo "File not found: $FILE" >&2
  exit 1
fi

version=$(jq -r '.version' "$FILE")
backend=$(jq -r '.dependencies["@clerk/backend"] // empty' "$FILE")
types=$(jq -r '.dependencies["@clerk/types"] // empty' "$FILE")
shared=$(jq -r '.dependencies["@clerk/shared"] // empty' "$FILE")

echo "packages/astro/package.json:"
echo "  version:           $version"
echo "  @clerk/backend:    $backend"
echo "  @clerk/types:      $types"
echo "  @clerk/shared:     $shared"
echo

expected_version="2.11.1"
expected_backend="^2.8.0"
expected_types="^4.76.0"
expected_shared="^3.19.1"

status=0

[[ "$version" == "$expected_version" ]] || { echo "Mismatch: version != $expected_version"; status=1; }
[[ "$backend" == "$expected_backend" ]] || { echo "Mismatch: @clerk/backend != $expected_backend"; status=1; }
[[ "$types" == "$expected_types" ]] || { echo "Mismatch: @clerk/types != $expected_types"; status=1; }
[[ "$shared" == "$expected_shared" ]] || { echo "Mismatch: @clerk/shared != $expected_shared"; status=1; }

if [ $status -eq 0 ]; then
  echo "OK: package.json aligns with CHANGELOG"
else
  echo "ERROR: package.json does not align with CHANGELOG" >&2
  exit $status
fi
🧹 Nitpick comments (2)
packages/agent-toolkit/CHANGELOG.md (2)

7-10: Nit: Keep dependency sub-items in a consistent order

To reduce churn and improve readability, consider ordering the listed dependencies alphabetically (backend, shared, types). Example tweak:

-  - @clerk/backend@2.8.0
-  - @clerk/types@4.76.0
-  - @clerk/shared@3.19.1
+  - @clerk/backend@2.8.0
+  - @clerk/shared@3.19.1
+  - @clerk/types@4.76.0

3-11: Tests: confirm coverage for released changes in dependent packages

This package only updates dependency versions, so no tests are needed here. However, since this release publishes upstream changes (e.g., backend@2.8.0, types@4.76.0, shared@3.19.1), please verify those packages have corresponding test coverage for the newly exposed APIs and billing updates before publishing.

I can help scan those packages’ recent changes and surface any gaps in test coverage if useful.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 90f5d30 and 9b3ae14.

📒 Files selected for processing (51)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (7)
  • .changeset/rich-drinks-ring.md
  • .changeset/nasty-colts-travel.md
  • .changeset/wise-hornets-sneeze.md
  • .changeset/sour-lemons-talk.md
  • .changeset/tender-planets-win.md
  • .changeset/thin-wolves-study.md
  • .changeset/eighty-plums-listen.md
✅ Files skipped from review due to trivial changes (13)
  • packages/vue/package.json
  • packages/tanstack-react-start/package.json
  • packages/react/package.json
  • packages/fastify/package.json
  • packages/remix/package.json
  • packages/nextjs/package.json
  • packages/shared/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/expo-passkeys/package.json
  • packages/remix/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (29)
  • packages/elements/package.json
  • packages/chrome-extension/package.json
  • packages/expo/package.json
  • packages/astro/package.json
  • packages/types/package.json
  • packages/testing/package.json
  • packages/agent-toolkit/package.json
  • packages/shared/package.json
  • packages/nuxt/package.json
  • packages/backend/package.json
  • packages/express/package.json
  • packages/react-router/package.json
  • packages/clerk-js/package.json
  • packages/themes/package.json
  • packages/react-router/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/localizations/package.json
  • packages/fastify/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/testing/CHANGELOG.md
🧰 Additional context used
📓 Path-based instructions (3)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/astro/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/astro/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/astro/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (2)
packages/astro/CHANGELOG.md (1)

3-11: Changelog entry looks correct for 2.11.1

  • Patch release is scoped to dependency bumps only.
  • Listed internal deps match the release plan: @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/shared@3.19.1.
packages/agent-toolkit/CHANGELOG.md (1)

3-11: Changelog entry looks correct and aligned with release intent

New 0.1.20 section accurately documents dependency bumps to @clerk/backend@2.8.0, @clerk/types@4.76.0, and @clerk/shared@3.19.1, matching the PR objectives.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

♻️ Duplicate comments (1)
packages/clerk-js/package.json (1)

3-3: Missing tests for new billing “trial” fields (echoing earlier feedback)

Echoing prior review: this release introduces/relates to trial properties; there were no added/updated tests in this PR. Please ensure targeted unit tests exist in clerk-js (runtime mapping/behavior) and types (JSON-to-type mapping) for trial fields. I can draft them if helpful.

🧹 Nitpick comments (1)
packages/remix/CHANGELOG.md (1)

3-12: Consider adding/confirming tests around the dependency bump.

No tests were added in this PR. Even for metadata-only releases, consider at least a smoke/e2e pass for Remix integration against the bumped @clerk/* versions.

I can help script a minimal smoke test matrix for supported Remix versions if useful. Want me to open a follow-up?

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 9b3ae14 and 649d9ff.

📒 Files selected for processing (52)
  • .changeset/bright-parks-search.md (0 hunks)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (8)
  • .changeset/eighty-plums-listen.md
  • .changeset/tender-planets-win.md
  • .changeset/rich-drinks-ring.md
  • .changeset/sour-lemons-talk.md
  • .changeset/bright-parks-search.md
  • .changeset/nasty-colts-travel.md
  • .changeset/thin-wolves-study.md
  • .changeset/wise-hornets-sneeze.md
✅ Files skipped from review due to trivial changes (12)
  • packages/chrome-extension/package.json
  • packages/testing/package.json
  • packages/themes/package.json
  • packages/tanstack-react-start/package.json
  • packages/expo/package.json
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/remix/package.json
  • packages/fastify/CHANGELOG.md
  • packages/localizations/package.json
  • packages/nuxt/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (30)
  • packages/shared/package.json
  • packages/nextjs/package.json
  • packages/fastify/package.json
  • packages/elements/package.json
  • packages/astro/package.json
  • packages/react/package.json
  • packages/types/package.json
  • packages/backend/package.json
  • packages/vue/package.json
  • packages/react-router/package.json
  • packages/agent-toolkit/package.json
  • packages/expo/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/expo-passkeys/package.json
  • packages/astro/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/nuxt/package.json
  • packages/vue/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/express/package.json
  • packages/testing/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
🧰 Additional context used
📓 Path-based instructions (4)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/clerk-js/package.json
  • packages/remix/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/clerk-js/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/clerk-js/package.json
  • packages/remix/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/remix/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (3)
packages/clerk-js/package.json (1)

3-3: Semver bump and package metadata look correct

  • Name scoped under @clerk, located under packages/, and publishConfig is public.
  • Minor bump to 5.83.0 aligns with the PR summary and CHANGELOG notes.
packages/remix/CHANGELOG.md (2)

3-12: Changelog entry looks correct and consistent.

  • Version header and “Patch Changes” section are properly formatted.
  • Dependency versions match the PR objectives and are listed in the established style.
  • Placement above 4.10.12 is correct.

3-12: No changes needed in packages/remix/package.json due to workspace-based dependency linking

The Remix package intentionally uses Yarn workspace references ("workspace:^") for all @clerk/* dependencies instead of pinning published versions. This is expected in a monorepo setup and does not need to match the changelog’s published version numbers here.

Likely an incorrect or invalid review comment.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

♻️ Duplicate comments (1)
packages/react-router/CHANGELOG.md (1)

7-11: Verify @clerk/clerk-react package path and version are present and aligned.

Previous verification flagged a potential mismatch (package referenced but path missing in the monorepo). Please confirm the package exists and that react-router’s dependency/peerDependency and changelog are aligned.

Run this script from the repo root:

#!/bin/bash
set -euo pipefail

echo "1) Verify react-router package version matches changelog heading…"
RR_PKG_JSON="packages/react-router/package.json"
if [[ ! -f "$RR_PKG_JSON" ]]; then
  echo "ERROR: $RR_PKG_JSON not found"
  exit 1
fi
RR_VER=$(jq -r '.version' "$RR_PKG_JSON")
echo "packages/react-router/package.json version: $RR_VER"
if rg -n $'^##\s*'"$RR_VER" packages/react-router/CHANGELOG.md -q; then
  echo "OK: Found changelog heading for $RR_VER"
else
  echo "WARN: packages/react-router/CHANGELOG.md does not contain heading for $RR_VER"
fi
echo

echo "2) Locate @clerk/clerk-react package.json in the monorepo and print its version…"
FOUND_PATHS=()
while IFS= read -r f; do
  NAME=$(jq -r '.name // empty' "$f")
  if [[ "$NAME" == "@clerk/clerk-react" ]]; then
    FOUND_PATHS+=("$f")
  fi
done < <(fd -a package.json)

if [[ ${#FOUND_PATHS[@]} -eq 0 ]]; then
  echo "WARN: No package.json found with name @clerk/clerk-react"
else
  for f in "${FOUND_PATHS[@]}"; do
    echo "- Found: $f"
    jq -r '.version' "$f" | sed 's/^/  version: /'
  done
fi
echo

echo "3) Check react-router declared dependency/peerDependency on @clerk/clerk-react…"
RR_DEP=$(jq -r '.dependencies["@clerk/clerk-react"] // empty' "$RR_PKG_JSON")
RR_PEER=$(jq -r '.peerDependencies["@clerk/clerk-react"] // empty' "$RR_PKG_JSON")
echo "react-router dependencies[@clerk/clerk-react]: ${RR_DEP:-<not set>}"
echo "react-router peerDependencies[@clerk/clerk-react]: ${RR_PEER:-<not set>}"
echo

echo "4) Cross-check other referenced internal package versions…"
for PKG in "@clerk/backend" "@clerk/types" "@clerk/shared"; do
  MATCHES=()
  while IFS= read -r f; do
    NAME=$(jq -r '.name // empty' "$f")
    if [[ "$NAME" == "$PKG" ]]; then
      MATCHES+=("$f")
    fi
  done < <(fd -a package.json)

  if [[ ${#MATCHES[@]} -eq 0 ]]; then
    echo "WARN: $PKG not found"
  else
    for f in "${MATCHES[@]}"; do
      echo "- $PKG at $f -> version $(jq -r '.version' "$f")"
    done
  fi
done
🧹 Nitpick comments (2)
packages/react-router/CHANGELOG.md (1)

3-12: Optional: add/confirm release validation coverage.

No code changed here, but ensure CI includes a smoke/integration check that react-router v1.8.13 is compatible with @clerk/clerk-react 5.41.1 and updated internals. This helps catch peer/version drift early.

packages/remix/package.json (1)

3-3: Tests N/A for metadata-only changes; ensure release automation remains green.

No code paths changed here. As a safeguard, rely on CI/e2e release checks for publishing rather than unit tests for this package bump.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 649d9ff and 049f0bb.

📒 Files selected for processing (53)
  • .changeset/bright-parks-search.md (0 hunks)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sad-turkeys-rhyme.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (9)
  • .changeset/sour-lemons-talk.md
  • .changeset/wise-hornets-sneeze.md
  • .changeset/thin-wolves-study.md
  • .changeset/tender-planets-win.md
  • .changeset/nasty-colts-travel.md
  • .changeset/rich-drinks-ring.md
  • .changeset/eighty-plums-listen.md
  • .changeset/bright-parks-search.md
  • .changeset/sad-turkeys-rhyme.md
✅ Files skipped from review due to trivial changes (12)
  • packages/vue/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/types/package.json
  • packages/themes/package.json
  • packages/react/CHANGELOG.md
  • packages/react/package.json
  • packages/shared/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/themes/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (27)
  • packages/elements/package.json
  • packages/astro/package.json
  • packages/agent-toolkit/package.json
  • packages/fastify/package.json
  • packages/react-router/package.json
  • packages/chrome-extension/package.json
  • packages/expo/package.json
  • packages/tanstack-react-start/package.json
  • packages/nextjs/package.json
  • packages/express/package.json
  • packages/backend/package.json
  • packages/nuxt/package.json
  • packages/localizations/package.json
  • packages/shared/package.json
  • packages/elements/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/expo-passkeys/package.json
  • packages/types/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/testing/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/testing/package.json
🧰 Additional context used
📓 Path-based instructions (5)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/remix/package.json
  • packages/expo/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/remix/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/remix/package.json
  • packages/expo/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/expo/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
packages/localizations/**/*

📄 CodeRabbit Inference Engine (.cursor/rules/monorepo.mdc)

Localization files must be placed in 'packages/localizations/'.

Files:

  • packages/localizations/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (11)
packages/react-router/CHANGELOG.md (1)

3-6: Changelog entry for 1.8.13 looks correct and scoped to dependency updates.

Version heading and “Patch Changes” notes are consistent with a maintenance release. Links and package versions read well.

packages/tanstack-react-start/CHANGELOG.md (1)

3-12: Changelog entry looks consistent and correct for 0.21.9.

  • Matches PR objectives: dependency bumps to @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, @clerk/shared@3.19.1.
  • Formatting is consistent with prior sections (header level, bullets, commit links).
packages/localizations/CHANGELOG.md (5)

3-6: Changelog section added correctly for 3.21.0.

Version header and section structure look consistent with prior entries.


20-21: Minor: PricingTable trial info entry looks good.

Entry is clear and references the PR. No action needed.


26-28: Dependencies bump entry is clear and consistent.

The dependency bump to @clerk/types@4.76.0 is properly referenced with commit links.


7-18: fa-IR publishing verified

  • The files array in packages/localizations/package.json (line 66) includes "fa-IR".
  • The locale file packages/localizations/src/fa-IR.ts exists and is exported via src/index.ts.
  • Locale generation in src/utils/generate.ts correctly references fa-IR.

No further action needed.


24-25: All locale bundles include taskChooseOrganization

I’ve confirmed that every translation file under packages/localizations/src defines the new taskChooseOrganization key. The only files missing the string are:

packages/localizations/src/index.ts
packages/localizations/src/utils/enUS_v4.ts
packages/localizations/src/utils/generate.ts
packages/localizations/src/utils/utils.ts

Those are barrel or tooling scripts—not per-locale definitions—so no missing translations remain.

packages/remix/package.json (2)

3-3: Patch version bump looks correct and consistent with semver and package namespace.

  • Package lives under packages/, name is within @clerk namespace, and patch bump (4.10.13) aligns with a metadata/deps-only release.

3-3: All verified: CHANGELOG and internal versions are aligned

  • packages/remix version (4.10.13) matches the CHANGELOG heading.
  • CHANGELOG entry for 4.10.13 lists @clerk/backend@2.8.0, @clerk/types@4.76.0, @clerk/clerk-react@5.41.1, and @clerk/shared@3.19.1.
  • packages/remix/package.json uses workspace:^ for all @clerk/* dependencies.
  • Internal packages under packages/ have been bumped to the expected versions.

No further changes required.

packages/expo/CHANGELOG.md (2)

3-12: Expo changelog entry looks correct and consistent.

  • Version heading and hierarchy match prior entries.
  • Dependency versions align with the PR objectives: clerk-js@5.83.0, types@4.76.0, clerk-react@5.41.1, shared@3.19.1.
  • Commit link formatting matches the established pattern in this file.

No issues from a formatting or content perspective.


3-12: ✅ Versions and CHANGELOGs verified and in sync

  • packages/expo/package.json → 2.14.18
  • @clerk/clerk-js → 5.83.0
  • @clerk/types → 4.76.0
  • @clerk/clerk-react → 5.41.1
  • @clerk/shared → 3.19.1

All corresponding CHANGELOG.md files contain a “## ” entry.

Comment on lines 3 to 34
## 3.21.0

### Minor Changes

- Complete Persian (fa-IR) localization with all missing translations ([#6533](https://github.com/clerk/javascript/pull/6533)) by [@hamidrezaghanbari](https://github.com/hamidrezaghanbari)

This update completes the Persian localization by:

- Translating all undefined API key management strings
- Adding complete commerce/billing translations
- Completing organization profile translations
- Adding all missing error messages
- Including form labels and placeholders
- Adding fa-IR to package.json files array for proper publishing

The Persian localization now provides a complete user experience for Persian-speaking users.

- Update PricingTable with trial info. ([#6493](https://github.com/clerk/javascript/pull/6493)) by [@panteliselef](https://github.com/panteliselef)

### Patch Changes

- Add `taskChooseOrganization` to all locales. ([#6527](https://github.com/clerk/javascript/pull/6527)) by [@panteliselef](https://github.com/panteliselef)

- Updated dependencies [[`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
- @clerk/types@4.76.0

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Add/ensure localization integrity checks (tests or CI validation).

No tests were modified in this PR. Given new keys and a new locale completeness update, add or run:

  • A validation script asserting all locales define the same key set (allowing undefined for fallback).
  • A check that newly introduced keys like taskChooseOrganization exist across all locales.

I can provide a small validation script that fails CI when keys drift—want me to include it?

🤖 Prompt for AI Agents
In packages/localizations/CHANGELOG.md around lines 3–28, the PR introduced new
keys and a new locale but added no automated checks; add a localization
integrity validation and CI hook: create a small script in
packages/localizations (e.g., scripts/validate-locales) that loads all locale
files, computes a canonical key set, and fails if any locale is missing keys
(allowing explicit undefined values for fallbacks), and include an explicit
assertion that taskChooseOrganization exists in every locale; add a package.json
script entry to run the validator and wire that script into the repository CI
workflow (e.g., run during lint/test steps) so the build fails on key drift.

Comment on lines 3 to 12
## 0.21.9

### Patch Changes

- Updated dependencies [[`df63e76`](https://github.com/clerk/javascript/commit/df63e76f2382c601d9a3b52a3a6dfaba26c4f36f), [`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
- @clerk/backend@2.8.0
- @clerk/types@4.76.0
- @clerk/clerk-react@5.41.1
- @clerk/shared@3.19.1

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Verify package.json version and dependency ranges match this changelog entry.

To double-check the release metadata is in sync, run the following from repo root. It prints the package version and the ranges for the updated dependencies in dependencies/devDependencies/peerDependencies.

Additionally, since this PR is release/metadata-focused and no code changed here, tests are likely unaffected. If any code changes accompany these bumps elsewhere in the PR, ensure CI includes at least smoke/integration coverage for the updated packages.


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pkg="packages/tanstack-react-start/package.json"

if [ ! -f "$pkg" ]; then
  echo "Expected file not found: $pkg"
  exit 1
fi

echo "Package version in $pkg:"
jq -r '.version' "$pkg"

echo
echo "Dependency ranges (dependencies/devDependencies/peerDependencies) for @clerk/*:"
for scope in dependencies devDependencies peerDependencies; do
  echo "== $scope =="
  jq -r --arg scope "$scope" '
    .[$scope] // {} |
    with_entries(select(.key|test("^@clerk/(backend|types|clerk-react|shared)$"))) |
    to_entries[] | "\(.key): \(.value)"
  ' "$pkg" || true
  echo
done

echo "Expected minimums to match this CHANGELOG:"
cat <<'EOF'
@clerk/backend     ^2.8.0 (or 2.8.0)
@clerk/types       ^4.76.0 (or 4.76.0)
@clerk/clerk-react ^5.41.1 (or 5.41.1)
@clerk/shared      ^3.19.1 (or 3.19.1)
EOF

Length of output: 1931


Mismatch in @clerk/ dependency ranges in package.json*

Ran the verification script against packages/tanstack-react-start/package.json and found:

  • Version: 0.21.9 ✔ matches CHANGELOG
  • All @clerk/* dependencies are currently set to workspace:^

Expected ranges per CHANGELOG 0.21.9:

  • @clerk/backend: ^2.8.0
  • @clerk/types: ^4.76.0
  • @clerk/clerk-react: ^5.41.1
  • @clerk/shared: ^3.19.1

Please update packages/tanstack-react-start/package.json to pin these to at least the versions above.

Additionally, since this PR is metadata-only, ensure any accompanying code bumps include smoke/integration CI coverage.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

♻️ Duplicate comments (1)
packages/clerk-js/CHANGELOG.md (1)

23-27: Verify package.json versions align with the updated dependencies in the changelog.

Ensure packages/clerk-js/package.json pins these versions (and not workspace:^):

  • @clerk/localizations: 3.21.0
  • @clerk/types: 4.76.0
  • @clerk/shared: 3.19.1

Run:

#!/bin/bash
set -euo pipefail

echo "Checking clerk-js dependency versions…"
jq -r '.name, .version' packages/clerk-js/package.json

check_dep_version () {
  local pkg=$1 expected=$2
  local actual
  actual=$(jq -r --arg p "$pkg" '
    (.dependencies[$p] // .peerDependencies[$p] // .devDependencies[$p] // empty)
  ' packages/clerk-js/package.json)
  if [[ -z "$actual" ]]; then
    echo "WARN: $pkg not found in deps/peers/devDeps"
  elif [[ "$actual" != "$expected" ]]; then
    echo "ERROR: $pkg is '$actual' (expected $expected)"
    exit 1
  else
    echo "OK: $pkg == $expected"
  fi
}

check_dep_version "@clerk/localizations" "3.21.0"
check_dep_version "@clerk/types" "4.76.0"
check_dep_version "@clerk/shared" "3.19.1"
🧹 Nitpick comments (3)
packages/fastify/package.json (1)

3-3: No tests changed — consider a quick smoke/integration check.

Even for a patch release, a minimal smoke test (e.g., ensuring the Fastify plugin registers and basic auth hooks wire up under Fastify v5) helps catch packaging/regression issues early. I can draft a simple vitest that boots a Fastify instance, registers the plugin, and asserts basic routes/middleware run if helpful.

packages/clerk-js/CHANGELOG.md (2)

7-7: Nit: hyphenate “top-level” as a compound adjective.

Small consistency/readability improvement.

Apply this diff:

-- [Billing Beta] Replace usage of top level amounts in plan with fees for displaying prices. ([#6490](https://github.com/clerk/javascript/pull/6490)) by [@panteliselef](https://github.com/panteliselef)
+- [Billing Beta] Replace usage of top-level amounts in plan with fees for displaying prices. ([#6490](https://github.com/clerk/javascript/pull/6490)) by [@panteliselef](https://github.com/panteliselef)

21-21: Security-sensitive change: add tests to cover Link href sanitization.

Given the new sanitization, add/verify tests for:

  • Blocking dangerous protocols (e.g., javascript:, data:)
  • Allowing http/https and any explicitly whitelisted protocols

I can draft test cases for the Link component if you point me to its path and test framework in use.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 049f0bb and dcc1fa6.

📒 Files selected for processing (55)
  • .changeset/bright-parks-search.md (0 hunks)
  • .changeset/complete-persian-localization.md (0 hunks)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sad-turkeys-rhyme.md (0 hunks)
  • .changeset/small-schools-yell.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (11)
  • .changeset/eighty-plums-listen.md
  • .changeset/nasty-colts-travel.md
  • .changeset/complete-persian-localization.md
  • .changeset/small-schools-yell.md
  • .changeset/sour-lemons-talk.md
  • .changeset/thin-wolves-study.md
  • .changeset/tender-planets-win.md
  • .changeset/rich-drinks-ring.md
  • .changeset/wise-hornets-sneeze.md
  • .changeset/sad-turkeys-rhyme.md
  • .changeset/bright-parks-search.md
✅ Files skipped from review due to trivial changes (8)
  • packages/vue/package.json
  • packages/types/package.json
  • packages/themes/package.json
  • packages/shared/package.json
  • packages/nuxt/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/testing/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (34)
  • packages/expo-passkeys/package.json
  • packages/remix/package.json
  • packages/astro/package.json
  • packages/localizations/package.json
  • packages/testing/package.json
  • packages/expo/package.json
  • packages/nextjs/package.json
  • packages/react/package.json
  • packages/elements/package.json
  • packages/express/package.json
  • packages/agent-toolkit/package.json
  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/nuxt/package.json
  • packages/chrome-extension/package.json
  • packages/express/CHANGELOG.md
  • packages/clerk-js/package.json
  • packages/react-router/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/expo-passkeys/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/types/CHANGELOG.md
  • packages/tanstack-react-start/package.json
  • packages/fastify/CHANGELOG.md
  • packages/astro/CHANGELOG.md
🧰 Additional context used
📓 Path-based instructions (4)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/fastify/package.json
  • packages/clerk-js/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/fastify/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/fastify/package.json
  • packages/clerk-js/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/clerk-js/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (4)
packages/fastify/package.json (2)

3-3: Semver patch bump looks correct and aligned with release intent.

  • Name scoped under @clerk, package located under packages/, and version incremented 2.4.18 → 2.4.19 (patch) — all consistent with guidelines and the PR’s dependency bump scope.
  • No API surface changes in exports; peer/dev deps for fastify remain coherent (peer >=5, dev ^5.4.0).

3-3: ✅ CHANGELOG and workspace dependencies verified

  • Found ## 2.4.19 entry in packages/fastify/CHANGELOG.md.
  • All @clerk/* dependencies in packages/fastify/package.json use workspace:^.
  • peerDependencies.fastify: >=5
  • devDependencies.fastify: ^5.4.0

All checks passed.

packages/clerk-js/CHANGELOG.md (2)

3-6: Changelog entry added correctly for 5.83.0.

Heading and section structure are correct and align with the PR’s intent to publish v5.83.0.


17-21: Add PR references for the two Patch bullets (traceability).

The “oAuthApplicationUrl” and “Harden Link” bullets lack PR links while adjacent bullets include them. Please add the PR numbers for consistency.

Do you want me to add the PR links if you provide the numbers?

Comment on lines +19 to +25
Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).

Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue

Two Patch entries are missing list markers; they won’t render as bullets.

“oAuthApplicationUrl” and “Harden Link component…” are currently plain paragraphs under the previous bullet. Make them separate list items.

Apply this diff:

-  Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
+ - Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
 
-  Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
+ - Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
- Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
- Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
🤖 Prompt for AI Agents
In packages/clerk-js/CHANGELOG.md around lines 19 to 21, two patch entries are
missing list markers and render as plain paragraphs; prefix each entry with a
list marker (e.g., "- " or "* ") so they become separate bullet items under the
changelog section, ensuring consistent indentation with other list items.

@github-actions github-actions bot force-pushed the changeset-release/main branch from dcc1fa6 to 4c8842f Compare August 13, 2025 16:15
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

♻️ Duplicate comments (1)
packages/clerk-js/CHANGELOG.md (1)

19-21: Convert these Patch notes to bullet items for proper rendering.

Two entries under “Patch Changes” are missing list markers and will render as paragraphs instead of bullets.

Apply this diff:

-  Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
+ - Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).

-  Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
+ - Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
🧹 Nitpick comments (3)
packages/clerk-js/CHANGELOG.md (1)

15-26: Follow-up: ensure corresponding tests exist for the patched behaviors.

Given the security-meaningful change “Link href sanitization” and the OAuth consent parameter addition, please ensure unit/e2e tests cover:

  • Rejection of unsafe protocols in Link hrefs
  • Correct passing/handling of oAuthApplicationUrl in OAuth consent mounting

If these landed in earlier PRs without tests, I can help draft them.

packages/chrome-extension/CHANGELOG.md (2)

3-11: Optional: Add an explicit “No user-facing changes” note.

For readers skimming the changelog, a short line stating no functional/API changes can reduce ambiguity.

Apply this diff to add the clarification:

 ## 2.5.19

 ### Patch Changes

-- Updated dependencies [[`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
+- No user-facing changes in this release; dependency updates only.
+- Updated dependencies [[`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:

3-11: Consider adding or updating tests for integration with the bumped deps.

Even though this is a metadata-only bump, it’s good practice to have smoke/e2e checks ensuring the extension continues to work with @clerk/clerk-js 5.83.0, @clerk/clerk-react 5.41.1, and @clerk/shared 3.19.1.

If you want, I can draft a minimal Playwright/Cypress smoke plan for the Chrome extension to validate sign-in flows under the new dependency set. Would you like me to proceed?

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between dcc1fa6 and 4c8842f.

📒 Files selected for processing (56)
  • .changeset/bright-parks-search.md (0 hunks)
  • .changeset/complete-persian-localization.md (0 hunks)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/forty-bottles-accept.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sad-turkeys-rhyme.md (0 hunks)
  • .changeset/small-schools-yell.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (12)
  • .changeset/small-schools-yell.md
  • .changeset/thin-wolves-study.md
  • .changeset/wise-hornets-sneeze.md
  • .changeset/bright-parks-search.md
  • .changeset/complete-persian-localization.md
  • .changeset/rich-drinks-ring.md
  • .changeset/sour-lemons-talk.md
  • .changeset/nasty-colts-travel.md
  • .changeset/forty-bottles-accept.md
  • .changeset/sad-turkeys-rhyme.md
  • .changeset/tender-planets-win.md
  • .changeset/eighty-plums-listen.md
✅ Files skipped from review due to trivial changes (13)
  • packages/astro/package.json
  • packages/expo/package.json
  • packages/express/package.json
  • packages/express/CHANGELOG.md
  • packages/nuxt/package.json
  • packages/expo-passkeys/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
  • packages/vue/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/shared/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (28)
  • packages/clerk-js/package.json
  • packages/expo-passkeys/package.json
  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/testing/package.json
  • packages/localizations/package.json
  • packages/remix/package.json
  • packages/react/package.json
  • packages/themes/package.json
  • packages/testing/CHANGELOG.md
  • packages/types/package.json
  • packages/elements/package.json
  • packages/agent-toolkit/package.json
  • packages/themes/CHANGELOG.md
  • packages/shared/package.json
  • packages/fastify/package.json
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/vue/package.json
  • packages/chrome-extension/package.json
  • packages/backend/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/nextjs/package.json
  • packages/types/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/react-router/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/elements/CHANGELOG.md
🧰 Additional context used
📓 Path-based instructions (4)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/tanstack-react-start/package.json
  • packages/chrome-extension/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
packages/*/package.json

📄 CodeRabbit Inference Engine (.cursor/rules/global.mdc)

All publishable packages should be placed under the packages/ directory

packages/*/package.json: All publishable packages must be located in the 'packages/' directory.
All packages must be published under the @clerk namespace on npm.
Semantic versioning must be used across all packages.

Files:

  • packages/tanstack-react-start/package.json
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/tanstack-react-start/package.json
  • packages/chrome-extension/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/chrome-extension/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: Analyze (javascript-typescript)
  • GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (3)
packages/tanstack-react-start/package.json (1)

3-3: ✅ Version bump to 0.21.9 approved and changelog entry verified

  • packages/tanstack-react-start/package.json: version set to 0.21.9
  • packages/tanstack-react-start/CHANGELOG.md: contains a “## 0.21.9” section with patch changes
packages/chrome-extension/CHANGELOG.md (2)

3-11: Changelog entry is clear and consistent.

2.5.19 is documented in line with prior sections: proper heading hierarchy, “Patch Changes” subheading, and a bullet listing updated dependencies with commit links. No user-facing changes implied, which matches a dependency-only bump.


7-11: Changelog dependency versions are correct and no changes needed
The package at packages/chrome-extension/package.json is at version 2.5.19, and its inter-workspace dependencies correctly use the workspace:^ protocol by design. The numeric versions listed in the CHANGELOG (5.83.0, 5.41.1, 3.19.1) reflect the published versions of those packages and do not need to match the local workspace reference.

Comment on lines 3 to 31
## 5.83.0

### Minor Changes

- [Billing Beta] Replace usage of top level amounts in plan with fees for displaying prices. ([#6490](https://github.com/clerk/javascript/pull/6490)) by [@panteliselef](https://github.com/panteliselef)

- Update billing resources with trial properties. ([#6492](https://github.com/clerk/javascript/pull/6492)) by [@panteliselef](https://github.com/panteliselef)

- Update PricingTable with trial info. ([#6493](https://github.com/clerk/javascript/pull/6493)) by [@panteliselef](https://github.com/panteliselef)

- [Experimental] Signals reset password flow ([#6520](https://github.com/clerk/javascript/pull/6520)) by [@dstaley](https://github.com/dstaley)

### Patch Changes

- Add optional `isExternal` to `ApplicationLogo` ([#6447](https://github.com/clerk/javascript/pull/6447)) by [@jfoshee](https://github.com/jfoshee)

Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).

Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.

- Updated dependencies [[`69622af`](https://github.com/clerk/javascript/commit/69622afb07c1ec9665cc22933d3661075b9c8ee0), [`33e7a7b`](https://github.com/clerk/javascript/commit/33e7a7b39c552b485f303656fd951f6493c0d15a), [`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`6f73222`](https://github.com/clerk/javascript/commit/6f732223ad248cd8d5203b0354144c8ce4ee871c), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
- @clerk/localizations@3.21.0
- @clerk/types@4.76.0
- @clerk/shared@3.19.1

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Quick sanity-check: version and dependency alignment.

Changelog looks good. Please verify the corresponding package.json and dependency pins align with these notes (no workspace: ranges).

Run from repo root:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

fail=0

echo "Checking clerk-js changelog heading…"
if ! rg -n $'^## 5\\.83\\.0$' packages/clerk-js/CHANGELOG.md >/dev/null; then
  echo "ERROR: Missing '## 5.83.0' in packages/clerk-js/CHANGELOG.md"
  fail=1
else
  echo "OK: Found '## 5.83.0' heading"
fi

echo "Checking packages/clerk-js/package.json version…"
ver=$(jq -r '.version' packages/clerk-js/package.json)
if [[ "$ver" != "5.83.0" ]]; then
  echo "ERROR: packages/clerk-js/package.json version is '$ver' (expected 5.83.0)"
  fail=1
else
  echo "OK: package version is 5.83.0"
fi

check_dep () {
  local name=$1 expected=$2
  local actual
  actual=$(jq -r --arg pkg "$name" '
    .dependencies[$pkg] // .peerDependencies[$pkg] // .devDependencies[$pkg] // empty
  ' packages/clerk-js/package.json)
  if [[ -z "$actual" ]]; then
    echo "WARN: $name not listed in deps/peerDeps/devDeps (may be indirect)"
  else
    if [[ "$actual" == workspace:* ]]; then
      echo "ERROR: $name uses workspace range ('$actual'); pin to '$expected'"
      fail=1
    elif [[ "$actual" != "$expected" ]]; then
      echo "ERROR: $name is '$actual' (expected '$expected')"
      fail=1
    else
      echo "OK: $name is $expected"
    fi
  fi
}

echo "Checking dependency pins…"
check_dep "@clerk/types" "4.76.0"
check_dep "@clerk/shared" "3.19.1"
check_dep "@clerk/localizations" "3.21.0"

echo "Verifying updated-dependencies section mentions expected versions…"
for v in "@clerk/localizations@3.21.0" "@clerk/types@4.76.0" "@clerk/shared@3.19.1"; do
  if ! rg -n --fixed-strings "$v" packages/clerk-js/CHANGELOG.md >/dev/null; then
    echo "ERROR: Did not find '$v' under Updated dependencies in CHANGELOG.md"
    fail=1
  else
    echo "OK: Found '$v' in changelog"
  fi
done

if [[ $fail -ne 0 ]]; then
  echo "One or more checks failed."
  exit $fail
else
  echo "All checks passed."
fi

Length of output: 3181


Pin dependency versions in packages/clerk-js/package.json

The changelog entries correctly list the updated versions, but the package’s dependencies are still using workspace ranges. Please update them to the exact versions noted in the CHANGELOG:

• In packages/clerk-js/package.json
– Change "@clerk/types": "workspace:^""@clerk/types": "4.76.0"
– Change "@clerk/shared": "workspace:^""@clerk/shared": "3.19.1"
– Change "@clerk/localizations": "workspace:^""@clerk/localizations": "3.21.0"

After pinning these dependencies, verify the build and release notes align.

🤖 Prompt for AI Agents
In packages/clerk-js/CHANGELOG.md around lines 3–27, the changelog lists updated
dependency versions but packages/clerk-js/package.json still uses workspace
ranges; update packages/clerk-js/package.json to pin the dependencies to the
exact versions from the changelog by replacing "@clerk/types": "workspace:^"
with "@clerk/types": "4.76.0", "@clerk/shared": "workspace:^" with
"@clerk/shared": "3.19.1", and "@clerk/localizations": "workspace:^" with
"@clerk/localizations": "3.21.0"; after making the edits run the build and
confirm release notes and package.json versions match.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

♻️ Duplicate comments (1)
packages/clerk-js/CHANGELOG.md (1)

21-27: Fix missing list markers for two Patch items.

The “oAuthApplicationUrl” and “Harden Link” entries are rendered as paragraphs instead of bullets. Prefix them with a hyphen for consistent list formatting.

Apply this diff:

 - Add optional `isExternal` to `ApplicationLogo` ([#6447](https://github.com/clerk/javascript/pull/6447)) by [@jfoshee](https://github.com/jfoshee)
-  Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
- 
-  Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
+ - Add optional `oAuthApplicationUrl` parameter to OAuth Consent mounting (which is used to provide a link to the OAuth App homepage).
+
+ - Harden `Link` component so it sanitizes the given `href` to avoid dangerous protocols.
🧹 Nitpick comments (2)
packages/expo-passkeys/CHANGELOG.md (1)

3-9: Reminder: tests

This PR appears to be release metadata only. If there were any functional changes in expo-passkeys for this release (none indicated), consider adding or updating tests accordingly.

packages/shared/CHANGELOG.md (1)

3-10: Suggest adding references to affected packages for quick navigation (optional).

Consider adding a short “See also” line referencing the related entries in @clerk/types and @clerk/clerk-js changelogs for trial support to aid readers.

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 434c52a and 3fd17dd.

📒 Files selected for processing (56)
  • .changeset/bright-parks-search.md (0 hunks)
  • .changeset/complete-persian-localization.md (0 hunks)
  • .changeset/eighty-plums-listen.md (0 hunks)
  • .changeset/forty-bottles-accept.md (0 hunks)
  • .changeset/nasty-colts-travel.md (0 hunks)
  • .changeset/rich-drinks-ring.md (0 hunks)
  • .changeset/sad-turkeys-rhyme.md (0 hunks)
  • .changeset/small-schools-yell.md (0 hunks)
  • .changeset/sour-lemons-talk.md (0 hunks)
  • .changeset/tender-planets-win.md (0 hunks)
  • .changeset/thin-wolves-study.md (0 hunks)
  • .changeset/wise-hornets-sneeze.md (0 hunks)
  • packages/agent-toolkit/CHANGELOG.md (1 hunks)
  • packages/agent-toolkit/package.json (1 hunks)
  • packages/astro/CHANGELOG.md (1 hunks)
  • packages/astro/package.json (1 hunks)
  • packages/backend/CHANGELOG.md (1 hunks)
  • packages/backend/package.json (1 hunks)
  • packages/chrome-extension/CHANGELOG.md (1 hunks)
  • packages/chrome-extension/package.json (1 hunks)
  • packages/clerk-js/CHANGELOG.md (1 hunks)
  • packages/clerk-js/package.json (1 hunks)
  • packages/elements/CHANGELOG.md (1 hunks)
  • packages/elements/package.json (1 hunks)
  • packages/expo-passkeys/CHANGELOG.md (1 hunks)
  • packages/expo-passkeys/package.json (1 hunks)
  • packages/expo/CHANGELOG.md (1 hunks)
  • packages/expo/package.json (1 hunks)
  • packages/express/CHANGELOG.md (1 hunks)
  • packages/express/package.json (1 hunks)
  • packages/fastify/CHANGELOG.md (1 hunks)
  • packages/fastify/package.json (1 hunks)
  • packages/localizations/CHANGELOG.md (1 hunks)
  • packages/localizations/package.json (1 hunks)
  • packages/nextjs/CHANGELOG.md (1 hunks)
  • packages/nextjs/package.json (1 hunks)
  • packages/nuxt/CHANGELOG.md (1 hunks)
  • packages/nuxt/package.json (1 hunks)
  • packages/react-router/CHANGELOG.md (1 hunks)
  • packages/react-router/package.json (1 hunks)
  • packages/react/CHANGELOG.md (1 hunks)
  • packages/react/package.json (1 hunks)
  • packages/remix/CHANGELOG.md (1 hunks)
  • packages/remix/package.json (1 hunks)
  • packages/shared/CHANGELOG.md (1 hunks)
  • packages/shared/package.json (1 hunks)
  • packages/tanstack-react-start/CHANGELOG.md (1 hunks)
  • packages/tanstack-react-start/package.json (1 hunks)
  • packages/testing/CHANGELOG.md (1 hunks)
  • packages/testing/package.json (1 hunks)
  • packages/themes/CHANGELOG.md (1 hunks)
  • packages/themes/package.json (1 hunks)
  • packages/types/CHANGELOG.md (1 hunks)
  • packages/types/package.json (1 hunks)
  • packages/vue/CHANGELOG.md (1 hunks)
  • packages/vue/package.json (1 hunks)
💤 Files with no reviewable changes (12)
  • .changeset/eighty-plums-listen.md
  • .changeset/wise-hornets-sneeze.md
  • .changeset/forty-bottles-accept.md
  • .changeset/bright-parks-search.md
  • .changeset/sour-lemons-talk.md
  • .changeset/small-schools-yell.md
  • .changeset/complete-persian-localization.md
  • .changeset/tender-planets-win.md
  • .changeset/rich-drinks-ring.md
  • .changeset/thin-wolves-study.md
  • .changeset/sad-turkeys-rhyme.md
  • .changeset/nasty-colts-travel.md
✅ Files skipped from review due to trivial changes (8)
  • packages/agent-toolkit/package.json
  • packages/express/package.json
  • packages/react-router/CHANGELOG.md
  • packages/react/CHANGELOG.md
  • packages/nuxt/CHANGELOG.md
  • packages/elements/CHANGELOG.md
  • packages/nuxt/package.json
  • packages/vue/CHANGELOG.md
🚧 Files skipped from review as they are similar to previous changes (32)
  • packages/nextjs/package.json
  • packages/elements/package.json
  • packages/remix/package.json
  • packages/fastify/package.json
  • packages/tanstack-react-start/package.json
  • packages/clerk-js/package.json
  • packages/testing/package.json
  • packages/react/package.json
  • packages/shared/package.json
  • packages/localizations/package.json
  • packages/astro/package.json
  • packages/expo/package.json
  • packages/themes/package.json
  • packages/vue/package.json
  • packages/expo-passkeys/package.json
  • packages/backend/package.json
  • packages/react-router/package.json
  • packages/types/CHANGELOG.md
  • packages/expo/CHANGELOG.md
  • packages/localizations/CHANGELOG.md
  • packages/express/CHANGELOG.md
  • packages/nextjs/CHANGELOG.md
  • packages/themes/CHANGELOG.md
  • packages/tanstack-react-start/CHANGELOG.md
  • packages/astro/CHANGELOG.md
  • packages/chrome-extension/CHANGELOG.md
  • packages/fastify/CHANGELOG.md
  • packages/chrome-extension/package.json
  • packages/types/package.json
  • packages/testing/CHANGELOG.md
  • packages/backend/CHANGELOG.md
  • packages/agent-toolkit/CHANGELOG.md
🧰 Additional context used
📓 Path-based instructions (3)
**/*.{js,jsx,ts,tsx,json,css,scss,md,yaml,yml}

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Use Prettier for consistent code formatting

Files:

  • packages/expo-passkeys/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
packages/**/CHANGELOG.md

📄 CodeRabbit Inference Engine (.cursor/rules/development.mdc)

Maintain detailed changelogs

Files:

  • packages/expo-passkeys/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
**/*

⚙️ CodeRabbit Configuration File

If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.

Files:

  • packages/expo-passkeys/CHANGELOG.md
  • packages/remix/CHANGELOG.md
  • packages/shared/CHANGELOG.md
  • packages/clerk-js/CHANGELOG.md
🔇 Additional comments (5)
packages/remix/CHANGELOG.md (1)

3-12: Changelog entry looks correct and consistent.

The 4.10.13 section accurately reflects a patch release with dependency bumps. Versions align with the PR objectives, and formatting matches the existing changelog style.

packages/expo-passkeys/CHANGELOG.md (1)

3-9: Changelog entry format looks correct and consistent.

Version header, section headings, and dependency bullets follow the repo’s conventions. Commit links are present and validly formatted.

packages/shared/CHANGELOG.md (2)

3-10: Clear Minor Changes entry; scope and impact are well-described.

The addition of trials in Checkout and the new freeTrialEndsAt property are documented where downstream consumers will look.


13-15: No action — changelog and manifest already aligned

packages/types/package.json is version 4.76.0 and packages/shared/package.json depends on @clerk/types via "workspace:^", which correctly references the local package version — no change required.

Files checked:

  • packages/types/package.json -> "version": "4.76.0"
  • packages/shared/package.json -> dependencies["@clerk/types"]: "workspace:^"
packages/clerk-js/CHANGELOG.md (1)

5-18: 5.83.0 “Minor Changes” section reads well.

Content is clear, nested bullet for freeTrialEndsAt is correctly indented, and items reflect the PR summary. No action needed.

Comment on lines +7 to +9
- Updated dependencies [[`15fe106`](https://github.com/clerk/javascript/commit/15fe1060f730a6a4391f3d2451d23edd3218e1ae), [`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`8b52d7a`](https://github.com/clerk/javascript/commit/8b52d7ae19407e8ab5a5451bd7d34b6bc38417de), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
- @clerk/types@4.76.0
- @clerk/shared@3.20.0
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Verify package.json version and dependency bumps are in sync.

Ensure packages/expo-passkeys/package.json is bumped to 0.3.29 and its @clerk/types and @clerk/shared dependency ranges reflect 4.76.0 and 3.20.0 respectively (pinned or caret as per repo policy).

Run this script from the repo root:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

PKG="packages/expo-passkeys/package.json"

if [ ! -f "$PKG" ]; then
  echo "Missing $PKG"
  exit 1
fi

python - << 'PY'
import json,sys
p="packages/expo-passkeys/package.json"
with open(p) as f:
  j=json.load(f)
ver=j.get("version")
deps=j.get("dependencies",{})
print(f"expo-passkeys version: {ver}")
print(f"@clerk/types dep: {deps.get('@clerk/types')}")
print(f"@clerk/shared dep: {deps.get('@clerk/shared')}")
assert ver=="0.3.29", "packages/expo-passkeys/package.json version is not 0.3.29"
req_types="4.76.0"; req_shared="3.20.0"
dt=deps.get("@clerk/types") or ""
ds=deps.get("@clerk/shared") or ""
# Accept caret or exact pins
assert req_types in dt, f"@clerk/types not bumped to {req_types} in expo-passkeys"
assert req_shared in ds, f"@clerk/shared not bumped to {req_shared} in expo-passkeys"
print("OK: expo-passkeys package.json is consistent with the changelog.")
PY

Length of output: 357


Action required — sync packages/expo-passkeys/package.json deps with CHANGELOG

Short: packages/expo-passkeys/package.json is already bumped to 0.3.29, but @clerk/types and @clerk/shared are using the workspace protocol instead of the expected versions from the changelog.

Files to update:

  • packages/expo-passkeys/package.json
    • version: OK (0.3.29)
    • dependencies: change
      • "@clerk/types": "workspace:^" → "^4.76.0" (or "4.76.0" if pins are preferred)
      • "@clerk/shared": "workspace:^" → "^3.20.0" (or "3.20.0" if pins are preferred)

Suggested diff:
--- a/packages/expo-passkeys/package.json
+++ b/packages/expo-passkeys/package.json
@@

  • "@clerk/types": "workspace:^",
  • "@clerk/shared": "workspace:^"
  • "@clerk/types": "^4.76.0",
  • "@clerk/shared": "^3.20.0"
🤖 Prompt for AI Agents
In packages/expo-passkeys/CHANGELOG.md around lines 7 to 9, the changelog shows
updated dependency versions (@clerk/types@4.76.0 and @clerk/shared@3.20.0) but
packages/expo-passkeys/package.json still declares those deps using the
workspace protocol; update packages/expo-passkeys/package.json dependencies to
replace "@clerk/types": "workspace:^" with "@clerk/types": "^4.76.0" (or
"4.76.0" if you prefer pinned) and "@clerk/shared": "workspace:^" with
"@clerk/shared": "^3.20.0" (or "3.20.0"), save and run a quick install/check to
ensure lockfile and workspace integrity.

Comment on lines +7 to +12
- Updated dependencies [[`15fe106`](https://github.com/clerk/javascript/commit/15fe1060f730a6a4391f3d2451d23edd3218e1ae), [`df63e76`](https://github.com/clerk/javascript/commit/df63e76f2382c601d9a3b52a3a6dfaba26c4f36f), [`173837c`](https://github.com/clerk/javascript/commit/173837c2526aa826b7981ee8d6d4f52c00675da5), [`8b52d7a`](https://github.com/clerk/javascript/commit/8b52d7ae19407e8ab5a5451bd7d34b6bc38417de), [`854dde8`](https://github.com/clerk/javascript/commit/854dde88e642c47b5a29ac8f576c8c1976e5d067), [`ae2e2d6`](https://github.com/clerk/javascript/commit/ae2e2d6b336be6b596cc855e549843beb5bfd2a1), [`037f25a`](https://github.com/clerk/javascript/commit/037f25a8171888168913b186b7edf871e0aaf197), [`f8b38b7`](https://github.com/clerk/javascript/commit/f8b38b7059e498fef3ac1271346be0710aa31c76)]:
- @clerk/types@4.76.0
- @clerk/backend@2.8.0
- @clerk/shared@3.20.0
- @clerk/clerk-react@5.41.1

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Verify package.json version and dependency bumps match the changelog.

Ensure packages/remix/package.json reflects:

  • version: 4.10.13
  • @clerk/types: 4.76.0
  • @clerk/backend: 2.8.0
  • @clerk/shared: 3.20.0
  • @clerk/clerk-react: 5.41.1

Run this script from the repo root:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Locate the package.json for @clerk/remix
PKG_FILE="$(fd -a package.json packages/remix | head -n1)"
if [[ -z "${PKG_FILE:-}" || ! -f "$PKG_FILE" ]]; then
  echo "packages/remix/package.json not found"
  exit 1
fi

echo "Checking $PKG_FILE"

version="$(jq -r '.version' "$PKG_FILE")"
types_ver="$(jq -r '(.dependencies["@clerk/types"] // .peerDependencies["@clerk/types"] // .devDependencies["@clerk/types"]) // ""' "$PKG_FILE")"
backend_ver="$(jq -r '(.dependencies["@clerk/backend"] // .peerDependencies["@clerk/backend"] // .devDependencies["@clerk/backend"]) // ""' "$PKG_FILE")"
shared_ver="$(jq -r '(.dependencies["@clerk/shared"] // .peerDependencies["@clerk/shared"] // .devDependencies["@clerk/shared"]) // ""' "$PKG_FILE")"
clerk_react_ver="$(jq -r '(.dependencies["@clerk/clerk-react"] // .peerDependencies["@clerk/clerk-react"] // .devDependencies["@clerk/clerk-react"]) // ""' "$PKG_FILE")"

echo "Found:"
printf "  version: %s\n" "$version"
printf "  @clerk/types: %s\n" "$types_ver"
printf "  @clerk/backend: %s\n" "$backend_ver"
printf "  @clerk/shared: %s\n" "$shared_ver"
printf "  @clerk/clerk-react: %s\n" "$clerk_react_ver"

fail=0

[[ "$version" == "4.10.13" ]] || { echo "Mismatch: version should be 4.10.13"; fail=1; }

egrep -q '^[~^]?4\.76\.0$' <<< "$types_ver" || { echo "Mismatch: @clerk/types should be 4.76.0"; fail=1; }
egrep -q '^[~^]?2\.8\.0$' <<< "$backend_ver" || { echo "Mismatch: @clerk/backend should be 2.8.0"; fail=1; }
egrep -q '^[~^]?3\.20\.0$' <<< "$shared_ver" || { echo "Mismatch: @clerk/shared should be 3.20.0"; fail=1; }
egrep -q '^[~^]?5\.41\.1$' <<< "$clerk_react_ver" || { echo "Mismatch: @clerk/clerk-react should be 5.41.1"; fail=1; }

if [[ $fail -eq 0 ]]; then
  echo "All versions match the changelog."
else
  echo "One or more mismatches detected."
  exit 1
fi

Length of output: 2367


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Searching for package.json files under packages/remix..."
mapfile -t files < <(fd -a package.json packages/remix || true)

if [[ ${#files[@]} -eq 0 ]]; then
  echo "No package.json files found under packages/remix"
  exit 0
fi

for f in "${files[@]}"; do
  echo
  echo "==== $f ===="
  jq -r '(
    {path: input_filename, version: .version} +
    { "@clerk/types": (.dependencies["@clerk/types"] // .peerDependencies["@clerk/types"] // .devDependencies["@clerk/types"] // ""),
      "@clerk/backend": (.dependencies["@clerk/backend"] // .peerDependencies["@clerk/backend"] // .devDependencies["@clerk/backend"] // ""),
      "@clerk/shared": (.dependencies["@clerk/shared"] // .peerDependencies["@clerk/shared"] // .devDependencies["@clerk/shared"] // ""),
      "@clerk/clerk-react": (.dependencies["@clerk/clerk-react"] // .peerDependencies["@clerk/clerk-react"] // .devDependencies["@clerk/clerk-react"] // "")
    }
  )' --argfile input_filename /dev/null "$f" 2>/dev/null || {
    # Fallback if jq expression fails (older jq)
    echo "version: $(jq -r '.version // "null"' "$f" 2>/dev/null || echo "jq-error")"
    echo "@clerk/types: $(jq -r '(.dependencies["@clerk/types"] // .peerDependencies["@clerk/types"] // .devDependencies["@clerk/types"]) // ""' "$f" 2>/dev/null || true)"
    echo "@clerk/backend: $(jq -r '(.dependencies["@clerk/backend"] // .peerDependencies["@clerk/backend"] // .devDependencies["@clerk/backend"]) // ""' "$f" 2>/dev/null || true)"
    echo "@clerk/shared: $(jq -r '(.dependencies["@clerk/shared"] // .peerDependencies["@clerk/shared"] // .devDependencies["@clerk/shared"]) // ""' "$f" 2>/dev/null || true)"
    echo "@clerk/clerk-react: $(jq -r '(.dependencies["@clerk/clerk-react"] // .peerDependencies["@clerk/clerk-react"] // .devDependencies["@clerk/clerk-react"]) // ""' "$f" 2>/dev/null || true)"
  }
done

Length of output: 307


Action required: packages/remix package.json versions do not match CHANGELOG

I ran the verification script and found a mismatch.

Files to update:

  • packages/remix/api.server/package.json (located by the script)
    • Found: version = null
    • Expected: version = 4.10.13
    • Found: @clerk/types = (absent)
    • Expected: @clerk/types = 4.76.0
    • Found: @clerk/backend = (absent)
    • Expected: @clerk/backend = 2.8.0
    • Found: @clerk/shared = (absent)
    • Expected: @clerk/shared = 3.20.0
    • Found: @clerk/clerk-react = (absent)
    • Expected: @clerk/clerk-react = 5.41.1

Please update the package.json above to match the changelog (version and dependency bumps).

🤖 Prompt for AI Agents
In packages/remix/CHANGELOG.md around lines 7 to 12, the changelog shows version
and dependency bumps that are not reflected in
packages/remix/api.server/package.json; update that package.json to set
"version": "4.10.13" and add the missing dependencies with exact versions: add
"@clerk/types": "4.76.0", "@clerk/backend": "2.8.0", "@clerk/shared": "3.20.0",
and "@clerk/clerk-react": "5.41.1" (ensure they are placed in the appropriate
"dependencies" section and run a quick JSON lint to keep formatting valid).

Comment on lines +3 to +10
## 3.20.0

### Minor Changes

- Add support for trials in `<Checkout/>` ([#6494](https://github.com/clerk/javascript/pull/6494)) by [@panteliselef](https://github.com/panteliselef)

- Added `freeTrialEndsAt` property to `CommerceCheckoutResource` interface.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Verification agent

🧩 Analysis chain

Ensure test coverage for new trial behavior exists upstream.

Given new trial-related properties and flows, verify that unit/integration tests exist in the impacted packages (e.g., clerk-js/shared hooks). If gaps exist, add tests for:

  • Presence/typing of freeTrialEndsAt on CommerceCheckoutResource.
  • Checkout trials behavior in hooks/components.

Run:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Searching for trial-related code and tests..."
rg -n --pretty --glob '!**/node_modules/**' "freeTrialEndsAt|Checkout.*trial|trial.*Checkout" -A 2

echo
echo "Heuristically list test/spec files mentioning trials:"
fd -e ts -e tsx -e js -e jsx test spec | xargs rg -n "freeTrialEndsAt|Checkout.*trial|trial.*Checkout" -A 2 || true

Length of output: 35190


Add tests for trial behavior in shared hooks & resource mapping

Short summary: clerk-js component tests already exercise freeTrialEndsAt, and the types/resource fields are present, but I couldn't find tests covering the shared hook or the CommerceCheckout resource mapping.

Files to act on:

  • Add tests for the shared hook behavior (ensure hook exposes/handles freeTrialEndsAt and checkout flows):
    • packages/shared/src/react/hooks/useCheckout.ts (freeTrialEndsAt default at line ~112)
  • Add unit tests for resource mapping (JSON -> model conversion of free_trial_ends_at):
    • packages/clerk-js/src/core/resources/CommerceCheckout.ts (property at line ~26; mapping at line ~49)
  • Optional/validation:
    • packages/types/src/commerce.ts (freeTrialEndsAt: Date | null) — ensure types are included in CI/type checks if not already

Existing coverage noted:

  • packages/clerk-js/src/ui/components/Checkout/tests/Checkout.test.tsx — already contains tests that mock/use freeTrialEndsAt (occurrences around lines 310, 362, 393, 445).

Please add the missing tests in the shared and resource packages (or point me to existing tests I missed).

🤖 Prompt for AI Agents
In packages/shared/src/react/hooks/useCheckout.ts around line ~112,
packages/clerk-js/src/core/resources/CommerceCheckout.ts around lines ~26 and
~49, and packages/types/src/commerce.ts, add unit tests to cover trial behavior:
create a test for the shared hook that mounts/useRenders useCheckout and asserts
the hook exposes freeTrialEndsAt with correct default (null) and with a provided
Date value, and that checkout flows (start/complete) respect the freeTrialEndsAt
field; add resource mapping tests that deserialize JSON with free_trial_ends_at
set to an ISO string and to null and assert the CommerceCheckout model has
freeTrialEndsAt as a Date instance or null respectively (and that
invalid/missing values are handled); finally ensure the types file includes
freeTrialEndsAt: Date | null and that tests run in CI/typechecks (add test
imports or update tsconfig/test settings if needed).

@jfoshee jfoshee closed this Aug 13, 2025
@jfoshee jfoshee reopened this Aug 13, 2025
@jfoshee jfoshee merged commit 7acbcb1 into main Aug 13, 2025
39 checks passed
@jfoshee jfoshee deleted the changeset-release/main branch August 13, 2025 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants