[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/backend@3.27.0

Minor Changes

• Add DirectoryGroupWebhookEvent and DirectoryGroupMembershipWebhookEvent to WebhookEvent, so verifyWebhook() narrows the directoryGroup.created, directoryGroup.updated, directoryGroup.synced, directoryGroup.deleted, directoryGroupMembership.created and directoryGroupMembership.deleted events that Directory Sync sends. Their payload types are exported as DirectoryGroupWebhookEventJSON, DirectoryGroupMembershipWebhookEventJSON and DeletedDirectoryGroupMembershipWebhookEventJSON. (#10378) by @mauricioabreu

@clerk/astro@4.1.22

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/chrome-extension@3.1.105

Patch Changes

• Prevent Chrome extensions from loading Device Intelligence scripts from remote URLs. (#10565) by @mwickett

  Initialize production Chrome extension authentication without requiring a previously stored client token.

• Updated dependencies [256153a]:

  • @clerk/clerk-js@6.42.3

@clerk/clerk-js@6.42.3

Patch Changes

• Prevent Chrome extensions from loading Device Intelligence scripts from remote URLs. (#10565) by @mwickett

  Initialize production Chrome extension authentication without requiring a previously stored client token.

@clerk/electron@0.1.10

Patch Changes

• Updated dependencies [256153a]:
  • @clerk/clerk-js@6.42.3

@clerk/expo@4.15.1

Patch Changes

• Updated dependencies [256153a]:
  • @clerk/clerk-js@6.42.3

@clerk/express@2.1.88

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/fastify@3.1.98

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/hono@0.1.98

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/mosaic@0.2.2

Patch Changes

• Drop an image onto the profile picture row in UserProfile or the logo row in OrganizationProfile to upload it. While a file is dragged over the row, the avatar darkens and shows an upload icon. FileUpload.Dropzone now ignores drags that carry no files, such as selected text or links. (#10601) by @alexcarpenter

• The logo picker in CreateOrganization now matches UserProfile and OrganizationProfile: once a logo is chosen, the Upload button is replaced by a menu to change or remove it, and an image can be dropped onto the row. Clicking the Logo label opens the file picker, and a rejected file's error now shows below the row instead of replacing the description. In all three, dragging a file of an unsupported type over the avatar shows a blocked icon instead of the upload arrow. In OrganizationProfile, the logo menu no longer shows icons, and its Remove item now uses the destructive color, as in UserProfile. (#10604) by @alexcarpenter

• Controls such as inputs, selects, checkboxes, radios and outline buttons keep the stronger --cl-color-border, while containers and dividers (cards, sections, tables, menus, the profile nav) use --cl-color-border-subtle. The two are now 12 and 8 percent washes in both modes, which makes light-mode controls firmer and leaves containers close to where they were. The profile opened in a dialog draws a border. Outline buttons fill with the surface color, and their hover and pressed states tint that fill. Banners, badges, toasts and the tag-input error use the -subtle tokens, and the neutral badge and banner use --cl-color-neutral-subtle. (#10496) by @prestonwebdev

• Fix keyboard navigation in tabs and accordions. The tab stop now lands on the selected tab even when it isn't the first, and arrow keys pressed in a field inside an accordion panel stay with that field. ActionBar.Root now calls onFocus and onBlur handlers passed by consumers. (#10573) by @alexcarpenter

• Keep keyboard focus on the input while saving an organization name or slug, renaming a passkey, verifying an authenticator code, or sending organization invitations. Focus previously dropped to the page. (#10618) by @alexcarpenter

• IconFrame and Avatar now share one size scale and set of corner radii: xs, sm, md and lg are 24, 32, 40 and 48px. IconFrame sizes are now xs, sm, md and lg and the default is md (40px), replacing sm, md, lg and xl. Avatar md is 40px instead of 38px, square Avatar at md has a 6px radius instead of 8px, and provider icons in the connected accounts, enterprise accounts and Web3 wallets sections are 16px instead of 20px. (#10600) by @prestonwebdev

@clerk/nextjs@7.9.25

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/nuxt@3.1.22

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/react-router@3.6.43

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/tanstack-react-start@1.7.11

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/testing@2.2.55

Patch Changes

• Updated dependencies [11d5dfb]:
  • @clerk/backend@3.27.0

@clerk/swingset@0.0.69

Patch Changes

• Updated dependencies [b0d7c00, 21285e3, f7a0b2d, 79138c0, 37a923a, 2228237]:
  • @clerk/mosaic@0.2.2
  • @clerk/nextjs@7.9.25

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Nov 4, 2026 1:40am UTC
swingset	Ready	Preview	Nov 4, 2026 1:40am UTC

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 1

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: clerk/javascript
• Branch: changeset-release/main
• File: .coderabbit.yaml
• Commit: b43fbf7
• Layers: Repository YAML (base), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 8525f498-f285-4b84-a8f7-0a672eeeecae

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10615

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10615

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10615

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10615

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10615

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10615

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10615

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10615

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10615

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10615

@clerk/expo-native-components

npm i https://pkg.pr.new/@clerk/expo-native-components@10615

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10615

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10615

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10615

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10615

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10615

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10615

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10615

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10615

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10615

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10615

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10615

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10615

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10615

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10615

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10615

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10615

commit: b43fbf7

[github-actions]

API Changes Report

Generated by Break Check on 2026-11-04T01:41:40.698Z

Summary

Metric	Count
Packages analyzed	20
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

---

Report generated by Break Check

_{Last ran on b43fbf7.}

[github-actions]

🟢 e2e android: 16 passed

All 16 tests in 12 files

	Test	Time
🟢	specs/features/custom-flow-sign-in/complete.e2e.ts · 1 passed	20.5s
🟢	useSignIn completes with the email code	20.5s
🟢	specs/features/custom-flow-sign-up/complete.e2e.ts · 1 passed	17.9s
🟢	useSignUp completes with the email code	17.9s
🟢	specs/features/native-auth-view/complete.e2e.ts · 1 passed	18.2s
🟢	signs in through AuthView with the email code	18.2s
🟢	specs/features/native-auth-view/logo.e2e.ts · 1 passed	20.1s
🟢	signs in with a password through the AuthView that has a logo, after it closed and reopened	20.1s
🟢	specs/features/native-auth-view/opens.e2e.ts · 2 passed	11.3s
🟢	the home full-screen sign-in button shows AuthView with no close button	4.4s
🟢	closing the AuthView that the home opened returns to the home	6.9s
🟢	specs/features/native-js-sync/sign-in-from-native.e2e.ts · 2 passed	44.5s
🟢	a native password sign-in reaches the JS hooks and survives a relaunch	20.4s
🟢	a second native sign-in in the same process reaches the JS hooks	24.1s
🟢	specs/features/native-js-sync/sign-out-from-native.e2e.ts · 1 passed	8.4s
🟢	signing out in the native profile signs out the JS hooks	8.4s
🟢	specs/features/native-modules/biometric-availability.e2e.ts · 1 passed	7.8s
🟢	useBiometricCredentials reports what the expo-biometrics native module found on the device	7.8s
🟢	specs/features/native-modules/google-sign-in.e2e.ts · 1 passed	13.4s
🟢	useSignInWithGoogle opens the native Google sign-in, and cancelling it ends the flow with no session	13.4s
🟢	specs/features/token-cache-persistence/relaunch.e2e.ts · 1 passed	14.8s
🟢	the token cache keeps the session across a relaunch, and a new scope starts signed out	14.8s
🟢	specs/features/user-button-and-profile/embedded-profile.e2e.ts · 2 passed	14.8s
🟢	onHostBack closes the embedded profile after native navigation	8.9s
🟢	a custom page renders React Native content inside the embedded profile	5.9s
🟢	specs/features/user-button-and-profile/profile.e2e.ts · 2 passed	13.7s
🟢	the home UserButton opens the profile of the signed-in user	8.1s
🟢	the home sign-out button ends the session	5.6s

_{e2e 0.22.0 · 3m 26s · android · run artifacts}

[github-actions]

🟢 e2e ios: 17 passed

All 17 tests in 12 files

	Test	Time
🟢	specs/features/custom-flow-sign-in/complete.e2e.ts · 1 passed	25.4s
🟢	useSignIn completes with the email code	25.4s
🟢	specs/features/custom-flow-sign-up/complete.e2e.ts · 1 passed	29.0s
🟢	useSignUp completes with the email code	29.0s
🟢	specs/features/native-auth-view/complete.e2e.ts · 1 passed	22.8s
🟢	signs in through AuthView with the email code	22.8s
🟢	specs/features/native-auth-view/logo.e2e.ts · 1 passed	43.4s
🟢	signs in with a password through the AuthView that has a logo, after it closed and reopened	43.4s
🟢	specs/features/native-auth-view/opens.e2e.ts · 3 passed	13.9s
🟢	the home full-screen sign-in button shows AuthView with no close button	3.4s
🟢	closing the AuthView that the home opened returns to the home	6.1s
🟢	the close button of a full-screen AuthView returns to the home	4.3s
🟢	specs/features/native-js-sync/sign-in-from-native.e2e.ts · 2 passed	1m 43s
🟢	a native password sign-in reaches the JS hooks and survives a relaunch	39.2s
🟢	a second native sign-in in the same process reaches the JS hooks	1m 4s
🟢	specs/features/native-js-sync/sign-out-from-native.e2e.ts · 1 passed	7.0s
🟢	signing out in the native profile signs out the JS hooks	7.0s
🟢	specs/features/native-modules/biometric-availability.e2e.ts · 1 passed	5.9s
🟢	useBiometricCredentials reports what the expo-biometrics native module found on the device	5.9s
🟢	specs/features/native-modules/google-sign-in.e2e.ts · 1 passed	8.8s
🟢	useSignInWithGoogle opens the native Google sign-in, and cancelling it ends the flow with no session	8.8s
🟢	specs/features/token-cache-persistence/relaunch.e2e.ts · 1 passed	10.7s
🟢	the token cache keeps the session across a relaunch, and a new scope starts signed out	10.7s
🟢	specs/features/user-button-and-profile/embedded-profile.e2e.ts · 2 passed	15.2s
🟢	onHostBack closes the embedded profile after native navigation	8.0s
🟢	a custom page renders React Native content inside the embedded profile	7.2s
🟢	specs/features/user-button-and-profile/profile.e2e.ts · 2 passed	11.8s
🟢	the home UserButton opens the profile of the signed-in user	7.1s
🟢	the home sign-out button ends the session	4.6s

_{e2e 0.22.0 · 4m 57s · ios · run artifacts}