Clerk — Auth, Security product updates and releases, tracked on megachangelog.
A new @clerk/expo-native-components package is now required for native components (AuthView, UserButton, UserProfileView). Install it before deploying over-the-air updates as errors occur at runtime; import native components from @clerk/expo/native-components and deprecate the old @clerk/expo/native import path.
Introduces @clerk/expo-native-components, a new required package for native components (AuthView, UserButton, UserProfileView). Import native components from @clerk/expo/native-components instead of the deprecated @clerk/expo/native, and install the new package before shipping over-the-air updates to avoid runtime errors.
A new version of the Clerk Chrome extension package has been released with updates and improvements.
Version 7.9.15 of the Clerk Next.js SDK has been released with updates and improvements to the authentication library for Next.js applications.
Release of @clerk/ui version 1.40.1 with updates and improvements to the UI component library.
Organization admins can now assign organization roles to directory groups during self-serve Directory Sync setup in OrganizationProfile, with ability to configure role priority and toggle role syncing. Members with org:sys_memberships:manage permission can manage role mappings, while the step is read-only for others.
Updated internal dependencies for @clerk/shared, @clerk/react, and @clerk/backend packages to latest patch and minor versions.
Patch release with updated dependencies for @clerk/shared, @clerk/react, and @clerk/backend.
Added a role mapping step to the self-serve Directory Sync setup in OrganizationProfile, allowing organization admins to assign roles to directory groups and control role syncing. Also added an enterpriseConnectionsUrl option to handleRedirectCallback and AuthenticateWithRedirectCallback for OAuth sign-up flows.
Updated internal dependencies for @clerk/react to include the latest version of @clerk/shared (4.40.0). This patch ensures compatibility with the latest shared utilities.
Updated internal dependencies including @clerk/shared to version 4.40.0 with latest patches and improvements.
Updated internal dependencies including @clerk/shared to 4.40.0 to incorporate latest shared library improvements and fixes.
Patch release that updates internal dependencies for @clerk/shared, @clerk/backend, and @clerk/vue to their latest versions.
Updated dependencies including @clerk/shared@4.40.0 and @clerk/backend@3.23.2 to incorporate latest shared utilities and backend enhancements.
Patch release with updated dependencies for @clerk/shared, @clerk/react, and @clerk/backend.
The HandleSSOCallback component is now exported from @clerk/nextjs, enabling its use on SSO callback routes in custom authentication flows. Previously the import would fail.
A new revokeCurrentDeviceCredential() method has been added to useBiometricCredentials() for Expo, allowing you to revoke the device's biometric credential without storing the credential ID from enroll(). Call it before signing out since it requires an active session.
Patch release updating internal dependencies for @clerk/shared, @clerk/backend, and @clerk/vue to their latest versions.
Updated @clerk/shared and @clerk/localizations dependencies to their latest patch versions.
Patch release updating internal dependencies including @clerk/react, @clerk/shared, and @clerk/backend to their latest versions.
Updated dependencies including @clerk/react@6.17.7, @clerk/shared@4.39.1, and @clerk/backend@3.23.1 to incorporate the latest patches and improvements.
Updated error messages to clarify that npx clerk@latest init does not require a Clerk account and generates temporary dev keys automatically. This reduces confusion for users who mistakenly believed they needed to sign up before running initialization.
Minimum supported versions for @tanstack/react-start and @tanstack/react-router have been raised to enable reliable CSRF middleware import during Vite SSR. The change requires registering createCsrfMiddleware() before clerkMiddleware() when using src/start.ts.
Updated dependency @clerk/shared to version 4.39.1.
Fixed a bug where HandleSSOCallback was dropping errors when a Clerk Protect challenge failed during SSO callback. Errors are now properly available through useSignIn() and useSignUp(), and failed sign-up challenges correctly navigate to the sign-up page.
Updated dependencies including @clerk/shared and @clerk/backend to latest patch versions. This ensures compatibility with the latest shared utilities and backend functionality.
The userButton.workspaces localization keys have been renamed to userButton.organizations. Users must update any overrides of userButton.workspaces.* to use userButton.organizations.* instead.
Removed https://images.clerkstage.dev from the default connect-src Content Security Policy directive as it is an internal Clerk storage host not used by applications. Organization logos continue to be served from https://img.clerk.com.
Updated dependencies on @clerk/backend, @clerk/shared, and @clerk/react to incorporate recent improvements and fixes.
Patch release updating dependencies to @clerk/backend@3.23.0, @clerk/shared@4.39.0, and @clerk/vue@2.5.10 to include the latest bug fixes and improvements.
Updated @clerk/shared dependency to version 4.39.0 with improvements and fixes.
UserButton component has been redesigned with combined mode now leading with the account and the modePriority prop removed. Settings now opens organization and profile settings, while Sign out of all accounts has been moved into the Switch account menu.
SAML enterprise connections can now trust multiple Identity Provider signing certificates with their validity windows. The EnterpriseConnection.samlConnection includes idpCertificates, and creation/update methods accept an array of certificates instead of a single certificate.
Updated @clerk/shared dependency to version 4.39.0 to bring in the latest shared utilities and fixes.
The OrganizationProfile SSO configuration now displays all SAML signing certificates with expiry dates, allowing admins to add or remove certificates from files without requiring IdP synchronization. Up to five certificates are supported per connection.
Patch release that updates internal dependencies including @clerk/backend, @clerk/shared, and @clerk/react to their latest versions for improved stability and compatibility.
Patch release with updated dependencies including @clerk/backend 3.23.0 and @clerk/shared 4.39.0.
Release of @clerk/shared package version 4.38.0 with updates and improvements.
Release of version 1.6.4 of the Clerk TanStack React Start integration.
Release of @clerk/mosaic version 0.1.5 with component library updates and improvements.
Release of @clerk/testing version 2.2.42 with updates and improvements to the testing library for Clerk authentication.
New patch release of the Clerk Vue integration library.
Release of @clerk/react-router version 3.6.30 with updates and improvements to the React Router integration library.
Released version 7.9.10 of the @clerk/nextjs package with bug fixes and improvements for Next.js integration.
Release of the Clerk UI library version 1.38.1 with updates and improvements to the UI component package.
Menu.Popup now retains its contents during close animations, and focus rings on menu items are hidden when the menu is hovered with the mouse, appearing only during keyboard navigation. Dependencies updated including @clerk/shared@4.37.1.
Patch release with updated dependencies for @clerk/backend, @clerk/shared, and @clerk/vue to resolve compatibility issues and improvements.
Fixed an issue where error messages displayed with a trailing period, causing agents to encounter 404 errors when attempting to use the URL directly.
Updated dependencies including @clerk/shared to version 4.37.1. This patch release ensures compatibility with the latest shared utilities.
Custom flows built with useSignIn() and useSignUp() now automatically handle Clerk Protect challenges, displaying them in a modal and resuming after user completion. Sign-in and sign-up methods return directly without requiring manual challenge handling.
Patch update with updated dependencies for @clerk/backend and @clerk/shared to ensure compatibility and stability.
Patch release updating dependencies including clerk/backend, clerk/shared, and clerk/react to their latest versions.
Patch release with updated dependencies for @clerk/backend, @clerk/shared, and @clerk/react to address internal improvements and fixes across the Clerk ecosystem.
Custom flows using useSignIn() and useSignUp() now automatically handle Clerk Protect challenges by displaying them in a modal and returning once the user passes verification. For SSO flows, challenges appear when the user returns to HandleSSOCallback. Classic resource methods and apps without Clerk UI continue to return with protectCheck as before.
useSignIn() and useSignUp() custom flows now automatically handle Clerk Protect challenges by displaying them in a modal and returning once the user completes the challenge. SSO challenges appear at HandleSSOCallback, while classic resource methods continue returning protectCheck as before.
Clerk Nuxt SDK version 3.1.7 released. This version includes bug fixes and improvements to the Nuxt integration for Clerk authentication.
Release of @clerk/mosaic version 0.1.3 with updates to the design system package.
Release of @clerk/shared v4.37.0 containing updates and improvements to the shared utilities library.
Release of @clerk/nextjs version 7.9.8 containing updates and improvements for the Clerk Next.js SDK.
Release of the Clerk UI package version 1.37.0 with unspecified updates.
Release of Clerk Vue SDK version 2.5.7 with updates and improvements.
Release of the Clerk testing library version 2.2.40 with updates to testing utilities and fixtures.
Release of version 1.6.2 of the Clerk TanStack React Start integration package.
Release of @clerk/react-router version 3.6.28 with improvements and fixes for React Router integration.
Updated dependencies including @clerk/shared to version 4.36.0.
Patch release with updated dependencies including @clerk/shared, @clerk/react, and @clerk/backend to their latest versions.
Added a dedicated blocked request screen in SignIn/SignUp components with support reference details. Fixed enterprise SSO sign-ins that were failing with verification challenges, and improved error handling to expose traceId and metadata in action_blocked errors.
Patch release updating internal dependencies including @clerk/shared, @clerk/backend, and @clerk/vue to latest compatible versions.
Patch update with dependency updates to @clerk/shared, @clerk/react, and @clerk/backend.
Added a dedicated blocked request screen in SignIn and SignUp components with error reference information, and fixed enterprise SSO sign-ins to properly show verification challenges instead of erroring. Improved error handling for protect_check_required scenarios and fixed issues with verification challenge cards spinning indefinitely and sign-ins stranding on "Use another method".
Patch release updating dependencies including clerk shared, react, and backend libraries to latest versions.
Updated internal dependencies for @clerk/shared and @clerk/backend to latest versions.
Updated internal dependencies to the latest versions including @clerk/shared@4.36.0.
Patch release updating internal dependencies, including @clerk/shared to version 4.36.0.
Release of @clerk/mosaic version 0.1.1. Check the release notes for details on what's included in this update.
Release of Clerk Nuxt integration version 3.1.5 with updates to the authentication SDK for Nuxt applications.
Release of @clerk/react 6.17.1 with updates to the React authentication library.
Release of @clerk/react-router version 3.6.26 with updates to the React Router integration for Clerk authentication.
Release of the Clerk shared utilities package version 4.35.0 with updates to shared components and functionality.
Release of @clerk/ui version 1.35.0 with updates to the UI component library.
Version release of the Clerk Vue library with updates and improvements to the Vue integration for Clerk authentication.
Release of version 1.6.0 for the Clerk TanStack React Start integration package, providing updates and improvements to the React authentication library.
Release of @clerk/testing package version 2.2.38 with updates and improvements to the testing library.
Patch release updating dependencies including @clerk/shared to 4.34.0.
Updated @clerk/testing dependencies including @clerk/shared to 4.34.0 and @clerk/backend to 3.19.0 to bring in latest patches and improvements.
The SSO fallback sign-in flow has been renamed to SSO bypass to align with the feature's official name. This affects the ssoFallbackFirstFactors property, localization keys, and card action element IDs, but no applications are impacted since the feature hasn't been enabled on any instance yet.
Patch release with updated dependencies including clerk/shared, clerk/react, and clerk/backend to their latest versions.
Fixed a React key warning in ClerkProvider with App Router and resolved a cross-request credential leak in clerkMiddleware when using dynamic secret keys. Each request now has its own isolated store to prevent secret key visibility across concurrent requests.
Updated dependencies including @clerk/shared, @clerk/react, and @clerk/backend to latest versions with bug fixes and improvements.
Updated dependencies including @clerk/shared to 4.34.0, @clerk/backend to 3.19.0, and @clerk/vue to 2.5.4. This patch release maintains compatibility with the latest Clerk packages.
@clerk/shared@4.34.0 adds phone-number parsing and formatting helpers, renames SSO fallback terminology to SSO bypass throughout the library, and enables organization admins to manage SSO bypass allowlist from OrganizationProfile. New utilities for URL parameter resolution and enterprise connection management UI improvements are also included.
This release renames the SSO fallback feature to SSO bypass and adds tools for Organization admins to manage the SSO bypass allowlist from OrganizationProfile. It also includes UI improvements for enterprise connection management, new phone utilities in @clerk/shared, and several fixes for OAuth flows and account reconnection.
Updated the minimum Next.js version requirement for @clerk/nextjs v7 to 15.2.8 or later (or 16.0.10+ on Next.js 16) to ensure compatibility with Core 3 upgrades.
Updated @clerk/shared to 3.48.0 and @clerk/types to 4.101.27 to keep the Vue library in sync with the latest Clerk dependencies.
Updated internal dependencies including @clerk/shared, @clerk/backend, @clerk/clerk-react, and @clerk/types to their latest patch versions.
Internal improvements have been made to Clerk Protect. No action is required from users.
97 more changes from Clerk. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.