diff --git a/.changeset/big-files-shop.md b/.changeset/big-files-shop.md deleted file mode 100644 index a845151cc84..00000000000 --- a/.changeset/big-files-shop.md +++ /dev/null @@ -1,2 +0,0 @@ ---- ---- diff --git a/.changeset/bump-break-check-v0-4-0.md b/.changeset/bump-break-check-v0-4-0.md deleted file mode 100644 index a845151cc84..00000000000 --- a/.changeset/bump-break-check-v0-4-0.md +++ /dev/null @@ -1,2 +0,0 @@ ---- ---- diff --git a/.changeset/expo-bump-clerk-ios-1-2-3.md b/.changeset/expo-bump-clerk-ios-1-2-3.md deleted file mode 100644 index d9e8c2643cb..00000000000 --- a/.changeset/expo-bump-clerk-ios-1-2-3.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/expo': patch ---- - -Bump the bundled `clerk-ios` SDK from `1.2.2` to `1.2.3`. See the Clerk iOS release: https://github.com/clerk/clerk-ios/releases/tag/1.2.3. diff --git a/.changeset/headless-load-issatellite-type.md b/.changeset/headless-load-issatellite-type.md deleted file mode 100644 index 6969ba1b6be..00000000000 --- a/.changeset/headless-load-issatellite-type.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -'@clerk/shared': patch -'@clerk/astro': patch -'@clerk/vue': patch ---- - -Align the `HeadlessBrowserClerk.load()` parameter type with the runtime behavior by accepting the full `ClerkOptions`, including `isSatellite`. The clerk-js implementation has always accepted and used `isSatellite` from `load()` options — it's the only way to configure a satellite app when using `@clerk/clerk-js` directly — but the type previously excluded it, producing a contradictory generated API reference and type errors for direct consumers. diff --git a/.changeset/large-pugs-shake.md b/.changeset/large-pugs-shake.md deleted file mode 100644 index 83deac17284..00000000000 --- a/.changeset/large-pugs-shake.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/testing': patch ---- - -When a Frontend API request exhausts its retries in the Playwright `setupClerkTestingToken` helper, the warning now includes response diagnostics (`cf-ray`, `retry-after`, `content-type`, and a truncated response body) so rate-limit responses can be attributed to their source. Network-error retry exhaustion now includes the error message in the warning as well. diff --git a/.changeset/mosaic-slot-recipes.md b/.changeset/mosaic-slot-recipes.md deleted file mode 100644 index a845151cc84..00000000000 --- a/.changeset/mosaic-slot-recipes.md +++ /dev/null @@ -1,2 +0,0 @@ ---- ---- diff --git a/.changeset/oauth-transport.md b/.changeset/oauth-transport.md deleted file mode 100644 index 4157cd09889..00000000000 --- a/.changeset/oauth-transport.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@clerk/shared': minor -'@clerk/clerk-js': minor -'@clerk/react': minor -'@clerk/ui': minor ---- - -Add internal OAuth transport support for native desktop SDK wrappers to run Clerk's prebuilt OAuth flows through a system browser. diff --git a/.changeset/olive-falcons-applaud.md b/.changeset/olive-falcons-applaud.md deleted file mode 100644 index a845151cc84..00000000000 --- a/.changeset/olive-falcons-applaud.md +++ /dev/null @@ -1,2 +0,0 @@ ---- ---- diff --git a/.changeset/perky-plums-agree.md b/.changeset/perky-plums-agree.md deleted file mode 100644 index dcff561aad5..00000000000 --- a/.changeset/perky-plums-agree.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'@clerk/localizations': patch -'@clerk/clerk-js': patch -'@clerk/shared': patch -'@clerk/ui': patch ---- - -Rename the `` SSO page to "Security". The navbar entry is now labeled "Security" with a shield icon, its route path changed from `organization-self-serve-sso` to `organization-security`, and a new `organizationProfile.navbar.security` localization key replaces `organizationProfile.navbar.selfServeSSO`. diff --git a/.changeset/rspack-2-upgrade.md b/.changeset/rspack-2-upgrade.md deleted file mode 100644 index c91c5d98353..00000000000 --- a/.changeset/rspack-2-upgrade.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'@clerk/clerk-js': patch -'@clerk/ui': patch ---- - -Upgrade build tooling to Rspack 2 (No user-facing API changes). diff --git a/.changeset/shared-cookie-self-contained-types.md b/.changeset/shared-cookie-self-contained-types.md deleted file mode 100644 index 49eec2e34c1..00000000000 --- a/.changeset/shared-cookie-self-contained-types.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/shared': patch ---- - -Ship a self-contained `CookieAttributes` interface from `@clerk/shared/cookie` and use it in `createCookieHandler`'s `set`/`remove` signatures. The published declarations previously referenced `Cookies.CookieAttributes` from js-cookie, which consumers could never resolve (the import was dropped from the declaration output and js-cookie ships no types), causing TS2503 errors under `skipLibCheck: false` and silently degrading the option types to `any` otherwise. diff --git a/.changeset/shared-navigator-service-worker.md b/.changeset/shared-navigator-service-worker.md deleted file mode 100644 index cb8672791ae..00000000000 --- a/.changeset/shared-navigator-service-worker.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/shared': patch ---- - -Resolve the browser connectivity heuristics (`isValidBrowser`, `isBrowserOnline`, and therefore `isValidBrowserOnline`) from the worker's `navigator` when `window` is unavailable but the code runs inside a `WorkerGlobalScope`. In a Web/Service Worker — most notably an MV3 extension background **service worker** (where `@clerk/chrome-extension` loads the background client) — there is no `window`, so these checks previously always reported "invalid/offline". That caused `getToken()` failures to be re-thrown as a misleading `clerk_offline` error and capped network retries lower than intended. The checks now read real connectivity from the worker's `navigator`. Server-side rendering continues to report `false` (the fallback requires a real worker scope, so a bare `globalThis.navigator` such as the one modern Node exposes is not treated as a browser), and behavior in standard browsers and React Native is unchanged. diff --git a/.changeset/shared-worker-navigator-server-runtimes.md b/.changeset/shared-worker-navigator-server-runtimes.md deleted file mode 100644 index 8138886d605..00000000000 --- a/.changeset/shared-worker-navigator-server-runtimes.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/shared': patch ---- - -Exclude self-identified server runtimes (`Cloudflare-Workers`, `Node.js`, `Deno`, `Bun` user agents) from the worker-scope `navigator` fallback used by `isValidBrowser`, `isBrowserOnline`, and `isValidBrowserOnline`. Today Cloudflare's workerd is excluded only because its `self` does not satisfy `instanceof WorkerGlobalScope`; this guard keeps the checks returning `false` on server-side worker runtimes even if that implementation detail changes, while real browser web/service workers (such as MV3 extension background workers) are unaffected. diff --git a/.changeset/silver-poems-repeat.md b/.changeset/silver-poems-repeat.md deleted file mode 100644 index 61233b95556..00000000000 --- a/.changeset/silver-poems-repeat.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@clerk/shared': patch ---- - -Clarify the `isSatellite` JSDoc to note it must be set in `load()`, unlike `domain`, which is set in the `Clerk` constructor. This corrects the generated API reference for direct `@clerk/clerk-js` and `