fix(deps): update dependency @clerk/clerk-js to v5 #96
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.54.2
->^5.0.0
Release Notes
clerk/javascript (@clerk/clerk-js)
v5.36.0
Compare Source
Minor Changes
Update the supported API version to
2024-10-01
that includes the following changes (#4596) by @Nikpolikneeds_identifier
the API will now return a status ofneeds_first_factor
and the email address that matched will be returned in the identifier field. the only strategy that will be included in supported first factors isenterprise_sso
Read more in the API Version docs
Update components to use the new
enterprise_sso
strategy for sign ins / sign ups that match an enterprise connection and handle the new API response.This strategy supersedes SAML to provide a single strategy as the entry point for Enterprise SSO regardless of the underlying protocol used to authenticate the user.
For now there are two new types of connections that are supported in addition to SAML, Custom OAuth and EASIE (multi-tenant OAuth).
Patch Changes
Fix a memory leak in email link flow polling. (#4515) by @myandrienko
Updated dependencies [
8a28d1f403309f692d9332704f07effbf39d056d
]:v5.35.1
Compare Source
Patch Changes
Fix a bug where the the Clerk event listener was not emitting updates when a Session's user data changes. (#4661) by @BRKalow
Bug fix: Being able to revoke a session from UserProfile. (#4653) by @panteliselef
v5.35.0
Compare Source
Minor Changes
Drop experimental tag related to reverification. (#4536) by @panteliselef
Properties of Clerk class:
__experimental_openUserVerification
->__internal_openReverification
__experimental_closeUserVerification
->__internal_closeReverification
__experimental_UserVerificationProps
->__internal_ReverificationProps
__experimental_UserVerificationModalProps
->__internal_ReverificationModalProps
Properties of
Session
:__experimental_factorVerificationAge
->factorVerificationAge
__experimental_startVerification
->startVerification
__experimental_prepareFirstFactorVerification
->prepareFirstFactorVerification
__experimental_attemptFirstFactorVerification
->attemptFirstFactorVerification
__experimental_prepareSecondFactorVerification
->prepareSecondFactorVerification
__experimental_attemptSecondFactorVerification
->attemptSecondFactorVerification
If a nonce is provided, it is now made available to Clerk's internal components. This allows the nonce to be passed in to style-src in CSPs and work correctly. (#4509) by @jescalan
Patch Changes
Include BUILD_DISABLE_RHC to allow for builds which remove remotely hosted code as it is a requirement for browser extensions. (#4133) by @tmilewski
Rename userVerification to reverification to align with the feature name. (#4634) by @BRKalow
Updated dependencies [
fe9e147e366153d664af7fc325655ecb299a1f9d
,fe9e147e366153d664af7fc325655ecb299a1f9d
,d84d7e31235c5c7da3415981dc76db4473a71a39
,fe9e147e366153d664af7fc325655ecb299a1f9d
,dce4f7ffca7248c0500f0ec9a978672b1f2fad69
]:v5.34.6
Compare Source
Patch Changes
Catch and ignore any captcha errors during heartbeat (#4629) by @nikosdouvlis
Enable captcha for development instances (#4620) by @issuedat
Add new internal UI component for accountless. (#4625) by @panteliselef
Decouple captcha heartbeat from token refresh mechanism (#4630) by @nikosdouvlis
Updated dependencies [
c70994b5b6f92a6550dfe37547f01bbfa810c223
,7623a99594e7329200b6b374e483152d7679ce66
]:v5.34.5
Compare Source
Patch Changes
v5.34.4
Compare Source
Patch Changes
Fixes issue where
FormFeedback
was rendering two elements with the sameid
attribute leading to invalid markup. (#4552) by @alexcarpenterHandle
sign_up_restricted_waitlist
error encountered in an oauth flow (#4603) by @nikospapcomExclude
_clerk_session_id
query param from/waitlist
endpoint (#4594) by @nikospapcomInject captcha token into every X heartbeats (#4614) by @nikosdouvlis
Updated dependencies [
e47eb5882a7fd4a8dee25933c6644790d6ea3407
,7510d5cf0ac4d2994849931de8dda75cf605f840
,273d16cb0665d4d960838cb294dc356f41814745
,6b0961765e1f3d09679be4b163fa13ac7dd97191
]:v5.34.3
Compare Source
Patch Changes
Block /tokens requests until fraud detection completes by @nikosdouvlis
Enforce uppercase rendering for
<ProviderInitialIcon />
. (#4578) by @alexcarpenterFixes an issue where the password field would not render during autofill event until the user interacted with the screen. (#4560) by @alexcarpenter
Updated dependencies [
536fa996ff84a545678a3036b28409824d1c00dd
,b28c5e8bc44885bf6b1533df48e872ba90c387da
]:v5.34.2
Compare Source
Patch Changes
Display logo in
<Waitlist />
component (#4561) by @nikospapcomCorrectly handle async requires_captcha error by @nikosdouvlis
v5.34.1
Compare Source
Patch Changes
Protect /tokens requests by requiring a valid captcha token if the request fails with 401 (#4559) by @nikosdouvlis
Updated dependencies [
46faeb6f59b19c963fb137c858347525b1cd9e19
,ea6c52dd751abe38b350ee07f148652c24125e22
]:v5.34.0
Compare Source
Minor Changes
Surface enterprise accounts in
UserProfile
, allowing to display more protocols besides SAML (#4518) by @LauraBeatrisIntroduce the
experimental.rethrowOfflineNetworkErrors
option to theClerkProvider
component. (#4525) by @anagstefWhen set to
true
, Clerk will rethrow network errors that occur while the user is offline.Patch Changes
Display additional errors from enterprise SSO (#4553) by @LauraBeatris
Updated dependencies [
1c0b5001f7f975a2f3f54ad692526ecf7257847e
,6217a3f7c94311d49f873214bd406961e0b8d6f7
,1783025cdb94c447028704c2121fa0b8af785904
]:v5.33.1
Compare Source
Patch Changes
Use fapi error long message instead of statusText when throwing API errors. (#4511) by @panteliselef
Fixes satellite syncing when both the satellite and the primary apps use server-side enabled frameworks like NextJS (#4516) by @nikosdouvlis
Updated dependencies [
cc741adf26d983ae199ad8e7faa6551a80999f16
]:v5.33.0
Compare Source
Minor Changes
redirectUrl
withafterJoinWaitlistUrl
in<Waitlist />
component (#4532) by @nikospapcomPatch Changes
7dbad4c5abd226d7b10941a626ead5d85b1a3f24
]:v5.32.0
Compare Source
Minor Changes
Introduce experimental support for passkeys in Expo (iOS, Android, and Web). (#4352) by @AlexNti
To use passkeys in Expo projects, pass the
__experimental_passkeys
object, which can be imported from@clerk/clerk-expo/passkeys
, to theClerkProvider
component:The API for using passkeys in Expo projects is the same as the one used in web apps:
The Legal consent feature is now stable. (#4487) by @octoper
Removed the
__experimental_
preffix.Now sending the Frontend API version through query string params (#4457) by @jacekradko
Patch Changes
Fixes issues in
ClerkRouter
that were causing inaccurate pathnames within Elements flows. Also fixes a dependency issue where@clerk/elements
was pulling in the wrong version of@clerk/shared
. (#4513) by @alexcarpenterInternal change to use component-specific context providers. This change does not impact consumers. (#4486) by @dstaley
Add afterJoinWaitlistUrl to DisplayConfig resource (#4524) by @nikospapcom
Updated dependencies [
75b2fa0ab30f48e8b575adf31ff9ca0e6901f885
,5a21de1f46df3642828dc27e4862263c9858da2b
,f7472e22877f62fc7f3c8d3efe409ff2276fb4a3
,e199037b8f484abdeeb9fc24455a1b4b8c31c8dd
,886e294a8d8c54b39cd5bda88d46b89eace3861e
,0e443ad7c76643420b50e5b169193e03f6ef79f9
,cc24c8145f1eea7fb91550f2c3e0bac3993e4320
]:v5.31.2
Compare Source
Patch Changes
ClerkProvider
props change in@clerk/clerk-react
(#4498) by @nikosdouvlisv5.31.1
Compare Source
Patch Changes
Fix an issue where protocol relative URLs were not properly detected as non-relative. (#4483) by @BRKalow
Updated dependencies [
8a04ae47b8305f994b348301fd8134d5baf02943
]:v5.31.0
Compare Source
Minor Changes
New Feature: Introduce the
<Waitlist />
component and thewaitlist
sign up mode. (#4376) by @nikospapcom<Waitlist />
component.Join waitlist
prompt from<SignIn />
component when mode iswaitlist
.waitlist
.joinWaitlist()
method inClerk
singleton.redirectToWaitlist()
method inClerk
singleton to allow user to redirect to waitlist page.Patch Changes
Expose internal
__internal_getOption
method from Clerk. (#4456) by @alexcarpenterUpdated dependencies [
d74a6a7c0f291104c6bba722a8c432814d7b336e
,1a0c8fe665869e732d3c800bde0f5219fce54301
,0800fc3f1f4e1b6a1d13f5c02557001a283af6e8
]:v5.30.3
Compare Source
Patch Changes
clerk-js
is now built with Rspack instead of Webpack. This is an internal tooling change that shouldn't affect consumers. by @nikosdouvlisRefactor imports from @clerk/shared to improve treeshaking support by @nikosdouvlis
Updated dependencies [
a7726cc12a824b278f6d2a37cb1901c38c5f70dc
,a7726cc12a824b278f6d2a37cb1901c38c5f70dc
]:v5.30.2
Compare Source
v5.30.1
Compare Source
v5.30.0
Compare Source
Minor Changes
Introduce
redirectUrl
property onsetActive
as a replacement forbeforeEmit
. (#4312) by @issuedatDeprecates
beforeEmit
property onsetActive
.Patch Changes
Experimental:
asStandalone
now accepts a callback that notifies if the standalone popover needs to unmount. (#4423) by @panteliselefImprove checkbox label alignment to account for wrapping labels. (#4426) by @alexcarpenter
Remove unused
fitTextInOneLine
andtextWidthForCurrentSize
(#4407) by @zythosecChore: Replace beforeEmit with an explicit call after
setActive
, inside the experimental UserVerification. (#4362) by @panteliselefChanged
__experimental_legalAccepted
checkbox Indicator element descriptor and element id (#4427) by @octoperChanged
__experimental_legalAccepted
checkbox Label element descriptor and element idAdded two new element descriptors
formFieldCheckboxInput
,formFieldCheckboxLabel
.Updated dependencies [
f875463da
,5be7ca9fd
,c2f5071be
,08c5a2add
,ae0621972
,cd2189ac8
,159877be0
,434b432f8
]:v5.29.1
Compare Source
Patch Changes
Move
@clerk/ui
todevDependencies
(#4399) by @dstaleyShow an error on
<UserProfile />
if the Web3 wallet is already claimed. (#4389) by @EmmanouelaPothitouFix for legal consent rendered on the component when only social sign up is enabled (#4403) by @octoper
v5.29.0
Compare Source
Minor Changes
<SignUp/>
component (#4337) by @octoperPatch Changes
3fdcdbf88
,f9d53fe34
]:v5.28.0
Compare Source
Minor Changes
Patch Changes
Bug fix: Always receive a new session verification object when UserVerification component mounts. (#4359) by @panteliselef
Updated dependencies [
3b50b67bd
,3b50b67bd
]:v5.27.0
Compare Source
Minor Changes
Drop
maxAgeMinutes
from__experimental_startVerification
. (#4338) by @panteliselefDrop types
__experimental_SessionVerificationConfig
and__experimental_SessionVerificationMaxAgeMinutes
.The "Restricted access" screen has been improved for visual consistency and the ability to contact support. The displayed texts have been made more clear and the sign-in button has been moved to the bottom. (#4335) by @nikospapcom
Add experimental standalone mode for
<UserButton />
and<OrganizationSwitcher />
. (#4042) by @panteliselefWhen
__experimental_asStandalone: true
the component will not render its trigger, and instead it will render only the contents of the popover in place.APIs that changed:
__experimental_prefetchOrganizationSwitcher
as a way to mount an internal component that will render theuseOrganizationList()
hook and prefetch the necessary data for the popover of<OrganizationSwitcher />
. This enhances the UX since no loading state will be visible and keeps CLS to the minimum.mountOrganizationSwitcher(node, { __experimental_asStandalone: true })
mountUserButton(node, { __experimental_asStandalone: true })
Use EIP-4361 message spec for Web3 wallets sign in signature requests (#4334) by @chanioxaris
Patch Changes
Retry with exponential backoff if loadScript fails to load the script (#4349) by @nikosdouvlis
Add the
?render=explicit
query parameter to the Turnstile script. (#4332) by @anagstefUpdated dependencies [
e81d45b72
,752ce9bfa
,0a9bf8ef4
,99cdf9b67
,ce40ff6f0
,2102052c0
]:v5.26.5
Compare Source
Patch Changes
Only retry the OAuth flow if the captcha check failed. (#4329) by @nikosdouvlis
Improve bot detection by loading the Turnstile SDK directly from CloudFlare. (#4321) by @anagstef
If loading fails due to CSP rules, load it through FAPI instead.
Bypass captcha for providers dynamically provided in environment (#4322) by @nikosdouvlis
Updated dependencies [
d64e54c40
,2ba2fd148
]:v5.26.4
Compare Source
Patch Changes
v5.26.3
Compare Source
Patch Changes
OrganizationSwitcher
popover action to include label (#4304) by @LauraBeatrisv5.26.2
Compare Source
Patch Changes
Handle gracefully Coinbase Wallet use of existing Passkey (#4302) by @chanioxaris
Updates webpack to address CVE-2024-43788. (#4287) by @dependabot
Updated dependencies [
e29a8061d
,00a9ddb5b
]:v5.26.1
Compare Source
Patch Changes
v5.26.0
Compare Source
Minor Changes
Rename
__experimental_assurance
to__experimental_reverification
. (#4268) by @panteliseleffirstFactor
,secondFactor
,multiFactor
.____experimental_SessionVerificationTypes
that abstracts away the level and maxAgePatch Changes
fb932e5cf
]:v5.24.1
Compare Source
Patch Changes
v5.24.0
Compare Source
Minor Changes
Handle
sign_up_mode_restricted
error encountered in an oauth flow (#4232) by @nikospapcomRender "Restricted access" screen in
<SignUp />
component whensignup.mode
inuserSettings
isrestricted
(#4220) by @nikospapcomPatch Changes
Correctly pass
defaultOpen
prop toOrganizationSwitcher
popover instance. (#4233) by @alexcarpenterConditionally renders identification sections on
UserProfile
based on the SAML connection configuration for disabling additional identifiers. (#4211) by @NicolasLopes7Updated dependencies [
4749ed4c5
,f1f17eaab
,2e35ac538
]:v5.23.0
Compare Source
Minor Changes
<SignIn />
component when mode isrestricted
(#4206) by @nikospapcomPatch Changes
Handle gracefully Coinbase Wallet initial configuration (#4218) by @chanioxaris
Supports default role on
OrganizationProfile
invitations. When inviting a member, the default role will be automatically selected, otherwise it falls back to the only available role. (#4210) by @LauraBeatrisAdd type for __internal_country (#4215) by @dstaley
Updated dependencies [
c9063853e
,19d3808d4
,737bcbb0f
]:v5.22.4
Compare Source
Patch Changes
Fix UserProfile and OrganizationProfile wrong padding on footer for small screens when Development notice is enabled (#4191) by @octoper
Internal change to move
iconImageUrl
util toshared
package. (#4188) by @alexcarpenterOnly render the Sign out of all accounts action within
<UserButton />
when there are multiple sessions. (#4200) by @alexcarpenterUpdated dependencies [
cb32aaf59
,2e5c550e4
,6275c242c
,f9faaf031
]:v5.22.3
Compare Source
Patch Changes
Restore behavior of MetaMask compatible Web3 wallets. Before, even if a user didn't use the MetaMask browser extension but a compatible one, such as Rabby Wallet, it was possible to use it as they share the same API to authenticate themselves. This behavior stopped working when we added support for EIP6963 regarding handling multiple injected providers. This commit restores the previous behavior by using the existing injected provider if there is a single one (#4185) by @chanioxaris
Updated dependencies [
5dde18f6b
]:v5.22.2
Compare Source
Patch Changes
Add color to phone input select options to fix rendering within dark and shadesOfPurple themes. (#4176) by @alexcarpenter
Updated dependencies [
3743eb911
]:v5.22.1
Compare Source
Patch Changes
2d8e6e9d0
,bcc5eba39
]:v5.22.0
Compare Source
Minor Changes
Experimental support for
has()
with assurance. (#4118) by @panteliselefExample usage:
Created a shared utility called
createCheckAuthorization
exported from@clerk/shared
Patch Changes
Moves
fastDeepMerge
utils to@clerk/shared
package. (#4056) by @alexcarpenterAdds translation keys for error messages from the organizations API. (#4123) by @LauraBeatris
Updated dependencies [
23b850f5f
,ace56babd
,ba19be354
,248142a6d
,1189f71f8
,de1ba10b4
]:v5.21.2
Compare Source
Patch Changes
be3b119f8
]:v5.21.1
Compare Source
Patch Changes
Update type of
__experimental_factorVerificationAge
to be[number, number] | null
. (#4135) by @panteliselefUpdated dependencies [
8c6909d46
]:v5.21.0
Compare Source
Minor Changes
fva
that tracks the age of verified factor groups. (#4061) by @panteliselefServer side
This can be applied to any helper that returns the auth object
Nextjs example
Client side
React example
Patch Changes
Fix bug where session.getToken() was reading a stale organization ID. (#4112) by @BRKalow
Drop support for deprecated Coinbase Web3 provider (#4092) by @chanioxaris
Ensure we don't access
window.addEventListener()
andwindow.dispatchEvent
in non-browser environments. (#4095) by @wobsorianoSupport
phone_code
as first factor for the experimental UserVerification component. (#4085) by @panteliselefUpdated dependencies [
c63a5adf0
,8823c21a2
,95ac67a14
,a0cb062fa
,746b4ed5e
,feb9e14d4
]:v5.20.0
Compare Source
Minor Changes
Add support for the Coinbase Wallet web3 provider and authentication strategy. The Coinbase Wallet provider handles both Coinbase Wallet extension and Smart Wallet (#4082) by @chanioxaris
Experimental: Persist the Clerk client after signing out a user. (#3941) by @panteliselef
This all
Configuration
📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - "after 9am and before 5pm Monday" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.