@clerk/expo@3.7.8
Reduced redundant native and JavaScript client refreshes during Expo startup.
JavaScript SDK
Mon
Wed
Fri
JulAugSepOctNovDecJanFebMarAprMayJunJul
LessMore
Releases788Avg241/mo
@clerk/electron@0.0.16
Token-cache and OAuth-transport IPC requests now require origin from a top-level window's main frame, preventing untrusted content in subframes from reading the persisted client JWT or driving the OAuth transport.
@clerk/clerk-js@6.25.5
Patch Changes
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
@clerk/react@6.12.5
Patch Changes
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
@clerk/astro@3.4.19
Escaped <, >, and / when serializing Clerk auth state into SSR script tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element (stored XSS). Also fixed Astro initialization when bundled ui or prefetchUI: false is passed to the integration.
@clerk/expo-passkeys@1.2.6
Patch Changes
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
@clerk/expo@3.7.7
Android native UI components no longer crash before window attachment or become unresponsive after navigation detaches and reattaches their views. Expo apps also stop accumulating duplicate initialization requests when the Clerk API is unavailable or the app reloads.
@clerk/fastify@3.1.53
Updated shared and backend dependencies to their latest patch versions.
@clerk/electron@0.0.15
Patch Changes
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
- @clerk/react@6.12.5
- @clerk/clerk-js@6.25.5
@clerk/backend@3.11.7
Machine tokens (M2M and OAuth JWTs) presented in the __session cookie are now rejected, returning a signed-out state instead of passing session verification with a machine identity as userId.
@clerk/shared@4.25.5
Escapes <, >, and / when serializing Clerk auth state into SSR <script> tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element.
@clerk/vue@2.4.17
Patch Changes
- Updated dependencies [
bcbdda6]:- @clerk/shared@4.25.5
@clerk/tanstack-react-start@1.4.20
Escaped <, >, and / when serializing Clerk auth state into SSR <script> tags, preventing a </script> sequence inside user-controllable session claims from breaking out of the script element. The embedded JSON still parses to identical values on the client.
@clerk/ui@1.25.5
Pressing Escape while a Select is open inside a Drawer now closes only the Select. Select keyboard and screen reader support improved via floating-ui interaction hooks, with proper combobox semantics for the searchable variant.
Last Checked
2h ago
Latest
@clerk/expo@3.7.8
Source
@clerk/javascript
