ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/chrome-extension@3.1.91

Patch Changes

• Updated dependencies [7412289]:
  • @clerk/ui@1.38.2

@clerk/expo@4.8.1

Patch Changes

• Bump the bundled clerk-ios SDK from 1.5.7 to 1.5.8. See the Clerk iOS release: https://github.com/clerk/clerk-ios/releases/tag/1.5.8. (#10027) by @clerk-cookie

@clerk/nextjs@7.9.11

Patch Changes

• Remove https://images.clerkstage.dev from the default connect-src Content Security Policy directive. It is a Clerk-internal storage host that no application connects to. Organization logos are served from https://img.clerk.com, which stays in the default. (#9898) by @Grundlefleck

@clerk/ui@1.38.2

Patch Changes

• Fixed <SignIn /> in the combined sign-in-or-up flow sending users back to the start after an OAuth or SAML redirect when the sign-in still needed a step, such as a Clerk Protect check, a second factor, or a password reset. Sign-ups created from an OAuth sign-in, including after a Protect check, now continue to their remaining steps inside the component. (#10014) by @mwickett

@clerk/swingset@0.0.54

Patch Changes

• Updated dependencies [46ff86f]:
  • @clerk/nextjs@7.9.11

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 2, 2026 9:23am UTC
swingset	Ready	Preview	Oct 2, 2026 9:23am UTC

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• ci(repo): Version packages

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Advanced

Run ID: ff1beeb4-04b9-489f-b935-12d6329b6bba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10025

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10025

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10025

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10025

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10025

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10025

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10025

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10025

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10025

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10025

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10025

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10025

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10025

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10025

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10025

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10025

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10025

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10025

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10025

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10025

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10025

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10025

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10025

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10025

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10025

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10025

commit: d9cd091

[github-actions]

API Changes Report

Generated by Break Check on 2026-10-02T09:23:29.215Z

Summary

Metric	Count
Packages analyzed	19
Packages with changes	1
🔴 Breaking changes	1
🟡 Non-breaking changes	0
🟢 Additions	0

Warning
1 breaking change(s) detected - Major version bump required

🤖 This report was reviewed by claude-sonnet-4-6.

🔴 Breaking changes index (1)

Every breaking change, up front. Full diffs are in the package sections below.

Package	Subpath	Change
@clerk/ui	./themes/experimental	createTheme

---

@clerk/ui

Version: 1.38.1 → 1.38.2
Recommended bump: MAJOR
Actual bump: PATCH ❌ (insufficient)

Subpath ./themes/experimental

🔴 Breaking Changes (1)

Changed: createTheme

// ... 4 unchanged lines elided ...
      theme: InternalTheme;
    }) => Elements);
    theme?: (BaseTheme | BaseTheme[]) | undefined;
-   options?: Options | undefined;
-   variables?: Variables | undefined;
-   captcha?: CaptchaAppearanceOptions | undefined;
+   options?: import("@clerk/ui/internal").Options | undefined;
+   variables?: import("@clerk/ui/internal").Variables | undefined;
+   captcha?: import("@clerk/ui/internal").CaptchaAppearanceOptions | undefined;
    cssLayerName?: string | undefined;
  }

Static analyzer: Breaking change in function createTheme: Return type changed: {__type:"prebuilt_appearance";name?:string;elements?:((params:{theme:import("@clerk/ui").~InternalTheme;})=>import("@clerk/ui").~Elements)|import("@clerk/ui").~Elements;theme?:(import("@clerk/ui").~BaseTheme|import("@clerk/ui").~BaseTheme[])|undefined;options?:import("@clerk/ui").~Options|undefined;variables?:import("@clerk/ui").~Variables|undefined;captcha?:import("@clerk/ui").~CaptchaAppearanceOptions|undefined;cssLayerName?:string|undefined;} → {__type:"prebuilt_appearance";name?:string;elements?:!unknown|((params:{theme:import("@clerk/ui").~InternalTheme;})=>!unknown);theme?:(!unknown|!unknown[])|undefined;options?:import("@clerk/ui/internal").Options|undefined;variables?:import("@clerk/ui/internal").Variables|undefined;captcha?:import("@clerk/ui/internal").CaptchaAppearanceOptions|undefined;cssLayerName?:string|undefined;}

🤖 AI review (confirmed) (72%): The return type fields options, variables, and captcha now reference types from @clerk/ui/internal, whose referenceResolutions verdict is unknown with packageNotFound: true, meaning the specifier is unresolvable for consumers; per rule 12, structural equivalence does not save a non-resolvable specifier, so consumers reading these typed fields will get compile errors or any.

Migration: Upgrade to the version of @clerk/ui that re-exports Options, Variables, and CaptchaAppearanceOptions from a public entry point, or avoid destructuring/asserting those specific return-type fields until the types are resolvable.

---

Report generated by Break Check

_{Last ran on d9cd091.}