@clerk/vue@2.0.19

Patch Changes

• Updated dependencies [9b57986, a9f9b29]:
  • @clerk/shared@4.8.6

@clerk/ui@1.6.8

Patch Changes

• Updated dependencies [9b57986, 00f9ff9, a9f9b29]:
  • @clerk/shared@4.8.6
  • @clerk/localizations@4.5.6

@clerk/testing@2.0.22

Patch Changes

• Updated dependencies [9b57986, a9f9b29, e0a63f9]:
  • @clerk/shared@4.8.6
  • @clerk/backend@3.4.2

@clerk/tanstack-react-start@1.1.8

Patch Changes

• Fix Request cloning and outbound fetch to omit cross-realm AbortSignal. Node 24's bundled undici tightened the instanceof AbortSignal check on RequestInit.signal, which broke: (#8351) by @jacekradko

  • Cloning framework-specific requests such as NextRequest in @clerk/backend's ClerkRequest.
  • Subclassed Requests passed through patchRequest in @clerk/react-router and @clerk/tanstack-react-start.
  • Frontend API proxying in @clerk/backend's clerkFrontendApiProxy, which forwarded the inbound request's signal to the upstream fetch. Abort propagation will be restored in a follow-up via an in-realm AbortController bridge.

• Updated dependencies [9b57986, a9f9b29, e0a63f9]:

  • @clerk/shared@4.8.6
  • @clerk/backend@3.4.2
  • @clerk/react@6.4.6

@clerk/shared@4.8.6

Patch Changes

• Auto-proxy FAPI requests for .vercel.app subdomains. When deployed to a .vercel.app domain without explicit proxy or domain configuration, the SDK automatically routes Frontend API requests through /__clerk on the app's own origin. This enables Clerk production mode on Vercel deployments without manual proxy setup. (#8035) by @brkalow

• Loosen @tanstack/query-core dependency from an exact pin to a caret range (^5.90.16) so it can dedupe with consumer-installed @tanstack/react-query versions. This avoids Vite resolve.dedupe resolution failures under Bun when two divergent copies of query-core end up nested instead of hoisted. (#8417) by @jacekradko

@clerk/react@6.4.6

Patch Changes

• Updated dependencies [9b57986, a9f9b29]:
  • @clerk/shared@4.8.6

@clerk/react-router@3.1.8

Patch Changes

• Fix Request cloning and outbound fetch to omit cross-realm AbortSignal. Node 24's bundled undici tightened the instanceof AbortSignal check on RequestInit.signal, which broke: (#8351) by @jacekradko

  • Cloning framework-specific requests such as NextRequest in @clerk/backend's ClerkRequest.
  • Subclassed Requests passed through patchRequest in @clerk/react-router and @clerk/tanstack-react-start.
  • Frontend API proxying in @clerk/backend's clerkFrontendApiProxy, which forwarded the inbound request's signal to the upstream fetch. Abort propagation will be restored in a follow-up via an in-realm AbortController bridge.

• Updated dependencies [9b57986, a9f9b29, e0a63f9]:

  • @clerk/shared@4.8.6
  • @clerk/backend@3.4.2
  • @clerk/react@6.4.6

@clerk/nuxt@2.2.9

Patch Changes

• Updated dependencies [9b57986, a9f9b29, e0a63f9]:
  • @clerk/shared@4.8.6
  • @clerk/backend@3.4.2
  • @clerk/vue@2.0.19

@clerk/nextjs@7.2.8

Patch Changes

• Use a constant-time comparison when validating the integrity signature on the middleware-to-origin auth header handoff (assertTokenSignature). The previous !== compare was timing-variable; the new helper is synchronous and runtime-agnostic so it works in both Node and Edge Runtime. (#8411) by @jacekradko

• Auto-proxy FAPI requests for .vercel.app subdomains. When deployed to a .vercel.app domain without explicit proxy or domain configuration, the SDK automatically routes Frontend API requests through /__clerk on the app's own origin. This enables Clerk production mode on Vercel deployments without manual proxy setup. (#8035) by @brkalow

• Updated dependencies [9b57986, a9f9b29, e0a63f9]:

  • @clerk/shared@4.8.6
  • @clerk/backend@3.4.2
  • @clerk/react@6.4.6

@clerk/localizations@4.5.6

Patch Changes

• Expand the Catalan (ca-ES) localization by filling in previously undefined translations across billing, checkout, subscription management, cancellation flows, and related UI strings. (#8412) by @marcvive

• Updated dependencies [9b57986, a9f9b29]:

  • @clerk/shared@4.8.6