Release v1.4.0

What's Changed

• fix(api)!: remove Session.hasMaximumLifetime by @swolfand in #1165
• ci: let CodeRabbit approve PRs that need no human review by @mikepitre in #1168
• ci: run the release checks on Blacksmith by @mikepitre in #1170
• chore(e2e): use the shared e2e core from internal-mobile-e2e by @wobsoriano in #1169
• ci: let CodeRabbit approve once its comments are resolved by @mikepitre in #1173
• fix(api): drop zero session deadline handling from Session by @swolfand in #1175
• fix(session): clear cached tokens inside SessionTokenFetcher.reset() by @mikepitre in #1178
• fix(verify): correct the organization switcher proof by @cursor[bot] in #1176
• chore(deps): update dependency com.google.firebase.appdistribution to v5.3.1 by @renovate[bot] in #1172
• fix(verify): post one kind of evidence and drop attach --both by @mikepitre in #1179
• docs(verify): describe the one evidence table and when a before run applies by @mikepitre in #1180
• fix(session): include organization in template token cache key by @mikepitre in #1181
• chore(verify): pick up the runner fix for agent-device that never starts by @mikepitre in #1182
• chore(verify): pick up the runner fix that restarts a dead agent-device daemon by @mikepitre in #1183
• docs(verify): fix a typo and note that a gone organization reopens the account list by @mikepitre in #1184
• ci: run the checks in the merge queue and skip repeat jobs on a push to main by @mikepitre in #1185
• chore: add REVIEW.md, a PR template, CODEOWNERS, and a Kotlin format hook by @mikepitre in #1186
• docs(verify): name the one-spec run target for the profile tests by @mikepitre in #1187
• ci: cap CodeRabbit approvals by risk and add pre-merge checks by @mikepitre in #1188
• fix(deps): update dependency com.googlecode.libphonenumber:libphonenumber to v9.0.42 by @renovate[bot] in #1174
• fix(verify): publish evidence with gh issue edit so a requested team does not stop it by @mikepitre in #1190
• ci: pass code-owner review when the author is a code owner by @mikepitre in #1192
• chore(deps): update dependency com.android.application to v9.5.0 by @renovate[bot] in #1191
• build(deps): bump undici from 7.30.0 to 7.30.1 in /e2e-tests in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1193
• chore(deps): update dependency node to v26 by @renovate[bot] in #1189
• docs(verify): list the home UserButton opening the profile as its own sub-feature by @mikepitre in #1196
• ci: move protected paths out of CODEOWNERS so GitHub stops requesting Team Mobile by @mikepitre in #1197
• feat: block app versions older than the minimum set in the Clerk Dashboard by @seanperez29 in #1160
• ci: require a Team Mobile approval unless a member wrote a low-risk change by @mikepitre in #1198
• ci: comment on the PR when it changes protected paths by @mikepitre in #1201
• chore(build): add a dependency rake and tasks that fetch the hook's tool jars by @swolfand in #1194
• docs(verify): correct the domains reader Members screen and list the update screen as not mapped by @mikepitre in #1205
• ci: rerun earlier failed code owner runs once a review passes the check by @mikepitre in #1206
• ci: stop requesting reviewers when a Team Mobile author changes a protected path by @mikepitre in #1207
• chore(deps): remove unused dependencies by @github-actions[bot] in #1204
• ci: approve and auto-merge Renovate pull requests that pass the checks by @swolfand in #1195
• fix(ui): fade the update screen in and out like the Expo update screen by @seanperez29 in #1200
• chore(verify): upgrade e2e to 0.22.0 by @mikepitre in #1209
• fix(deps): update dependency androidx.navigation:navigation-compose to v2.9.8 by @renovate[bot] in #1202
• chore(deps): update dependency com.autonomousapps.dependency-analysis to v3.20.0 by @renovate[bot] in #1203
• fix(deps): update ktor monorepo to v3.6.1 by @renovate[bot] in #1199
• refactor(api): replace AutoMap with a kotlinx-serialization form encoder by @swolfand in #1210
• fix: keep session ids and profile names out of logs and mark TOTP and backup code clips sensitive by @swolfand in #1215
• ci: run the code owner check from main and accept only approvals of the head commit by @swolfand in #1211
• fix(ui): send the email link once per screen instead of on every recomposition by @swolfand in #1212
• fix(api): keep trace ids and error meta out of error logs by @swolfand in #1217
• fix(api): invalidate cached session tokens on sign-out and finish per-session cleanup when cancelled by @swolfand in #1213
• docs(api): describe pending sessions correctly in the Clerk.session, isSignedIn and initialize KDoc by @swolfand in #1216
• fix(api): keep the server error on sign-out and the status code on undecodable error bodies by @swolfand in #1214
• chore(release): bump clerk-android to 1.4.0 by @swolfand in #1219

New Contributors

• @cursor[bot] made their first contribution in #1176
• @dependabot[bot] made their first contribution in #1193
• @github-actions[bot] made their first contribution in #1204

Full Changelog: v1.3.0...v1.4.0