chore(backend): Update [DEV] minor & patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cookie	1.0.2 → 1.1.1
msw (source)	2.11.6 → 2.14.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

jshttp/cookie (cookie)

v1.1.1

Compare Source

Fixed

• Overwrite value in passed in options (#​253) c66147c
  • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

---

v1.1.0

Compare Source

mswjs/msw (msw)

v2.14.2

Compare Source

v2.14.2 (2026-04-29)

Bug Fixes

• export the NetworkApi type (#​2734) (f0c0321) @​kettanaito

v2.14.1

Compare Source

v2.14.1 (2026-04-29)

Bug Fixes

• export default handler controllers (#​2733) (f8dc874) @​kettanaito

v2.14.0

Compare Source

v2.14.0 (2026-04-29)

Features

• support ws.onUpgrade for handling connection upgrades (#​2732) (e00e4d6) @​kettanaito

Bug Fixes

• do not clone user-provided responses (#​2731) (6953307) @​kettanaito
• HttpResponse: forward cookies only when response is used (#​2728) (30668e6) @​kettanaito

v2.13.6

Compare Source

v2.13.6 (2026-04-24)

Bug Fixes

• WebSocketHandler: add public test() method (#​2727) (3da7048) @​kettanaito

v2.13.5

Compare Source

v2.13.5 (2026-04-23)

Bug Fixes

• reset generator state on .resetHandlers()/.restoreHandlers() (#​2725) (8d16801) @​kettanaito

v2.13.4

Compare Source

v2.13.4 (2026-04-16)

Bug Fixes

• implement proper ServiceWorkerSource singleton pattern (#​2715) (580256b) @​kettanaito
• use verbatimModuleSyntax consistently in exports (#​2702) (9dedf52) @​christoph-fricke @​kettanaito
• update dependencies (#​2719) (d0cbd2d) @​kettanaito
• sse: respect request.signal for the underlying stream (#​2718) (429e05c) @​kettanaito

v2.13.3

Compare Source

v2.13.3 (2026-04-14)

Bug Fixes

• update rettime to 0.11.7 (#​2711) (feee3ed) @​kettanaito

v2.13.2

Compare Source

v2.13.1

Compare Source

v2.13.1 (2026-04-07)

Bug Fixes

• annotate life-cycle events correctly (#​2694) (e7890e9) @​kettanaito

v2.13.0

Compare Source

v2.13.0 (2026-04-06)

Features

• use the network source architecture (defineNetwork) (#​2650) (2b73790) @​kettanaito @​felmonon
• handlers are not grouped internally by kind, making handler lookup a O(1) operation.
• handlers filtering no longer uses an instanceof check. Instead, the kind property of the handler is used.

Bug fixes

• fix an issue where a WebSocket connection would be logged in the console even when there are no matching event handlers for it.

v2.12.14

Compare Source

v2.12.14 (2026-03-21)

Bug Fixes

• support wildcard ports in url matching (#​2677) (f90bf49) @​trknhr @​kettanaito

v2.12.13

Compare Source

v2.12.13 (2026-03-17)

Bug Fixes

• GraphQL: support application/graphql-response+json response content-type (#​2513) (4b8c330) @​phryneas @​kettanaito
• HttpResponse: mark implicit content-type headers with a symbol (#​2675) (98716e7) @​kettanaito

v2.12.12

Compare Source

v2.12.12 (2026-03-17)

Bug Fixes

• minor improvements (#​2672) (cd52873) @​kettanaito
• handle special characters in postinstall script (#​2649) (b79d7ae) @​aloisklink @​kettanaito
• replace barrel exports with granular exports (#​2671) (83bc40e) @​kettanaito

v2.12.11

Compare Source

v2.12.11 (2026-03-15)

Bug Fixes

• node: avoid open handles for infinite delays (#​2669) (3ccc8a3) @​FelmonFekadu @​kettanaito

v2.12.10

Compare Source

v2.12.10 (2026-02-10)

Bug Fixes

• export AnyHandler type (#​2663) (90f9be4) @​kettanaito

v2.12.9

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

• ws: support relative urls in ws.link (#​2661) (2f1d23c) @​kettanaito

v2.12.8

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes

• update @mswjs/interceptors to fix a memory leak (#​2659) (e5e905f) @​kettanaito
• update rettime (#​2657) (3a7b451) @​kettanaito

v2.12.7

Compare Source

v2.12.7 (2025-12-27)

Bug Fixes

• graphql: export the GraphQLLinkHandlers type (#​2647) (cfab780) @​kettanaito
• graphql: support TypedDocumentString as request predicate (#​2646) (494d5e8) @​kettanaito
• graphql: remove redundant DocumentNode union (#​2645) (0f6e28f) @​kettanaito

v2.12.6

Compare Source

v2.12.6 (2025-12-26)

Bug Fixes

• sse: respect the worker quiet option (#​2644) (d50f73e) @​kettanaito

v2.12.5

Compare Source

v2.12.5 (2025-12-26)

Bug Fixes

• sse: handle multi-line messages (#​2643) (1266f61) @​BSteffaniak @​kettanaito

v2.12.4

Compare Source

v2.12.4 (2025-12-03)

Bug Fixes

• handle incomplete localStorage in Node.js v25 (#​2636) (3da2c76) @​rvagg

v2.12.3

Compare Source

v2.12.3 (2025-11-23)

Bug Fixes

• publish the types used in HttpHandler (#​2560) (1af6cee) @​SerkanSipahi @​kettanaito
• update dependencies (#​2634) (9efe103) @​kettanaito
• toPublicUrl: remove search parameters in Node.js (#​2629) (18d7d3d) @​Enet4 @​kettanaito

v2.12.2

Compare Source

v2.12.2 (2025-11-14)

Bug Fixes

• node: move browser and react-native export conditions lower (#​2627) (102d85a) @​vidschofelix

v2.12.1

Compare Source

v2.12.1 (2025-11-09)

Bug Fixes

• setupWorker: fix response init in response:* events (#​2621) (7f48f21) @​jbms

v2.12.0

Compare Source

v2.12.0 (2025-11-05)

Features

• support server-sent events (SSE) (#​2299) (d5a16d8) @​kettanaito @​Andarist

---

Configuration

📅 Schedule: (in timezone GMT)

• Branch creation
  • "before 7am on the first day of the week"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 6, 2026 5:28pm

[changeset-bot]

⚠️ No Changeset found

Latest commit: 414e500

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8453

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8453

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8453

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8453

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8453

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8453

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8453

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8453

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8453

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8453

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8453

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8453

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8453

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8453

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8453

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8453

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8453

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8453

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8453

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8453

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8453

commit: 414e500

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.