clerk · clerk-cookie · Jun 4, 2026
diff --git a/.changeset/bump-break-check-incomplete-ai-reviews.md b/.changeset/bump-break-check-incomplete-ai-reviews.md
diff --git a/.changeset/bump-expo-native-sdks.md b/.changeset/bump-expo-native-sdks.md
diff --git a/.changeset/bundlewatch-ui-shared-browser-budget.md b/.changeset/bundlewatch-ui-shared-browser-budget.md
diff --git a/.changeset/custom-page-portal-stable-keys.md b/.changeset/custom-page-portal-stable-keys.md
diff --git a/.changeset/expo-sso-sync-require.md b/.changeset/expo-sso-sync-require.md
diff --git a/.changeset/expo_avoid_web_browser_static_require.md b/.changeset/expo_avoid_web_browser_static_require.md
diff --git a/.changeset/fix-org-profile-custom-page-remounts.md b/.changeset/fix-org-profile-custom-page-remounts.md
diff --git a/.changeset/fix-switch-scroll-jump.md b/.changeset/fix-switch-scroll-jump.md
diff --git a/.changeset/fix-ui-styledsystem-circular-import.md b/.changeset/fix-ui-styledsystem-circular-import.md
diff --git a/.changeset/great-eyes-wave.md b/.changeset/great-eyes-wave.md
diff --git a/.changeset/machine-token-sub-guard.md b/.changeset/machine-token-sub-guard.md
diff --git a/.changeset/quiet-terms-drum.md b/.changeset/quiet-terms-drum.md
diff --git a/.changeset/redact-nested-tokens-debug-formatter.md b/.changeset/redact-nested-tokens-debug-formatter.md
diff --git a/.changeset/redact-tokens-debug-output.md b/.changeset/redact-tokens-debug-output.md
diff --git a/.changeset/safe-hot-nice.md b/.changeset/safe-hot-nice.md
diff --git a/.changeset/stale-steaks-accept.md b/.changeset/stale-steaks-accept.md
diff --git a/.changeset/typedoc-objects-jsdoc.md b/.changeset/typedoc-objects-jsdoc.md
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/astro
 
+## 3.3.4
+
+### Patch Changes
+
+- Updated dependencies [[`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/backend@3.5.1
+  - @clerk/shared@4.15.1
+
 ## 3.3.3
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "3.3.3",
+  "version": "3.3.4",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Change Log
 
+## 3.5.1
+
+### Patch Changes
+
+- Prevent an unhandled exception when verifying a machine token whose JWT payload has a missing or non-string `sub`. Such tokens are now classified and rejected with a typed verification error instead of throwing, so a crafted `Authorization` header can no longer surface as an unhandled error during request authentication. ([#8744](https://github.com/clerk/javascript/pull/8744)) by [@jacekradko](https://github.com/jacekradko)
+
+- Redact raw bearer credentials from the `auth` object's debug output. The debug payload (surfaced when an SDK enables middleware debug logging) previously included full session, machine, refresh, dev-browser and handshake tokens; each now exposes only a short, non-reconstructable prefix, matching how `secretKey` and `jwtKey` are already handled. ([#8744](https://github.com/clerk/javascript/pull/8744)) by [@jacekradko](https://github.com/jacekradko)
+
+- Add and improve JSDoc comments across public types and methods to support generated reference documentation for the `/objects` docs section. Exports a few previously-internal types (`OnEventListener`, `OffEventListener`, `ClerkOptionsNavigation`) so they can be referenced from the generated docs. ([#8276](https://github.com/clerk/javascript/pull/8276)) by [@alexisintech](https://github.com/alexisintech)
+
+- Updated dependencies [[`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/shared@4.15.1
+
 ## 3.5.0
 
 ### Minor Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/chrome-extension/CHANGELOG.md b/packages/chrome-extension/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 3.1.33
+
+### Patch Changes
+
+- Updated dependencies [[`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`0aa6e81`](https://github.com/clerk/javascript/commit/0aa6e8190bcd7204353518539514e8ba72518389), [`81ce9d3`](https://github.com/clerk/javascript/commit/81ce9d3d440b53a9c790bd8a6b1b80c7eea2945b), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`b5efe17`](https://github.com/clerk/javascript/commit/b5efe177fb52b735f9c3dfd66d9158cc15f5e41e), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/react@6.7.4
+  - @clerk/ui@1.15.1
+  - @clerk/clerk-js@6.14.1
+  - @clerk/shared@4.15.1
+
 ## 3.1.32
 
 ### Patch Changes

diff --git a/packages/chrome-extension/package.json b/packages/chrome-extension/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/chrome-extension",
-  "version": "3.1.32",
+  "version": "3.1.33",
   "description": "Clerk SDK for Chrome extensions",
   "keywords": [
     "auth",

diff --git a/packages/clerk-js/CHANGELOG.md b/packages/clerk-js/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Change Log
 
+## 6.14.1
+
+### Patch Changes
+
+- Correctly display OAuth consent redirect domains for known multi-label public suffixes. ([#8700](https://github.com/clerk/javascript/pull/8700)) by [@wobsoriano](https://github.com/wobsoriano)
+
+- Add and improve JSDoc comments across public types and methods to support generated reference documentation for the `/objects` docs section. Exports a few previously-internal types (`OnEventListener`, `OffEventListener`, `ClerkOptionsNavigation`) so they can be referenced from the generated docs. ([#8276](https://github.com/clerk/javascript/pull/8276)) by [@alexisintech](https://github.com/alexisintech)
+
+- Updated dependencies [[`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/shared@4.15.1
+
 ## 6.14.0
 
 ### Minor Changes

diff --git a/packages/clerk-js/package.json b/packages/clerk-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-js",
-  "version": "6.14.0",
+  "version": "6.14.1",
   "description": "Clerk JS library",
   "keywords": [
     "clerk",

diff --git a/packages/expo-passkeys/CHANGELOG.md b/packages/expo-passkeys/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/expo-passkeys
 
+## 1.1.2
+
+### Patch Changes
+
+- Updated dependencies [[`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/shared@4.15.1
+
 ## 1.1.1
 
 ### Patch Changes

diff --git a/packages/expo-passkeys/package.json b/packages/expo-passkeys/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo-passkeys",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Passkeys library to be used with Clerk for expo",
   "keywords": [
     "react-native",

diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md
@@ -1,5 +1,22 @@
 # Change Log
 
+## 3.3.2
+
+### Patch Changes
+
+- Bump the native SDKs pulled into Expo: `clerk-ios` to `1.1.5` and `clerk-android-api`/`clerk-android-ui` to `1.0.26`. ([#8745](https://github.com/clerk/javascript/pull/8745)) by [@mikepitre](https://github.com/mikepitre)
+
+- Fix `useSSO()` in Expo apps that hit module loading failures when starting an SSO flow under Metro. ([#8720](https://github.com/clerk/javascript/pull/8720)) by [@wobsoriano](https://github.com/wobsoriano)
+
+- Fix Expo native builds that could fail when `expo-web-browser` is not installed but `ClerkProvider` is imported. ([#8607](https://github.com/clerk/javascript/pull/8607)) by [@chriscanin](https://github.com/chriscanin)
+
+- Add and improve JSDoc comments across public types and methods to support generated reference documentation for the `/objects` docs section. Exports a few previously-internal types (`OnEventListener`, `OffEventListener`, `ClerkOptionsNavigation`) so they can be referenced from the generated docs. ([#8276](https://github.com/clerk/javascript/pull/8276)) by [@alexisintech](https://github.com/alexisintech)
+
+- Updated dependencies [[`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/react@6.7.4
+  - @clerk/clerk-js@6.14.1
+  - @clerk/shared@4.15.1
+
 ## 3.3.1
 
 ### Patch Changes

diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "Clerk React Native/Expo library",
   "keywords": [
     "react",

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 2.1.24
+
+### Patch Changes
+
+- Add and improve JSDoc comments across public types and methods to support generated reference documentation for the `/objects` docs section. Exports a few previously-internal types (`OnEventListener`, `OffEventListener`, `ClerkOptionsNavigation`) so they can be referenced from the generated docs. ([#8276](https://github.com/clerk/javascript/pull/8276)) by [@alexisintech](https://github.com/alexisintech)
+
+- Updated dependencies [[`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/backend@3.5.1
+  - @clerk/shared@4.15.1
+
 ## 2.1.23
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "2.1.23",
+  "version": "2.1.24",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 3.1.34
+
+### Patch Changes
+
+- Updated dependencies [[`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/backend@3.5.1
+  - @clerk/shared@4.15.1
+
 ## 3.1.33
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "3.1.33",
+  "version": "3.1.34",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/hono/CHANGELOG.md b/packages/hono/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/hono
 
+## 0.1.34
+
+### Patch Changes
+
+- Updated dependencies [[`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/backend@3.5.1
+  - @clerk/shared@4.15.1
+
 ## 0.1.33
 
 ### Patch Changes

diff --git a/packages/hono/package.json b/packages/hono/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/hono",
-  "version": "0.1.33",
+  "version": "0.1.34",
   "description": "Clerk SDK for Hono",
   "keywords": [
     "auth",

diff --git a/packages/localizations/CHANGELOG.md b/packages/localizations/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 4.7.2
+
+### Patch Changes
+
+- Updated dependencies [[`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/shared@4.15.1
+
 ## 4.7.1
 
 ### Patch Changes

diff --git a/packages/localizations/package.json b/packages/localizations/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/localizations",
-  "version": "4.7.1",
+  "version": "4.7.2",
   "description": "Localizations for the Clerk components",
   "keywords": [
     "react",

diff --git a/packages/msw/CHANGELOG.md b/packages/msw/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/msw
 
+## 0.0.32
+
+### Patch Changes
+
+- Updated dependencies [[`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/shared@4.15.1
+
 ## 0.0.31
 
 ### Patch Changes

diff --git a/packages/msw/package.json b/packages/msw/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/msw",
-  "version": "0.0.31",
+  "version": "0.0.32",
   "private": true,
   "sideEffects": false,
   "type": "module",

diff --git a/packages/nextjs/CHANGELOG.md b/packages/nextjs/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Change Log
 
+## 7.4.4
+
+### Patch Changes
+
+- Harden middleware debug log output: the formatter now recursively truncates known credential keys (`sessionToken`, `tokenInHeader`, `sessionTokenInCookie`, `secretKey`, `jwtKey`) at any nesting depth, so a bearer token can no longer reach the logs even if a debug producer nests one. This is a defense-in-depth backstop alongside the source-level redaction in `@clerk/backend`. ([#8744](https://github.com/clerk/javascript/pull/8744)) by [@jacekradko](https://github.com/jacekradko)
+
+- Add and improve JSDoc comments across public types and methods to support generated reference documentation for the `/objects` docs section. Exports a few previously-internal types (`OnEventListener`, `OffEventListener`, `ClerkOptionsNavigation`) so they can be referenced from the generated docs. ([#8276](https://github.com/clerk/javascript/pull/8276)) by [@alexisintech](https://github.com/alexisintech)
+
+- Updated dependencies [[`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`83f50f6`](https://github.com/clerk/javascript/commit/83f50f68619205f16541439fd27ca653686ba6df), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`b295af3`](https://github.com/clerk/javascript/commit/b295af3d5bb12e09a502cae4a935d2e7f5d35d5c), [`27c4d75`](https://github.com/clerk/javascript/commit/27c4d750e067d54bc60e6c21d6f416e326cd77fc), [`8e1bd48`](https://github.com/clerk/javascript/commit/8e1bd48a91dc07751493f41416d2a68b89e114cc)]:
+  - @clerk/react@6.7.4
+  - @clerk/backend@3.5.1
+  - @clerk/shared@4.15.1
+
 ## 7.4.3
 
 ### Patch Changes

diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nextjs",
-  "version": "7.4.3",
+  "version": "7.4.4",
   "description": "Clerk SDK for NextJS",
   "keywords": [
     "clerk",