clerk · wobsoriano · Jun 25, 2026 · Jun 25, 2026
diff --git a/.changeset/bold-horses-rhyme.md b/.changeset/bold-horses-rhyme.md
diff --git a/.changeset/eslint-plugin-add-promise-type.md b/.changeset/eslint-plugin-add-promise-type.md
diff --git a/.changeset/eslint-plugin-fixer-quote-style.md b/.changeset/eslint-plugin-fixer-quote-style.md
diff --git a/.changeset/eslint-plugin-or-auth-guards.md b/.changeset/eslint-plugin-or-auth-guards.md
diff --git a/.changeset/eslint-plugin-project-relative-paths.md b/.changeset/eslint-plugin-project-relative-paths.md
diff --git a/.changeset/expo-bump-clerk-android-1-0-31.md b/.changeset/expo-bump-clerk-android-1-0-31.md
diff --git a/.changeset/fix-release-notify-nested-packages.md b/.changeset/fix-release-notify-nested-packages.md
diff --git a/.changeset/fresh-astro-compiler.md b/.changeset/fresh-astro-compiler.md
diff --git a/.changeset/old-dancers-judge.md b/.changeset/old-dancers-judge.md
diff --git a/.changeset/ripe-ways-greet.md b/.changeset/ripe-ways-greet.md
diff --git a/.changeset/soft-astro-routes.md b/.changeset/soft-astro-routes.md
diff --git a/.changeset/sso-secondary-button-colors.md b/.changeset/sso-secondary-button-colors.md
diff --git a/.changeset/tokencache-broadcast-eviction.md b/.changeset/tokencache-broadcast-eviction.md
diff --git a/.changeset/ui-tab-focus-ring.md b/.changeset/ui-tab-focus-ring.md
diff --git a/.changeset/wet-ants-kind.md b/.changeset/wet-ants-kind.md
diff --git a/.changeset/young-jeans-own.md b/.changeset/young-jeans-own.md
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,33 @@
 # @clerk/astro
 
+## 3.4.8
+
+### Patch Changes
+
+- Fix custom user button menu item rendering for Astro's stricter compiler. ([#8980](https://github.com/clerk/javascript/pull/8980)) by [@wobsoriano](https://github.com/wobsoriano)
+
+- Deprecate `createRouteMatcher()` in favor of resource-based auth checks. ([#8981](https://github.com/clerk/javascript/pull/8981)) by [@wobsoriano](https://github.com/wobsoriano)
+
+  Instead of protecting routes only from middleware, move auth checks into each protected Astro page, API route, or server-side handler:
+
+  ```ts
+  import type { APIRoute } from 'astro';
+
+  export const GET: APIRoute = ({ locals }) => {
+    const { userId } = locals.auth();
+
+    if (!userId) {
+      return new Response('Unauthorized', { status: 401 });
+    }
+
+    return Response.json({ userId });
+  };
+  ```
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+  - @clerk/backend@3.8.4
+
 ## 3.4.7
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "3.4.7",
+  "version": "3.4.8",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 3.8.4
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+
 ## 3.8.3
 
 ### Patch Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "3.8.3",
+  "version": "3.8.4",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/chrome-extension/CHANGELOG.md b/packages/chrome-extension/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 3.1.44
+
+### Patch Changes
+
+- Updated dependencies [[`afe9a90`](https://github.com/clerk/javascript/commit/afe9a90c5bee0e22a8b36040ec63690b6629ba22), [`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8), [`2492043`](https://github.com/clerk/javascript/commit/24920437b0c61c4852be830d5495e53ae956e37d), [`0691d46`](https://github.com/clerk/javascript/commit/0691d468e474672aa962c867789f06a3b71ba33a), [`a1e37f4`](https://github.com/clerk/javascript/commit/a1e37f466908ab5da94462ad1ebbaeb2549c00e5)]:
+  - @clerk/ui@1.23.0
+  - @clerk/clerk-js@6.22.0
+  - @clerk/shared@4.22.0
+  - @clerk/react@6.11.1
+
 ## 3.1.43
 
 ### Patch Changes

diff --git a/packages/chrome-extension/package.json b/packages/chrome-extension/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/chrome-extension",
-  "version": "3.1.43",
+  "version": "3.1.44",
   "description": "Clerk SDK for Chrome extensions",
   "keywords": [
     "auth",

diff --git a/packages/clerk-js/CHANGELOG.md b/packages/clerk-js/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Change Log
 
+## 6.22.0
+
+### Minor Changes
+
+- Handle expired organization domains on self-serve SSO flow, allowing to trigger a new verification ([#9000](https://github.com/clerk/javascript/pull/9000)) by [@LauraBeatris](https://github.com/LauraBeatris)
+
+### Patch Changes
+
+- Prevent a cross-tab broadcast failure from evicting a freshly cached session token. Previously, if broadcasting a token update to other tabs threw (for example when the `BroadcastChannel` was racing a close), the token that was just cached got dropped and the next `getToken()` made an unnecessary network request. The broadcast is now isolated so a failure no longer discards a valid cached token. ([#8969](https://github.com/clerk/javascript/pull/8969)) by [@jacekradko](https://github.com/jacekradko)
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+
 ## 6.21.1
 
 ### Patch Changes

diff --git a/packages/clerk-js/package.json b/packages/clerk-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-js",
-  "version": "6.21.1",
+  "version": "6.22.0",
   "description": "Clerk JS library",
   "keywords": [
     "clerk",

diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @clerk/electron
 
+## 0.0.5
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8), [`2492043`](https://github.com/clerk/javascript/commit/24920437b0c61c4852be830d5495e53ae956e37d)]:
+  - @clerk/clerk-js@6.22.0
+  - @clerk/shared@4.22.0
+  - @clerk/react@6.11.1
+
 ## 0.0.4
 
 ## 0.0.3

diff --git a/packages/electron/package.json b/packages/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/electron",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Clerk SDK for Electron",
   "keywords": [
     "clerk",

diff --git a/packages/eslint-plugin/CHANGELOG.md b/packages/eslint-plugin/CHANGELOG.md
@@ -1,5 +1,27 @@
 # @clerk/eslint-plugin
 
+## 0.2.0
+
+### Minor Changes
+
+- The `require-auth-protection` rule now matches `protected` and `public` globs relative to the project root, instead of relative to `app/`. You can specify `rootDir` to control the project root. ([#8942](https://github.com/clerk/javascript/pull/8942)) by [@Ephem](https://github.com/Ephem)
+
+  **Breaking change:** If your project uses the `src/app/` folder structure, you need to rewrite your globs. For example, instead of `public: ['app/sign-in/**']`, use: `public: ['src/app/sign-in/**']`.
+
+### Patch Changes
+
+- Handle non-promise return types when `require-auth-protection` rule fixer makes the function `async`. ([#8941](https://github.com/clerk/javascript/pull/8941)) by [@Ephem](https://github.com/Ephem)
+
+  The eslint rule fixer will now wrap a non-promise return type with `Promise<>` to produce valid TypeScript.
+
+- The `require-auth-protection` fixer now matches the string quote style of existing imports when inserting a new `auth` import. ([#8941](https://github.com/clerk/javascript/pull/8941)) by [@Ephem](https://github.com/Ephem)
+
+  Previously, new imports always used single quotes regardless of how other imports in the file were quoted.
+
+- The `require-auth-protection` rule now accepts OR-conditions like `if (!isAuthenticated || otherCondition)` when determining if a resource is protected. ([#8941](https://github.com/clerk/javascript/pull/8941)) by [@Ephem](https://github.com/Ephem)
+
+  Previously, only bare auth checks such as `if (!isAuthenticated)` were recognized. Guards with only `||` are safe but were incorrectly reported as missing protection.
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/eslint-plugin/package.json b/packages/eslint-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/eslint-plugin",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "ESLint plugin for enforcing Clerk patterns across JavaScript frameworks.",
   "keywords": [
     "auth",

diff --git a/packages/expo-passkeys/CHANGELOG.md b/packages/expo-passkeys/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/expo-passkeys
 
+## 1.1.10
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+
 ## 1.1.9
 
 ### Patch Changes

diff --git a/packages/expo-passkeys/package.json b/packages/expo-passkeys/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo-passkeys",
-  "version": "1.1.9",
+  "version": "1.1.10",
   "description": "Passkeys library to be used with Clerk for expo",
   "keywords": [
     "react-native",

diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Change Log
 
+## 3.6.1
+
+### Patch Changes
+
+- Bump the bundled `clerk-android` SDK (`clerk-android-api` and `clerk-android-ui`) from `1.0.30` to `1.0.31`. See the Clerk Android release: https://github.com/clerk/clerk-android/releases/tag/v1.0.31. ([#8996](https://github.com/clerk/javascript/pull/8996)) by [@clerk-cookie](https://github.com/clerk-cookie)
+
+- Allow Expo native theme JSON to configure secondary button background and foreground colors for native SSO buttons. ([#8997](https://github.com/clerk/javascript/pull/8997)) by [@wobsoriano](https://github.com/wobsoriano)
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8), [`2492043`](https://github.com/clerk/javascript/commit/24920437b0c61c4852be830d5495e53ae956e37d)]:
+  - @clerk/clerk-js@6.22.0
+  - @clerk/shared@4.22.0
+  - @clerk/react@6.11.1
+
 ## 3.6.0
 
 ### Minor Changes

diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo",
-  "version": "3.6.0",
+  "version": "3.6.1",
   "description": "Clerk React Native/Expo library",
   "keywords": [
     "react",

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 2.1.32
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+  - @clerk/backend@3.8.4
+
 ## 2.1.31
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "2.1.31",
+  "version": "2.1.32",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 3.1.42
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+  - @clerk/backend@3.8.4
+
 ## 3.1.41
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "3.1.41",
+  "version": "3.1.42",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/headless/CHANGELOG.md b/packages/headless/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/headless
 
+## 0.0.4
+
+### Patch Changes
+
+- Updated dependencies [[`19ce04a`](https://github.com/clerk/javascript/commit/19ce04aab6387c430dc41e51c6130a88cc543cc8)]:
+  - @clerk/shared@4.22.0
+
 ## 0.0.3
 
 ### Patch Changes