clerk · clerk-cookie · May 29, 2026
diff --git a/.changeset/azp-cookie-warning-warn-once.md b/.changeset/azp-cookie-warning-warn-once.md
diff --git a/.changeset/backend-user-replace-email-phone-and-banned-locked.md b/.changeset/backend-user-replace-email-phone-and-banned-locked.md
diff --git a/.changeset/brown-singers-fall.md b/.changeset/brown-singers-fall.md
diff --git a/.changeset/fair-singers-consent.md b/.changeset/fair-singers-consent.md
diff --git a/.changeset/fix-pending-otp-reprepare.md b/.changeset/fix-pending-otp-reprepare.md
diff --git a/.changeset/huge-moments-poke.md b/.changeset/huge-moments-poke.md
diff --git a/.changeset/m2m-jwt-custom-claims.md b/.changeset/m2m-jwt-custom-claims.md
diff --git a/.changeset/moody-rules-carry.md b/.changeset/moody-rules-carry.md
diff --git a/.changeset/neat-mild-pale.md b/.changeset/neat-mild-pale.md
diff --git a/.changeset/remove-dev-cli-references.md b/.changeset/remove-dev-cli-references.md
diff --git a/.changeset/sharp-terms-boil.md b/.changeset/sharp-terms-boil.md
diff --git a/.changeset/silent-fastify-handshakes.md b/.changeset/silent-fastify-handshakes.md
diff --git a/.changeset/snapi-bump-version.md b/.changeset/snapi-bump-version.md
diff --git a/.changeset/social-coats-allow.md b/.changeset/social-coats-allow.md
diff --git a/.changeset/spa-dev-warning-env.md b/.changeset/spa-dev-warning-env.md
diff --git a/.changeset/tangy-ducks-end.md b/.changeset/tangy-ducks-end.md
diff --git a/.changeset/tar-security-bump.md b/.changeset/tar-security-bump.md
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/astro
 
+## 3.3.3
+
+### Patch Changes
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+
 ## 3.3.2
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "3.3.2",
+  "version": "3.3.3",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,23 @@
 # Change Log
 
+## 3.5.0
+
+### Minor Changes
+
+- Add support for new Backend API user endpoints: ([#8694](https://github.com/clerk/javascript/pull/8694)) by [@dmoerner](https://github.com/dmoerner)
+  - `users.replaceUserEmailAddress(userId, { emailAddress })` replaces all of a user's email addresses with a single verified, primary email address (`PUT /users/{user_id}/email_address`).
+  - `users.replaceUserPhoneNumber(userId, { phoneNumber })` replaces all of a user's phone numbers with a single verified, primary phone number (`PUT /users/{user_id}/phone_number`).
+  - `users.createUser` now accepts `banned` and `locked` parameters to create a user that is already banned or locked.
+
+### Patch Changes
+
+- Emit the "session token from cookie is missing the `azp` claim" warning once per process instead of on every authenticated request. An `azp`-less cookie token is reused across requests, so the previous unguarded `console.warn` could flood production logs. ([#8698](https://github.com/clerk/javascript/pull/8698)) by [@jacekradko](https://github.com/jacekradko)
+
+- Preserve custom claims when verifying JWT-format M2M tokens. `M2MToken.fromJwtPayload` previously hardcoded `claims` to `null`, so `client.m2m.verify()` (and request-level `auth()`) dropped any custom claims embedded in the token. Custom claims are now reconstructed from the verified payload by stripping only the structural claims the backend adds when minting the token (`iss`, `sub`, `exp`, `nbf`, `iat`, `jti`). User-supplied claims such as `aud` are preserved. Tokens without custom claims still return `claims: null`, consistent with the opaque-token path. ([#8697](https://github.com/clerk/javascript/pull/8697)) by [@jacekradko](https://github.com/jacekradko)
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+
 ## 3.4.14
 
 ### Patch Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "3.4.14",
+  "version": "3.5.0",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/chrome-extension/CHANGELOG.md b/packages/chrome-extension/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 3.1.32
+
+### Patch Changes
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`152c255`](https://github.com/clerk/javascript/commit/152c2555d0d9f11bd278ccee2b998ae6cd1fa7fd), [`846a145`](https://github.com/clerk/javascript/commit/846a14525c43c31ce41ae0bb518925ea247c3ec6), [`b09788e`](https://github.com/clerk/javascript/commit/b09788eb9059a9e8c22fdef0dcb3676ac749e728), [`b07afc4`](https://github.com/clerk/javascript/commit/b07afc4b3e8a43232fe6cee4fb19a8c62d4bb09b), [`a1d96f1`](https://github.com/clerk/javascript/commit/a1d96f181f0d58d70e0bb2720f30f5bbf2e95a7b)]:
+  - @clerk/shared@4.14.1
+  - @clerk/ui@1.14.1
+  - @clerk/react@6.7.3
+  - @clerk/clerk-js@6.13.1
+
 ## 3.1.31
 
 ### Patch Changes

diff --git a/packages/chrome-extension/package.json b/packages/chrome-extension/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/chrome-extension",
-  "version": "3.1.31",
+  "version": "3.1.32",
   "description": "Clerk SDK for Chrome extensions",
   "keywords": [
     "auth",

diff --git a/packages/clerk-js/CHANGELOG.md b/packages/clerk-js/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 6.13.1
+
+### Patch Changes
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+
 ## 6.13.0
 
 ### Minor Changes

diff --git a/packages/clerk-js/package.json b/packages/clerk-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-js",
-  "version": "6.13.0",
+  "version": "6.13.1",
   "description": "Clerk JS library",
   "keywords": [
     "clerk",

diff --git a/packages/expo-passkeys/CHANGELOG.md b/packages/expo-passkeys/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/expo-passkeys
 
+## 1.1.1
+
+### Patch Changes
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+
 ## 1.1.0
 
 ### Minor Changes

diff --git a/packages/expo-passkeys/package.json b/packages/expo-passkeys/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo-passkeys",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Passkeys library to be used with Clerk for expo",
   "keywords": [
     "react-native",

diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 3.3.1
+
+### Patch Changes
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+  - @clerk/react@6.7.3
+  - @clerk/clerk-js@6.13.1
+
 ## 3.3.0
 
 ### Minor Changes

diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "description": "Clerk React Native/Expo library",
   "keywords": [
     "react",

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 2.1.23
+
+### Patch Changes
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+
 ## 2.1.22
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "2.1.22",
+  "version": "2.1.23",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 3.1.33
+
+### Patch Changes
+
+- Fixed `clerkPlugin()` to honor `publishableKey` and `secretKey` passed in plugin options when authenticating Fastify requests. The plugin now also exposes `request.clerk`, which uses the same plugin keys and resolves the correct Clerk API host for non-production publishable keys. ([#8640](https://github.com/clerk/javascript/pull/8640)) by [@wobsoriano](https://github.com/wobsoriano)
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+
 ## 3.1.32
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "3.1.32",
+  "version": "3.1.33",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/hono/CHANGELOG.md b/packages/hono/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/hono
 
+## 0.1.33
+
+### Patch Changes
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+
 ## 0.1.32
 
 ### Patch Changes

diff --git a/packages/hono/package.json b/packages/hono/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/hono",
-  "version": "0.1.32",
+  "version": "0.1.33",
   "description": "Clerk SDK for Hono",
   "keywords": [
     "auth",

diff --git a/packages/localizations/CHANGELOG.md b/packages/localizations/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 4.7.1
+
+### Patch Changes
+
+- Layer architecture for configure steps per IdP and protocol on `<ConfigureSSO />` ([#8651](https://github.com/clerk/javascript/pull/8651)) by [@LauraBeatris](https://github.com/LauraBeatris)
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+
 ## 4.7.0
 
 ### Minor Changes

diff --git a/packages/localizations/package.json b/packages/localizations/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/localizations",
-  "version": "4.7.0",
+  "version": "4.7.1",
   "description": "Localizations for the Clerk components",
   "keywords": [
     "react",

diff --git a/packages/msw/CHANGELOG.md b/packages/msw/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/msw
 
+## 0.0.31
+
+### Patch Changes
+
+- Updated dependencies [[`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540)]:
+  - @clerk/shared@4.14.1
+
 ## 0.0.30
 
 ### Patch Changes

diff --git a/packages/msw/package.json b/packages/msw/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/msw",
-  "version": "0.0.30",
+  "version": "0.0.31",
   "private": true,
   "sideEffects": false,
   "type": "module",

diff --git a/packages/nextjs/CHANGELOG.md b/packages/nextjs/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 7.4.3
+
+### Patch Changes
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+  - @clerk/react@6.7.3
+
 ## 7.4.2
 
 ### Patch Changes

diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nextjs",
-  "version": "7.4.2",
+  "version": "7.4.3",
   "description": "Clerk SDK for NextJS",
   "keywords": [
     "clerk",

diff --git a/packages/nuxt/CHANGELOG.md b/packages/nuxt/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @clerk/nuxt
 
+## 2.5.3
+
+### Patch Changes
+
+- Updated dependencies [[`1c42351`](https://github.com/clerk/javascript/commit/1c42351fd7a77d7303a8652cca97d64b9ac9d129), [`1701e0f`](https://github.com/clerk/javascript/commit/1701e0f5da33ffd7b74f397f8727837ae1526516), [`c3df67a`](https://github.com/clerk/javascript/commit/c3df67a231adff73fa36563718d9b94e6bb2a540), [`be55c4e`](https://github.com/clerk/javascript/commit/be55c4e405777014dcca6de7624c5b6151157f4f)]:
+  - @clerk/backend@3.5.0
+  - @clerk/shared@4.14.1
+  - @clerk/vue@2.3.3
+
 ## 2.5.2
 
 ### Patch Changes

diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nuxt",
-  "version": "2.5.2",
+  "version": "2.5.3",
   "description": "Clerk SDK for Nuxt",
   "keywords": [
     "clerk",