Skip to content

chore(root-deps)(deps): bump @clerk/nextjs from 7.2.7 to 7.3.1#703

Open
dependabot[bot] wants to merge 1 commit intopreviewfrom
dependabot/npm_and_yarn/preview/clerk/nextjs-7.3.0
Open

chore(root-deps)(deps): bump @clerk/nextjs from 7.2.7 to 7.3.1#703
dependabot[bot] wants to merge 1 commit intopreviewfrom
dependabot/npm_and_yarn/preview/clerk/nextjs-7.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Bumps @clerk/nextjs from 7.2.7 to 7.3.1.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.3.1

Patch Changes

  • Enforce middleware authorization during the keyless bootstrap window. auth.protect() and custom authorization checks now fail closed instead of being bypassed while the publishable key is being provisioned. (#8369) by @​jacekradko

  • Updated dependencies [9e9230c, 68d32df, 1c27d4d, 1001193]:

    • @​clerk/shared@​4.10.0
    • @​clerk/react@​6.6.0
    • @​clerk/backend@​3.4.5

@​clerk/nextjs@​7.3.0

Minor Changes

  • Expose OAuthConsent as a public component export across React-based SDKs. (#8381) by @​wobsoriano

    Example:

    import { OAuthConsent } from '@clerk/react';
export default function Page() {
return <OAuthConsent />;
}

Patch Changes

@​clerk/nextjs@​7.2.9

Patch Changes

  • Updated dependencies [1bfd8ab]:
    • @​clerk/shared@​4.8.7
    • @​clerk/backend@​3.4.3
    • @​clerk/react@​6.4.7

@​clerk/nextjs@​7.2.8

Patch Changes

  • Use a constant-time comparison when validating the integrity signature on the middleware-to-origin auth header handoff (assertTokenSignature). The previous !== compare was timing-variable; the new helper is synchronous and runtime-agnostic so it works in both Node and Edge Runtime. (#8411) by @​jacekradko

  • Auto-proxy FAPI requests for .vercel.app subdomains. When deployed to a .vercel.app domain without explicit proxy or domain configuration, the SDK automatically routes Frontend API requests through /__clerk on the app's own origin. This enables Clerk production mode on Vercel deployments without manual proxy setup. (#8035) by @​brkalow

  • Updated dependencies [9b57986, a9f9b29, e0a63f9]:

    • @​clerk/shared@​4.8.6
    • @​clerk/backend@​3.4.2

... (truncated)

Changelog

Sourced from @​clerk/nextjs's changelog.

7.3.1

Patch Changes

  • Enforce middleware authorization during the keyless bootstrap window. auth.protect() and custom authorization checks now fail closed instead of being bypassed while the publishable key is being provisioned. (#8369) by @​jacekradko

  • Updated dependencies [9e9230c, 68d32df, 1c27d4d, 1001193]:

    • @​clerk/shared@​4.10.0
    • @​clerk/react@​6.6.0
    • @​clerk/backend@​3.4.5

7.3.0

Minor Changes

  • Expose OAuthConsent as a public component export across React-based SDKs. (#8381) by @​wobsoriano

    Example:

    import { OAuthConsent } from '@clerk/react';
export default function Page() {
return <OAuthConsent />;
}

Patch Changes

7.2.9

Patch Changes

  • Updated dependencies [1bfd8ab]:
    • @​clerk/shared@​4.8.7
    • @​clerk/backend@​3.4.3
    • @​clerk/react@​6.4.7

7.2.8

Patch Changes

  • Use a constant-time comparison when validating the integrity signature on the middleware-to-origin auth header handoff (assertTokenSignature). The previous !== compare was timing-variable; the new helper is synchronous and runtime-agnostic so it works in both Node and Edge Runtime. (#8411) by @​jacekradko

  • Auto-proxy FAPI requests for .vercel.app subdomains. When deployed to a .vercel.app domain without explicit proxy or domain configuration, the SDK automatically routes Frontend API requests through /__clerk on the app's own origin. This enables Clerk production mode on Vercel deployments without manual proxy setup. (#8035) by @​brkalow

... (truncated)

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 4, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: automated, monorepo-root, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from arolariu as a code owner May 4, 2026 03:07
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/preview/clerk/nextjs-7.3.0 branch from f457886 to 5804427 Compare May 5, 2026 18:58
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 5, 2026 •
edited
Loading

❌ Code Hygiene Report: Issues Found

Commit: 0c9a9b6 | PR: #703

📑 Table of Contents

Section Status
📊 Code Statistics ✅
🎨 Formatting ❌
🔍 Linting ❌
🧪 Unit Tests ✅

📋 Check Summary

Check Status Duration Summary
📊 Stats ✅ 803ms 0 files changed, +0 -0
🎨 Format ❌ 1m 23s 12 file(s) need formatting
🔍 Lint ❌ 3.4s 3 error(s), 0 warning(s)
🧪 Test ✅ 2m 6s All 1147 tests passed

📊 Code Statistics

Changes vs Main Branch

Metric Value
📁 Files Changed 0
➕ Lines Added +0
➖ Lines Deleted -0
🔄 Churn 0
📈 Net Change +0
🔄 Changes Since Previous Commit
Metric Value
Files Changed 2
Lines Added +9229
Lines Deleted -4972

📦 Bundle Size Analysis (vs Main)

`sites/arolariu.ro` - +170 kB (28 file(s) changed)
File Main Preview Diff Status
package.json 3.67 kB 3.69 kB +20 B 📝
src/app/playground/workers/island.tsx 0 B 17 kB +17 kB 🆕
src/app/playground/workers/page.tsx 0 B 1.61 kB +1.61 kB 🆕
src/app/playground/workers/playground.worker.ts 0 B 2.88 kB +2.88 kB 🆕
src/app/playground/workers/worker-playground.spec.ts 0 B 7.49 kB +7.49 kB 🆕
src/workers/README.md 0 B 9.27 kB +9.27 kB 🆕
src/workers/host/createPortPair.test.ts 0 B 1.72 kB +1.72 kB 🆕
src/workers/host/createPortPair.ts 0 B 1.73 kB +1.73 kB 🆕
src/workers/host/createWorkerHost.test.ts 0 B 35.8 kB +35.8 kB 🆕
src/workers/host/createWorkerHost.ts 0 B 34.5 kB +34.5 kB 🆕
src/workers/host/index.ts 0 B 580 B +580 B 🆕
src/workers/host/mockWorker.ts 0 B 4.62 kB +4.62 kB 🆕
src/workers/host/telemetryBridge.test.ts 0 B 7.09 kB +7.09 kB 🆕
src/workers/host/telemetryBridge.ts 0 B 3.89 kB +3.89 kB 🆕
src/workers/host/workerCapabilities.test.ts 0 B 2.44 kB +2.44 kB 🆕
src/workers/host/workerCapabilities.ts 0 B 2.05 kB +2.05 kB 🆕
src/workers/host/workerEnvelope.test.ts 0 B 3.93 kB +3.93 kB 🆕
src/workers/host/workerEnvelope.ts 0 B 4.18 kB +4.18 kB 🆕
src/workers/host/workerErrors.test.ts 0 B 2.3 kB +2.3 kB 🆕
src/workers/host/workerErrors.ts 0 B 2.52 kB +2.52 kB 🆕
... ... ... ... 8 more files

Total: 10 MB → 10.2 MB (+170 kB)

`sites/api.arolariu.ro` - no change (0 file(s) changed)

No changes in this folder

Total: 2.14 MB → 2.14 MB (no change)

`sites/docs.arolariu.ro` - no change (0 file(s) changed)

No changes in this folder

Total: 214 kB → 214 kB (no change)

🎨 Formatting

❌ 12 file(s) need formatting:

View files requiring formatting
  • package.json
  • sites/arolariu.ro/src/app/playground/workers/island.tsx
  • sites/arolariu.ro/src/workers/host/createWorkerHost.test.ts
  • sites/arolariu.ro/src/workers/host/createWorkerHost.ts
  • sites/arolariu.ro/src/workers/host/index.ts
  • sites/arolariu.ro/src/workers/host/mockWorker.ts
  • sites/arolariu.ro/src/workers/host/telemetryBridge.test.ts
  • sites/arolariu.ro/src/workers/host/telemetryBridge.ts
  • sites/arolariu.ro/src/workers/host/workerErrors.test.ts
  • sites/arolariu.ro/src/workers/index.ts
  • sites/arolariu.ro/src/workers/runtime/exposeWorker.test.ts
  • sites/arolariu.ro/src/workers/runtime/index.ts

🔧 How to Fix

npm run format

🔍 Linting

❌ ESLint found 3 error(s) and 0 warning(s)

View raw output 

> @arolariu/monorepo@0.0.0 lint
> node scripts/lint.ts all


╔════════════════════════════════════════╗
║    arolariu.ro Code Linter Tool        ║
╚════════════════════════════════════════╝


🔎 Running ESLint for: all
⏱️  Running lint on all targets in parallel...

  🧵 Dispatching parallel workers...
     Main process PID: 2907
     Worker pool: min=1, max=3

[11:27:31.854] 🚀 Worker #1 spawned for task "packages"
[11:27:31.855] 🚀 Worker #2 spawned for task "website"
[11:27:31.855] 🚀 Worker #3 spawned for task "cv"


  ⏳ Progress: [░░░░░░░░░░░░░░░░░░░░] 0/3 workers completed
  ⏳ Progress: [███████░░░░░░░░░░░░░] 1/3 workers completed
  ⏳ Progress: [█████████████░░░░░░░] 2/3 workers completed
  ⏳ Progress: [████████████████████] 3/3 workers completed

[11:27:34.927] ❌ Worker #1 finished "packages" in 2.58s
[11:27:34.927] ❌ Worker #2 finished "website" in 2.84s
[11:27:34.927] ❌ Worker #3 finished "cv" in 2.74s

  📊 Worker Timeline
  ──────────────────────────────────────────────────────────────
  packages   │████████████████████████████████████░░░░│    2.58s
  website    │████████████████████████████████████████│    2.84s
  cv         │███████████████████████████████████████░│    2.74s
  ──────────────────────────────────────────────────────────────
              0s                            2.84s

─────────────────────────────────────────────────

🔍 ESLint config: [@arolariu/packages] [Worker #1]
   [init: 2520ms, work: 0ms, total: 2576ms] [0 files] [167.08 MB]
  ✗ Worker error: You are using an outdated version of the 'jiti' library. Please update to the latest version of 'jiti' to ensure compatibility and access to the latest features.
─────────────────────────────────────────────────

─────────────────────────────────────────────────

🔍 ESLint config: [@arolariu/website] [Worker #2]
   [init: 2816ms, work: 0ms, total: 2842ms] [0 files] [167.40 MB]
  ✗ Worker error: You are using an outdated version of the 'jiti' library. Please update to the latest version of 'jiti' to ensure compatibility and access to the latest features.
─────────────────────────────────────────────────

─────────────────────────────────────────────────

🔍 ESLint config: [@arolariu/cv] [Worker #3]
   [init: 2702ms, work: 0ms, total: 2738ms] [0 files] [167.72 MB]
  ✗ Worker error: You are using an outdated version of the 'jiti' library. Please update to the latest version of 'jiti' to ensure compatibility and access to the latest features.
─────────────────────────────────────────────────

  📊 Resource Usage:
     Total files linted: 0
     Peak memory (max worker): 167.72 MB
     Combined memory (all workers): 502.21 MB

📊 Summary: 3 error(s), 0 warning(s)

❌ Linting completed with errors

🔧 How to Fix

npm run lint

🧪 Unit Tests

✅ All 1147 tests passed in 4.0s

🔗 View Workflow Run | Generated at 2026-05-06T11:31:09.009Z

@dependabot
chore(root-deps)(deps): bump @clerk/nextjs from 7.2.7 to 7.3.1
d5e9472 
Bumps [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) from 7.2.7 to 7.3.1.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.3.1/packages/nextjs)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(root-deps)(deps): bump @clerk/nextjs from 7.2.7 to 7.3.0 chore(root-deps)(deps): bump @clerk/nextjs from 7.2.7 to 7.3.1 May 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/preview/clerk/nextjs-7.3.0 branch from 5804427 to d5e9472 Compare May 6, 2026 11:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arolariu arolariu Awaiting requested review from arolariu arolariu is a code owner

Assignees

@arolariu arolariu

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@arolariu