clerk · clerk-cookie · Jul 18, 2026
diff --git a/.changeset/expo-e2e-split-job.md b/.changeset/expo-e2e-split-job.md
diff --git a/.changeset/heavy-melons-argue.md b/.changeset/heavy-melons-argue.md
diff --git a/.changeset/khaki-chairs-kiss.md b/.changeset/khaki-chairs-kiss.md
diff --git a/.changeset/tidy-donuts-attend.md b/.changeset/tidy-donuts-attend.md
diff --git a/.changeset/tidy-tokens-activate.md b/.changeset/tidy-tokens-activate.md
diff --git a/.changeset/violet-planes-repeat.md b/.changeset/violet-planes-repeat.md
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/astro
 
+## 3.4.20
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 3.4.19
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "3.4.19",
+  "version": "3.4.20",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,24 @@
 # Change Log
 
+## 3.12.0
+
+### Minor Changes
+
+- Fix a cross-origin handshake bypass where `isKnownClerkReferrer()` trusted overly broad referrer hosts as Clerk-owned: any `accounts.*` host (e.g. `accounts.attacker.com`), plus dev account-portal domains (`*.accounts.dev` and legacy suffixes) on production instances. These let unrelated origins skip the handshake and its session-freshness check. The referrer is now trusted only for the accounts portal derived from the instance's frontend API, plus dev account-portal domains on non-production instances. ([#9145](https://github.com/clerk/javascript/pull/9145)) by [@dominic-clerk](https://github.com/dominic-clerk)
+
+- Add an optional `orgId` parameter to `createSignInToken()` for activating an Organization when the token is redeemed. ([#9192](https://github.com/clerk/javascript/pull/9192)) by [@swolfand](https://github.com/swolfand)
+
+### Patch Changes
+
+- Add the required `provider` field to `CreateEnterpriseConnectionParams`. The Backend API has always required `provider` when creating an enterprise connection, so calls to `createEnterpriseConnection()` without it type-checked but failed at runtime. The field is typed to the supported provider values (`'saml_custom'`, `'saml_okta'`, `'saml_google'`, `'saml_microsoft'`, `'oidc_custom'`, `'oidc_github_enterprise'`, `'oidc_gitlab'`), so unsupported values are also caught at compile time. ([#9155](https://github.com/clerk/javascript/pull/9155)) by [@manovotny](https://github.com/manovotny)
+
+- Add the remaining optional enterprise connection parameters supported by the Backend API. `CreateEnterpriseConnectionParams` and `UpdateEnterpriseConnectionParams` now accept `allowOrganizationAccountLinking`, `customAttributes`, `authenticatable`, and `disableJitProvisioning` (update also accepts `disableAdditionalIdentifications`), and SAML params accept `loginHint` for configuring the `login_hint` sent to the IdP. ([#9155](https://github.com/clerk/javascript/pull/9155)) by [@manovotny](https://github.com/manovotny)
+
+- Align `CreateEnterpriseConnectionParams` and `UpdateEnterpriseConnectionParams` with the Backend API contract: ([#9155](https://github.com/clerk/javascript/pull/9155)) by [@manovotny](https://github.com/manovotny)
+  - `name` and `domains` are now required on `CreateEnterpriseConnectionParams`. The Backend API already rejected requests missing either of them, so calls that omitted these fields failed at runtime; the types now surface this at compile time.
+  - Deprecated `syncUserAttributes` on `CreateEnterpriseConnectionParams`. The Backend API ignores this parameter on create; use `updateEnterpriseConnection()` to set it.
+  - Deprecated `provider` on `UpdateEnterpriseConnectionParams`. The Backend API ignores this parameter on update; the provider cannot be changed after creation.
+
 ## 3.11.7
 
 ### Patch Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "3.11.7",
+  "version": "3.12.0",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 2.1.44
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 2.1.43
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "2.1.43",
+  "version": "2.1.44",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 3.1.54
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 3.1.53
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "3.1.53",
+  "version": "3.1.54",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/hono/CHANGELOG.md b/packages/hono/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/hono
 
+## 0.1.54
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 0.1.53
 
 ### Patch Changes

diff --git a/packages/hono/package.json b/packages/hono/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/hono",
-  "version": "0.1.53",
+  "version": "0.1.54",
   "description": "Clerk SDK for Hono",
   "keywords": [
     "auth",

diff --git a/packages/nextjs/CHANGELOG.md b/packages/nextjs/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 7.5.21
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 7.5.20
 
 ### Patch Changes

diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nextjs",
-  "version": "7.5.20",
+  "version": "7.5.21",
   "description": "Clerk SDK for NextJS",
   "keywords": [
     "clerk",

diff --git a/packages/nuxt/CHANGELOG.md b/packages/nuxt/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/nuxt
 
+## 2.6.20
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 2.6.19
 
 ### Patch Changes

diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nuxt",
-  "version": "2.6.19",
+  "version": "2.6.20",
   "description": "Clerk SDK for Nuxt",
   "keywords": [
     "clerk",

diff --git a/packages/react-router/CHANGELOG.md b/packages/react-router/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 3.5.13
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 3.5.12
 
 ### Patch Changes

diff --git a/packages/react-router/package.json b/packages/react-router/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/react-router",
-  "version": "3.5.12",
+  "version": "3.5.13",
   "description": "Clerk SDK for React Router",
   "keywords": [
     "clerk",

diff --git a/packages/tanstack-react-start/CHANGELOG.md b/packages/tanstack-react-start/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/tanstack-react-start
 
+## 1.4.21
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 1.4.20
 
 ### Patch Changes

diff --git a/packages/tanstack-react-start/package.json b/packages/tanstack-react-start/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/tanstack-react-start",
-  "version": "1.4.20",
+  "version": "1.4.21",
   "description": "Clerk SDK for TanStack React Start",
   "keywords": [
     "clerk",

diff --git a/packages/testing/CHANGELOG.md b/packages/testing/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/testing
 
+## 2.2.11
+
+### Patch Changes
+
+- Updated dependencies [[`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`ff5d991`](https://github.com/clerk/javascript/commit/ff5d991a2cb4de15c45e9666815fdfddf7bec862), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a), [`26530ce`](https://github.com/clerk/javascript/commit/26530ce5cff5f644e1656fdd418b343fb3773bec), [`a009d91`](https://github.com/clerk/javascript/commit/a009d919b32a08fac7b2695bedfa840fd047e88a)]:
+  - @clerk/backend@3.12.0
+
 ## 2.2.10
 
 ### Patch Changes

diff --git a/packages/testing/package.json b/packages/testing/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/testing",
-  "version": "2.2.10",
+  "version": "2.2.11",
   "description": "Utilities to help you create E2E test suites for apps using Clerk",
   "keywords": [
     "auth",