ci(repo): Version packages

[clerk-cookie]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@clerk/astro@4.0.0

Major Changes

• Add support for Astro 7 and drop support for Astro 4. If you are still on Astro 4, follow the Astro upgrade guide to upgrade your project before updating @clerk/astro. (#8974) by @wobsoriano

• Remove createRouteMatcher from @clerk/astro/server. Use resource-based auth checks instead: move auth checks into each Astro page, API route, or server-side handler that accesses protected data. Middleware-based auth checks rely on path matching, which can diverge from how Astro routes requests and leave protected resources reachable. (#8974) by @wobsoriano

  import type { APIRoute } from 'astro';
  
  export const GET: APIRoute = ({ locals }) => {
    const { userId } = locals.auth();
  
    if (!userId) {
      return new Response('Unauthorized', { status: 401 });
    }
  
    return Response.json({ userId });
  };

  If you want to hand this work to a coding agent, use this migration prompt:

  Migrate my Astro project away from Clerk's removed `createRouteMatcher` API.
  
  1. Open `src/middleware.ts` (or `src/middleware.js`) and find every matcher created
     with `createRouteMatcher` from `@clerk/astro/server`, along with the middleware
     logic that uses it (returning 401s, calling `auth().redirectToSignIn()`, etc.).
  2. For every route those matchers protected, move the auth check into the resource itself:
     - In `.astro` pages, add this to the frontmatter:
       const { userId, redirectToSignIn } = Astro.locals.auth();
       if (!userId) return redirectToSignIn();
     - In API routes and server handlers, add this at the top of the handler:
       const { userId } = locals.auth();
       if (!userId) return new Response('Unauthorized', { status: 401 });
     - Keep any role or permission checks (`auth().has(...)`) with the resource as well.
  3. Remove the `createRouteMatcher` import and calls from the middleware. Keep
     `clerkMiddleware()` itself. Middleware logic unrelated to auth protection
     (locale redirects, headers, etc.) may stay, using plain `URL`/pathname checks.
  4. Make sure every page and endpoint previously covered by a matcher pattern
     (including glob patterns like `/dashboard(.*)`) now has its own check, then
     verify the project builds.

@clerk/nextjs@7.5.22

Patch Changes

• Remove the redundant https://*.client.protect.clerk.com source from CSP headers generated by clerkMiddleware(). (#9207) by @mwickett

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Jul 21, 2026 8:40pm
swingset	Ready	Preview, Comment	Jul 21, 2026 8:40pm

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9206

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9206

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9206

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9206

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9206

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9206

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9206

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9206

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9206

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9206

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9206

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9206

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9206

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9206

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9206

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9206

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9206

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9206

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9206

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9206

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9206

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9206

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9206

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9206

commit: 49bb503

[github-actions]

API Changes Report

Generated by Break Check on 2026-07-21T20:43:02.694Z

Summary

Metric	Count
Packages analyzed	19
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

---

Report generated by Break Check

_{Last ran on 49bb503.}

[kimdcottrell]

I just wanted to pop in and let you know that this PR has an audience of at least me. I am extremely excited about Astro 7 support. haha

You guys are great. 🎉