clerk · clerk-cookie · Aug 19, 2026
diff --git a/.changeset/dialog-close-confirmation.md b/.changeset/dialog-close-confirmation.md
diff --git a/.changeset/mosaic-alert-dialog.md b/.changeset/mosaic-alert-dialog.md
diff --git a/.changeset/reject-non-session-jwt-categories.md b/.changeset/reject-non-session-jwt-categories.md
diff --git a/.changeset/rude-pianos-smoke.md b/.changeset/rude-pianos-smoke.md
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/astro
 
+## 4.0.16
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+
 ## 4.0.15
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## 3.16.9
+
+### Patch Changes
+
+- Reject JWT-template tokens where a session or handshake token is expected. `authenticateRequest()` now returns a signed-out state with reason `token-type-mismatch` for such a token in the `Authorization` header or `__session` cookie. Tokens with no category tag, and instances configured to omit it, are unaffected. ([#9469](https://github.com/clerk/javascript/pull/9469)) by [@dominic-clerk](https://github.com/dominic-clerk)
+
 ## 3.16.8
 
 ### Patch Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "3.16.8",
+  "version": "3.16.9",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/chrome-extension/CHANGELOG.md b/packages/chrome-extension/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 3.1.73
+
+### Patch Changes
+
+- Updated dependencies [[`a52d486`](https://github.com/clerk/javascript/commit/a52d486ee6399a23a8506aa87477cdb352c6802f)]:
+  - @clerk/ui@1.30.5
+  - @clerk/react@6.14.4
+  - @clerk/clerk-js@6.29.2
+
 ## 3.1.72
 
 ### Patch Changes

diff --git a/packages/chrome-extension/package.json b/packages/chrome-extension/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/chrome-extension",
-  "version": "3.1.72",
+  "version": "3.1.73",
   "description": "Clerk SDK for Chrome extensions",
   "keywords": [
     "auth",

diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @clerk/electron
 
+## 0.0.34
+
+### Patch Changes
+
+- Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an `https` origin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged. ([#9500](https://github.com/clerk/javascript/pull/9500)) by [@jeremy-clerk](https://github.com/jeremy-clerk)
+
+- Updated dependencies []:
+  - @clerk/react@6.14.4
+  - @clerk/clerk-js@6.29.2
+
 ## 0.0.33
 
 ### Patch Changes

diff --git a/packages/electron/package.json b/packages/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/electron",
-  "version": "0.0.33",
+  "version": "0.0.34",
   "description": "Clerk SDK for Electron",
   "keywords": [
     "clerk",

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 2.1.60
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+
 ## 2.1.59
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "2.1.59",
+  "version": "2.1.60",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 3.1.70
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+
 ## 3.1.69
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "3.1.69",
+  "version": "3.1.70",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/hono/CHANGELOG.md b/packages/hono/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/hono
 
+## 0.1.70
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+
 ## 0.1.69
 
 ### Patch Changes

diff --git a/packages/hono/package.json b/packages/hono/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/hono",
-  "version": "0.1.69",
+  "version": "0.1.70",
   "description": "Clerk SDK for Hono",
   "keywords": [
     "auth",

diff --git a/packages/nextjs/CHANGELOG.md b/packages/nextjs/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 7.7.9
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+  - @clerk/react@6.14.4
+
 ## 7.7.8
 
 ### Patch Changes

diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nextjs",
-  "version": "7.7.8",
+  "version": "7.7.9",
   "description": "Clerk SDK for NextJS",
   "keywords": [
     "clerk",

diff --git a/packages/nuxt/CHANGELOG.md b/packages/nuxt/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/nuxt
 
+## 3.0.12
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+  - @clerk/vue@2.4.30
+
 ## 3.0.11
 
 ### Patch Changes

diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nuxt",
-  "version": "3.0.11",
+  "version": "3.0.12",
   "description": "Clerk SDK for Nuxt",
   "keywords": [
     "clerk",

diff --git a/packages/react-router/CHANGELOG.md b/packages/react-router/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 3.6.14
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+  - @clerk/react@6.14.4
+
 ## 3.6.13
 
 ### Patch Changes

diff --git a/packages/react-router/package.json b/packages/react-router/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/react-router",
-  "version": "3.6.13",
+  "version": "3.6.14",
   "description": "Clerk SDK for React Router",
   "keywords": [
     "clerk",

diff --git a/packages/swingset/CHANGELOG.md b/packages/swingset/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/swingset
 
+## 0.0.37
+
+### Patch Changes
+
+- Updated dependencies [[`a52d486`](https://github.com/clerk/javascript/commit/a52d486ee6399a23a8506aa87477cdb352c6802f)]:
+  - @clerk/ui@1.30.5
+
 ## 0.0.36
 
 ### Patch Changes

diff --git a/packages/swingset/package.json b/packages/swingset/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/swingset",
-  "version": "0.0.36",
+  "version": "0.0.37",
   "private": true,
   "type": "module",
   "scripts": {

diff --git a/packages/tanstack-react-start/CHANGELOG.md b/packages/tanstack-react-start/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @clerk/tanstack-react-start
 
+## 1.5.5
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+  - @clerk/react@6.14.4
+
 ## 1.5.4
 
 ### Patch Changes

diff --git a/packages/tanstack-react-start/package.json b/packages/tanstack-react-start/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/tanstack-react-start",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "description": "Clerk SDK for TanStack React Start",
   "keywords": [
     "clerk",

diff --git a/packages/testing/CHANGELOG.md b/packages/testing/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/testing
 
+## 2.2.27
+
+### Patch Changes
+
+- Updated dependencies [[`10615ea`](https://github.com/clerk/javascript/commit/10615eac545d855c5f83c90b38579d04d36c9b1d)]:
+  - @clerk/backend@3.16.9
+
 ## 2.2.26
 
 ### Patch Changes

diff --git a/packages/testing/package.json b/packages/testing/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/testing",
-  "version": "2.2.26",
+  "version": "2.2.27",
   "description": "Utilities to help you create E2E test suites for apps using Clerk",
   "keywords": [
     "auth",

diff --git a/packages/ui/CHANGELOG.md b/packages/ui/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @clerk/ui
 
+## 1.30.5
+
+### Patch Changes
+
+- Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an `https` origin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged. ([#9500](https://github.com/clerk/javascript/pull/9500)) by [@jeremy-clerk](https://github.com/jeremy-clerk)
+
 ## 1.30.4
 
 ### Patch Changes

diff --git a/packages/ui/package.json b/packages/ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/ui",
-  "version": "1.30.4",
+  "version": "1.30.5",
   "description": "Internal package that contains the UI components for the Clerk frontend SDKs",
   "repository": {
     "type": "git",