Skip to content

chore(deps): bump @clerk/nextjs from 7.2.8 to 7.8.0 - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/clerk/nextjs-7.8.0
Open

chore(deps): bump @clerk/nextjs from 7.2.8 to 7.8.0#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/clerk/nextjs-7.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown

Bumps @clerk/nextjs from 7.2.8 to 7.8.0.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

@​clerk/nextjs@​7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

@​clerk/nextjs@​7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

@​clerk/nextjs@​7.7.7

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

7.7.7

Patch Changes

7.7.6

Patch Changes

  • Fix a stray double space in the getAuth() "Clerk can't detect usage of clerkMiddleware()" error, so the first bullet renders as - clerkMiddleware() is used in your Next.js middleware or proxy file. (#9408) by @​manovotny

  • Updated dependencies [7f5c294]:

    • @​clerk/shared@​4.29.1
    • @​clerk/backend@​3.16.6
    • @​clerk/react@​6.14.3

... (truncated)

Commits
  • 297c03d ci(repo): Version packages (#9514)
  • f541dbf feat(nextjs): throw missing-env error instead of keyless bootstrap (#9493)
  • 99082cb ci(repo): Version packages (#9495)
  • ff25005 ci(repo): Version packages (#9477)
  • 75ec072 fix(nextjs): allow Clerk protection hosts on all ports in connect-src (#9458)
  • 2b83bd3 ci(repo): Version packages (#9467)
  • 6c63025 ci(repo): Version packages (#9447)
  • 7220975 fix(nextjs): remove stray double space in clerkMiddleware detection error (#9...
  • 45514ca ci(repo): Version packages (#9402)
  • f9c97ef feat(nextjs): Added error with docs URL in Core 3 for <SignedIn>, <SignedOut>...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) from 7.2.8 to 7.8.0.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.8.0/packages/nextjs)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 26, 2026
@oosuhada
oosuhada force-pushed the dependabot/bun/clerk/nextjs-7.8.0 branch from cd774da to 7dc7289 Compare August 28, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants