clerk · clerk-cookie · Jul 12, 2026
diff --git a/.changeset/clerkjs-fail-fast-slow-origin.md b/.changeset/clerkjs-fail-fast-slow-origin.md
diff --git a/.changeset/monotonic-session-token-guard.md b/.changeset/monotonic-session-token-guard.md
diff --git a/packages/agent-toolkit/CHANGELOG.md b/packages/agent-toolkit/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @clerk/agent-toolkit
 
+## 0.2.34
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/types@4.101.26
+
 ## 0.2.33
 
 ### Patch Changes

diff --git a/packages/agent-toolkit/package.json b/packages/agent-toolkit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/agent-toolkit",
-  "version": "0.2.33",
+  "version": "0.2.34",
   "description": "Clerk Toolkit for AI Agents",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @clerk/astro
 
+## 2.17.14
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/types@4.101.26
+
 ## 2.17.13
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/astro",
-  "version": "2.17.13",
+  "version": "2.17.14",
   "description": "Clerk SDK for Astro",
   "keywords": [
     "auth",

diff --git a/packages/backend/CHANGELOG.md b/packages/backend/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Change Log
 
+## 2.33.6
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/types@4.101.26
+
 ## 2.33.5
 
 ### Patch Changes

diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/backend",
-  "version": "2.33.5",
+  "version": "2.33.6",
   "description": "Clerk Backend SDK - REST Client for Backend API & JWT verification utilities",
   "homepage": "https://clerk.com/",
   "bugs": {

diff --git a/packages/chrome-extension/CHANGELOG.md b/packages/chrome-extension/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 2.9.21
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2), [`eb83759`](https://github.com/clerk/javascript/commit/eb83759b8db8e6b4293cc79082df29edbaf066d3)]:
+  - @clerk/clerk-js@5.127.1
+  - @clerk/shared@3.47.8
+  - @clerk/clerk-react@5.61.9
+
 ## 2.9.20
 
 ### Patch Changes

diff --git a/packages/chrome-extension/package.json b/packages/chrome-extension/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/chrome-extension",
-  "version": "2.9.20",
+  "version": "2.9.21",
   "description": "Clerk SDK for Chrome extensions",
   "keywords": [
     "auth",

diff --git a/packages/clerk-js/CHANGELOG.md b/packages/clerk-js/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Change Log
 
+## 5.127.1
+
+### Patch Changes
+
+- Fail fast when the Clerk Frontend API (FAPI) is slow or unreachable during load. The client request and the load-recovery token mint are now bounded by a timeout, and the timed-out client request is aborted instead of being left in flight. A cold `Clerk.load()` renders identity from a freshly minted session token (falling back to the session cookie if the mint fails) in seconds instead of hanging while retries run. After a degraded load, the client is re-fetched in the background without a time limit, so a slow-but-healthy origin recovers full client data (user profile, other sessions) without a reload. Also fixes hooks like `useUser()` keeping the cookie-derived stub user after full user data arrives. Adds a `timeLimit` utility to `@clerk/shared/utils` that optionally aborts an `AbortController` on timeout. ([#9123](https://github.com/clerk/javascript/pull/9123)) by [@nikosdouvlis](https://github.com/nikosdouvlis)
+
+- Prevent a staler session token from overwriting a fresher one on the same tab. Freshness is ranked by the JWT `oiat` header, then `iat`; tokens without `oiat` always pass through. ([#9090](https://github.com/clerk/javascript/pull/9090)) by [@nikosdouvlis](https://github.com/nikosdouvlis)
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/localizations@3.37.8
+
 ## 5.127.0
 
 ### Minor Changes

diff --git a/packages/clerk-js/package.json b/packages/clerk-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-js",
-  "version": "5.127.0",
+  "version": "5.127.1",
   "description": "Clerk JS library",
   "keywords": [
     "clerk",

diff --git a/packages/elements/CHANGELOG.md b/packages/elements/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @clerk/elements
 
+## 0.24.19
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/clerk-react@5.61.9
+  - @clerk/types@4.101.26
+
 ## 0.24.18
 
 ### Patch Changes

diff --git a/packages/elements/package.json b/packages/elements/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/elements",
-  "version": "0.24.18",
+  "version": "0.24.19",
   "description": "Clerk Elements",
   "keywords": [
     "clerk",

diff --git a/packages/expo-passkeys/CHANGELOG.md b/packages/expo-passkeys/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @clerk/expo-passkeys
 
+## 0.4.45
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+
 ## 0.4.44
 
 ### Patch Changes

diff --git a/packages/expo-passkeys/package.json b/packages/expo-passkeys/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo-passkeys",
-  "version": "0.4.44",
+  "version": "0.4.45",
   "description": "Passkeys library to be used with Clerk for expo",
   "keywords": [
     "react-native",

diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 2.19.42
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2), [`eb83759`](https://github.com/clerk/javascript/commit/eb83759b8db8e6b4293cc79082df29edbaf066d3)]:
+  - @clerk/clerk-js@5.127.1
+  - @clerk/shared@3.47.8
+  - @clerk/clerk-react@5.61.9
+  - @clerk/types@4.101.26
+
 ## 2.19.41
 
 ### Patch Changes

diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-expo",
-  "version": "2.19.41",
+  "version": "2.19.42",
   "description": "Clerk React Native/Expo library",
   "keywords": [
     "react",

diff --git a/packages/express/CHANGELOG.md b/packages/express/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 1.7.82
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/types@4.101.26
+
 ## 1.7.81
 
 ### Patch Changes

diff --git a/packages/express/package.json b/packages/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/express",
-  "version": "1.7.81",
+  "version": "1.7.82",
   "description": "Clerk server SDK for usage with Express",
   "keywords": [
     "clerk",

diff --git a/packages/fastify/CHANGELOG.md b/packages/fastify/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## 2.6.34
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/types@4.101.26
+
 ## 2.6.33
 
 ### Patch Changes

diff --git a/packages/fastify/package.json b/packages/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/fastify",
-  "version": "2.6.33",
+  "version": "2.6.34",
   "description": "Clerk SDK for Fastify",
   "keywords": [
     "auth",

diff --git a/packages/localizations/CHANGELOG.md b/packages/localizations/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 3.37.8
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @clerk/types@4.101.26
+
 ## 3.37.7
 
 ### Patch Changes

diff --git a/packages/localizations/package.json b/packages/localizations/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/localizations",
-  "version": "3.37.7",
+  "version": "3.37.8",
   "description": "Localizations for the Clerk components",
   "keywords": [
     "react",

diff --git a/packages/nextjs/CHANGELOG.md b/packages/nextjs/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 6.39.6
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/clerk-react@5.61.9
+  - @clerk/types@4.101.26
+
 ## 6.39.5
 
 ### Patch Changes

diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nextjs",
-  "version": "6.39.5",
+  "version": "6.39.6",
   "description": "Clerk SDK for NextJS",
   "keywords": [
     "clerk",

diff --git a/packages/nuxt/CHANGELOG.md b/packages/nuxt/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @clerk/nuxt
 
+## 1.13.32
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/types@4.101.26
+  - @clerk/vue@1.17.24
+
 ## 1.13.31
 
 ### Patch Changes

diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/nuxt",
-  "version": "1.13.31",
+  "version": "1.13.32",
   "description": "Clerk SDK for Nuxt",
   "keywords": [
     "clerk",

diff --git a/packages/react-router/CHANGELOG.md b/packages/react-router/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 2.4.16
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/clerk-react@5.61.9
+  - @clerk/types@4.101.26
+
 ## 2.4.15
 
 ### Patch Changes

diff --git a/packages/react-router/package.json b/packages/react-router/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/react-router",
-  "version": "2.4.15",
+  "version": "2.4.16",
   "description": "Clerk SDK for React Router",
   "keywords": [
     "clerk",

diff --git a/packages/react/CHANGELOG.md b/packages/react/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Change Log
 
+## 5.61.9
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+
 ## 5.61.8
 
 ### Patch Changes

diff --git a/packages/react/package.json b/packages/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/clerk-react",
-  "version": "5.61.8",
+  "version": "5.61.9",
   "description": "Clerk React library",
   "keywords": [
     "clerk",

diff --git a/packages/remix/CHANGELOG.md b/packages/remix/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## 4.13.49
+
+### Patch Changes
+
+- Updated dependencies [[`4093b03`](https://github.com/clerk/javascript/commit/4093b03dc1227b253da17582d6ed27f9d189d1b2)]:
+  - @clerk/shared@3.47.8
+  - @clerk/backend@2.33.6
+  - @clerk/clerk-react@5.61.9
+  - @clerk/types@4.101.26
+
 ## 4.13.48
 
 ### Patch Changes

diff --git a/packages/remix/package.json b/packages/remix/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/remix",
-  "version": "4.13.48",
+  "version": "4.13.49",
   "description": "Clerk SDK for Remix",
   "keywords": [
     "clerk",

diff --git a/packages/shared/CHANGELOG.md b/packages/shared/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## 3.47.8
+
+### Patch Changes
+
+- Fail fast when the Clerk Frontend API (FAPI) is slow or unreachable during load. The client request and the load-recovery token mint are now bounded by a timeout, and the timed-out client request is aborted instead of being left in flight. A cold `Clerk.load()` renders identity from a freshly minted session token (falling back to the session cookie if the mint fails) in seconds instead of hanging while retries run. After a degraded load, the client is re-fetched in the background without a time limit, so a slow-but-healthy origin recovers full client data (user profile, other sessions) without a reload. Also fixes hooks like `useUser()` keeping the cookie-derived stub user after full user data arrives. Adds a `timeLimit` utility to `@clerk/shared/utils` that optionally aborts an `AbortController` on timeout. ([#9123](https://github.com/clerk/javascript/pull/9123)) by [@nikosdouvlis](https://github.com/nikosdouvlis)
+
 ## 3.47.7
 
 ### Patch Changes