Skip to content

chore(deps): bump @clerk/nextjs from 7.2.8 to 7.8.0 - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/clerk/nextjs-7.8.0
Open

chore(deps): bump @clerk/nextjs from 7.2.8 to 7.8.0#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/clerk/nextjs-7.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown

Bumps @clerk/nextjs from 7.2.8 to 7.8.0.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

@​clerk/nextjs@​7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

@​clerk/nextjs@​7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

@​clerk/nextjs@​7.7.7

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.8.0

Minor Changes

  • In development, missing Clerk keys no longer activate keyless mode. When NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are not set, the SDK now throws an error directing you to run npx clerk@latest init, which provisions a Clerk application and writes the keys to .env.local. Keyless credentials stored in the development keyless cookie are no longer read. Existing apps with configured or claimed keys are unaffected. (#9493) by @​djgould

Patch Changes

7.7.9

Patch Changes

  • Updated dependencies [10615ea]:
    • @​clerk/backend@​3.16.9
    • @​clerk/react@​6.14.4

7.7.8

Patch Changes

  • Allow Clerk's abuse and fraud protection hosts on all ports in the generated connect-src directive. The contentSecurityPolicy option previously emitted https://*.protect.clerk.com, which matches port 443 only, so requests to those hosts on other ports were blocked by the resulting policy. (#9458) by @​mwickett

  • Updated dependencies [4ebcff3]:

    • @​clerk/backend@​3.16.8

7.7.7

Patch Changes

7.7.6

Patch Changes

  • Fix a stray double space in the getAuth() "Clerk can't detect usage of clerkMiddleware()" error, so the first bullet renders as - clerkMiddleware() is used in your Next.js middleware or proxy file. (#9408) by @​manovotny

  • Updated dependencies [7f5c294]:

    • @​clerk/shared@​4.29.1
    • @​clerk/backend@​3.16.6
    • @​clerk/react@​6.14.3

... (truncated)

Commits
  • 297c03d ci(repo): Version packages (#9514)
  • f541dbf feat(nextjs): throw missing-env error instead of keyless bootstrap (#9493)
  • 99082cb ci(repo): Version packages (#9495)
  • ff25005 ci(repo): Version packages (#9477)
  • 75ec072 fix(nextjs): allow Clerk protection hosts on all ports in connect-src (#9458)
  • 2b83bd3 ci(repo): Version packages (#9467)
  • 6c63025 ci(repo): Version packages (#9447)
  • 7220975 fix(nextjs): remove stray double space in clerkMiddleware detection error (#9...
  • 45514ca ci(repo): Version packages (#9402)
  • f9c97ef feat(nextjs): Added error with docs URL in Core 3 for <SignedIn>, <SignedOut>...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) from 7.2.8 to 7.8.0.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.8.0/packages/nextjs)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants