Skip to content

build(deps): bump @clerk/backend from 1.34.0 to 2.29.2#103

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/clerk/backend-2.29.2
Open

build(deps): bump @clerk/backend from 1.34.0 to 2.29.2#103
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/clerk/backend-2.29.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 12, 2026

Bumps @clerk/backend from 1.34.0 to 2.29.2.

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​2.29.2

Patch Changes

  • Fixed an issue when using multiple acceptsToken values in authenticateRequest. When acceptsToken is an array containing both session and machine token types (e.g., ['session_token', 'api_key']), the function now correctly routes to the appropriate authentication handler based on the actual token type, instead of always treating them as machine tokens. (#7556) by @​wobsoriano

@​clerk/backend@​2.29.1

Patch Changes

  • Move cookie to devDependencies and bundle it within @​clerk/backend to fix module compatibility problems in TanStack Start apps. (#7545) by @​nikosdouvlis

  • Updated dependencies [a4e6932]:

    • @​clerk/shared@​3.42.0
    • @​clerk/types@​4.101.10

@​clerk/backend@​2.29.0

Minor Changes

  • Improves resilience by keeping users logged in when Clerk's origin is temporarily unavailable using edge-based token generation (#7516) by @​bratsos

Patch Changes

  • Updated dependencies [03dd374]:
    • @​clerk/shared@​3.41.1
    • @​clerk/types@​4.101.9

@​clerk/backend@​2.28.0

Minor Changes

  • Dropping the __experimental_ prefix from setPasswordCompromised and unsetPasswordCompromised and marking them as stable (#7503) by @​octoper

Patch Changes

  • Renaming __experimental_passwordCompromised to __experimental_setPasswordCompromised and introducing __experimental_unsetPasswordCompromised (#7477) by @​octoper

  • Updated dependencies [79eb5af, b3b02b4, 7b3024a, 2cd4da9]:

    • @​clerk/shared@​3.41.0
    • @​clerk/types@​4.101.8
Changelog

Sourced from @​clerk/backend's changelog.

2.29.2

Patch Changes

  • Fixed an issue when using multiple acceptsToken values in authenticateRequest. When acceptsToken is an array containing both session and machine token types (e.g., ['session_token', 'api_key']), the function now correctly routes to the appropriate authentication handler based on the actual token type, instead of always treating them as machine tokens. (#7556) by @​wobsoriano

2.29.1

Patch Changes

  • Move cookie to devDependencies and bundle it within @​clerk/backend to fix module compatibility problems in TanStack Start apps. (#7545) by @​nikosdouvlis

  • Updated dependencies [a4e6932]:

    • @​clerk/shared@​3.42.0
    • @​clerk/types@​4.101.10

2.29.0

Minor Changes

  • Improves resilience by keeping users logged in when Clerk's origin is temporarily unavailable using edge-based token generation (#7516) by @​bratsos

Patch Changes

  • Updated dependencies [03dd374]:
    • @​clerk/shared@​3.41.1
    • @​clerk/types@​4.101.9

2.28.0

Minor Changes

  • Dropping the __experimental_ prefix from setPasswordCompromised and unsetPasswordCompromised and marking them as stable (#7503) by @​octoper

Patch Changes

  • Renaming __experimental_passwordCompromised to __experimental_setPasswordCompromised and introducing __experimental_unsetPasswordCompromised (#7477) by @​octoper

  • Updated dependencies [79eb5af, b3b02b4, 7b3024a, 2cd4da9]:

    • @​clerk/shared@​3.41.0
    • @​clerk/types@​4.101.8

2.27.1

Patch Changes

... (truncated)

Commits
  • 1a510b7 ci(repo): Version packages (Core 2) (#7552)
  • 6b26afc fix(backend): Handle token type array in authenticateRequest (#7556)
  • f880c5e ci(repo): Version packages (Core 2) (#7536)
  • 9320c4f fix(backend): bundle cookie package to fix cjs/esm issues (#7545)
  • 4914442 ci(repo): Version packages (Core 2) (#7515)
  • ede3e2a feat(backend, clerk-js): Support origin outage mode on Core 2 (#7516)
  • 83e96f9 ci(repo): Version packages (Core 2) (#7485)
  • d4e2739 feat(backend): Mark setPasswordCompromised and unsetPasswordCompromised a...
  • 5d25027 fix(backend): Rename password compromised action and introduces unsetting a c...
  • cbe5cdc ci(repo): Version packages (Core 2) (#7428)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by dominic-clerk, a new releaser for @​clerk/backend since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jan 12, 2026

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from JessB2000 as a code owner January 12, 2026 17:30
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/clerk/backend-2.29.2 branch 2 times, most recently from 7247ff1 to 525eb46 Compare January 18, 2026 21:19
Bumps [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) from 1.34.0 to 2.29.2.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/@clerk/backend@2.29.2/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@2.29.2/packages/backend)

---
updated-dependencies:
- dependency-name: "@clerk/backend"
  dependency-version: 2.29.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/clerk/backend-2.29.2 branch from 525eb46 to 4c77661 Compare January 25, 2026 14:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants