feat(clerk-js): Render @clerk/ui - #4114
Conversation
🦋 Changeset detectedLatest commit: 1574014 The changes in this PR will be included in the next version bump. This PR includes changesets to release 18 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
Hey @dstaley - the snapshot version command generated the following package versions:
Tip: Use the snippet copy button below to quickly install the required packages. npm i @clerk/astro@1.3.13-snapshot.v6bae6c3 --save-exact
npm i @clerk/backend@1.13.9-snapshot.v6bae6c3 --save-exact
npm i @clerk/chrome-extension@1.3.16-snapshot.v6bae6c3 --save-exact
npm i @clerk/clerk-js@5.27.0-snapshot.v6bae6c3 --save-exact
npm i @clerk/elements@0.16.0-snapshot.v6bae6c3 --save-exact
npm i @clerk/clerk-expo@2.2.22-snapshot.v6bae6c3 --save-exact
npm i @clerk/express@1.2.2-snapshot.v6bae6c3 --save-exact
npm i @clerk/fastify@1.0.52-snapshot.v6bae6c3 --save-exact
npm i @clerk/localizations@3.2.0-snapshot.v6bae6c3 --save-exact
npm i @clerk/nextjs@5.8.0-snapshot.v6bae6c3 --save-exact
npm i @clerk/clerk-react@5.11.1-snapshot.v6bae6c3 --save-exact
npm i @clerk/remix@4.2.36-snapshot.v6bae6c3 --save-exact
npm i @clerk/clerk-sdk-node@5.0.49-snapshot.v6bae6c3 --save-exact
npm i @clerk/shared@2.10.0-snapshot.v6bae6c3 --save-exact
npm i @clerk/tanstack-start@0.4.12-snapshot.v6bae6c3 --save-exact
npm i @clerk/testing@1.3.10-snapshot.v6bae6c3 --save-exact
npm i @clerk/themes@2.1.36-snapshot.v6bae6c3 --save-exact
npm i @clerk/types@4.26.0-snapshot.v6bae6c3 --save-exact |
|
!snapshot |
|
Hey @dstaley - the snapshot version command generated the following package versions:
Tip: Use the snippet copy button below to quickly install the required packages. npm i @clerk/astro@1.3.13-snapshot.v63f97d3 --save-exact
npm i @clerk/backend@1.13.9-snapshot.v63f97d3 --save-exact
npm i @clerk/chrome-extension@1.3.16-snapshot.v63f97d3 --save-exact
npm i @clerk/clerk-js@5.27.0-snapshot.v63f97d3 --save-exact
npm i @clerk/elements@0.16.0-snapshot.v63f97d3 --save-exact
npm i @clerk/clerk-expo@2.2.22-snapshot.v63f97d3 --save-exact
npm i @clerk/express@1.2.2-snapshot.v63f97d3 --save-exact
npm i @clerk/fastify@1.0.52-snapshot.v63f97d3 --save-exact
npm i @clerk/localizations@3.2.0-snapshot.v63f97d3 --save-exact
npm i @clerk/nextjs@5.8.0-snapshot.v63f97d3 --save-exact
npm i @clerk/clerk-react@5.11.1-snapshot.v63f97d3 --save-exact
npm i @clerk/remix@4.2.36-snapshot.v63f97d3 --save-exact
npm i @clerk/clerk-sdk-node@5.0.49-snapshot.v63f97d3 --save-exact
npm i @clerk/shared@2.10.0-snapshot.v63f97d3 --save-exact
npm i @clerk/tanstack-start@0.4.12-snapshot.v63f97d3 --save-exact
npm i @clerk/testing@1.3.10-snapshot.v63f97d3 --save-exact
npm i @clerk/themes@2.1.36-snapshot.v63f97d3 --save-exact
npm i @clerk/types@4.26.0-snapshot.v63f97d3 --save-exact |
|
!snapshot |
|
Hey @dstaley - the snapshot version command generated the following package versions:
Tip: Use the snippet copy button below to quickly install the required packages. npm i @clerk/astro@1.3.13-snapshot.vc65ea96 --save-exact
npm i @clerk/backend@1.13.9-snapshot.vc65ea96 --save-exact
npm i @clerk/chrome-extension@1.3.17-snapshot.vc65ea96 --save-exact
npm i @clerk/clerk-js@5.27.0-snapshot.vc65ea96 --save-exact
npm i @clerk/elements@0.16.0-snapshot.vc65ea96 --save-exact
npm i @clerk/clerk-expo@2.2.23-snapshot.vc65ea96 --save-exact
npm i @clerk/express@1.2.2-snapshot.vc65ea96 --save-exact
npm i @clerk/fastify@2.0.0-snapshot.vc65ea96 --save-exact
npm i @clerk/localizations@3.2.1-snapshot.vc65ea96 --save-exact
npm i @clerk/nextjs@5.8.0-snapshot.vc65ea96 --save-exact
npm i @clerk/clerk-react@5.11.1-snapshot.vc65ea96 --save-exact
npm i @clerk/remix@4.2.36-snapshot.vc65ea96 --save-exact
npm i @clerk/clerk-sdk-node@5.0.49-snapshot.vc65ea96 --save-exact
npm i @clerk/shared@2.10.0-snapshot.vc65ea96 --save-exact
npm i @clerk/tanstack-start@0.4.12-snapshot.vc65ea96 --save-exact
npm i @clerk/testing@1.3.10-snapshot.vc65ea96 --save-exact
npm i @clerk/themes@2.1.36-snapshot.vc65ea96 --save-exact
npm i @clerk/types@4.26.0-snapshot.vc65ea96 --save-exact |
| canUseWindowHistoryAPIs ? window.history.pushState(null, '', path) : router.push(path, {}); | ||
| }, | ||
| pathname: () => window.location.pathname, | ||
| searchParams: () => new URLSearchParams(window.location.search), |
There was a problem hiding this comment.
Risk: Affected versions of next are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data / Authorization Bypass Through User-Controlled Key.
Fix: Upgrade this library to at least version 14.2.10 at javascript/package-lock.json:45227.
Reference(s): GHSA-gp8f-8m3g-qvj9, CVE-2024-46982
Ignore this finding from ssc-adb055b9-fed0-4d70-a57d-eb9825b09449.| shallowPush(path: string) { | ||
| canUseWindowHistoryAPIs ? window.history.pushState(null, '', path) : router.push(path, {}); | ||
| }, | ||
| pathname: () => window.location.pathname, |
There was a problem hiding this comment.
Risk: Affected versions of next are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data / Authorization Bypass Through User-Controlled Key.
Fix: Upgrade this library to at least version 14.2.10 at javascript/package-lock.json:45227.
Reference(s): GHSA-gp8f-8m3g-qvj9, CVE-2024-46982
Ignore this finding from ssc-adb055b9-fed0-4d70-a57d-eb9825b09449.| push: (path: string) => router.push(path), | ||
| replace: (path: string) => | ||
| canUseWindowHistoryAPIs ? window.history.replaceState(null, '', path) : router.replace(path), | ||
| shallowPush(path: string) { |
There was a problem hiding this comment.
Risk: Affected versions of next are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data / Authorization Bypass Through User-Controlled Key.
Fix: Upgrade this library to at least version 14.2.10 at javascript/package-lock.json:45227.
Reference(s): GHSA-gp8f-8m3g-qvj9, CVE-2024-46982
Ignore this finding from ssc-adb055b9-fed0-4d70-a57d-eb9825b09449.| mode: 'path', | ||
| name: 'NextRouter', | ||
| push: (path: string) => router.push(path), | ||
| replace: (path: string) => |
There was a problem hiding this comment.
Risk: Affected versions of next are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data / Authorization Bypass Through User-Controlled Key.
Fix: Upgrade this library to at least version 14.2.10 at javascript/package-lock.json:45227.
Reference(s): GHSA-gp8f-8m3g-qvj9, CVE-2024-46982
Ignore this finding from ssc-adb055b9-fed0-4d70-a57d-eb9825b09449.| return { | ||
| mode: 'path', | ||
| name: 'NextRouter', | ||
| push: (path: string) => router.push(path), |
There was a problem hiding this comment.
Risk: Affected versions of next are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data / Authorization Bypass Through User-Controlled Key.
Fix: Upgrade this library to at least version 14.2.10 at javascript/package-lock.json:45227.
Reference(s): GHSA-gp8f-8m3g-qvj9, CVE-2024-46982
Ignore this finding from ssc-adb055b9-fed0-4d70-a57d-eb9825b09449.Co-authored-by: Alex Carpenter <im.alexcarpenter@gmail.com> Co-authored-by: Dylan Staley <88163+dstaley@users.noreply.github.com> Co-authored-by: Nikos Douvlis <nikosdouvlis@gmail.com> Co-authored-by: panteliselef <panteliselef@outlook.com> Co-authored-by: Jacek Radko <jacekradko@gmail.com>
Description
Checklist
npm testruns as expected.npm run buildruns as expected.Type of change