fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins (core 2) by brkalow · Pull Request #7864 · clerk/javascript

brkalow · 2026-02-17T17:07:31Z

Summary

Cherry-pick of #7846 into release/core-2.

Adds .replit.dev to the list of third-party embedding domains
Extracts THIRD_PARTY_COOKIE_DOMAINS into a shared thirdPartyDomains module
Sets SameSite=None on cookies when running on known third-party domains
Reuses the same domain list for originPrefersPopup detection

Original PR: #7846

…7846) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

changeset-bot · 2026-02-17T17:07:36Z

🦋 Changeset detected

Latest commit: c4d8e86

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages

Name	Type
@clerk/shared	Patch
@clerk/clerk-js	Patch
@clerk/agent-toolkit	Patch
@clerk/astro	Patch
@clerk/backend	Patch
@clerk/chrome-extension	Patch
@clerk/elements	Patch
@clerk/expo-passkeys	Patch
@clerk/clerk-expo	Patch
@clerk/express	Patch
@clerk/fastify	Patch
@clerk/nextjs	Patch
@clerk/nuxt	Patch
@clerk/react-router	Patch
@clerk/clerk-react	Patch
@clerk/remix	Patch
@clerk/tanstack-react-start	Patch
@clerk/testing	Patch
@clerk/themes	Patch
@clerk/types	Patch
@clerk/vue	Patch
@clerk/localizations	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

vercel · 2026-02-17T17:07:36Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Feb 17, 2026 5:25pm

coderabbitai · 2026-02-17T17:07:43Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch cherry-pick/fix-samesite-replit

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pkg-pr-new · 2026-02-17T17:20:20Z

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@7864

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@7864

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@7864

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@7864

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@7864

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@7864

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@7864

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@7864

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@7864

@clerk/express

npm i https://pkg.pr.new/@clerk/express@7864

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@7864

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@7864

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@7864

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@7864

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@7864

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@7864

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@7864

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@7864

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@7864

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@7864

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@7864

@clerk/types

npm i https://pkg.pr.new/@clerk/types@7864

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@7864

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@7864

commit: c4d8e86

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins (#…

ccf3f10

…7846) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

github-actions Bot added clerk-js core-2 labels Feb 17, 2026

brkalow commented Feb 17, 2026

View reviewed changes

Comment thread .changeset/fix-samesite-replit-dev.md Outdated

Apply suggestion from @brkalow

138dd5e

vercel Bot had a problem deploying to Preview February 17, 2026 17:09 Failure

fix: use @/ alias for thirdPartyDomains import

28216d4

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

vercel Bot deployed to Preview February 17, 2026 17:17 View deployment

brkalow changed the title ~~fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins~~ fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins (core 2) Feb 17, 2026

fix: bump headless bundle size limit for thirdPartyDomains module

c4d8e86

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

vercel Bot deployed to Preview February 17, 2026 17:25 View deployment

tmilewski approved these changes Feb 17, 2026

View reviewed changes

brkalow enabled auto-merge (squash) February 17, 2026 19:11

brkalow disabled auto-merge February 17, 2026 19:12

brkalow merged commit b17e4bb into release/core-2 Feb 17, 2026
139 of 143 checks passed

brkalow deleted the cherry-pick/fix-samesite-replit branch February 17, 2026 19:12

clerk-cookie mentioned this pull request Feb 17, 2026

ci(repo): Version packages (Core 2) #7856

Merged

thiskevinwang mentioned this pull request Feb 17, 2026

fix(backend): Type JwtTemplatesApi.list as PaginatedResourceResponse (Core 2) #7868

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins (core 2)#7864

fix(clerk-js): Set SameSite=None on cookies for .replit.dev origins (core 2)#7864
brkalow merged 4 commits into
release/core-2from
cherry-pick/fix-samesite-replit

brkalow commented Feb 17, 2026

Uh oh!

changeset-bot Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Feb 17, 2026

Review skipped

Uh oh!

Uh oh!

pkg-pr-new Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

brkalow commented Feb 17, 2026

Summary

Uh oh!

changeset-bot Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

vercel Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Feb 17, 2026

Review skipped

Uh oh!

Uh oh!

pkg-pr-new Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

changeset-bot Bot commented Feb 17, 2026 •

edited

Loading

vercel Bot commented Feb 17, 2026 •

edited

Loading

pkg-pr-new Bot commented Feb 17, 2026 •

edited

Loading