Skip to content

deps: bump @clerk/backend from 2.33.3 to 3.11.4 - #170

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/clerk/backend-3.11.4
Open

deps: bump @clerk/backend from 2.33.3 to 3.11.4#170
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/clerk/backend-3.11.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps @clerk/backend from 2.33.3 to 3.11.4.

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.11.4

Patch Changes

  • Clarify in the M2MToken, APIKey, and IdPOAuthAccessToken JSDoc that the timestamp properties (expiration, lastUsedAt, createdAt, and updatedAt) are Unix timestamps in milliseconds (not seconds). (#9122) by @​SarahSoutoul

@​clerk/backend@​3.11.3

Patch Changes

  • Updated dependencies [8dbf343]:
    • @​clerk/shared@​4.25.2

@​clerk/backend@​3.11.1

Patch Changes

  • Enforce the azp (authorized party) claim when authorizedParties is configured. Previously, a session token that was missing the azp claim was accepted even when authorizedParties was set, allowing the authorized-parties check to be bypassed by omitting the claim. Now, when authorizedParties is configured, a token with a missing or empty azp claim is rejected. Tokens without azp continue to be accepted when no authorizedParties are configured. (#8877) by @​dominic-clerk

  • Updated dependencies [6f97ef5, bab1f29, f2d9e4b]:

    • @​clerk/shared@​4.25.0

@​clerk/backend@​3.11.0

Minor Changes

  • Add idpCertificateIssuedAt and idpCertificateExpiresAt to SAML enterprise connections, exposing the IdP certificate validity window (#9077) by @​LauraBeatris

Patch Changes

@​clerk/backend@​2.33.6

Patch Changes

  • Updated dependencies [4093b03]:
    • @​clerk/shared@​3.47.8
    • @​clerk/types@​4.101.26
Changelog

Sourced from @​clerk/backend's changelog.

3.11.4

Patch Changes

  • Clarify in the M2MToken, APIKey, and IdPOAuthAccessToken JSDoc that the timestamp properties (expiration, lastUsedAt, createdAt, and updatedAt) are Unix timestamps in milliseconds (not seconds). (#9122) by @​SarahSoutoul

3.11.3

Patch Changes

  • Updated dependencies [8dbf343]:
    • @​clerk/shared@​4.25.2

3.11.2

Patch Changes

3.11.1

Patch Changes

  • Enforce the azp (authorized party) claim when authorizedParties is configured. Previously, a session token that was missing the azp claim was accepted even when authorizedParties was set, allowing the authorized-parties check to be bypassed by omitting the claim. Now, when authorizedParties is configured, a token with a missing or empty azp claim is rejected. Tokens without azp continue to be accepted when no authorizedParties are configured. (#8877) by @​dominic-clerk

  • Updated dependencies [6f97ef5, bab1f29, f2d9e4b]:

    • @​clerk/shared@​4.25.0

3.11.0

Minor Changes

  • Add idpCertificateIssuedAt and idpCertificateExpiresAt to SAML enterprise connections, exposing the IdP certificate validity window (#9077) by @​LauraBeatris

Patch Changes

3.10.0

Minor Changes

  • Add an experimental clerkClient.emails.create() method for sending transactional emails. It accepts address- or user-based recipients, supports optional replyTo, subject, and HTML and/or text content, and returns the created Email resource. (#9010) by @​cbnsndwch

    This method is marked @experimental and may change in a future release.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) from 2.33.3 to 3.11.4.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.11.4/packages/backend)

---
updated-dependencies:
- dependency-name: "@clerk/backend"
  dependency-version: 3.11.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from alexneamtu as a code owner July 13, 2026 16:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@github-actions github-actions Bot added api Changes to API config Configuration changes labels Jul 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api Changes to API config Configuration changes dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants