[dependabot]

Bumps @clerk/nextjs from 7.9.2 to 7.9.7.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.9.7

Patch Changes

• Updated dependencies [645a532, 84ee588, 4e538ac]:
  • @​clerk/shared@​4.36.0
  • @​clerk/react@​6.17.2
  • @​clerk/backend@​3.20.1

@​clerk/nextjs@​7.9.5

Patch Changes

• Fix a development-only React key warning when using ClerkProvider in the App Router. (#9816) by @​joshrowley

• Fix a cross-request credential leak in clerkMiddleware(). When using dynamic keys (an options callback that resolves a different secretKey per request), a clerkClient() call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @​dominic-clerk

• Updated dependencies [804d3db, 64c8e3e, f56a14b, 07b4c2b, 4e36687, 917453a, 3d6ed25, 40f40f2, 9e7485c]:

  • @​clerk/shared@​4.34.0
  • @​clerk/react@​6.17.0
  • @​clerk/backend@​3.19.0

Changelog

Sourced from @​clerk/nextjs's changelog.

7.9.7

Patch Changes

• Updated dependencies [645a532, 84ee588, 4e538ac]:
  • @​clerk/shared@​4.36.0
  • @​clerk/react@​6.17.2
  • @​clerk/backend@​3.20.1

7.9.6

Patch Changes

• Updated dependencies [b3af79e, cc6f11a, 9d78a1f, d46b544, f50f48c]:
  • @​clerk/shared@​4.35.0
  • @​clerk/backend@​3.20.0
  • @​clerk/react@​6.17.1

7.9.5

Patch Changes

• Fix a development-only React key warning when using ClerkProvider in the App Router. (#9816) by @​joshrowley

• Fix a cross-request credential leak in clerkMiddleware(). When using dynamic keys (an options callback that resolves a different secretKey per request), a clerkClient() call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @​dominic-clerk

• Updated dependencies [804d3db, 64c8e3e, f56a14b, 07b4c2b, 4e36687, 917453a, 3d6ed25, 40f40f2, 9e7485c]:

  • @​clerk/shared@​4.34.0
  • @​clerk/react@​6.17.0
  • @​clerk/backend@​3.19.0

7.9.4

Patch Changes

• Updated dependencies [855c24f, cb6a376]:
  • @​clerk/shared@​4.33.0
  • @​clerk/backend@​3.18.1
  • @​clerk/react@​6.16.1

7.9.3

Patch Changes

• Update docs deep links in JSDoc comments to match clerk.com's new heading anchors (#get-token is now #gettoken, #o-auth-strategy is now #oauthstrategy, and so on). (#9520) by @​manovotny

• Add a note to the ClerkProvider, clerkMiddleware() and auth() doc comments explaining that npx clerk@latest init can provision temporary development keys without a Clerk account. Update the README prerequisites and installation section to say the same, replacing the statement that an existing Clerk application and account are required. (#9665) by @​shane-kercheval

• Updated dependencies [b5a3abe, ddf9afc, 4e1e432, 39782e3, 9801ed5]:

  • @​clerk/react@​6.16.0

... (truncated)

Commits

• 750e7fc ci(repo): Version packages (#9931)
• 8bca915 ci(repo): Version packages (#9893)
• cc6f11a fix(shared): Reword error messaging when missing or invalid keys (#9848)
• 0a15af9 ci(repo): Version packages (#9782)
• b6c7426 fix(nextjs): key App Router ClerkProvider children (#9816)
• 5e2a46f fix(nextjs): isolate middleware request data per request (#9723)
• ee1f90a ci(repo): Version packages (#9768)
• 0cf3565 ci(repo): Version packages (#9703)
• ddf9afc docs(repo): update docs anchor links for decamelized slug removal (#9520)
• 3037d91 docs(nextjs): Point agents at clerk init from the exports they read (#9665)
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated the app’s authentication integration to a newer version. No user-facing changes are noted.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
car-check	Ready	Preview	Oct 2, 2026 1:29pm UTC

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 3cd543d9-4fe2-4639-bfad-9591d286d9bd

📥 Commits

Reviewing files that changed from the base of the PR and between b92afb5 and 2c6dfe1.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 4 remain after this review.

---

📝 Walkthrough

Walkthrough

The package manifest updates the @clerk/nextjs dependency range from ^7.9.2 to ^7.9.7.

Changes

Clerk Next.js Dependency

Layer / File(s)	Summary
Update Clerk dependency range package.json	The dependency range for @clerk/nextjs changes from ^7.9.2 to ^7.9.7.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 2c6df

The updated dependency range matches the supplied lockfile resolution; no actionable merge risk is evident.

Architecture Summary

Architecture risk: 🔵 Low · up to 2c6df

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the @clerk/nextjs dependency version range from ^7.9.2 to ^7.9.7.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency update from @clerk/nextjs 7.9.2 to 7.9.7, which matches the pull request changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #395.