[dependabot]

Bumps @clerk/nextjs from 7.9.2 to 7.9.9.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.9.9

Patch Changes

• Removed the period from the end of the displayed error. Agents were trying to use the URL with period at the end and getting 404s (#9985) by @​royanger

• Updated dependencies [0fe89c2, e34a5cc, c8eb8d5]:

  • @​clerk/backend@​3.21.1
  • @​clerk/shared@​4.37.1
  • @​clerk/react@​6.17.4

@​clerk/nextjs@​7.9.7

Patch Changes

• Updated dependencies [645a532, 84ee588, 4e538ac]:
  • @​clerk/shared@​4.36.0
  • @​clerk/react@​6.17.2
  • @​clerk/backend@​3.20.1

@​clerk/nextjs@​7.9.5

Patch Changes

• Fix a development-only React key warning when using ClerkProvider in the App Router. (#9816) by @​joshrowley

• Fix a cross-request credential leak in clerkMiddleware(). When using dynamic keys (an options callback that resolves a different secretKey per request), a clerkClient() call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @​dominic-clerk

• Updated dependencies [804d3db, 64c8e3e, f56a14b, 07b4c2b, 4e36687, 917453a, 3d6ed25, 40f40f2, 9e7485c]:

  • @​clerk/shared@​4.34.0
  • @​clerk/react@​6.17.0
  • @​clerk/backend@​3.19.0

Changelog

Sourced from @​clerk/nextjs's changelog.

7.9.9

Patch Changes

• Removed the period from the end of the displayed error. Agents were trying to use the URL with period at the end and getting 404s (#9985) by @​royanger

• Updated dependencies [0fe89c2, e34a5cc, c8eb8d5]:

  • @​clerk/backend@​3.21.1
  • @​clerk/shared@​4.37.1
  • @​clerk/react@​6.17.4

7.9.8

Patch Changes

• Updated dependencies [397fd72, 6a14691, 0ee4ee2, 7a3fcf5, 69c1b9c, d9cf0f2, f8266be]:
  • @​clerk/backend@​3.21.0
  • @​clerk/shared@​4.37.0
  • @​clerk/react@​6.17.3

7.9.7

Patch Changes

• Updated dependencies [645a532, 84ee588, 4e538ac]:
  • @​clerk/shared@​4.36.0
  • @​clerk/react@​6.17.2
  • @​clerk/backend@​3.20.1

7.9.6

Patch Changes

• Updated dependencies [b3af79e, cc6f11a, 9d78a1f, d46b544, f50f48c]:
  • @​clerk/shared@​4.35.0
  • @​clerk/backend@​3.20.0
  • @​clerk/react@​6.17.1

7.9.5

Patch Changes

• Fix a development-only React key warning when using ClerkProvider in the App Router. (#9816) by @​joshrowley

• Fix a cross-request credential leak in clerkMiddleware(). When using dynamic keys (an options callback that resolves a different secretKey per request), a clerkClient() call made inside the middleware handler could be built with another concurrent request's secret key. Each request now gets its own isolated store, so the keys resolved for a request are only ever visible to that request. (#9723) by @​dominic-clerk

• Updated dependencies [804d3db, 64c8e3e, f56a14b, 07b4c2b, 4e36687, 917453a, 3d6ed25, 40f40f2, 9e7485c]:

  • @​clerk/shared@​4.34.0
  • @​clerk/react@​6.17.0
  • @​clerk/backend@​3.19.0

... (truncated)

Commits

• 2e03a39 ci(repo): Version packages (#9977)
• c610ff2 fix(nextjs): removed period from error to stop 404s by agents reading the err...
• 26feba7 ci(repo): Version packages (#9933)
• 750e7fc ci(repo): Version packages (#9931)
• 8bca915 ci(repo): Version packages (#9893)
• cc6f11a fix(shared): Reword error messaging when missing or invalid keys (#9848)
• 0a15af9 ci(repo): Version packages (#9782)
• b6c7426 fix(nextjs): key App Router ClerkProvider children (#9816)
• 5e2a46f fix(nextjs): isolate middleware request data per request (#9723)
• ee1f90a ci(repo): Version packages (#9768)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the underlying sign-in integration. No user-facing features or behavior changes are included in this release.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
car-check	Ready	Preview	Oct 4, 2026 8:15am UTC

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

🧰 Additional context used

📚 Code guidelines (1)

AGENTS.md — auto-discovered

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 95c168cb-3c44-40dc-bd84-b934077c59c3

📥 Commits

Reviewing files that changed from the base of the PR and between ae94548 and c2cb798.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 4 remain after this review.

---

📝 Walkthrough

Walkthrough

The @clerk/nextjs dependency range in package.json changed from ^7.9.2 to ^7.9.9.

Changes

Clerk dependency update

Layer / File(s)	Summary
Update Clerk dependency range package.json	The declared @clerk/nextjs dependency range changes from ^7.9.2 to ^7.9.9.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to c2cb7

The Clerk update resolves to 7.9.9 and is compatible with the existing Next.js and React versions; no merge-blocking issue was identified.

Architecture Summary

Architecture risk: 🔵 Low · up to c2cb7

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the @clerk/nextjs dependency range from ^7.9.2 to ^7.9.9.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the dependency update and specifies the package and version change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #404.