[dependabot]

Bumps @clerk/localizations from 4.16.1 to 4.23.0.

Release notes

Sourced from @​clerk/localizations's releases.

@​clerk/localizations@​4.23.0

Minor Changes

• Add a role mapping step to the self-serve Directory Sync setup in <OrganizationProfile />. Organization admins can now assign an organization role to each directory group their identity provider pushes, set which group wins when a member belongs to several, and turn role syncing on or off. Members in no mapped group keep the organization's default role. The step is read-only for members without the org:sys_memberships:manage permission and while the organization's role set is being migrated. (#10081) by @​kalafut

Patch Changes

• Updated dependencies [dcb03d3, 31c1930]:
  • @​clerk/shared@​4.40.0

@​clerk/localizations@​4.22.1

Patch Changes

• Updated dependencies [568c668]:
  • @​clerk/shared@​4.39.1

@​clerk/localizations@​4.22.0

Minor Changes

• The self-serve SSO configuration (<OrganizationProfile /> enterprise connection page and the ConfigureSSO SAML steps) now shows every IdP signing certificate a SAML connection trusts, with its expiry, and lets an admin add certificates from a file (a PEM bundle adds several) or remove one, so an IdP key rotation no longer needs a replacement timed with the IdP. Saving sends the whole list and only when it changed. The list holds at most five certificates. New configureSSOCertificateList* and configureSSOCertificatePrimaryBadge appearance element descriptors cover the list, and new configureSSO.signingCertificates.* localization keys hold its strings. (#10012) by @​mauricioabreu

Patch Changes

• Updated dependencies [2654caa]:
  • @​clerk/shared@​4.39.0

Changelog

Sourced from @​clerk/localizations's changelog.

4.23.0

Minor Changes

• Add a role mapping step to the self-serve Directory Sync setup in <OrganizationProfile />. Organization admins can now assign an organization role to each directory group their identity provider pushes, set which group wins when a member belongs to several, and turn role syncing on or off. Members in no mapped group keep the organization's default role. The step is read-only for members without the org:sys_memberships:manage permission and while the organization's role set is being migrated. (#10081) by @​kalafut

Patch Changes

• Updated dependencies [dcb03d3, 31c1930]:
  • @​clerk/shared@​4.40.0

4.22.1

Patch Changes

• Updated dependencies [568c668]:
  • @​clerk/shared@​4.39.1

4.22.0

Minor Changes

• The self-serve SSO configuration (<OrganizationProfile /> enterprise connection page and the ConfigureSSO SAML steps) now shows every IdP signing certificate a SAML connection trusts, with its expiry, and lets an admin add certificates from a file (a PEM bundle adds several) or remove one, so an IdP key rotation no longer needs a replacement timed with the IdP. Saving sends the whole list and only when it changed. The list holds at most five certificates. New configureSSOCertificateList* and configureSSOCertificatePrimaryBadge appearance element descriptors cover the list, and new configureSSO.signingCertificates.* localization keys hold its strings. (#10012) by @​mauricioabreu

Patch Changes

• Updated dependencies [2654caa]:
  • @​clerk/shared@​4.39.0

4.21.2

Patch Changes

• Updated dependencies [f6937c8]:
  • @​clerk/shared@​4.38.0

4.21.1

Patch Changes

• Updated dependencies [c8eb8d5]:
  • @​clerk/shared@​4.37.1

4.21.0

Minor Changes

• Support Google Workspace directories in Directory Sync. Organization admins can upload a service account key and delegated admin email from the setup flow, start a sync on demand, and see the result of the last one. DirectorySync gains setCredentials(), sync(), getSyncStatus(), and credentialsConfigured. (#9722) by @​gabrielmeloc22

• Update the SSO and Directory Sync sections of the <OrganizationProfile /> Security page to the latest designs. Both sections now show a "Configure" button until something is set up (SSO then shows "Add connection"), and SSO connection rows show the identity provider's logo and an actions menu (Edit, Continue configuration, Activate/Deactivate, Remove). These actions have been removed from the SSO connection page, and status badges are no longer color-coded. Okta logos now follow the theme's foreground color, so they stay visible in dark mode, including on the enterprise connection chooser and in <UserProfile />. (#9940) by @​kalafut

... (truncated)

Commits

• a0ea270 ci(repo): Version packages (#10155)
• dcb03d3 feat(ui,clerk-js,shared): add a role mapping step to the Directory Sync wizar...
• ff81d5a ci(repo): Version packages (#10074)
• 2e29745 ci(repo): Version packages (#10025)
• a989859 feat(ui): list and manage the IdP signing certificates of a SAML connection (...
• 6fd8e8d ci(repo): Version packages (#10021)
• 2e03a39 ci(repo): Version packages (#9977)
• 26feba7 ci(repo): Version packages (#9933)
• d9cf0f2 fix(ui): update self-serve sso & directory sync to latest designs (#9940)
• 69c1b9c fix(clerk-js,ui): clean up abandoned passkey registrations (#9812)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
car-check	Error		Oct 18, 2026 8:18am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 78f8f802-6993-448b-a355-be8584b124b6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #426.