[dependabot]

Bumps @clerk/localizations from 4.16.1 to 4.24.0.

Release notes

Sourced from @​clerk/localizations's releases.

@​clerk/localizations@​4.24.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @​dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/> components preselect it as the second factor, as they already do for the first factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This is on by default for instances created after 2026-07-08, and can be turned on in the Dashboard for older ones. Web apps also need to opt in to the passkey second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey. Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports that WebAuthn is unavailable (for example, Electron apps without passkey support enabled).

Patch Changes

• Add a module field pointing to the ESM build, so bundlers that don't read exports (such as Parcel in Plasmo-based Chrome extensions) can tree-shake unused locales. (#10292) by @​manovotny

• Updated dependencies [e5cfdff]:

  • @​clerk/shared@​4.41.0

Changelog

Sourced from @​clerk/localizations's changelog.

4.24.0

Minor Changes

• Support passkeys as a second factor during sign-in and session reverification. (#9127) by @​dmoerner

  When a user has a passkey, the prebuilt <SignIn/> and <UserVerification/> components preselect it as the second factor, as they already do for the first factor. Other methods stay available under "Use another method".

  To use it, your instance must allow passkeys to satisfy the second factor. This is on by default for instances created after 2026-07-08, and can be turned on in the Dashboard for older ones. Web apps also need to opt in to the passkey second factor update in the Dashboard.

  If you build a custom flow, supportedSecondFactors can now include passkey. Call signIn.authenticateWithPasskey() to complete it.

  Passkeys are no longer preselected, for either factor, where the SDK reports that WebAuthn is unavailable (for example, Electron apps without passkey support enabled).

Patch Changes

• Add a module field pointing to the ESM build, so bundlers that don't read exports (such as Parcel in Plasmo-based Chrome extensions) can tree-shake unused locales. (#10292) by @​manovotny

• Updated dependencies [e5cfdff]:

  • @​clerk/shared@​4.41.0

4.23.0

Minor Changes

• Add a role mapping step to the self-serve Directory Sync setup in <OrganizationProfile />. Organization admins can now assign an organization role to each directory group their identity provider pushes, set which group wins when a member belongs to several, and turn role syncing on or off. Members in no mapped group keep the organization's default role. The step is read-only for members without the org:sys_memberships:manage permission and while the organization's role set is being migrated. (#10081) by @​kalafut

Patch Changes

• Updated dependencies [dcb03d3, 31c1930]:
  • @​clerk/shared@​4.40.0

4.22.1

Patch Changes

• Updated dependencies [568c668]:
  • @​clerk/shared@​4.39.1

4.22.0

Minor Changes

... (truncated)

Commits

• ec91b9b ci(repo): Version packages (#10283)
• e5cfdff feat(clerk-js,ui,shared,localizations): Support passkey as a second factor (#...
• 9066bf9 fix(localizations): add module field pointing to the ESM build (#10292)
• a0ea270 ci(repo): Version packages (#10155)
• dcb03d3 feat(ui,clerk-js,shared): add a role mapping step to the Directory Sync wizar...
• ff81d5a ci(repo): Version packages (#10074)
• 2e29745 ci(repo): Version packages (#10025)
• a989859 feat(ui): list and manage the IdP signing certificates of a SAML connection (...
• 6fd8e8d ci(repo): Version packages (#10021)
• 2e03a39 ci(repo): Version packages (#9977)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
car-check	Error		Oct 25, 2026 8:13am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: efc28e2a-e475-41c1-a991-f1d8291e3cef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}