Skip to content

build(deps): bump @clerk/nextjs from 4.31.8 to 6.16.0#592

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/clerk/nextjs-6.16.0
Closed

build(deps): bump @clerk/nextjs from 4.31.8 to 6.16.0#592
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/clerk/nextjs-6.16.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 21, 2025

Bumps @clerk/nextjs from 4.31.8 to 6.16.0.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​6.16.0

Minor Changes

  • Adjust the CSP configuration option from mode to boolean strict to make it more intuitive (#5648) by @​jacekradko

Patch Changes

@​clerk/nextjs@​6.15.1

Patch Changes

  • Add support for webhook verification with Next.js Pages Router. (#5618) by @​wobsoriano

    // Next.js Pages Router
    import type { NextApiRequest, NextApiResponse } from 'next';
    import { verifyWebhook } from '@clerk/nextjs/webhooks';
    export const config = {
    api: {
    bodyParser: false,
    },
    };
    export default async function handler(req: NextApiRequest, res: NextApiResponse) {
    try {
    const evt = await verifyWebhook(req);
    // Handle webhook event
    res.status(200).json({ received: true });
    } catch (err) {
    res.status(400).json({ error: 'Webhook verification failed' });
    }
    }
    // tRPC
    import { verifyWebhook } from '@​clerk/nextjs/webhooks';
    const webhookRouter = router({
    webhook: publicProcedure.input(/** schema */).mutation(async ({ ctx }) => {
    const evt = await verifyWebhook(ctx.req);
    // Handle webhook event
    return { received: true };
    }),

... (truncated)

Changelog

Sourced from @​clerk/nextjs's changelog.

6.16.0

Minor Changes

  • Adjust the CSP configuration option from mode to boolean strict to make it more intuitive (#5648) by @​jacekradko

Patch Changes

6.15.1

Patch Changes

  • Add support for webhook verification with Next.js Pages Router. (#5618) by @​wobsoriano

    // Next.js Pages Router
    import type { NextApiRequest, NextApiResponse } from 'next';
    import { verifyWebhook } from '@clerk/nextjs/webhooks';
    export const config = {
    api: {
    bodyParser: false,
    },
    };
    export default async function handler(req: NextApiRequest, res: NextApiResponse) {
    try {
    const evt = await verifyWebhook(req);
    // Handle webhook event
    res.status(200).json({ received: true });
    } catch (err) {
    res.status(400).json({ error: 'Webhook verification failed' });
    }
    }
    // tRPC
    import { verifyWebhook } from '@​clerk/nextjs/webhooks';
    const webhookRouter = router({
    webhook: publicProcedure.input(/** schema */).mutation(async ({ ctx }) => {
    const evt = await verifyWebhook(ctx.req);
    // Handle webhook event

... (truncated)

Commits
  • 07ab851 ci(repo): Version packages (#5651)
  • b7e5b32 fix(nextjs): Make strict CSP param optional and default to false (#5652)
  • b6bfe06 feat(nextjs): Use strict param in CSP generation (#5648)
  • 40cb80b ci(repo): Version packages (#5626)
  • 01f501d chore(nextjs): Add support for pages router when verifying webhooks (#5618)
  • bae9741 ci(repo): Version packages (#5595)
  • 196dcb4 chore(repo): Add @unionReturnHeadings Typedoc blockTag (#5596)
  • 8814059 chore(nextjs): Update dependency next to v14.2.28 (#5605)
  • 431a821 feat(clerk-react,backend,shared,types): Introduce has({ feature | plan }) (...
  • a7fc1d6 ci(repo): Version packages (#5573)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) from 4.31.8 to 6.16.0.
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@6.16.0/packages/nextjs)

---
updated-dependencies:
- dependency-name: "@clerk/nextjs"
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Apr 21, 2025
@vercel
Copy link
Copy Markdown
Contributor

vercel Bot commented Apr 21, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
fork-commit-merge-web ❌ Failed (Inspect) Apr 21, 2025 6:42pm

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 22, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/clerk/nextjs-6.16.0 branch April 22, 2025 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant