chore(deps): bump the workspace group across 1 directory with 36 updates

[dependabot]

Bumps the workspace group with 36 updates in the / directory:

Package	From	To
@ai-sdk/anthropic	3.0.84	3.0.105
@ai-sdk/deepseek	2.0.39	2.0.51
@ai-sdk/openai	3.0.71	3.0.90
@ai-sdk/react	3.0.207	3.0.246
@biomejs/biome	2.5.2	2.5.7
@clerk/backend	3.11.6	3.16.0
@clerk/nextjs	7.5.19	7.7.0
@clerk/ui	1.25.4	1.29.0
@cloudflare/workers-types	5.20260716.1	5.20260804.1
@google/genai	2.12.0	2.16.0
@hookform/resolvers	5.4.0	5.7.1
@mastra/core	1.51.0	1.57.0
@next/env	16.2.11	16.3.0
@openrouter/ai-sdk-provider	2.9.1	2.10.0
@polar-sh/sdk	0.48.1	0.49.0
@tailwindcss/postcss	4.3.2	4.3.3
@tanstack/react-query	5.101.2	5.101.4
@tanstack/react-virtual	3.14.6	3.14.9
@types/pg	8.20.0	8.20.4
ai	6.0.205	6.0.244
dependency-cruiser	18.1.0	18.1.1
hono	4.12.34	4.13.0
katex	0.17.0	0.18.1
knip	6.27.0	6.32.0
lucide-react	1.24.0	1.29.0
next	16.2.11	16.3.0
nuqs	2.9.0	2.9.5
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
react-hook-form	7.81.0	7.84.0
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
tailwindcss	4.3.2	4.3.3
tsx	4.23.1	4.23.9
turbo	2.10.5	2.10.8
wrangler	4.114.0	4.119.0

Updates @ai-sdk/anthropic from 3.0.84 to 3.0.105

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/openai@​3.0.91

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

3.0.105

Patch Changes

• 0a295e3: Preserve Anthropic prompt-cache matches by replaying complete code-execution transcripts in their original wire shape.

3.0.104

Patch Changes

• Updated dependencies [9ecdefe]
  • @​ai-sdk/provider-utils@​4.0.41

3.0.103

Patch Changes

• 7865a71: fix(anthropic): report thinking tokens as reasoning token usage

3.0.102

Patch Changes

• b4c4426: feat (provider/anthropic): support fallbacks 'default' mode, which routes safety classifier refusals to Anthropic's recommended fallback model (adds the server-side-fallback-2026-07-01 beta automatically)
• b4c4426: feat (provider/anthropic): support mid-conversation tool changes via the toolChanges system message provider option, emitting tool_addition/tool_removal content blocks and the mid-conversation-tool-changes-2026-07-01 beta
• b4c4426: feat (provider/anthropic): add claude-opus-5 model id with frontier-tier capabilities (128k output tokens, structured output, adaptive thinking, xhigh effort, sampling parameter rejection, thinking-disabled only at effort high or below)

3.0.101

Patch Changes

• 0608dca: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

3.0.100

Patch Changes

• b7afc80: Warn when an unknown model uses the default 4096 max output token limit.

3.0.99

Patch Changes

• db8cff6: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
• 94d0f86: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output

3.0.98

Patch Changes

... (truncated)

Commits

• 887ce5e Version Packages (#18369)
• 0a295e3 [v6.0] fix: preserve Anthropic prompt-cache matches when replaying code-execu...
• 006a2f8 Version Packages (#18089)
• 909df02 Version Packages (#17927)
• 7865a71 backport: fix(anthropic): report thinking tokens as reasoning token usage (#1...
• f6ac6a2 Version Packages (#17910)
• b4c4426 feat(anthropic): opus 5 (#17905)
• 07edaea Version Packages (#17825)
• 0608dca [v6.0] fix: incorrect capability defaults for unrecognized Claude model IDs (...
• f53b627 Version Packages (#17650)
• Additional commits viewable in compare view

Updates @ai-sdk/deepseek from 2.0.39 to 2.0.51

Release notes

Sourced from @​ai-sdk/deepseek's releases.

@​ai-sdk/replicate@​2.0.48

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42

@​ai-sdk/revai@​2.0.48

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42

@​ai-sdk/valibot@​2.0.43

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42

@​ai-sdk/moonshotai@​2.0.41

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42
  • @​ai-sdk/openai-compatible@​2.0.64

Changelog

Sourced from @​ai-sdk/deepseek's changelog.

2.0.51

Patch Changes

• Updated dependencies [9ecdefe]
  • @​ai-sdk/provider-utils@​4.0.41

2.0.50

Patch Changes

• Updated dependencies [19093fd]
  • @​ai-sdk/provider-utils@​4.0.40

2.0.49

Patch Changes

• 55be323: fix: Azure DeepSeek structured output returns JSON in reasoning with empty text

2.0.48

Patch Changes

• Updated dependencies [06fb54c]
  • @​ai-sdk/provider-utils@​4.0.39

2.0.47

Patch Changes

• Updated dependencies [e1af05f]
  • @​ai-sdk/provider@​3.0.14
  • @​ai-sdk/provider-utils@​4.0.38

2.0.46

Patch Changes

• bef93ae: fix(security): prevent streaming tool calls from finalizing on parsable partial JSON

  Streaming tool call arguments were finalized using isParsableJson() as a heuristic for completion. If partial accumulated JSON happened to be valid JSON before all chunks arrived, the tool call would be executed with incomplete arguments. Tool call finalization now only occurs in flush() after the stream is fully consumed.

• 327642b: fix: more precise default message for tool execution denial

• Updated dependencies [d559de9]

  • @​ai-sdk/provider-utils@​4.0.37

2.0.45

Patch Changes

... (truncated)

Commits

• 006a2f8 Version Packages (#18089)
• da5fbd2 Version Packages (#17425)
• c827936 Version Packages (#17253)
• 55be323 Backport: fix: Azure DeepSeek structured output returns JSON in reasoning wit...
• 303dd7d Version Packages (#17205)
• 46dca7c Version Packages (#16952)
• 885e236 Version Packages (#16820)
• 327642b [v6.0] fix: more precise default message for tool execution denial (#16804)
• bef93ae [v6.0] fix: prevent streaming tool calls from finalizing on parsable partial ...
• 8de2bdb Version Packages (#16768)
• Additional commits viewable in compare view

Updates @ai-sdk/openai from 3.0.71 to 3.0.90

Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.90

Patch Changes

• Updated dependencies [9ecdefe]
  • @​ai-sdk/provider-utils@​4.0.41

3.0.89

Patch Changes

• 23632b1: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

3.0.88

Patch Changes

• 8100830: Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions.

3.0.87

Patch Changes

• 2f11af1: Preserve stored tool search output item IDs from provider metadata.

3.0.86

Patch Changes

• Updated dependencies [19093fd]
  • @​ai-sdk/provider-utils@​4.0.40

3.0.85

Patch Changes

• Updated dependencies [06fb54c]
  • @​ai-sdk/provider-utils@​4.0.39

3.0.84

Patch Changes

• 356918c: feat(provider/openai): add GPT-5.6 reasoning and prompt cache controls

3.0.83

Patch Changes

• 34b5acc: feat(provider/openai,provider/gateway): add gpt-5.6 model ids

... (truncated)

Commits

• 006a2f8 Version Packages (#18089)
• 98d8c43 Version Packages (#18028)
• 23632b1 [v6.0] feat: support blocked domains in OpenAI web search (#18035)
• 07edaea Version Packages (#17825)
• 8100830 [v6.0] fix: new OpenAI model versions falling back to incompatible legacy req...
• f53b627 Version Packages (#17650)
• 2f11af1 [v6.0] fix: preserve tool_search output item IDs after provider metadata roun...
• da5fbd2 Version Packages (#17425)
• 303dd7d Version Packages (#17205)
• da385f7 Version Packages (#17027)
• Additional commits viewable in compare view

Updates @ai-sdk/react from 3.0.207 to 3.0.246

Changelog

Sourced from @​ai-sdk/react's changelog.

3.0.246

Patch Changes

• Updated dependencies [79e58aa]
  • ai@6.0.244

3.0.245

Patch Changes

• Updated dependencies [dd5d344]
  • ai@6.0.243

3.0.244

Patch Changes

• ai@6.0.242

3.0.243

Patch Changes

• ai@6.0.241

3.0.242

Patch Changes

• ai@6.0.240

3.0.241

Patch Changes

• ai@6.0.239

3.0.240

Patch Changes

• Updated dependencies [9ecdefe]
• Updated dependencies [26d10c0]
• Updated dependencies [7767170]
  • @​ai-sdk/provider-utils@​4.0.41
  • ai@6.0.238

3.0.239

... (truncated)

Commits

• 6b43f42 Version Packages (#18491)
• 5be723d Version Packages (#18450)
• 4dfd1b5 Version Packages (#18429)
• 5b4cf0e Version Packages (#18345)
• b878ce9 Version Packages (#18314)
• fbb507a Version Packages (#18280)
• 006a2f8 Version Packages (#18089)
• 98d8c43 Version Packages (#18028)
• 0226bf6 Version Packages (#17981)
• 07edaea Version Packages (#17825)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.2 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

  type Mapper<T> = () => T;
  declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

• 191d051 ci: release (#11119)
• 9847e68 feat(lint): add noNonScalableViewport rule (#11168)
• e63354c feat(lint): add noExtendNative nursery rule (#11136)
• 2fa0a62 docs: rework CLI (#11134)
• e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
• c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
• 1139f1c ci: release (#11022)
• 781d68d feat(lint/js): add noRestrictedProperties (#9806)
• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• Additional commits viewable in compare view

Updates @clerk/backend from 3.11.6 to 3.16.0

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.15.0

Minor Changes

• Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

• Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

• Updated dependencies [aaea141]:

  • @​clerk/shared@​4.25.10

@​clerk/backend@​3.14.0

Minor Changes

• Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
  • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
  • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
  • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
  • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
  • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

• Updated dependencies [2974fb0, e2dd4e2]:
  • @​clerk/shared@​4.25.9

@​clerk/backend@​3.13.2

Patch Changes

• Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

Changelog

Sourced from @​clerk/backend's changelog.

3.16.0

Minor Changes

• Add clerkClient.users.removePassword(userId, params?) to remove a user's password through the Backend API. Password removal is allowed even when the user has no alternate sign-in method configured. Existing sessions remain active by default; pass { signOutOfOtherSessions: true } to revoke them. (#9326) by @​joshrowley

Patch Changes

• Improve generated API reference links, expose BillingSubscriptionItemStatus, and clarify the createUser() identification status documentation. (#9340) by @​SarahSoutoul

• Updated dependencies [1ef84c3, d639048, a66cbbf]:

  • @​clerk/shared@​4.27.0

3.15.1

Patch Changes

• Add the optional emailAddressIdentificationStatus and phoneNumberIdentificationStatus parameters to CreateUserParams. The Backend API has supported these arrays on POST /v1/users since they shipped, but createUser() had no way to pass them, so every email address and phone number was necessarily created verified. Each array runs parallel to emailAddress / phoneNumber — one item per identifier, applied by position — and an item set to 'reserved' creates that identifier unverified but still usable for sign-in and locked so no other user can claim it. (#9305) by @​dmoerner

  The createUser() documentation is corrected accordingly: it stated unconditionally that created email addresses and phone numbers are automatically verified, which is only the default.

• Updated dependencies [5c81479]:

  • @​clerk/shared@​4.26.0

3.15.0

Minor Changes

• Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

• Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

• Updated dependencies [aaea141]:

  • @​clerk/shared@​4.25.10

3.14.0

Minor Changes

• Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
  • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
  • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
  • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
  • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
  • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

... (truncated)

Commits

• See full diff in compare view

Updates @clerk/nextjs from 7.5.19 to 7.7.0

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.6.4

Patch Changes

• Updated dependencies [9c51d74, aaea141, fe6ee54]:
  • @​clerk/backend@​3.15.0
  • @​clerk/shared@​4.25.10
  • @​clerk/react@​6.12.10

@​clerk/nextjs@​7.6.3

Patch Changes

• Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
  • @​clerk/shared@​4.25.9
  • @​clerk/backend@​3.14.0
  • @​clerk/react@​6.12.9

@​clerk/nextjs@​7.6.2

Patch Changes

• Updated dependencies [6f5fde9]:
  • @​clerk/backend@​3.13.2
  • @​clerk/react@​6.12.8

@​clerk/nextjs@​7.6.1

Patch Changes

• Updated dependencies [01f2c12]:
  • @​clerk/shared@​4.25.8
  • @​clerk/react@​6.12.8
  • @​clerk/backend@​3.13.1

Changelog

Sourced from @​clerk/nextjs's changelog.

7.7.0

Minor Changes

• Add <InviteMembersButton />, a control component that opens the organization invite-members form in a modal when clicked, working like <SignInButton mode="modal">. (#9124) by @​alexcarpenter

  Wrap your own button (or omit children for a default one). The button requires an active organization and should be rendered for members who can manage memberships (org:sys_memberships:manage). Opening it without an active organization or that permission is a no-op in production, and throws a descriptive error in development.

  import { InviteMembersButton } from '@clerk/nextjs';
  <InviteMembersButton>
  <button>Invite members</button>
  </InviteMembersButton>;

  This also adds Clerk.openInviteMembers() and Clerk.closeInviteMembers() for opening and closing the modal programmatically.

Patch Changes

• Updated dependencies [1ef84c3, d639048, f38cf02, a66cbbf, 58d8ff5]:
  • @​clerk/backend@​3.16.0
  • @​clerk/shared@​4.27.0
  • @​clerk/react@​6.13.0

7.6.5

Patch Changes

• Updated dependencies [a601cd7, bbe51ff, 5c81479]:
  • @​clerk/backend@​3.15.1
  • @​clerk/react@​6.12.11
  • @​clerk/shared@​4.26.0

7.6.4

Patch Changes

• Updated dependencies [9c51d74, aaea141, fe6ee54]:
  • @​clerk/backend@​3.15.0
  • @​clerk/shared@​4.25.10
  • @​clerk/react@​6.12.10

7.6.3

Patch Changes

• Updated dependencies [2974fb0, 23071bd, e2dd4e2]:
  • @​clerk/shared@​4.25.9
  • @​clerk/backend@​3.14.0

... (truncated)

Commits

• See full diff in compare view

Updates @clerk/ui from 1.25.4 to 1.29.0

Release notes

Sourced from @​clerk/ui's releases.

@​clerk/ui@​1.27.2

Patch Changes

• Enable self-serve OIDC configuration for every application. Organization admins can now select an OIDC provider in the <OrganizationProfile /> Security tab without the experimental.oidcSelfServe option, and existing OIDC connections open their configuration steps instead of the unsupported-provider state. The experimental.oidcSelfServe option no longer does anything and can be removed from <ClerkProvider /> and Clerk.load(). (#9288) by @​NicolasLopes7

• Updated dependencies [aaea141]:

  • @​clerk/shared@​4.25.10
  • @​clerk/localizations@​4.13.10

@​clerk/ui@​1.27.1

Patch Changes

• Prevent phone number and multi-email fields from crashing when they receive paste events without clipboard data. (#9274) by @​brkalow

@​clerk/ui@​1.27.0

Minor Changes

• Add a new Mosaic Avatar compound component (StyleX). Avatar.Root owns shape (circle | square) and size (lg | md | sm | xs); compose Avatar.Image (renders once the image loads) and Avatar.Fallback (shown while the image is pending or has failed, with an optional delayMs) inside it. (#9230) by @​alexcarpenter

Patch Changes

• Add support for configuring custom OpenID Connect enterprise connections through the Organization Profile. (#9200) by @​NicolasLopes7

• Expose whether an organization member has been deprovisioned, and mark deprovisioned members as inactive in the Organization Profile. (#9202) by @​NicolasLopes7

• Updated dependencies [2974fb0, e2dd4e2]:

  • @​clerk/localizations@​4.13.9
  • @​clerk/shared@​4.25.9

@​clerk/ui@​1.26.1

Patch Changes

• Fix an issue where Clerk's ticket query parameters were not removed from the URL when completing a sign-up that was missing requirements. (#9255) by @​dstaley

@​clerk/ui@​1.26.0

Minor Changes

• Expose composable UserProfile and OrganizationProfile subcomponents from @clerk/ui/experimental (#9144) by @​alexcarpenter

Patch Changes

• Fix OrganizationProfileGeneralPanel (from @clerk/ui/experimental) throwing "CardState not found" when opening the leave-organization or delete-organization confirmation in its default, no-children page mode. The panel now provides the same root CardStateProvider that a mounted <OrganizationProfile /> supplies. (#9243) by @​alexcarpenter

• Updated dependencies [01f2c12]:

  • @​clerk/shared@​4.25.8
  • @​clerk/localizations@​4.13.8

Changelog

Sourced from @​clerk/ui's changelog.

1.29.0

Minor Changes

• Add <InviteMembersButton />, a control component that opens the organization invite-members form in a modal when clicked, working like <SignInButton mode="modal">. (#9124) by @​alexcarpenter

  Wrap your own button (or omit children for a default one). The button requires an active organization and should be rendered for members who can manage memberships (org:sys_memberships:manage). Opening it without an active organization or that permission is a no-op in production, and throws a descriptive error in development.

  import { InviteMembersButton } from '@clerk/nextjs';
  <InviteMembersButton>
  <button>Invite members</button>
  </InviteMembersButton>;

  This also adds Clerk.openInviteMembers() and Clerk.closeInviteMembers() for opening and closing the modal programmatically.

Patch Changes

• Ensure drawers opened from modals render above the modal and its backdrop. (#9124) by @​alexcarpenter

• Keep invitation email pills consistently spaced when they wrap across multiple rows. (#9124) by @​alexcarpenter

• Updated dependencies [1ef84c3, d639048, a66cbbf]:

  • @​clerk/shared@​4.27.0
  • @​clerk/localizations@​4.14.1

1.28.0

Minor Changes

• Support sign-in-or-sign-up combined flow with Clerk component (#7928) by @​dmoerner

  when strict enumeration protection is enabled.

  On development instances, <SignIn> now logs a warning when the sign-in-or-up flow is rendered on an instance that has both password and strict enumeration protection enabled. In that configuration visitors without an account are routed to the password screen and cannot complete a sign-up, so the warning names both settings and how to resolve them.

Patch Changes

• fix(ui): Avoid races between email link tabs when using sign up if missing (#9328) by @​dmoerner

• Updated dependencies [5c81479]:

  • @​clerk/shared@​4.26.0
  • @​clerk/localizations@​4.14.0

1.27.2

... (truncated)

Commits

• See full diff in compare view

Updates @cloudflare/workers-types from 5.20260716.1 to 5.20260804.1

Commits

• See full diff in compare view

Updates @google/genai from 2.12.0 to 2.16.0

Release notes

Sourced from @​google/genai's releases.

v2.16.0

2.16.0 (2026-08-06)

Features

• Add the Gemini Robotics ER 2 Preview model (5647ced)
• Add TOO_MANY_TOOL_CALLS to FinishReason enum. (a7fa568)
• Add top-level errors array to Interaction resource (iAPI) (b9dfd81)
• Make HttpOptions.timeout a per-attempt deadline in the JS GenAI SDK. (8268806)

Bug Fixes

• Add propertyOrdering auto-population for ResponseSchema and ResponseJsonSchema for Dotnet SDK (e26542f)

v2.15.0

2.15.0 (2026-07-30)

Features

• add environment resource (2c911be)
• Support GoogleMaps Tool grounding_types places and routing (52655c1)
• Support per-request retryOptions in the JS GenAI SDK API Client (124b606)
• Wire environment service into genai sdk (70d7938)

v2.14.0

2.14.0 (2026-07-28)

Features

• [GenerateContentConfig] Add GenerationConfig.audio_transcription_config and Part.audio_transcription. (4b2e67a)
• Add ...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.