[codex] Upgrade Clerk stack

[juliusmarminge]

Summary

Upgrade the Clerk packages used across the relay, web, desktop, and mobile applications to the versions published by clerk/javascript PR #9108.

The repository catalog was still pinned to the preceding Clerk patch release, so consumers would not receive the latest shared package fixes or the updated native Clerk SDKs bundled by @clerk/expo. This updates the catalog and supply-chain age exclusions together, then regenerates the pnpm lockfile so every workspace resolves a consistent Clerk stack.

@clerk/electron-passkeys remains at 0.0.3 because that release did not publish a newer version of the package.

Upstream release: clerk/javascript#9108

Validation

• vp check
• vp run typecheck
• vp run lint:mobile
• git diff --check
• pnpm lockfile supply-chain verification

---

Note

Medium Risk
Touches authentication SDKs used on relay, web, desktop, and mobile; risk is limited to patch bumps with no local code changes, but auth/session behavior should be smoke-tested.

Overview
Bumps the Clerk packages in the pnpm catalog and matching minimumReleaseAgeExclude entries so relay, web, desktop, and mobile all resolve one aligned stack: @clerk/backend 3.11.2, @clerk/clerk-js 6.25.1, @clerk/electron 0.0.11, @clerk/expo 3.7.2, @clerk/react 6.12.1, and @clerk/shared 4.25.1. pnpm-lock.yaml is regenerated so workspace overrides and per-app lock entries reflect those pins.

@clerk/electron-passkeys is unchanged at 0.0.3. There are no application source edits—consumers already depend on catalog:.

^{Reviewed by Cursor Bugbot for commit 1c5bc90. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Upgrade Clerk packages to latest patch versions

Bumps @clerk/backend, @clerk/clerk-js, @clerk/electron, @clerk/expo, @clerk/react, and @clerk/shared to their latest patch releases in pnpm-workspace.yaml. The minimumReleaseAgeExclude entries are updated to match the new versions.

^{Macroscope summarized 1c5bc90.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 8349fff7-6fab-49c2-9d37-f6797b8ea18c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch t3code/bump-clerk-stack

---

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Approved

Routine patch-level dependency upgrade for Clerk packages. Changes are limited to lock files and workspace configuration with no application code modifications.

^{You can customize Macroscope's approvability policy. Learn more.}