Skip to content

ci(repo): Version Packages#379

Merged
rafa-thayto merged 1 commit into
mainfrom
changeset-release/main
Jul 10, 2026
Merged

ci(repo): Version Packages#379
rafa-thayto merged 1 commit into
mainfrom
changeset-release/main

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

clerk@2.0.1

Patch Changes

  • Prevent clerk init from executing an attacker-planted node_modules/.bin/{prettier,biome,skills} binary from the project being set up. The formatter and skills steps now pin the package runner to the registry (bunx --package <pkg>@latest -- …, and the pnpm/yarn dlx equivalents) so it runs the real tool instead of a project-local bin shadow. (#377) by @rafa-thayto

@rafa-thayto rafa-thayto enabled auto-merge (squash) July 10, 2026 23:12
@rafa-thayto rafa-thayto merged commit 6e30514 into main Jul 10, 2026
4 checks passed
@rafa-thayto rafa-thayto deleted the changeset-release/main branch July 10, 2026 23:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant