build(deps): bump @clerk/nextjs from 6.39.0 to 7.0.1

[dependabot]

Bumps @clerk/nextjs from 6.39.0 to 7.0.1.

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.0.1

Patch Changes

• Update README prerequisites to match actual package.json engine and peer dependency constraints. (#7972) by @​jacekradko

• Updated dependencies [55ece85]:

  • @​clerk/backend@​3.0.1
  • @​clerk/react@​6.0.1

@​clerk/nextjs@​7.0.0

Major Changes

• Align experimental/unstable prefixes to use consistent naming: (#7361) by @​brkalow

  • Renamed all __unstable_* methods to __internal_* (for internal APIs)
  • Renamed all experimental__* and experimental_* methods to __experimental_* (for beta features)
  • Removed deprecated billing-related props (__unstable_manageBillingUrl, __unstable_manageBillingLabel, __unstable_manageBillingMembersLimit) and experimental__forceOauthFirst

• Renamed __unstable_invokeMiddlewareOnAuthStateChange to __internal_invokeMiddlewareOnAuthStateChange. (#7925) by @​jacekradko

• useAuth().getToken is no longer undefined during server-side rendering, it is a function and calling it will throw. (#7730) by @​Ephem

  • If you are only using getToken in useEffect, event handlers or with non-suspenseful data fetching libraries, no change is necessary as these only trigger on the client.
  • If you are using suspenseful data fetching libraries that do trigger during SSR, you likely have strategies in place to avoid calling getToken already, since this has never been possible.
  • If you are using getToken === undefined checks to avoid calling it, know that it will now throw instead and you should catch and handle the error.

  async function doThingWithToken(getToken: GetToken) {
    try {
      const token = await getToken();
  // Use token
  
  } catch (error) {
  if (isClerkRuntimeError(error) && error.code === 'clerk_runtime_not_browser') {
  // Handle error
  }
  }
  }

  To access auth data server-side, see the Auth object reference doc.

• Refactor React SDK hooks to subscribe to auth state via useSyncExternalStore. This is a mostly internal refactor to unlock future improvements, but includes a few breaking changes and fixes. (#7411) by @​Ephem

  Breaking changes:

  • Removes ability to pass in initialAuthState to useAuth
    • This was added for internal use and is no longer needed
    • Instead pass in initialState to the <ClerkProvider>, or dynamic if using the Next package
    • See your specific SDK documentation for more information on Server Rendering

... (truncated)

Changelog

Sourced from @​clerk/nextjs's changelog.

7.0.1

Patch Changes

• Update README prerequisites to match actual package.json engine and peer dependency constraints. (#7972) by @​jacekradko

• Updated dependencies [55ece85]:

  • @​clerk/backend@​3.0.1
  • @​clerk/react@​6.0.1

7.0.0

Major Changes

• Align experimental/unstable prefixes to use consistent naming: (#7361) by @​brkalow

  • Renamed all __unstable_* methods to __internal_* (for internal APIs)
  • Renamed all experimental__* and experimental_* methods to __experimental_* (for beta features)
  • Removed deprecated billing-related props (__unstable_manageBillingUrl, __unstable_manageBillingLabel, __unstable_manageBillingMembersLimit) and experimental__forceOauthFirst

• Renamed __unstable_invokeMiddlewareOnAuthStateChange to __internal_invokeMiddlewareOnAuthStateChange. (#7925) by @​jacekradko

• useAuth().getToken is no longer undefined during server-side rendering, it is a function and calling it will throw. (#7730) by @​Ephem

  • If you are only using getToken in useEffect, event handlers or with non-suspenseful data fetching libraries, no change is necessary as these only trigger on the client.
  • If you are using suspenseful data fetching libraries that do trigger during SSR, you likely have strategies in place to avoid calling getToken already, since this has never been possible.
  • If you are using getToken === undefined checks to avoid calling it, know that it will now throw instead and you should catch and handle the error.

  async function doThingWithToken(getToken: GetToken) {
    try {
      const token = await getToken();
  // Use token
  
  } catch (error) {
  if (isClerkRuntimeError(error) && error.code === 'clerk_runtime_not_browser') {
  // Handle error
  }
  }
  }

  To access auth data server-side, see the Auth object reference doc.

• Refactor React SDK hooks to subscribe to auth state via useSyncExternalStore. This is a mostly internal refactor to unlock future improvements, but includes a few breaking changes and fixes. (#7411) by @​Ephem

  Breaking changes:

  • Removes ability to pass in initialAuthState to useAuth
    • This was added for internal use and is no longer needed
    • Instead pass in initialState to the <ClerkProvider>, or dynamic if using the Next package
    • See your specific SDK documentation for more information on Server Rendering

... (truncated)

Commits

• dd322cf ci(repo): Version packages (#7974)
• 55ece85 docs(repo): update README prerequisites to match package.json (#7972)
• 5f2e3dd ci(repo): Version packages (Core 3) (#7412)
• 551fcc8 chore: sync changelogs and versions from release/core-2 (#7964)
• cd1973e feat(backend,nextjs): Add support for M2M JWT creation and verification (#7955)
• c694433 chore(repo): Backport Core 2 changelogs and remove consumed changesets (#7952)
• 5ef4a77 refactor(shared): Rename dev browser APIs to remove JWT terminology (#7930)
• 428629b feat(shared): make clerkJSUrl, clerkJSVersion, clerkUIUrl internal (#7879)
• 24457b7 chore(repo): remove backported changesets and backfill core-2 changelogs (#7847)
• 37a4cbb fix(react): Fix stale SSR state during cross-tab sign-out (#7865)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fork-commit-merge-web	Error		Mar 9, 2026 8:20pm

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.