chore(repo): Remove unused dev dependencies by dominic-clerk · Pull Request #10484 · clerk/javascript

dominic-clerk · 2026-10-28T07:32:47Z

Description

Removes devDependencies that nothing references, and lets pnpm prune what they pulled in. Lockfile drops 22 resolved packages (the @solana-mobile/* tree, qrcode, bs58@5, ...); nothing added or upgraded.

@clerk/shared: @solana/wallet-adapter-react (and its module-manager catalog entry)
@clerk/ui: @floating-ui/react-dom, cross-fetch, unplugin (left from the StyleX build that moved to mosaic), @types/webpack-env
@clerk/clerk-js: @types/webpack-env (tsconfig types is explicit; module.hot comes from @rspack/core/module)
@clerk/react-router, @clerk/tanstack-react-start: esbuild-plugin-file-path-extensions (tsup leftover)
@clerk/expo: esbuild (tsdown uses rolldown)

pnpm dedupe re-pointed two peer snapshots to versions already in the lockfile. Devdeps only, so empty changeset.

Part of SEC-493

Checklist

pnpm test runs as expected.
pnpm build runs as expected.
(If applicable) JSDoc comments have been added or updated for any package exports
(If applicable) Documentation has been updated

Type of change

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

vercel · 2026-10-28T07:32:53Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 28, 2026 7:34am UTC
swingset	Ready	Preview	Oct 28, 2026 7:34am UTC

changeset-bot · 2026-10-28T07:32:54Z

🦋 Changeset detected

Latest commit: f46f7ec

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

coderabbitai · 2026-10-28T07:33:10Z

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

Files ignored due to path filters: 1

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Run configuration

Source mode: Auto
Repository: clerk/javascript
Branch: dominic/sec-493-trim-dependencies-with-trim-reaper
File: .coderabbit.yaml
Commit: f46f7ec
Layers: Repository YAML (base), Organization UI (inherited)
Review profile: ASSERTIVE
Plan: Team
Run ID: b6a1ee84-9d6d-440e-86cd-efc8fb51d5af

Commits

Reviewing files that changed from the base of the PR and between f46f7ec and f46f7ec.

Files ignored due to path filters: 1

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

No actionable comments were generated in the recent review.

Recent review info

Run configuration

Source mode: Auto
Repository: clerk/javascript
Branch: dominic/sec-493-trim-dependencies-with-trim-reaper
File: .coderabbit.yaml
Commit: f46f7ec
Layers: Repository YAML (base), Organization UI (inherited)
Review profile: ASSERTIVE
Plan: Team
Run ID: 5ac0b5cb-61fe-4c60-9144-aef80537d00f

Commits

Reviewing files that changed from the base of the PR and between 6c1b46a and f46f7ec.

Files ignored due to path filters: 1

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing: 8

.changeset/remove-unused-dev-dependencies.md
packages/clerk-js/package.json
packages/expo/package.json
packages/react-router/package.json
packages/shared/package.json
packages/tanstack-react-start/package.json
packages/ui/package.json
pnpm-workspace.yaml

Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

clerk/clerk_go (manual)
clerk/dashboard (manual)
clerk/accounts (manual)
clerk/backoffice (manual)
clerk/clerk (manual)
clerk/clerk-docs (manual)
clerk/cloudflare-workers (manual)
clerk/clerk-android (auto-detected)
clerk/clerk-ios (auto-detected)
clerk/cli (auto-detected)

Files with no reviewable changes: 6

packages/expo/package.json
packages/shared/package.json
packages/react-router/package.json
packages/clerk-js/package.json
packages/ui/package.json
pnpm-workspace.yaml

Included review availability: This review used your included allowance. 3 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 8 reviews per hour.

Walkthrough

The pull request removes development dependency entries from six package manifests and removes a version entry from the workspace catalog. It also adds a changeset file with no release entries.

Priority: Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Merge Risk: Minimal · up to f46f7

The dependency cleanup is mergeable with no supported production or release risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly and concisely describes the main change: removing unused development dependencies.
Description check		The description directly explains the removed development dependencies, lockfile impact, validation, and scope of the changes.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Linked repositories: Some configured repositories could not be included in this review. Cross-repository analysis may be incomplete. Please check linked-repository access and settings.

_{Comment @coderabbitai help to get the list of available commands.}

pkg-pr-new · 2026-10-28T07:36:45Z

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10484

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10484

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10484

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10484

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10484

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10484

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10484

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10484

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10484

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10484

@clerk/expo-native-components

npm i https://pkg.pr.new/@clerk/expo-native-components@10484

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10484

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10484

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10484

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10484

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10484

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10484

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10484

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10484

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10484

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10484

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10484

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10484

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10484

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10484

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10484

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10484

commit: f46f7ec

github-actions · 2026-10-28T07:37:53Z

API Changes Report

Generated by Break Check on 2026-10-28T07:37:50.267Z

Summary

Metric	Count
Packages analyzed	20
Packages with changes	0
🔴 Breaking changes	0
🟡 Non-breaking changes	0
🟢 Additions	0

No API Changes Detected

All packages have stable APIs with no detected changes.

Report generated by Break Check

_{Last ran on f46f7ec.}

chore(repo): Remove unused dev dependencies

f46f7ec

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

vercel Bot deployed to Preview – clerk-js-sandbox October 28, 2026 07:33

View deployment

github-actions Bot added clerk-js expo tanstack react-router ui labels Oct 28, 2026

dominic-clerk requested a review from wobsoriano October 28, 2026 07:33

vercel Bot deployed to Preview – swingset October 28, 2026 07:34

View deployment

dominic-clerk added the needs-core-review label Oct 28, 2026

dominic-clerk mentioned this pull request Oct 28, 2026

chore(repo): Consolidate overlapping dev dependencies #10485

Open

3 of 9 tasks

dominic-clerk added this pull request to stack #10486 October 28, 2026 09:08

wobsoriano approved these changes Oct 28, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(repo): Remove unused dev dependencies - #10484

chore(repo): Remove unused dev dependencies#10484
dominic-clerk wants to merge 1 commit into
mainfrom
dominic/sec-493-trim-dependencies-with-trim-reaper

dominic-clerk commented Oct 28, 2026

Uh oh!

vercel Bot commented Oct 28, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Oct 28, 2026

Uh oh!

coderabbitai Bot commented Oct 28, 2026 •

edited

Loading

Review skipped

Uh oh!

pkg-pr-new Bot commented Oct 28, 2026

Uh oh!

github-actions Bot commented Oct 28, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dominic-clerk commented Oct 28, 2026

Description

Checklist

Type of change

Uh oh!

vercel Bot commented Oct 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Oct 28, 2026

🦋 Changeset detected

Uh oh!

coderabbitai Bot commented Oct 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

pkg-pr-new Bot commented Oct 28, 2026

Uh oh!

github-actions Bot commented Oct 28, 2026

API Changes Report

Summary

No API Changes Detected

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Oct 28, 2026 •

edited

Loading

coderabbitai Bot commented Oct 28, 2026 •

edited

Loading