Merge remote-tracking branch 'origin/main' into fredrik/user-4666-fix-transitive-state-when-switching-orgs

Author: jacekradko

.changeset/cuddly-ends-wait.md

@@ -0,0 +1,15 @@
+---
+'@clerk/ui': minor
+---
+
+Improve RTL support by converting physical CSS properties (margins, padding, text alignment, borders) to logical equivalents and adding direction-aware arrow icons
+
+The changes included:
+
+- Positioning (left → insetInlineStart)
+- Margins (marginLeft/Right → marginInlineStart/End)
+- Padding (paddingLeft/Right → paddingInlineStart/End)
+- Text alignment (left/right → start/end)
+- Border radius (borderTopLeftRadius → borderStartStartRadius)
+- Arrow icon flipping with scaleX(-1) in RTL
+- Animation direction adjustments

.changeset/cute-crabs-agree.md

@@ -0,0 +1,6 @@
+---
+'@clerk/clerk-js': minor
+'@clerk/shared': minor
+---
+
+Add `username` field into `PublicUserData` object.

.changeset/export-appearance-from-ui.md

@@ -0,0 +1,6 @@
+---
+'@clerk/ui': patch
+'@clerk/upgrade': patch
+---
+
+Export `Appearance` type from `@clerk/ui` root entry

.changeset/fast-ways-notice.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/fix-csp-nonce-request-headers.md

@@ -0,0 +1,5 @@
+---
+'@clerk/nextjs': patch
+---
+
+Fixed an issue where the CSP nonce generated by `clerkMiddleware({ contentSecurityPolicy: { strict: true } })` was not forwarded as a request header. Server components can now access the nonce via `headers()`, allowing `ClerkProvider` and Next.js to apply it to `<script>` tags.

.changeset/lazy-eagles-lay.md

@@ -0,0 +1,7 @@
+---
+'@clerk/clerk-js': minor
+'@clerk/shared': minor
+'@clerk/react': minor
+---
+
+Add support for resetting a password via phone code.

.changeset/metal-buckets-occur.md

@@ -0,0 +1,21 @@
+---
+'@clerk/astro': major
+---
+
+Remove deprecated `as` prop from unstyled button components (`SignInButton`, `SignUpButton`, `SignOutButton`, `CheckoutButton`, `PlanDetailsButton`, `SubscriptionDetailsButton`). Use the `asChild` prop with a custom element in the default slot instead.
+
+**Before:**
+
+```astro
+<SignInButton as="a" href="/sign-in">
+  Sign in
+</SignInButton>
+```
+
+**After:**
+
+```astro
+<SignInButton asChild>
+  <a href="/sign-in">Sign in</a>
+</SignInButton>
+```

.changeset/old-sides-check.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/protect-server-action-401.md

@@ -0,0 +1,5 @@
+---
+'@clerk/nextjs': major
+---
+
+Return 401 instead of 404 for unauthenticated server action requests in `auth.protect()`

.changeset/soft-wings-flow.md

@@ -0,0 +1,5 @@
+---
+'@clerk/ui': minor
+---
+
+Introduce `<Collapsible />` component and update `<CardAlert />` implementation to fix enter/exit animations.