chore(release): bump clerk-android to 1.2.0 and telemetry to 1.1.0

[swolfand]

Bumps clerk-android-api and clerk-android-ui from 1.1.11 to 1.2.0, and clerk-android-telemetry from 1.0.6 to 1.1.0. 86 commits since v1.1.11.

It's a minor bump, not a patch, because some changes affect apps (listed below). The 20 composables become internal without a deprecation cycle, as decided in #1024.

Release notes (draft)

Requires compileSdk 37 (clerk-android-ui)

clerk-android-ui now depends on androidx.lifecycle 2.11.0 (#1077). Its lifecycle-runtime-compose, lifecycle-viewmodel-compose and lifecycle-viewmodel-navigation3 artifacts declare minCompileSdk=37, so apps must compile against API 37. targetSdk and minSdk (24) are unchanged. clerk-android-api only needs compileSdk 34.

Breaking changes

• Step composables are internal (fix(ui): hide step composables that crash outside their host view; deprecate accidental public API #1024). These public composables always crashed outside their host view, and are now internal: AuthStartView, SignInFactorOneView, SignInFactorTwoView, SignInFactorAlternativeMethodsView, SignInFactorTwoBackupCodeView, SignInClientTrustView, SignInFactorCodeView, SignInFactorOneEmailLinkView, SignInGetHelpView, SignInFactorOnePasskeyView, SignInFactorTwoPasskeyView, SignInFactorOneForgotPasswordView, SignInSetNewPasswordView, SignInFactorOnePasswordView, SignUpCodeView, SignUpCollectFieldView, SignUpCompleteProfileView, SignUpEmailLinkView, UserProfileDetailView, UserProfileVerifyView. Use AuthView / UserProfileView instead.
• Nullable fields (fix(api)!: decode enterprise connections without a logo #1064, fix(api)!: decode null role and permission descriptions #1059). An enterprise connection's logo, and role and permission descriptions, are now nullable because the server can omit them.
• AuthView has a new parameter (feat(ui): opt-in Restore Credentials in AuthView #1097). Code compiled against 1.1.x must be recompiled.

Deprecations

• ClerkLog and OrganizationApi (fix(ui): hide step composables that crash outside their host view; deprecate accidental public API #1024), and the old SignIn / SignUp auth entry points in favour of Clerk.auth (refactor(api): deprecate the old SignIn/SignUp auth entry points #1039). They still work in 1.2.0.

New

• Restore Credentials in AuthView (feat(ui): opt-in Restore Credentials in AuthView #1097): AuthView(enableRestoreCredentials = true), opt-in, for Google Play's sign-in restoration requirement. It tries a silent restore on the first launch after install/restore and creates a restore key after sign-in. It needs passkeys enabled as a first factor.
• Clerk.auth facade covers everything the prebuilt UI needs (feat(api): fill the Clerk.auth gaps the prebuilt UI needs #1035), typed Strategy (feat(api): add typed Strategy and migrate strategy comparisons #1025), sealed OAuthResult.Outcome (feat(api): add sealed OAuthResult.Outcome and drop UI force-unwraps #1030), stable test tags on the prebuilt views (feat(ui): add stable test tags to the prebuilt Compose views #1040), framework device token compare-and-set (feat(api): add framework device token compare-and-set #964).

Fixes

• OAuth/SSO: one RedirectCoordinator for all redirect flows, with callback state checks against forged deep links (refactor(api): one RedirectCoordinator for all redirect flows, with callback state checks #1033). Transfer to sign-up on a bare OAuth callback (fix(sso): transfer to sign-up on a bare OAuth callback #1078). Fixes for recreated activities, cancellation and log redaction (fix(sso): finish the bridge activity when it's recreated mid-completion #1008, fix(signout): propagate cancellation and always finish local cleanup #1009, fix(sso): redact callback URI in no-pending-auth warning #1044).
• Setup-MFA: backup codes are shown before the next session task (fix(ui): show the backup codes before the setup-MFA session task completes #1080), survive rotation (fix(ui): keep backup codes across device rotation #1084), and the step is tied to its session (fix(ui): tie the setup-MFA step to the session it belongs to #1087).
• ClerkResult functions no longer throw (fix(api): stop ClerkResult functions from throwing #1031). Unknown server enum values decode to UNKNOWN (fix(api): decode unknown server enum values to UNKNOWN everywhere #1027), and 3xx responses with a body return a failure (fix(api): return a failure for 3xx responses with a body #1028).
• Reliability and performance:
  • Session token refresh pauses in the background (fix(api): pause the session token refresh loop while the app is backgrounded #1018), and the initial refresh no longer overwrites a newer client (fix(api): don't let initial refresh overwrite a newer adopted client #1020).
  • Keystore setup and cache hydration moved off the initialize caller thread (fix(api): move keystore setup and cache hydration off the initialize caller thread #1013), and the decrypted device token is cached (fix(api): cache the decrypted device token in memory #1014).
  • Client state uses a single ordered store (refactor(api): move client state into a single-writer ordered state store #1017), and prebuilt views rebuild when Clerk finishes loading (fix(ui): rebuild prebuilt views when Clerk finishes loading #1068).
• UI: Delete account follows deleteSelfEnabled (fix(ui): show Delete account based on the user's deleteSelfEnabled flag #1058), the email code screen is kept when email link is supported (fix(ui): keep the email code screen when email link is supported #1043), and the top bar trailing action is aligned (fix(ui): align top bar trailing action with content padding #1076).

Telemetry 1.1.0

A plain Android library without Ktor (#1019). The instance type's wire name is now read correctly (#1060).

To publish after merge

Run Manual Publish (manual-release.yml) on main with publish_api, publish_ui and publish_telemetry all checked. It waits for the verify and verify-e2e jobs, tags v1.2.0, and creates the GitHub release with generated notes. Paste the notes above into it.

Then bump the pins in clerk/javascript#10233 to 1.2.0 and mark it ready. Expo apps will need compileSdk 37 too.

Summary by CodeRabbit

• Chores
  • Updated the app’s Clerk authentication and interface components to newer versions. No user-facing changes are specified in this update.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: clerk/clerk-android/.coderabbit.yaml
• Review profile: CHILL
• Plan: Team
• Run ID: 42f053d8-efc5-429e-b9c6-ef25eabe6c38

📥 Commits

Reviewing files that changed from the base of the PR and between de8dcab and e536b35.

📒 Files selected for processing: 1

• gradle.properties

Included review availability: This review used your included allowance. 6 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 8 reviews per hour.

📝 Walkthrough

The configured Clerk API and UI versions changed from 1.1.11 to 1.2.0. The Clerk telemetry version changed from 1.0.6 to 1.1.0.

Changes: Clerk dependency versions

Layer / File(s)	Summary
Update Clerk versions gradle.properties	The configured Clerk API and UI versions changed to 1.2.0. The telemetry version changed to 1.1.0.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to e536b

No actionable issue with the version updates is established. The repository’s Android modules use compileSdk 37; the reported compatibility changes do not, on the available evidence, prevent merging.

Pre-merge checks: 5

Passed checks: 5 passed

Check name	Status	Explanation
Title check		The title clearly and concisely describes the version bumps for Clerk Android and telemetry.
Description check		The description explains the release purpose, compatibility requirements, breaking changes, deprecations, new features, fixes, telemetry changes, and publishing steps. It does not use the template hea…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}