build(deps): bump @clerk/backend from 3.5.0 to 3.15.0 in /dashboard

[dependabot]

Bumps @clerk/backend from 3.5.0 to 3.15.0.

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.15.0

Minor Changes

• Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

• Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

• Updated dependencies [aaea141]:

  • @​clerk/shared@​4.25.10

@​clerk/backend@​3.14.0

Minor Changes

• Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
  • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
  • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
  • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
  • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
  • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

• Updated dependencies [2974fb0, e2dd4e2]:
  • @​clerk/shared@​4.25.9

@​clerk/backend@​3.13.2

Patch Changes

• Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

@​clerk/backend@​3.13.1

Patch Changes

• Updated dependencies [01f2c12]:
  • @​clerk/shared@​4.25.8

Changelog

Sourced from @​clerk/backend's changelog.

3.15.0

Minor Changes

• Update fields for BillingSubscription and BillingSubscriptionItem (#9196) by @​dstaley

Patch Changes

• Return a TokenVerificationError from decodeJwt and verifyToken for tokens whose header, payload, or signature cannot be decoded. (#9268) by @​wobsoriano

• Updated dependencies [aaea141]:

  • @​clerk/shared@​4.25.10

3.14.0

Minor Changes

• Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
  • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
  • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
  • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
  • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
  • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

• Updated dependencies [2974fb0, e2dd4e2]:
  • @​clerk/shared@​4.25.9

3.13.2

Patch Changes

• Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

3.13.1

Patch Changes

• Updated dependencies [01f2c12]:
  • @​clerk/shared@​4.25.8

3.13.0

Minor Changes

• Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

... (truncated)

Commits

• 38f347c ci(repo): Version packages (#9289)
• fe6ee54 fix(backend): Update Subscription and SubscriptionItem resources (#9196)
• 9c51d74 fix(backend): Return TokenVerificationError from decodeJwt for undecodable to...
• c86b4bc ci(repo): Version packages (#9262)
• 23071bd fix(backend): Align EnterpriseConnection resource with the Backend API respon...
• 8c9d061 ci(repo): Version packages (#9251)
• 6f5fde9 docs(backend): Correct Dashboard labels in instance restrictions (#9253)
• 9081534 ci(repo): Version packages (#9240)
• acef8a1 ci(repo): Version packages (#9219)
• 848eefe feat(backend): support configurable Frontend API proxy URLs (#9223)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dashboard-skillcheck	Ready	Preview	Aug 4, 2026 4:44pm