clerk · wobsoriano · Jul 17, 2026 · Jul 17, 2026
diff --git a/.changeset/calm-clients-start.md b/.changeset/calm-clients-start.md
diff --git a/.changeset/fine-results-crash.md b/.changeset/fine-results-crash.md
diff --git a/.changeset/new-queens-brake.md b/.changeset/new-queens-brake.md
diff --git a/packages/electron/CHANGELOG.md b/packages/electron/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @clerk/electron
 
+## 0.0.16
+
+### Patch Changes
+
+- Validate that token-cache and OAuth-transport IPC requests originate from a top-level window's main frame. This prevents untrusted content in subframes or `<webview>`s that share the Clerk preload from reading the persisted client JWT or driving the OAuth transport. ([#9167](https://github.com/clerk/javascript/pull/9167)) by [@dominic-clerk](https://github.com/dominic-clerk)
+
 ## 0.0.15
 
 ### Patch Changes

diff --git a/packages/electron/package.json b/packages/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/electron",
-  "version": "0.0.15",
+  "version": "0.0.16",
   "description": "Clerk SDK for Electron",
   "keywords": [
     "clerk",

diff --git a/packages/expo/CHANGELOG.md b/packages/expo/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## 3.7.8
+
+### Patch Changes
+
+- Reduce redundant native and JavaScript client refreshes during Expo startup. ([#9140](https://github.com/clerk/javascript/pull/9140)) by [@mikepitre](https://github.com/mikepitre)
+
 ## 3.7.7
 
 ### Patch Changes

diff --git a/packages/expo/package.json b/packages/expo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@clerk/expo",
-  "version": "3.7.7",
+  "version": "3.7.8",
   "description": "Clerk React Native/Expo library",
   "keywords": [
     "react",