SarahSoutoul · Oct 7, 2026 · Oct 7, 2026
diff --git a/.changeset/tanstack-start-csrf.md b/.changeset/tanstack-start-csrf.md
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,11 @@
 # clerk
 
+## 3.4.1
+
+### Patch Changes
+
+- Register TanStack Start's CSRF middleware before Clerk's middleware in `src/start.ts`, both when `clerk init` creates the file and when it can safely edit an existing one. This needs `@tanstack/react-start` 1.168.10 or later; otherwise `clerk init` prints the manual steps instead. ([#523](https://github.com/clerk/cli/pull/523)) by [@SarahSoutoul](https://github.com/SarahSoutoul)
+
 ## 3.4.0
 
 ### Minor Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clerk",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "private": true,
   "description": "The official Clerk CLI. Add authentication to your app with npx -y clerk@latest init (Next.js, React Router, Astro, Nuxt, TanStack Start, Expo, and more). No Clerk account needed to start. Manage users, instances, keys, and deploys from the terminal or a coding agent.",
   "keywords": [