build(deps): bump auth0-js from 9.19.1 to 10.0.0

[dependabot]

Bumps auth0-js from 9.19.1 to 10.0.0.

Release notes

Sourced from auth0-js's releases.

v10.0.0

This fixes the release failure (#1631). Fixed

• Security fix: Resolve CVE-2026-42280

Breaking change

Affected	Details
Apps using RS256	No breaking change
Apps using HS256	parseHash() now returns an invalid_token error instead of silently succeeding. Must switch to RS256 in the Auth0 Dashboard: Applications → your app → Settings → Advanced Settings → OAuth → JsonWebToken Signature Algorithm → RS256

v9.32.0

Fixed

• Fix: update @​auth0/component-cdn-uploader to version 2.5.0 #1613 (amitsingh05667)

v9.31.0

Added

• feat: add Custom Token Exchange support #1604 (gyaneshgouraw-okta)

v9.30.1

Fixed

• fix: randomString function to handle invalid length #1583 (amitsingh05667)

v9.30.0

Added

• feat: Improve error handling when login fails after signup #1552 (amitsingh05667)
• fix: convert mock files to ES module exports #1563 (amitsingh05667)

v9.29.1

Added

• fix: add null check for challenge in captcha rendering #1541 (amitsingh05667)

v9.29.0

Added

• docs(core): fix missing captcha param in signup method jsdoc #1471 #1522 (amitsingh05667)
• feat: add Claude Code PR Review workflow #1517 (amitsingh05667)
• Add a Refresh Token example using MRRT #1499 (ivan-vazquez)
• Add a Refresh Token example #1488 (ivan-vazquez)

v9.28.0

Fixed

• Ensure done callback is correctly fired on captcha reload #1469 (srijonsaha)

... (truncated)

Changelog

Sourced from auth0-js's changelog.

v10.0.0 (2026-05-06)

Full Changelog

Fixed

• Security fix: Resolve CVE-2026-42280

Breaking change

Affected	Details
Apps using RS256	No breaking change
Apps using HS256	parseHash() now returns an invalid_token error instead of silently succeeding. Must switch to RS256 in the Auth0 Dashboard: Applications → your app → Settings → Advanced Settings → OAuth → JsonWebToken Signature Algorithm → RS256

v9.32.0 (2026-03-25)

Full Changelog

v9.31.0 (2026-03-16)

Full Changelog

Added

• feat: add Custom Token Exchange support #1604 (gyaneshgouraw-okta)

v9.30.1 (2026-02-06)

Full Changelog

Fixed

• fix: randomString function to handle invalid length #1583 (amitsingh05667)

v9.30.0 (2026-01-09)

Full Changelog

Added

• feat: Improve error handling when login fails after signup #1552 (amitsingh05667)
• fix: convert mock files to ES module exports #1563 (amitsingh05667)

v9.29.1 (2025-12-17)

Full Changelog

Added

• fix: add null check for challenge in captcha rendering #1541 (amitsingh05667)

v9.29.0 (2025-10-06)

Full Changelog

Added

• docs(core): fix missing captcha param in signup method jsdoc #1471 #1522 (amitsingh05667)

... (truncated)

Commits

• 5706408 Release v10.0.0 (#1639)
• 7d0d1a7 release 10.0.0
• 51dde32 fix : Pining NPM version to 11.10.0 (#1638)
• f87f9d3 fix: revert NODE_VERSION to 22.22.2 in workflows
• db1e15c Merge branch 'fix/release10' of github.com:auth0/auth0.js into fix/release10
• 43e77b1 fix: update Node.js version to 24 in workflows and npm publish action
• fee8533 Merge branch 'master' into fix/release10
• 1565524 fix
• c5156ff Release v10.0.0 (#1637)
• 8b9fd37 Release v10.0.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for auth0-js since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[jdstrand]

@eatondustin1 temporarily assigning to you since this is a major version update in a dependency and this appears to affect a prod dependency (https://github.com/influxdata/ui/tree/release/OSS will also need to be fixed (though perhaps not if since it appears to only be for the cloud UI)). Feel free to reassign as desired.

[jdstrand]

@eatondustin1 temporarily assigning to you since this is a major version update in a dependency and this appears to affect a prod dependency (https://github.com/influxdata/ui/tree/release/OSS will also need to be fixed (though perhaps not if since it appears to only be for the cloud UI)). Feel free to reassign as desired.

@eatondustin1 - hey, can you get this enqueued? I think it may fix a couple of other alerts.

[jdstrand]

@dependabot recreate

[jdstrand]

@eatondustin1 - hey, since this is a major version upgrade, can someone from your team take a look (I suspect it will be helpful for your team to know the changes from 9.x to 10.x for other packages anyway). Tentatively assigning to you but feel free to reassign. Thanks!