build(deps): bump auth0-js from 9.19.1 to 10.0.0

[dependabot]

Bumps auth0-js from 9.19.1 to 10.0.0.

Release notes

Sourced from auth0-js's releases.

v10.0.0

This fixes the release failure (#1631). Fixed

• Security fix: Resolve CVE-2026-42280

Breaking change

Affected	Details
Apps using RS256	No breaking change
Apps using HS256	parseHash() now returns an invalid_token error instead of silently succeeding. Must switch to RS256 in the Auth0 Dashboard: Applications → your app → Settings → Advanced Settings → OAuth → JsonWebToken Signature Algorithm → RS256

v9.32.0

Fixed

• Fix: update @​auth0/component-cdn-uploader to version 2.5.0 #1613 (amitsingh05667)

v9.31.0

Added

• feat: add Custom Token Exchange support #1604 (gyaneshgouraw-okta)

v9.30.1

Fixed

• fix: randomString function to handle invalid length #1583 (amitsingh05667)

v9.30.0

Added

• feat: Improve error handling when login fails after signup #1552 (amitsingh05667)
• fix: convert mock files to ES module exports #1563 (amitsingh05667)

v9.29.1

Added

• fix: add null check for challenge in captcha rendering #1541 (amitsingh05667)

v9.29.0

Added

• docs(core): fix missing captcha param in signup method jsdoc #1471 #1522 (amitsingh05667)
• feat: add Claude Code PR Review workflow #1517 (amitsingh05667)
• Add a Refresh Token example using MRRT #1499 (ivan-vazquez)
• Add a Refresh Token example #1488 (ivan-vazquez)

v9.28.0

Fixed

• Ensure done callback is correctly fired on captcha reload #1469 (srijonsaha)

... (truncated)

Changelog

Sourced from auth0-js's changelog.

v10.0.0 (2026-05-06)

Full Changelog

Fixed

• Security fix: Resolve CVE-2026-42280

Breaking change

Affected	Details
Apps using RS256	No breaking change
Apps using HS256	parseHash() now returns an invalid_token error instead of silently succeeding. Must switch to RS256 in the Auth0 Dashboard: Applications → your app → Settings → Advanced Settings → OAuth → JsonWebToken Signature Algorithm → RS256

v9.32.0 (2026-03-25)

Full Changelog

v9.31.0 (2026-03-16)

Full Changelog

Added

• feat: add Custom Token Exchange support #1604 (gyaneshgouraw-okta)

v9.30.1 (2026-02-06)

Full Changelog

Fixed

• fix: randomString function to handle invalid length #1583 (amitsingh05667)

v9.30.0 (2026-01-09)

Full Changelog

Added

• feat: Improve error handling when login fails after signup #1552 (amitsingh05667)
• fix: convert mock files to ES module exports #1563 (amitsingh05667)

v9.29.1 (2025-12-17)

Full Changelog

Added

• fix: add null check for challenge in captcha rendering #1541 (amitsingh05667)

v9.29.0 (2025-10-06)

Full Changelog

Added

• docs(core): fix missing captcha param in signup method jsdoc #1471 #1522 (amitsingh05667)

... (truncated)

Commits

• 5706408 Release v10.0.0 (#1639)
• 7d0d1a7 release 10.0.0
• 51dde32 fix : Pining NPM version to 11.10.0 (#1638)
• f87f9d3 fix: revert NODE_VERSION to 22.22.2 in workflows
• db1e15c Merge branch 'fix/release10' of github.com:auth0/auth0.js into fix/release10
• 43e77b1 fix: update Node.js version to 24 in workflows and npm publish action
• fee8533 Merge branch 'master' into fix/release10
• 1565524 fix
• c5156ff Release v10.0.0 (#1637)
• 8b9fd37 Release v10.0.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for auth0-js since your current version.

[jdstrand]

@eatondustin1 temporarily assigning to you since this is a major version update in a dependency and this appears to affect a prod dependency (https://github.com/influxdata/ui/tree/release/OSS will also need to be fixed (though perhaps not if since it appears to only be for the cloud UI)). Feel free to reassign as desired.

[jdstrand]

@eatondustin1 temporarily assigning to you since this is a major version update in a dependency and this appears to affect a prod dependency (https://github.com/influxdata/ui/tree/release/OSS will also need to be fixed (though perhaps not if since it appears to only be for the cloud UI)). Feel free to reassign as desired.

@eatondustin1 - hey, can you get this enqueued? I think it may fix a couple of other alerts.

[jdstrand]

@dependabot recreate