[Snyk] Security upgrade auth0-js from 9.7.3 to 9.12.0

[bermudez]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	Use of Weak Hash SNYK-JS-CRYPTOJS-6028119	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: auth0-js

The new version differs by 112 commits.

• 101d692 Prepare v9.12.0 (#1060)
• 57ea1c8 [SDK-974] Improved OIDC compliance (#1059)
• 6de254c Fixed passwordless params priority (#1058)
• c35e6c1 add getChallenge method (#1057)
• 9d73724 Merge pull request #1054 from STK913/patch-1
• 5e1ac3c Merge branch 'master' into patch-1
• 9ba5d5c Merge pull request #1055 from auth0/dependabot/npm_and_yarn/https-proxy-agent-2.2.4
• 2cd3895 [Security] Bump https-proxy-agent from 2.2.1 to 2.2.4
• 7a3e25d Bugfix for WebExtension
• 72dd8a7 Setup the .github/stale.yml for Probot:Stale
• eec26e2 Setup the CODEOWNERS for pull request reviews
• 1c86f39 Setup the CODEOWNERS for pull request reviews
• cdc9b45 Readme develop (#1043)
• c399959 Merge pull request #1039 from Nyholm/patch-1
• fc9d26b Fixed typo
• f405c46 [Security] Bump mixin-deep from 1.3.1 to 1.3.2 (#1032)
• 62501b3 Bump rollup from 1.19.4 to 1.20.1 (#1027)
• f747e50 Bump eslint from 6.2.0 to 6.2.1 (#1028)
• f0bbdd2 Bump yargs from 13.3.0 to 14.0.0 (#1029)
• 27a819a Bump eslint-config-prettier from 6.0.0 to 6.1.0 (#1022)
• 144b723 Bump rollup-plugin-license from 0.11.0 to 0.12.1 (#1021)
• 98dc85e Bump lint-staged from 9.2.1 to 9.2.3 (#1023)
• 87ae943 Bump husky from 3.0.3 to 3.0.4 (#1024)
• 0e131b9 Bump eslint from 6.1.0 to 6.2.0 (#1025)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of Weak Hash