Skip to content

build(deps): Bump @auth0/auth0-auth-js from 1.17.0 to 1.18.0 - #1812

Merged
yogeshchoudhary147 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/auth0/auth0-auth-js-1.18.0
Oct 27, 2026
Merged

yogeshchoudhary147 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/auth0/auth0-auth-js-1.18.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps @auth0/auth0-auth-js from 1.17.0 to 1.18.0.

Commits
  • cf906a9 Release auth0-auth-js v1.18.0 (#316)
  • 336114a feat(auth0-auth-js): forward scope on the client credentials grant (#314)
  • 8be12e8 docs: regenerate Mintlify artifacts and add api-js postbump (#319)
  • f549b3c docs(auth0-server-js): add TypeDoc categories and Mintlify artifact (#311)
  • 08ae566 docs(auth0-auth-js): add TypeDoc categories and Mintlify artifact (#313)
  • 5182fb9 ci: type-check auth0-server-js and auth0-api-js (#315)
  • 7214b36 feat(auth0-api-js): add TypeDoc category annotations and Mintlify JSON config...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@auth0/auth0-auth-js](https://github.com/auth0/auth0-auth-js) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/auth0/auth0-auth-js/releases)
- [Commits](auth0/auth0-auth-js@auth0-auth-js-v1.17.0...auth0-auth-js-v1.18.0)

---
updated-dependencies:
- dependency-name: "@auth0/auth0-auth-js"
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 26, 2026 14:04
@dependabot dependabot Bot added dependencies One or more dependencies are being bumped javascript Pull requests that update Javascript code labels Oct 26, 2026
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 3
  • build(deps)
  • build(deps-dev)
  • chore(release)

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@yogeshchoudhary147
yogeshchoudhary147 merged commit 3756ea7 into main Oct 27, 2026
20 checks passed
@yogeshchoudhary147
yogeshchoudhary147 deleted the dependabot/npm_and_yarn/auth0/auth0-auth-js-1.18.0 branch October 27, 2026 02:59
yogeshchoudhary147 added a commit that referenced this pull request Oct 29, 2026
### Changes

`npm run docs` fails on `main` since the auth-js 1.18.0 bump (#1812),
which blocks releases:

```
[error] Unknown @category "Sub-clients" on AnonymousSessionClient. Top-level exports take one of: Getting Started, Clients, Configuration, Login & Logout, Tokens & Users, Errors, Other.
```

auth-js 1.18.0 (auth0/auth0-auth-js#313) added `@category Sub-clients`
to `AnonymousSessionClient`. In auth-js that's a top-level category, so
the tag is correct there. We re-export the class top-level, but our
TypeDoc plugin (`scripts/typedoc-plugin.js`, #1767) only allows
`Sub-clients` on class members, so it errors.

Fix: when a re-export from `node_modules` has a category we don't use,
drop the tag so it lands in "Other", the default.
`AnonymousSessionClient` was in "Other" in the v2.29.0 docs too, so the
reference doesn't change. Unknown tags in our own `src/` still fail the
build, so the typo check is unchanged.

No runtime or public API changes.

### References

- #1812 (auth-js 1.17.0 → 1.18.0 bump)
- auth0/auth0-auth-js#313 (added the categories upstream)
- #1767 (added the category check)

### Testing

- `npm run docs` passes (exit 0). `AnonymousSessionClient` is under
"Other" in `mintlify/auth0-spa-js.json`, same as v2.29.0.
- Put a typo (`@category Sub-cleints`) on `Auth0Client.myAccount` for a
moment: the build still fails with `Unknown @category "Sub-cleints"`.

- [ ] This change adds unit test coverage
- [ ] This change adds integration test coverage
- [x] This change has been tested on the latest version of the
platform/language

### Checklist

- [x] I have read the [Auth0 general contribution
guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)
- [x] I have read the [Auth0 Code of
Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md)
- [x] All code quality tools/guidelines have been run/followed

🤖 Generated with [Claude Code](https://claude.com/claude-code)


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

<!-- coderabbit-ai-generated:v1 -->

## Summary by CodeRabbit

* **Bug Fixes**
* Dependency declarations with invalid category tags no longer trigger
unknown-category errors. Invalid tags on project declarations continue
to be reported.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies One or more dependencies are being bumped javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant