Skip to content

Release v15.0.0#2811

Merged
cschetan77 merged 3 commits into
masterfrom
release/v15.0.0
Jun 5, 2026
Merged

Release v15.0.0#2811
cschetan77 merged 3 commits into
masterfrom
release/v15.0.0

Conversation

@cschetan77

@cschetan77 cschetan77 commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

Highlights

This release upgrades auth0-js to v10.0.0, which resolves CVE-2026-42280 — a security vulnerability in token validation for browser-based applications.

⚠️ Breaking Changes

HS256 token signing is no longer supported.

Changed

  • fix(deps): remove trim dependency #2783 (gameroman)

    The third-party trim package has been removed.

@cschetan77 cschetan77 requested a review from a team as a code owner June 5, 2026 08:09
@cschetan77 cschetan77 merged commit 8bca509 into master Jun 5, 2026
5 checks passed
@cschetan77 cschetan77 deleted the release/v15.0.0 branch June 5, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants