Bumps [@auth0/auth0-spa-js](https://github.com/auth0/auth0-spa-js) from 2.18.0 to 2.18.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/auth0/auth0-spa-js/releases"><code>@auth0/auth0-spa-js</code>'s releases</a>.</em></p> <blockquote> <h2>v2.18.2</h2> <p><strong>Fixed</strong></p> <ul> <li>fix(build): restore dist/typings/ in published package <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1574">#1574</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> <h2>v2.18.1</h2> <p><strong>Added</strong></p> <ul> <li>fix: validate postMessage origin in runPopup <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1563">#1563</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/auth0/auth0-spa-js/blob/main/CHANGELOG.md"><code>@auth0/auth0-spa-js</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/auth0/auth0-spa-js/tree/v2.18.2">v2.18.2</a> (2026-03-26)</h2> <p><a href="https://github.com/auth0/auth0-spa-js/compare/v2.18.1...v2.18.2">Full Changelog</a></p> <p><strong>Fixed</strong></p> <ul> <li>fix(build): restore dist/typings/ in published package <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1574">#1574</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> <h2><a href="https://github.com/auth0/auth0-spa-js/tree/v2.18.1">v2.18.1</a> (2026-03-26)</h2> <p><a href="https://github.com/auth0/auth0-spa-js/compare/v2.18.0...v2.18.1">Full Changelog</a></p> <p><strong>Added</strong></p> <ul> <li>fix: validate postMessage origin in runPopup <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1563">#1563</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/auth0/auth0-spa-js/commit/502514bbba5568023e103ca09da17d406a439b47"><code>502514b</code></a> Release v2.18.2 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1575">#1575</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/6a3a043444cbcf52def9781069388764e8d2cdd4"><code>6a3a043</code></a> fix(build): restore dist/typings/ in published package (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1574">#1574</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/55c8487fce4ef0d3ed4bee73ed9700e4ccf6edcd"><code>55c8487</code></a> fix(deps): bump <code>@auth0/component-cdn-uploader</code> to ^3.0.2 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1572">#1572</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/f1def4dc857c36eb71401cadd4dfbeab836b1065"><code>f1def4d</code></a> fix(deps): bump <code>@auth0/component-cdn-uploader</code> to ^3.0.1 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1571">#1571</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/43c87b00ea998c1b2a12c2c214af67adc0e5bab9"><code>43c87b0</code></a> Release v2.18.1 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1570">#1570</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/583c038bb0e1860861f676c726d9fe146b1843d1"><code>583c038</code></a> chore(deps): bump <code>@auth0/component-cdn-uploader</code> to ^3.0.0 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1568">#1568</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/56004b6cd0927f7369f892d8ff27cb46bb83d315"><code>56004b6</code></a> fix: replace npm ci with npm install in Makefile (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1567">#1567</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/2e488aff0b05366321c073f2411832f6ffad7f73"><code>2e488af</code></a> build(deps): Bump <code>@auth0/auth0-auth-js</code> from 1.5.0 to 1.6.0 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1565">#1565</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/079a80944f2391cba57cb5c79ce3816c3c1abbdb"><code>079a809</code></a> fix: validate postMessage origin in runPopup (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1563">#1563</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/b96404a24055b12b022e9a10b6c388594338c848"><code>b96404a</code></a> fix(build): stabilize Rollup TypeScript build in fresh installs (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1564">#1564</a>)</li> <li>Additional commits viewable in <a href="https://github.com/auth0/auth0-spa-js/compare/v2.18.0...v2.18.2">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>