Bumps [@auth0/auth0-spa-js](https://github.com/auth0/auth0-spa-js) from 2.18.2 to 2.18.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/auth0/auth0-spa-js/releases"><code>@auth0/auth0-spa-js</code>'s releases</a>.</em></p> <blockquote> <h2>v2.18.3</h2> <p><strong>Added</strong></p> <ul> <li>fix: validate fetchUrl against allowlisted domain in token worker <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1569">#1569</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> <li>ci: add verify-types job to prevent missing typings on publish <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1576">#1576</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/auth0/auth0-spa-js/blob/main/CHANGELOG.md"><code>@auth0/auth0-spa-js</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/auth0/auth0-spa-js/tree/v2.18.3">v2.18.3</a> (2026-03-30)</h2> <p><a href="https://github.com/auth0/auth0-spa-js/compare/v2.18.2...v2.18.3">Full Changelog</a></p> <p><strong>Added</strong></p> <ul> <li>fix: validate fetchUrl against allowlisted domain in token worker <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1569">#1569</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> <li>ci: add verify-types job to prevent missing typings on publish <a href="https://redirect.github.com/auth0/auth0-spa-js/pull/1576">#1576</a> (<a href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/auth0/auth0-spa-js/commit/5a48c619b75c624e34a5440f37e1d4e434658bac"><code>5a48c61</code></a> Release v2.18.3 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1580">#1580</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/5c4328e4ebee2ba8cb2656b918353c2a7d5698ff"><code>5c4328e</code></a> fix(types): resolve build:types failure on worker postMessage (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1579">#1579</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/cc2fd85a14193b9a0b306f5f776d6a941d115023"><code>cc2fd85</code></a> fix: validate fetchUrl against allowlisted domain in token worker (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1569">#1569</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/3dd6c878e47720516f074ffb24cf9598ae13e060"><code>3dd6c87</code></a> ci: add verify-types job to prevent missing typings on publish (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1576">#1576</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/3784ed2cf063158117745a5408b9605f8fec4e02"><code>3784ed2</code></a> chore(build): remove dead babel.config.js and fix configFile isolation (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1578">#1578</a>)</li> <li><a href="https://github.com/auth0/auth0-spa-js/commit/634dc1db9670b59560c817668002db485d24c90e"><code>634dc1d</code></a> build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 (<a href="https://redirect.github.com/auth0/auth0-spa-js/issues/1577">#1577</a>)</li> <li>See full diff in <a href="https://github.com/auth0/auth0-spa-js/compare/v2.18.2...v2.18.3">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>