[Snyk] Fix for 1 vulnerabilities

[goatandsheep]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @aws-amplify/auth

The new version differs by 250 commits.

• d505105 release: Amplify JS v6 Initial Release (#12461)
• 04fd02c chore: Disable SSR tests (#12458)
• af23a19 chore: Merge `next/main` into `main` (#12454)
• 798c540 chore: Merge next/main into main
• 7a5440a chore: Make `adapter-nextjs` private (#12453)
• 6a1a0cb fix(notifications): Duplicate types from optional packages (#12446) (#12452)
• 0d43443 chore: Re-baseline bundle size checks (#12423)
• 54633aa feat: prep predictions for publish (#12441)
• 6b1c478 chore(pubsub): Migrate PubSub to named params (#12440)
• 5a5b71e chore(interactions): enable interactions (#12443)
• dd382ee feat(auth): add signInDetails to AuthUser interface (#12439)
• dc4b91f fix(interactions): align type names and use named params (#12406)
• 80715c3 docs(core): mark signer as internal (#12413)
• 8918802 chore: Move `@ types/uuid` to dependencies (#12437)
• 74915a4 chore: Update release deployment target (#12438)
• 6f4d984 feat: ssr support for graphql (#12430)
• 9717d77 fix: export missing output type (#12434)
• f405448 fix(datastore): crypto random numbers for ulid factory (#12435)
• 9e75bda chore: Remove config & library option merging (#12432)
• 9277184 fix(core): disable type to accept empty config for analytics (#12426)
• b06a7e4 fix(adapter-nextjs): ensure to use meaningful exception on config resolution
• 0216e44 chore(aws-amplify): change deafult sameSite value to 'lax'
• fdb6732 fix(core): give ampilfyUuid clear type info (#12388)
• 4cd6dc0 fix(auth): handle multiple redirect links (#12415)

See the full diff

Package name: @aws-amplify/core

The new version differs by 250 commits.

• d505105 release: Amplify JS v6 Initial Release (#12461)
• 04fd02c chore: Disable SSR tests (#12458)
• af23a19 chore: Merge `next/main` into `main` (#12454)
• 798c540 chore: Merge next/main into main
• 7a5440a chore: Make `adapter-nextjs` private (#12453)
• 6a1a0cb fix(notifications): Duplicate types from optional packages (#12446) (#12452)
• 0d43443 chore: Re-baseline bundle size checks (#12423)
• 54633aa feat: prep predictions for publish (#12441)
• 6b1c478 chore(pubsub): Migrate PubSub to named params (#12440)
• 5a5b71e chore(interactions): enable interactions (#12443)
• dd382ee feat(auth): add signInDetails to AuthUser interface (#12439)
• dc4b91f fix(interactions): align type names and use named params (#12406)
• 80715c3 docs(core): mark signer as internal (#12413)
• 8918802 chore: Move `@ types/uuid` to dependencies (#12437)
• 74915a4 chore: Update release deployment target (#12438)
• 6f4d984 feat: ssr support for graphql (#12430)
• 9717d77 fix: export missing output type (#12434)
• f405448 fix(datastore): crypto random numbers for ulid factory (#12435)
• 9e75bda chore: Remove config & library option merging (#12432)
• 9277184 fix(core): disable type to accept empty config for analytics (#12426)
• b06a7e4 fix(adapter-nextjs): ensure to use meaningful exception on config resolution
• 0216e44 chore(aws-amplify): change deafult sameSite value to 'lax'
• fdb6732 fix(core): give ampilfyUuid clear type info (#12388)
• 4cd6dc0 fix(auth): handle multiple redirect links (#12415)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)