security/packageBump

[tusharpandey13]

Changes

• bump oidc-provider and update package-lock.json
• bump cypress, browserstack-cypress-cli and rollup-plugin-visualizer

Fixes the security issues associated with following PRs:

• build(deps-dev): Bump browserstack-cypress-cli from 1.28.0 to 1.31.7 #1302
• build(deps-dev): Bump cypress from 13.6.1 to 13.14.2 #1301
• build(deps-dev): Bump rollup-plugin-visualizer from 5.11.0 to 5.12.0 #1226
• build(deps): Bump @koa/cors and oidc-provider #1237
• build(deps-dev): Bump jose from 4.11.0 to 4.15.5 #1256
• build(deps-dev): Bump follow-redirects from 1.15.3 to 1.15.6 #1259

The above can be closed post merging this.

References

See above

Testing

• This change adds unit test coverage
• This change adds integration test coverage
• This change has been tested on the latest version of the platform/language

=============================== Coverage summary ===============================
Statements   : 100% ( 3569/3569 )
Branches     : 100% ( 592/592 )
Functions    : 100% ( 129/129 )
Lines        : 100% ( 3569/3569 )
================================================================================

Test Suites: 25 passed, 25 total
Tests:       479 passed, 479 total
Snapshots:   0 total
Time:        12.225 s

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All code quality tools/guidelines have been run/followed

[tusharpandey13]

Confirming that major version change of oidc-provider (7 to 8) does not lead to breaking features.
Changelog