Manually resolve @okta/okta-auth-js to >=7.8.1 to fix security advisory

[jpandersen87]

Fixes #16290

This PR pins okta-auth-js to versions >=7.8.1 in order to resolve a security advisory (okta-signin-widget currently points to a lower version but once it does not this manual resolve can be removed).

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@okta/okta-auth-js	7.8.1	🟢 5	Details Check Score Reason Code-Review 🟢 8 Found 24/29 approved changesets -- score normalized to 8 Maintained 🟢 6 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 32 existing vulnerabilities detected

Scanned Manifest Files

frontend-react/yarn.lock

• jsonpath-plus@6.0.1
• rollup@4.13.0
• vite@5.3.1
• @okta/okta-auth-js@7.8.1
• @ampproject/remapping@2.2.1
• @babel/parser@7.24.7
• @okta/okta-auth-js@7.8.0
• @rollup/rollup-android-arm-eabi@4.13.0
• @rollup/rollup-android-arm64@4.13.0
• @rollup/rollup-darwin-arm64@4.13.0
• @rollup/rollup-darwin-x64@4.13.0
• @rollup/rollup-linux-arm-gnueabihf@4.13.0
• @rollup/rollup-linux-arm64-gnu@4.13.0
• @rollup/rollup-linux-arm64-musl@4.13.0
• @rollup/rollup-linux-riscv64-gnu@4.13.0
• @rollup/rollup-linux-x64-gnu@4.13.0
• @rollup/rollup-linux-x64-musl@4.13.0
• @rollup/rollup-win32-arm64-msvc@4.13.0
• @rollup/rollup-win32-ia32-msvc@4.13.0
• @rollup/rollup-win32-x64-msvc@4.13.0
• @types/lodash@4.17.6
• @typescript-eslint/scope-manager@7.13.1
• @typescript-eslint/types@7.13.1
• @typescript-eslint/typescript-estree@7.13.1
• @typescript-eslint/utils@7.13.1
• @typescript-eslint/visitor-keys@7.13.1
• browserslist@4.23.1
• caniuse-lite@1.0.30001636
• debug@4.3.5
• electron-to-chromium@1.4.805
• glob@10.4.1
• magic-string@0.30.8
• node-releases@2.0.14
• postcss@8.4.39
• prettier@3.3.2
• update-browserslist-db@1.0.16
• ws@8.17.1
• yaml@2.4.2

[github-actions]

Branch deployed to Chromatic 🚀.

• ⚠️ Detected 3 tests with visual changes.
• ✅ All tests passed.

View via:

• Chromatic: https://www.chromatic.com/build?appId=6419b81d4a47163c3050f14a&number=1071
• Storybook: https://6419b81d4a47163c3050f14a-jwinaxoxwo.chromatic.com/

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[github-actions]

⚠️ Broken Links ⚠️

❌ https://www.cdc.gov/od/foia

Error: Request failed with status code 403

---

❌ https://www.hhs.gov/vulnerability-disclosure-policy/index.html

Error: Request failed with status code 403

---

❌ https://www.hl7.org/implement/standards/product_brief.cfm?product_id=185

Error: Request failed with status code 403

---

❌ https://www.cdc.gov/poxvirus/mpox/lab-personnel/report-results.html

Error: Request failed with status code 404

---