[Snyk] Security upgrade next-auth from 3.17.2 to 3.21.1

[bduff9]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: next-auth

The new version differs by 36 commits.

• c0d2f2d fix(adapter): upgrade legacy adapters (#1952)
• 71f6311 fix(oauth): correctly set internal protection value (#1962)
• d04ce29 feat(provider): add WorkOS provider (#1939)
• d2882f1 fix(deps): unpin `react-dom` version (#1956)
• 66db563 docs(provider): link to providers' source code (#1955)
• 9619077 docs(typeorm): update link to source (#1957)
• 013ccb4 chore(deps): bump lodash from 4.17.19 to 4.17.21 (#1954)
• 6eb4125 chore(deps): bump underscore from 1.10.2 to 1.13.1 (#1951)
• 141f8d0 docs(provider): clarify where user is created with email provider (#1950)
• ffd0601 fix(ts): improve `events` handlers' types (#1853)
• 7864d47 docs(adapter): mention new types (#1916)
• 98dc82e docs: fix command in CONTRIBUTING.md (#1940)
• 86baefd feat(adapter): take away error handling from adapters (#1871)
• 332e237 feat(provider): add Dropbox (#1756)
• 2fce08c docs(provider): Update IdentityServer 4 demo configuration (#1932)
• adf3fb6 docs(www): fix typo (#1922)
• 5323be3 fix(page): don't pass params to custom signout page (#1912)
• 6df0d04 fix(ts): tweak Adapter related types (#1914)
• aa9c1e7 fix(ts): unset generics defaults for overriding (#1891)
• 6647305 docs(provider): update providers documentation (#1900)
• e8ddbc5 fix(build): export aliases from client (#1909)
• dfe4620 docs(www): fix minor typo. (#1902)
• 848224e fix(ts): optional variables for custom provider options (#1876)
• aee376c chore(deps): bump ssri from 6.0.1 to 6.0.2 in /www (#1901)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
movies-fe	❌ Failed (Inspect)			Nov 30, 2023 2:40pm