fix(devdeps): update dependency @forgerock/javascript-sdk to v4.9.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@forgerock/javascript-sdk (source)	4.9.0 → 4.9.1
@forgerock/javascript-sdk (source)	4.7.0 → 4.9.1

---

Release Notes

ForgeRock/forgerock-javascript-sdk (@​forgerock/javascript-sdk)

v4.9.1

Compare Source

Patch Changes

• #​587 d14d301 Thanks @​ForgeRockEmma! - fix: move getAuthenticationCredential back inside try/catch so that WebAuthn cancellation errors (e.g. NotAllowedError) are written to the HiddenValueCallback before re-throwing

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1032ace

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 1032ace

Command	Status	Duration	Result
nx affected -t build lint test typecheck e2e-ci	❌ Failed	6m 39s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-05-13 14:36:25 UTC

[nx-cloud]

Nx Cloud has identified a possible root cause for your failed CI:

We investigated the failing E2E test and determined it is not caused by this PR. The SDK patch only changes WebAuthn cancellation error handling, which has no bearing on the happy path /signoff redirect flow that timed out. We are classifying this as a transient environment issue and recommend re-running CI.

No code changes were suggested for this issue.

Trigger a rerun:

View detailed reasoning on Nx Cloud ↗

_{🎓 Learn more about Self-Healing CI on nx.dev}

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (4.9.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.