chore(deps): bump @auth0/auth0-spa-js from 2.18.3 to 2.19.0 (#1081)

Bumps [@auth0/auth0-spa-js](https://github.com/auth0/auth0-spa-js) from
2.18.3 to 2.19.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/auth0/auth0-spa-js/releases"><code>@​auth0/auth0-spa-js</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v2.19.0</h2>
<p><strong>Added</strong></p>
<ul>
<li>feat: add refresh token revocation <a
href="https://redirect.github.com/auth0/auth0-spa-js/pull/1541">#1541</a>
(<a
href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/auth0/auth0-spa-js/blob/main/CHANGELOG.md"><code>@​auth0/auth0-spa-js</code>'s
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/auth0/auth0-spa-js/tree/v2.19.0">v2.19.0</a>
(2026-04-09)</h2>
<p><a
href="https://github.com/auth0/auth0-spa-js/compare/v2.18.3...v2.19.0">Full
Changelog</a></p>
<p><strong>Added</strong></p>
<ul>
<li>feat: add refresh token revocation <a
href="https://redirect.github.com/auth0/auth0-spa-js/pull/1541">#1541</a>
(<a
href="https://github.com/yogeshchoudhary147">yogeshchoudhary147</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/99d3cab31940e79305bb26318a99d355f2271eb0"><code>99d3cab</code></a>
Release v2.19.0 (<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1586">#1586</a>)</li>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/6e82772ddf10718cde637b1b6696b5f38f62bc7d"><code>6e82772</code></a>
fix: pin npm to 11.10.0 to avoid promise-retry failure on Node 22.22.2
(<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1584">#1584</a>)</li>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/3a83ef816736c3f5b91a600df61c7f4637527969"><code>3a83ef8</code></a>
Revert &quot;Release v2.19.0&quot; (<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1585">#1585</a>)</li>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/6a8fea8399cd03f675eb1901c0a3f0260fddde12"><code>6a8fea8</code></a>
Release v2.19.0 (<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1582">#1582</a>)</li>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/f222f2dd01b32026edc3636e471dff75da6cf503"><code>f222f2d</code></a>
feat: add refresh token revocation (<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1541">#1541</a>)</li>
<li><a
href="https://github.com/auth0/auth0-spa-js/commit/f1fb9758632487298a112a3ed30dfb2c5dde082b"><code>f1fb975</code></a>
build(deps-dev): Bump rollup-plugin-typescript2 from 0.36.0 to 0.37.0
(<a
href="https://redirect.github.com/auth0/auth0-spa-js/issues/1581">#1581</a>)</li>
<li>See full diff in <a
href="https://github.com/auth0/auth0-spa-js/compare/v2.18.3...v2.19.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@auth0/auth0-spa-js&package-manager=npm_and_yarn&previous-version=2.18.3&new-version=2.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]