Merge branch 'master' into ac-external-pr-3801

Author: alexchen-okta

.retireignore.json

@@ -3,5 +3,15 @@
     "component": "jquery",
     "version": "1.12.4",
     "justification": "CVE issues (CVE-2019-11358, CVE-2020-11023) have been mitigated with a patched version of jQuery (packages/@okta/courage-dist/esm/src/courage/vendor/lib/jquery-1.12.4.js)"
+  },
+  {
+    "component": "dompurify",
+    "version": "2.5.8",
+    "justification": "CVE-2025-26791 has been patched locally within patches/dompurify+2.5.8.patch compared fix (https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02#diff-8e647ca2a1d9380f03114f7df5e6a70563c9cb40b03dca353a43ce84b974c2cdR6)"
+  },
+  {
+    "component": "DOMPurify",
+    "version": "2.5.8",
+    "justification": "CVE-2025-26791 has been patched locally within patches/dompurify+2.5.8.patch compared fix (https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02#diff-8e647ca2a1d9380f03114f7df5e6a70563c9cb40b03dca353a43ce84b974c2cdR6)"
   }
 ]

README.md

@@ -256,9 +256,9 @@ To embed the Sign-in Widget via CDN, include links to the JS and CSS files in yo
 
 ```html
 <!-- Latest CDN production Javascript and CSS -->
-<script src="https://global.oktacdn.com/okta-signin-widget/7.29.0/js/okta-sign-in.min.js" type="text/javascript" integrity="sha384-mlwNMXRI4RGesIx3qUsWBKiO6/q5OBLrzwYLKZ36ih270ff8TT3DQiMXOG5s/qx7" crossorigin="anonymous"></script>
+<script src="https://global.oktacdn.com/okta-signin-widget/7.30.1/js/okta-sign-in.min.js" type="text/javascript" integrity="sha384-EX0iPfWYp6dfAnJ+ert/KRhXwMapYJdnU2i5BbbeOhWyX0qyI4rMkxKKl8N5pXNI" crossorigin="anonymous"></script>
 
-<link href="https://global.oktacdn.com/okta-signin-widget/7.29.0/css/okta-sign-in.min.css" type="text/css" rel="stylesheet" integrity="sha384-hWO50VHqC4T+PDnYbDX7gbW0OrGRVz4SfhJd9fnSqNeeTu86P4T71K1r3zw9QvgH" crossorigin="anonymous" />
+<link href="https://global.oktacdn.com/okta-signin-widget/7.30.1/css/okta-sign-in.min.css" type="text/css" rel="stylesheet" integrity="sha384-BkMkRN4QIU9BrZI9cC62jAat0eEZqMnykP67tCJEVQ5xJIFXzcq18qiSZGWxLvtg" crossorigin="anonymous" />
 ```
 
 **NOTE:** The CDN URLs contain a version number. This number should be the same for both the Javascript and the CSS file and match a version on the [releases page](https://github.com/okta/okta-signin-widget/releases). We recommend using the latest widget version.
@@ -268,13 +268,13 @@ When using one of the bundles without the polyfill included, you may want to con
 
 ```html
 <!-- Polyfill for older browsers -->
-<script src="https://global.oktacdn.com/okta-signin-widget/7.29.0/js/okta-sign-in.polyfill.min.js" type="text/javascript" integrity="sha384-QzQIGwIndxyBdHRQOwgjmQJLod6LRMchZyYg7RUq8FUECvPvreqauQhkU2FF9EGD" crossorigin="anonymous"></script>
+<script src="https://global.oktacdn.com/okta-signin-widget/7.30.1/js/okta-sign-in.polyfill.min.js" type="text/javascript" integrity="sha384-QzQIGwIndxyBdHRQOwgjmQJLod6LRMchZyYg7RUq8FUECvPvreqauQhkU2FF9EGD" crossorigin="anonymous"></script>
 
 <!-- Widget bundle for Okta Identity Engine -->
-<script src="https://global.oktacdn.com/okta-signin-widget/7.29.0/js/okta-sign-in.oie.min.js" type="text/javascript" integrity="sha384-fiHNR5BblxstFfiz3jr59/kXIZI9u7NUC6S1y4vYfl3b5JLy/0GO8+zRO8llZzXg" crossorigin="anonymous"></script>
+<script src="https://global.oktacdn.com/okta-signin-widget/7.30.1/js/okta-sign-in.oie.min.js" type="text/javascript" integrity="sha384-dxtH7qoNn8eLBZMiZRAxX3APMeVs+cB9PnnVewZ2oGVWOiRcu/iUBK4oUs6R8Nk2" crossorigin="anonymous"></script>
 
 <!-- CSS for widget -->
-<link href="https://global.oktacdn.com/okta-signin-widget/7.29.0/css/okta-sign-in.min.css" type="text/css" rel="stylesheet" integrity="sha384-hWO50VHqC4T+PDnYbDX7gbW0OrGRVz4SfhJd9fnSqNeeTu86P4T71K1r3zw9QvgH" crossorigin="anonymous" />
+<link href="https://global.oktacdn.com/okta-signin-widget/7.30.1/css/okta-sign-in.min.css" type="text/css" rel="stylesheet" integrity="sha384-BkMkRN4QIU9BrZI9cC62jAat0eEZqMnykP67tCJEVQ5xJIFXzcq18qiSZGWxLvtg" crossorigin="anonymous" />
 ```
 
 

assets/sass/v2/_success-redirect.scss

@@ -4,7 +4,3 @@
     margin-top: 24px;
   }
 }
-
-.hide-underline {
-  text-decoration: none;
-}

package.json

@@ -2,7 +2,7 @@
   "private": true,
   "name": "@okta/okta-signin-widget",
   "description": "The Okta Sign-In Widget",
-  "version": "7.30.0",
+  "version": "7.31.0",
   "homepage": "https://github.com/okta/okta-signin-widget",
   "license": "Apache-2.0",
   "repository": {

packages/@okta/i18n/src/properties/login.properties

@@ -1048,7 +1048,7 @@ oie.select.authenticator.verify.webauthn.label = Select Security Key or Biometri
 oie.select.authenticator.verify.security.question.label = Select Security Question.
 oie.select.authenticator.okta_verify.totp.label = Select to enter a code from the Okta Verify app.
 oie.select.authenticator.okta_verify.push.label = Select to get a push notification to the Okta Verify app.
-oie.select.authenticator.okta_verify.signed_nonce.label = Select Okta FastPass.
+oie.select.authenticator.okta_verify.signed_nonce.label = Select Okta Verify.
 oie.select.authenticator.verify.okta_verify.label = Select Okta Verify.
 # {0} is the name of a Proper authenticator i.e. Okta Verify, DUO, RSA, etc
 oie.select.authenticator.verify.named.authenticator.label = Select {0}.
@@ -1444,7 +1444,6 @@ idx.return.stale = This email link is out of date. Return to the screen where yo
 idx.invalid.forgot.password.token = Your reset password token is no longer valid.
 idx.invalid.reset.password.token = Your reset password token is no longer valid. Contact your administrator to obtain a new token.
 idx.reset.password.activating.user = Reset password cannot be performed while the user is activating. Contact your administrator to obtain a new token.
-core.system.transaction_resource_not_found = Verification timed out. Please try again
 
 ## OIE Server-side errors
 tagsNotAllowed = The field must not contain HTML tags

packages/@okta/i18n/src/properties/login_cs.properties

@@ -1444,7 +1444,6 @@ idx.return.stale = Tento e-mailov\u00FD odkaz je zastaral\u00FD. Vra\u0165te se
 idx.invalid.forgot.password.token = Token pro reset va\u0161eho hesla ji\u017E nen\u00ED platn\u00FD.
 idx.invalid.reset.password.token = Token pro reset va\u0161eho hesla ji\u017E nen\u00ED platn\u00FD. Chcete-li z\u00EDskat nov\u00FD token, obra\u0165te se na sv\u00E9ho spr\u00E1vce.
 idx.reset.password.activating.user = Resetov\u00E1n\u00ED hesla nelze prov\u00E9st p\u0159i aktivaci u\u017Eivatele. Chcete-li z\u00EDskat nov\u00FD token, obra\u0165te se na sv\u00E9ho spr\u00E1vce.
-core.system.transaction_resource_not_found = P\u0159i ov\u011B\u0159ov\u00E1n\u00ED vypr\u0161el \u010Dasov\u00FD limit. Zkuste to pros\u00EDm znovu
 
 ## OIE Server-side errors
 tagsNotAllowed = Pole nesm\u00ED obsahovat zna\u010Dky HTML.
@@ -1683,4 +1682,3 @@ oie.enrollment.policy.grace.period.required.in.one.day = Povinn\u00E9 za 1 den
 
 # OAMP Strings
 api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in = Nejde se p\u0159ihl\u00E1sit. Po\u017E\u00E1dejte o pomoc podporu.
-

packages/@okta/i18n/src/properties/login_da.properties

@@ -1444,7 +1444,6 @@ idx.return.stale = Dette e-maillink er for\u00E6ldet. G\u00E5 tilbage til det sk
 idx.invalid.forgot.password.token = Tokenet til nulstilling af adgangskoden er ikke l\u00E6ngere gyldigt.
 idx.invalid.reset.password.token = Tokenet til nulstilling af adgangskoden er ikke l\u00E6ngere gyldigt. Kontakt administratoren for at f\u00E5 et nyt token.
 idx.reset.password.activating.user = Nulstil adgangskode kan ikke udf\u00F8res, mens brugeren bliver aktiveret. Kontakt administratoren for at f\u00E5 et nyt token.
-core.system.transaction_resource_not_found = Bekr\u00E6ftelse er udl\u00F8bet. Pr\u00F8v igen
 
 ## OIE Server-side errors
 tagsNotAllowed = Dette felt m\u00E5 ikke indeholde html-koder
@@ -1683,4 +1682,3 @@ oie.enrollment.policy.grace.period.required.in.one.day = P\u00E5kr\u00E6vet om 1
 
 # OAMP Strings
 api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in = Kan ikke logge ind. Kontakt support for at f\u00E5 hj\u00E6lp.
-

packages/@okta/i18n/src/properties/login_de.properties

@@ -1444,7 +1444,6 @@ idx.return.stale = Dieser E-Mail-Link ist nicht aktuell. Kehren Sie zu dem Bilds
 idx.invalid.forgot.password.token = Ihr Token zum Zur\u00FCcksetzen des Passworts ist nicht mehr g\u00FCltig.
 idx.invalid.reset.password.token = Ihr Token zum Zur\u00FCcksetzen des Passworts ist nicht mehr g\u00FCltig. Wenden Sie sich an den Administrator, um ein neues Token zu erhalten.
 idx.reset.password.activating.user = Das Zur\u00FCcksetzen des Passworts kann nicht durchgef\u00FChrt werden, w\u00E4hrend der Benutzer aktiviert wird. Wenden Sie sich an den Administrator, um ein neues Token zu erhalten.
-core.system.transaction_resource_not_found = Verifizierung ist abgelaufen. Versuchen Sie es erneut
 
 ## OIE Server-side errors
 tagsNotAllowed = Dieses Feld darf keine HTML-Tags enthalten
@@ -1683,4 +1682,3 @@ oie.enrollment.policy.grace.period.required.in.one.day = In 1\u00A0Tag erforderl
 
 # OAMP Strings
 api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in = Anmeldung fehlgeschlagen. Bitte wenden Sie sich an den Support, um Hilfe zu erhalten.
-

packages/@okta/i18n/src/properties/login_el.properties

@@ -1444,7 +1444,6 @@ idx.return.stale = \u0391\u03C5\u03C4\u03CC\u03C2 \u03BF \u03C3\u03CD\u03BD\u03B
 idx.invalid.forgot.password.token = \u03A4\u03BF \u03B4\u03B9\u03B1\u03BA\u03C1\u03B9\u03C4\u03B9\u03BA\u03CC \u03B5\u03C0\u03B1\u03BD\u03B1\u03C6\u03BF\u03C1\u03AC\u03C2 \u03BA\u03C9\u03B4\u03B9\u03BA\u03BF\u03CD \u03C0\u03C1\u03CC\u03C3\u03B2\u03B1\u03C3\u03B7\u03C2 \u03B4\u03B5\u03BD \u03B5\u03AF\u03BD\u03B1\u03B9 \u03C0\u03BB\u03AD\u03BF\u03BD \u03AD\u03B3\u03BA\u03C5\u03C1\u03BF.
 idx.invalid.reset.password.token = \u03A4\u03BF \u03B4\u03B9\u03B1\u03BA\u03C1\u03B9\u03C4\u03B9\u03BA\u03CC \u03B5\u03C0\u03B1\u03BD\u03B1\u03C6\u03BF\u03C1\u03AC\u03C2 \u03BA\u03C9\u03B4\u03B9\u03BA\u03BF\u03CD \u03C0\u03C1\u03CC\u03C3\u03B2\u03B1\u03C3\u03B7\u03C2 \u03B4\u03B5\u03BD \u03B5\u03AF\u03BD\u03B1\u03B9 \u03C0\u03BB\u03AD\u03BF\u03BD \u03AD\u03B3\u03BA\u03C5\u03C1\u03BF. \u0395\u03C0\u03B9\u03BA\u03BF\u03B9\u03BD\u03C9\u03BD\u03AE\u03C3\u03C4\u03B5 \u03BC\u03B5 \u03C4\u03BF\u03BD \u03B4\u03B9\u03B1\u03C7\u03B5\u03B9\u03C1\u03B9\u03C3\u03C4\u03AE \u03C3\u03B1\u03C2 \u03B3\u03B9\u03B1 \u03BD\u03B1 \u03BB\u03AC\u03B2\u03B5\u03C4\u03B5 \u03AD\u03BD\u03B1 \u03BD\u03AD\u03BF \u03B4\u03B9\u03B1\u03BA\u03C1\u03B9\u03C4\u03B9\u03BA\u03CC.
 idx.reset.password.activating.user = \u0394\u03B5\u03BD \u03B5\u03AF\u03BD\u03B1\u03B9 \u03B4\u03C5\u03BD\u03B1\u03C4\u03AE \u03B7 \u03B5\u03C0\u03B1\u03BD\u03B1\u03C6\u03BF\u03C1\u03AC \u03C4\u03BF\u03C5 \u03BA\u03C9\u03B4\u03B9\u03BA\u03BF\u03CD \u03C0\u03C1\u03CC\u03C3\u03B2\u03B1\u03C3\u03B7\u03C2 \u03BA\u03B1\u03C4\u03AC \u03C4\u03B7\u03BD \u03B5\u03BD\u03B5\u03C1\u03B3\u03BF\u03C0\u03BF\u03AF\u03B7\u03C3\u03B7 \u03C4\u03BF\u03C5 \u03C7\u03C1\u03AE\u03C3\u03C4\u03B7. \u0395\u03C0\u03B9\u03BA\u03BF\u03B9\u03BD\u03C9\u03BD\u03AE\u03C3\u03C4\u03B5 \u03BC\u03B5 \u03C4\u03BF\u03BD \u03B4\u03B9\u03B1\u03C7\u03B5\u03B9\u03C1\u03B9\u03C3\u03C4\u03AE \u03C3\u03B1\u03C2 \u03B3\u03B9\u03B1 \u03BD\u03B1 \u03BB\u03AC\u03B2\u03B5\u03C4\u03B5 \u03AD\u03BD\u03B1 \u03BD\u03AD\u03BF \u03B4\u03B9\u03B1\u03BA\u03C1\u03B9\u03C4\u03B9\u03BA\u03CC.
-core.system.transaction_resource_not_found = \u03A4\u03BF \u03C7\u03C1\u03BF\u03BD\u03B9\u03BA\u03CC \u03CC\u03C1\u03B9\u03BF \u03B5\u03C0\u03B9\u03B2\u03B5\u03B2\u03B1\u03AF\u03C9\u03C3\u03B7\u03C2 \u03AD\u03BB\u03B7\u03BE\u03B5. \u0394\u03BF\u03BA\u03B9\u03BC\u03AC\u03C3\u03C4\u03B5 \u03BE\u03B1\u03BD\u03AC
 
 ## OIE Server-side errors
 tagsNotAllowed = \u03A4\u03BF \u03C0\u03B5\u03B4\u03AF\u03BF \u03B4\u03B5\u03BD \u03C0\u03C1\u03AD\u03C0\u03B5\u03B9 \u03BD\u03B1 \u03C0\u03B5\u03C1\u03B9\u03AD\u03C7\u03B5\u03B9 \u03B5\u03C4\u03B9\u03BA\u03AD\u03C4\u03B5\u03C2 HTML
@@ -1683,4 +1682,3 @@ oie.enrollment.policy.grace.period.required.in.one.day = \u0391\u03C0\u03B1\u03B
 
 # OAMP Strings
 api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in = \u0394\u03B5\u03BD \u03B5\u03AF\u03BD\u03B1\u03B9 \u03B4\u03C5\u03BD\u03B1\u03C4\u03AE \u03B7 \u03C3\u03CD\u03BD\u03B4\u03B5\u03C3\u03B7. \u0395\u03C0\u03B9\u03BA\u03BF\u03B9\u03BD\u03C9\u03BD\u03AE\u03C3\u03C4\u03B5 \u03BC\u03B5 \u03C4\u03B7\u03BD \u03C5\u03C0\u03BF\u03C3\u03C4\u03AE\u03C1\u03B9\u03BE\u03B7 \u03B3\u03B9\u03B1 \u03B2\u03BF\u03AE\u03B8\u03B5\u03B9\u03B1.
-

packages/@okta/i18n/src/properties/login_es.properties

@@ -1444,7 +1444,6 @@ idx.return.stale = Este enlace de correo electr\u00F3nico est\u00E1 desactualiza
 idx.invalid.forgot.password.token = El token para restablecer su contrase\u00F1a ya no es v\u00E1lido.
 idx.invalid.reset.password.token = El token para restablecer su contrase\u00F1a ya no es v\u00E1lido. P\u00F3ngase en contacto con su administrador para obtener un nuevo token.
 idx.reset.password.activating.user = No se puede restablecer la contrase\u00F1a mientras se est\u00E1 activando al usuario. P\u00F3ngase en contacto con su administrador para obtener un nuevo token.
-core.system.transaction_resource_not_found = Se ha superado el tiempo de espera de la verificaci\u00F3n. Vuelva a intentarlo
 
 ## OIE Server-side errors
 tagsNotAllowed = El campo no puede contener etiquetas HTML
@@ -1683,4 +1682,3 @@ oie.enrollment.policy.grace.period.required.in.one.day = Obligatoria en 1 d\u00E
 
 # OAMP Strings
 api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in = No se puede iniciar sesi\u00F3n. Comun\u00EDquese con el servicio de asistencia para obtener ayuda.
-