[Snyk] Security upgrade @aws-amplify/auth from 3.4.17 to 3.4.33

[goatandsheep]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	Use of Weak Hash SNYK-JS-CRYPTOJS-6028119	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @aws-amplify/auth

The new version differs by 179 commits.

• d8f695a chore(release): Publish [ci skip]
• b7abec3 chore: preparing release
• 4151571 chore: update crypto-js to @ 4 in aws-amplify@latest (#8273)
• 6528037 feat(@ aws-amplify/ui-react): wrap withAuthenticator with `AmplifyAuthContainer` (#8243)
• bc5a21f fix(@ aws-amplify/predictions): Downsizing sample for some language in speech to text (#7835)
• c48ad83 fix(@ aws-amplify/ui-components): Prioritize using `user.username` whenever provided (#8050)
• 3881d53 chore(release): major version [skip-ci]
• 9ed7818 chore(release): update version.ts [ci skip]
• b75d699 chore(release): Publish [ci skip]
• 7716e85 chore: preparing release
• 1de4853 chore!: Upgrade to @ react-native-async-storage/async-storage (#8250)
• e2740f0 chore(feature-request): port feat. req. structure to new form (#8246)
• fd27546 chore: Add new integ test for amazon-cognito-identity-js to CCI jobs (#8233)
• 7cc1fd0 chore(release): update version.ts [ci skip]
• d4f6dc0 chore(release): Publish [ci skip]
• 04dc21c chore: preparing release
• d3462aa fix(@ aws-amplify/datastore): Update CCI config & logger warning format (#8231)
• 403de44 fix(@ aws-amplify/datastore): log subscription error instead of throwing (#8229)
• 9314112 fix(@ aws-amplify/ui-components): use correct unmount lifecycle for authenticator (#8227)
• dedd564 feat(@ aws-amplify/datastore): DataStore - Multi-Auth (#8008)
• 75a7935 chore: Add configuration for duplicate-packages integ tests (#8217)
• 89a2250 fix(@ aws-amplify/auth): Ignores case when converting strings to booleans for user attributes (#8206)
• 9883974 fix(@ aws-amplify/datastore): correctly processing Delta Sync query response in RN (#8196)
• d16a8fb fix(@ aws-amplify/datastore): fix hasOne delete (#8191)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of Weak Hash