Release v2.18.3 (#1580)

**Added**
- fix: validate fetchUrl against allowlisted domain in token worker
[\#1569](#1569)
([yogeshchoudhary147](https://github.com/yogeshchoudhary147))
- ci: add verify-types job to prevent missing typings on publish
[\#1576](#1576)
([yogeshchoudhary147](https://github.com/yogeshchoudhary147))

Author: yogeshchoudhary147

.version

@@ -1 +1 @@
-v2.18.2
+v2.18.3

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## [v2.18.3](https://github.com/auth0/auth0-spa-js/tree/v2.18.3) (2026-03-30)
+[Full Changelog](https://github.com/auth0/auth0-spa-js/compare/v2.18.2...v2.18.3)
+
+**Added**
+- fix: validate fetchUrl against allowlisted domain in token worker [\#1569](https://github.com/auth0/auth0-spa-js/pull/1569) ([yogeshchoudhary147](https://github.com/yogeshchoudhary147))
+- ci: add verify-types job to prevent missing typings on publish [\#1576](https://github.com/auth0/auth0-spa-js/pull/1576) ([yogeshchoudhary147](https://github.com/yogeshchoudhary147))
+
 ## [v2.18.2](https://github.com/auth0/auth0-spa-js/tree/v2.18.2) (2026-03-26)
 [Full Changelog](https://github.com/auth0/auth0-spa-js/compare/v2.18.1...v2.18.2)
 

FAQ.md

@@ -124,7 +124,7 @@ If you want to use a CDN bundle together with import maps, you will need to use
 <script type="importmap">
   {
     "imports": {
-      "@auth0/auth0-spa-js": "https://www.unpkg.com/@auth0/auth0-spa-js@2.18.2/dist/auth0-spa-js.production.esm.js"
+      "@auth0/auth0-spa-js": "https://www.unpkg.com/@auth0/auth0-spa-js@2.18.3/dist/auth0-spa-js.production.esm.js"
     }
   }
 </script>