chore(deps): upgrade auth0-password-policies to 3.1.0

package.json

@@ -119,14 +119,14 @@
   },
   "dependencies": {
     "auth0-js": "^9.29.0",
-    "auth0-password-policies": "^1.0.2",
+    "auth0-password-policies": "^3.1.0",
     "blueimp-md5": "^2.19.0",
     "classnames": "^2.3.2",
     "dompurify": "^3.2.5",
     "events": "^3.3.0",
     "immutable": "^3.7.6",
     "jsonp": "^0.2.1",
-    "password-sheriff": "^1.1.1",
+    "password-sheriff": "^2.0.0",
     "prop-types": "^15.8.0",
     "qs": "^6.14.1",
     "react": "^18.2.0",

webpack.config.js

@@ -57,6 +57,20 @@ module.exports = {
   },
   module: {
     rules: [
+      {
+        // auth0-password-policies uses ES2020+ syntax (optional chaining) that
+        // must be transpiled for the IE 11 / ES2017 build target. Babel's
+        // .babelrc is file-relative and does not apply across package
+        // boundaries, so presets are passed explicitly here.
+        test: /\.js$/,
+        include: path.join(__dirname, 'node_modules', 'auth0-password-policies'),
+        loader: 'babel-loader',
+        options: {
+          presets: [['@babel/preset-env', { useBuiltIns: 'entry', corejs: '3.26.1' }]],
+          configFile: false,
+          babelrc: false
+        }
+      },
       {
         test: /\.jsx?$/,
         loader: 'babel-loader',