fix(deps): update dependency otplib to v13 (#1027)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

admin-frontend/e2e/pages/login.ts

@@ -1,4 +1,4 @@
-import { authenticator } from 'otplib';
+import { generate, createGuardrails } from 'otplib';
 import { PagePaths } from '../utils';
 import { AdminPortalPage } from './admin-portal-page';
 
@@ -18,9 +18,13 @@ export class LoginPage extends AdminPortalPage {
       .fill(process.env.E2E_ADMIN_PASSWORD!);
     await this.page.getByRole('button', { name: 'Sign in' }).click();
 
-    const totpToken = authenticator.generate(
-      process.env.E2E_ADMIN_TOTP_SECRET!,
-    );
+    const totpToken = await generate({
+      secret: process.env.E2E_ADMIN_TOTP_SECRET!,
+      guardrails: createGuardrails({
+        MIN_SECRET_BYTES: 10,
+      }),
+    });
+
     await this.page.getByPlaceholder('Code').click();
     await this.page.getByPlaceholder('Code').fill(totpToken);
     await this.page.getByRole('button', { name: 'Verify' }).click();

admin-frontend/package-lock.json

@@ -29,7 +29,6 @@
     "axios": "^1.6.7",
     "dotenv": "^17.2.0",
     "file-saver": "^2.0.5",
-    "otplib": "^12.0.1",
     "papaparse": "^5.4.1",
     "pinia": "^3.0.0",
     "powerbi-client": "^2.23.1",
@@ -72,6 +71,7 @@
     "globals": "^17.0.0",
     "jsdom": "^27.0.0",
     "lodash": "^4.17.21",
+    "otplib": "^13.3.0",
     "playwright": "^1.56.1",
     "postcss": "^8.4.32",
     "prettier": "^3.1.1",