[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-webauthn/webauthn	v0.18.0 → v0.18.2

---

Release Notes

go-webauthn/webauthn (github.com/go-webauthn/webauthn)

v0.18.2

Compare Source

Bug Fixes

• protocol: accept anonca attestation trust anchors (#​801) (b1dfbf2)
• protocol: convey safetynet attestation trust path (#​800) (5f8a38c)
• protocol: validate fido-u2f credential curve and certificate validity (#​802) (55d49f8)
• protocol: validate safetynet version and response age (#​799) (dda068d)
• protocol: validate tpm aik certificate validity period (#​797) (9ab858d)
• webauthn: require authorization to initialize uv (#​795) (597882d)
• webauthn: validate session challenge when finishing ceremonies (#​794) (bbe2902)

Features

• protocol: determine fido-u2f attestation type from metadata (#​798) (ccbbb4b)
• protocol: validate authenticator data against metadata (#​793) (1ee00cf)

v0.18.1

Compare Source

This release just updates dependencies.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/fxamacker/cbor/v2	v2.9.3 -> v2.9.4
github.com/go-webauthn/x	v0.3.0 -> v0.3.1