app #1049

New issue

Closed

opened 2026-02-26 12:10:20 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 12:10:20 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/0xJacky/nginx-ui/pull/618
Author: @dependabot[bot]
Created: 10/14/2024
Status: ✅ Merged
Merged: 10/19/2024
Merged by: @0xJacky

Base: dev ← Head: dependabot/npm_and_yarn/app/dev/simplewebauthn/browser-11.0.0

📝 Commits (1)

6b13ef0 chore(deps): bump @simplewebauthn/browser from 10.0.0 to 11.0.0 in /app

📊 Changes

2 files changed (+27 additions, -22 deletions)

View changed files

📝 app/package.json (+1 -1)
📝 app/pnpm-lock.yaml (+26 -21)

📄 Description

Bumps @simplewebauthn/browser from 10.0.0 to 11.0.0.

Release notes

Sourced from @simplewebauthn/browser's releases.

v11.0.0 - The one that auto-registers

Say hello to support for automatic passkey registration, support for valid conditional UI <input> elements stashed away in web components, and to the new WebAuthnCredential type that modernizes some logic within.

There are some breaking changes in this release! Please see Breaking Changes below for refactor guidance.

Packages

@simplewebauthn/browser@11.0.0

@simplewebauthn/server@11.0.0

@simplewebauthn/types@11.0.0

Changes

[browser] [server] A new useAutoRegister argument has been added to startRegistration() to support attempts to automatically register passkeys for users who just completed non-passkey auth. verifyRegistrationResponse() has gained a new requireUserPresence option that can be set to false when verifying responses from startRegistration({ useAutoRegister: true, ... }) (#623)

[browser] A new verifyBrowserAutofillInput argument has been added to startAuthentication() to disable throwing an error when a correctly configured <input> element cannot be found (but perhaps a valid one is present in a web component shadow's DOM) (#621)

[server] [types] The AuthenticatorDevice type has been renamed to WebAuthnCredential and has had its properties renamed. The return value out of verifyRegistrationResponse() and corresponding inputs into verifyAuthenticationResponse() have been updated accordingly. See Breaking Changes below for refactor guidance (#625)

[server] verifyRegistrationResponse() now verifies that the authenticator data AAGUID matches the leaf cert's id-fido-gen-ce-aaguid extension AAGUID when it is present (#609)

[server] TPM attestation verification recognizes the corrected TPM manufacturer identifier for IBM (#610)

[server] Types for the defunct authenticator extensions uvm and dpk have been removed (#611)

Breaking Changes

[browser] Positional arguments in startRegistration() and startAuthentication() have been replaced by a single object

Property names in the object match the names of the previously-positional arguments. To update existing implementations, wrap existing options in an object with corresponding properties:

Before:
startRegistration(options);
startAuthentication(options, true);
After:
startRegistration({ optionsJSON: options });
startAuthentication({ optionsJSON: options, useBrowserAutofill: true });
[server] [types] The AuthenticatorDevice type has been renamed to WebAuthnCredential

AuthenticatorDevice.credentialID and AuthenticatorDevice.credentialPublicKey have been shortened to WebAuthnCredential.id and WebAuthnCredential.publicKey respectively.

verifyRegistrationResponse() has been updated accordingly to return a new credential value of type WebAuthnCredential. Update code that stores credentialID, credentialPublicKey, and counter out of verifyRegistrationResponse() to store credential.id, credential.publicKey, and credential.counter instead:

Before:
const { registrationInfo } = await verifyRegistrationResponse({...});
</tr></table> 

... (truncated)

Changelog

Sourced from @simplewebauthn/browser's changelog.

v11.0.0 - The one that auto-registers

Say hello to support for automatic passkey registration, support for valid conditional UI <input> elements stashed away in web components, and to the new WebAuthnCredential type that modernizes some logic within.

There are some breaking changes in this release! Please see Breaking Changes below for refactor guidance.

Packages

@simplewebauthn/browser@11.0.0

@simplewebauthn/server@11.0.0

@simplewebauthn/types@11.0.0

Changes

[browser] [server] A new useAutoRegister argument has been added to startRegistration() to support attempts to automatically register passkeys for users who just completed non-passkey auth. verifyRegistrationResponse() has gained a new requireUserPresence option that can be set to false when verifying responses from startRegistration({ useAutoRegister: true, ... }) (#623)

[browser] A new verifyBrowserAutofillInput argument has been added to startAuthentication() to disable throwing an error when a correctly configured <input> element cannot be found (but perhaps a valid one is present in a web component shadow's DOM) (#621)

[server] [types] The AuthenticatorDevice type has been renamed to WebAuthnCredential and has had its properties renamed. The return value out of verifyRegistrationResponse() and corresponding inputs into verifyAuthenticationResponse() have been updated accordingly. See Breaking Changes below for refactor guidance (#625)

[server] verifyRegistrationResponse() now verifies that the authenticator data AAGUID matches the leaf cert's id-fido-gen-ce-aaguid extension AAGUID when it is present (#609)

[server] TPM attestation verification recognizes the corrected TPM manufacturer identifier for IBM (#610)

[server] Types for the defunct authenticator extensions uvm and dpk have been removed (#611)

Breaking Changes

[browser] Positional arguments in startRegistration() and startAuthentication() have been replaced by a single object

Property names in the object match the names of the previously-positional arguments. To update existing implementations, wrap existing options in an object with corresponding properties:

Before:
startRegistration(options);
</tr></table> 

... (truncated)

Commits

1b06f47 chore(release): publish v11.0.0
7952bb8 Identify new possible user verification error
9315fbf Add useAutoRegister to startRegistration()
31d66a2 Add test for verifyBrowserAutofillInput
3b61ec1 Switch startRegistration to options blob too
5d5ee04 Allow skipping input verification error
e0adc5d Update startAuthentication tests
6cd5003 Switch startAuthentication to options object
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/0xJacky/nginx-ui/pull/618 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/14/2024 **Status:** ✅ Merged **Merged:** 10/19/2024 **Merged by:** [@0xJacky](https://github.com/0xJacky) **Base:** `dev` ← **Head:** `dependabot/npm_and_yarn/app/dev/simplewebauthn/browser-11.0.0` --- ### 📝 Commits (1) - [`6b13ef0`](https://github.com/0xJacky/nginx-ui/commit/6b13ef01f7513f13670af3bf9c10306d83806160) chore(deps): bump @simplewebauthn/browser from 10.0.0 to 11.0.0 in /app ### 📊 Changes **2 files changed** (+27 additions, -22 deletions) <details> <summary>View changed files</summary> 📝 `app/package.json` (+1 -1) 📝 `app/pnpm-lock.yaml` (+26 -21) </details> ### 📄 Description Bumps [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) from 10.0.0 to 11.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/MasterKale/SimpleWebAuthn/releases"><code>@simplewebauthn/browser</code>'s releases</a>.</em></p> <blockquote> <h2>v11.0.0 - The one that auto-registers</h2> <p>Say hello to support for automatic passkey registration, support for valid conditional UI <code><input></code> elements stashed away in web components, and to the new <code>WebAuthnCredential</code> type that modernizes some logic within.</p> <p>There are some breaking changes in this release! Please see <strong>Breaking Changes</strong> below for refactor guidance.</p> <h3>Packages</h3> <ul> <li><code>@simplewebauthn/browser</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> <li><code>@simplewebauthn/server</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> <li><code>@simplewebauthn/types</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> </ul> <h3>Changes</h3> <ul> <li><strong>[browser] [server]</strong> A new <code>useAutoRegister</code> argument has been added to <code>startRegistration()</code> to support attempts to automatically register passkeys for users who just completed non-passkey auth. <code>verifyRegistrationResponse()</code> has gained a new <code>requireUserPresence</code> option that can be set to <code>false</code> when verifying responses from <code>startRegistration({ useAutoRegister: true, ... })</code> (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/623">#623</a>)</li> <li><strong>[browser]</strong> A new <code>verifyBrowserAutofillInput</code> argument has been added to <code>startAuthentication()</code> to disable throwing an error when a correctly configured <code><input></code> element cannot be found (but perhaps a valid one is present in a web component shadow's DOM) (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/621">#621</a>)</li> <li><strong>[server] [types]</strong> The <code>AuthenticatorDevice</code> type has been renamed to <code>WebAuthnCredential</code> and has had its properties renamed. The return value out of <code>verifyRegistrationResponse()</code> and corresponding inputs into <code>verifyAuthenticationResponse()</code> have been updated accordingly. See <strong>Breaking Changes</strong> below for refactor guidance (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/625">#625</a>)</li> <li><strong>[server]</strong> <code>verifyRegistrationResponse()</code> now verifies that the authenticator data AAGUID matches the leaf cert's <code>id-fido-gen-ce-aaguid</code> extension AAGUID when it is present (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/609">#609</a>)</li> <li><strong>[server]</strong> TPM attestation verification recognizes the corrected TPM manufacturer identifier for IBM (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/610">#610</a>)</li> <li><strong>[server]</strong> Types for the defunct authenticator extensions <code>uvm</code> and <code>dpk</code> have been removed (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/611">#611</a>)</li> </ul> <h3>Breaking Changes</h3> <h4>[browser] Positional arguments in <code>startRegistration()</code> and <code>startAuthentication()</code> have been replaced by a single object</h4> <p>Property names in the object match the names of the previously-positional arguments. To update existing implementations, wrap existing options in an object with corresponding properties:</p> <p><strong>Before:</strong></p> <pre lang="ts"><code>startRegistration(options); startAuthentication(options, true); </code></pre> <p><strong>After:</strong></p> <pre lang="ts"><code>startRegistration({ optionsJSON: options }); startAuthentication({ optionsJSON: options, useBrowserAutofill: true }); </code></pre> <h4>[server] [types] The <code>AuthenticatorDevice</code> type has been renamed to <code>WebAuthnCredential</code></h4> <p><code>AuthenticatorDevice.credentialID</code> and <code>AuthenticatorDevice.credentialPublicKey</code> have been shortened to <code>WebAuthnCredential.id</code> and <code>WebAuthnCredential.publicKey</code> respectively.</p> <p><code>verifyRegistrationResponse()</code> has been updated accordingly to return a new <code>credential</code> value of type <code>WebAuthnCredential</code>. Update code that stores <code>credentialID</code>, <code>credentialPublicKey</code>, and <code>counter</code> out of <code>verifyRegistrationResponse()</code> to store <code>credential.id</code>, <code>credential.publicKey</code>, and <code>credential.counter</code> instead:</p> <p><strong>Before:</strong></p> <pre lang="ts"><code>const { registrationInfo } = await verifyRegistrationResponse({...}); </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md"><code>@simplewebauthn/browser</code>'s changelog</a>.</em></p> <blockquote> <h2>v11.0.0 - The one that auto-registers</h2> <p>Say hello to support for automatic passkey registration, support for valid conditional UI <code><input></code> elements stashed away in web components, and to the new <code>WebAuthnCredential</code> type that modernizes some logic within.</p> <p>There are some breaking changes in this release! Please see <strong>Breaking Changes</strong> below for refactor guidance.</p> <h3>Packages</h3> <ul> <li><code>@simplewebauthn/browser</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> <li><code>@simplewebauthn/server</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> <li><code>@simplewebauthn/types</code><a href="https://github.com/11"><code>@11</code></a>.0.0</li> </ul> <h3>Changes</h3> <ul> <li><strong>[browser] [server]</strong> A new <code>useAutoRegister</code> argument has been added to <code>startRegistration()</code> to support attempts to automatically register passkeys for users who just completed non-passkey auth. <code>verifyRegistrationResponse()</code> has gained a new <code>requireUserPresence</code> option that can be set to <code>false</code> when verifying responses from <code>startRegistration({ useAutoRegister: true, ... })</code> (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/623">#623</a>)</li> <li><strong>[browser]</strong> A new <code>verifyBrowserAutofillInput</code> argument has been added to <code>startAuthentication()</code> to disable throwing an error when a correctly configured <code><input></code> element cannot be found (but perhaps a valid one is present in a web component shadow's DOM) (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/621">#621</a>)</li> <li><strong>[server] [types]</strong> The <code>AuthenticatorDevice</code> type has been renamed to <code>WebAuthnCredential</code> and has had its properties renamed. The return value out of <code>verifyRegistrationResponse()</code> and corresponding inputs into <code>verifyAuthenticationResponse()</code> have been updated accordingly. See <strong>Breaking Changes</strong> below for refactor guidance (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/625">#625</a>)</li> <li><strong>[server]</strong> <code>verifyRegistrationResponse()</code> now verifies that the authenticator data AAGUID matches the leaf cert's <code>id-fido-gen-ce-aaguid</code> extension AAGUID when it is present (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/609">#609</a>)</li> <li><strong>[server]</strong> TPM attestation verification recognizes the corrected TPM manufacturer identifier for IBM (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/610">#610</a>)</li> <li><strong>[server]</strong> Types for the defunct authenticator extensions <code>uvm</code> and <code>dpk</code> have been removed (<a href="https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/611">#611</a>)</li> </ul> <h3>Breaking Changes</h3> <h4>[browser] Positional arguments in <code>startRegistration()</code> and <code>startAuthentication()</code> have been replaced by a single object</h4> <p>Property names in the object match the names of the previously-positional arguments. To update existing implementations, wrap existing options in an object with corresponding properties:</p> <p><strong>Before:</strong></p> <pre lang="ts"><code>startRegistration(options); </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/1b06f47ebd7ea3ae5cf8207c22693933989154aa"><code>1b06f47</code></a> chore(release): publish v11.0.0</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/7952bb851f423a094317a6e4a1d1839aad33f705"><code>7952bb8</code></a> Identify new possible user verification error</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/9315fbfc85c77318332c752a7a99e0c10010c429"><code>9315fbf</code></a> Add useAutoRegister to startRegistration()</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/31d66a28cb98884f9bcc21788d43ca0ca207fffe"><code>31d66a2</code></a> Add test for verifyBrowserAutofillInput</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/3b61ec16e57c9abd0693ea727027936f34caae16"><code>3b61ec1</code></a> Switch startRegistration to options blob too</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/5d5ee04337ce46a881104593cd230cd6edc00a93"><code>5d5ee04</code></a> Allow skipping input verification error</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/e0adc5d9cc3da4b3bb3ef78f1836919f6c185855"><code>e0adc5d</code></a> Update startAuthentication tests</li> <li><a href="https://github.com/MasterKale/SimpleWebAuthn/commit/6cd500383e3ef73f4ced6f4af4c03bb6525be421"><code>6cd5003</code></a> Switch startAuthentication to options object</li> <li>See full diff in <a href="https://github.com/MasterKale/SimpleWebAuthn/commits/v11.0.0/packages/browser">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@simplewebauthn/browser&package-manager=npm_and_yarn&previous-version=10.0.0&new-version=11.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>