Update dependency com.webauthn4j:webauthn4j-core to v0.31.8.RELEASE

[xdev-renovate]

This PR contains the following updates:

Package	Type	Update	Change
com.webauthn4j:webauthn4j-core	compile	patch	0.31.2.RELEASE → 0.31.8.RELEASE

---

Release Notes

webauthn4j/webauthn4j (com.webauthn4j:webauthn4j-core)

v0.31.8.RELEASE

Compare Source

What's Changed

⭐ Enhancements

• Add ClientCapability enum (WebAuthn Level 3) in #​1305
• Add defensive copy to CollectionUtil unmodifiable methods in #​1394
• Add Large Blob Storage extension (largeBlob) support in #​1379

🛠️ Build/Test

• Add .gitattributes to enforce LF line endings in #​1385
• Add draft release creation to release workflow in #​1390
• Remove unused -PfailBuildOnCVSS=4 Gradle property from CI workflows in #​1391
• Suppress missing Javadoc doclint warnings in #​1395

Full Changelog: webauthn4j/webauthn4j@0.31.7.RELEASE...0.31.8.RELEASE

Build Configuration

Item	Value
JDK	Eclipse Temurin 25.0.3+9
Gradle	9.6.1

v0.31.7.RELEASE

Compare Source

What's Changed

⭐ Enhancements

• Replace @JsonCreator/@JsonValue with module-based serializers and guard annotations in #​1360
• Add RETIRED and FIPS140 values to AuthenticatorStatus enum in #​1369
• Add iAPARThreshold field and rename maxTemplate to maxTemplates in BiometricAccuracyDescriptor in #​1371
• Add missing fields to StatusReport from MDS v3.1.1 spec in #​1370
• Add missing fields to MetadataStatement from Metadata Statement v3.1.1 spec in #​1372
• Add CTAP 2.1-2.3 option fields to AuthenticatorGetInfo.Options in #​1373
• Add CTAP 2.1-2.3 top-level fields to AuthenticatorGetInfo in #​1354

🪲 Bugs

• Fix incorrect target type in InvalidFormatException across deserializers in #​1367

🛠️ Build/Test

• Replace custom release notes generator with GitHub's built-in feature in #​1359
• Clean up repository configuration files in #​1368
• Stop grouping Dependabot PRs and label by dependency name instead in #​1375
• Harden GitHub Actions: pin actions to SHA and add job-level permissions in #​1382
• Enable reproducible builds with Gradle Toolchains in #​1383
• Add toolchain pinning plugin for reproducible builds in #​1384

📦 Dependency Upgrades

• Bump jackson from 3.1.3 to 3.1.4 by @​dependabot[bot] in #​1362

Full Changelog: webauthn4j/webauthn4j@0.31.6.RELEASE...0.31.7.RELEASE

Build Configuration

Item	Value
JDK	Eclipse Temurin 25.0.3+9
Gradle	9.4.1

v0.31.6.RELEASE

Compare Source

🪲 Bugs

• Fix async custom verifier results being silently discarded #​1358

⭐ Enhancements

• Apply defensive array copying consistently #​1357
• Hold Parameters objects directly in CoreRegistrationObject / CoreAuthenticationObject #​1356
• Add JSON serializer/deserializer for AAGUID and @JsonValue to Options #​1346
• Allow external modules to define and register their own WebAuthn extensions via Jackson Module #​1341
• Redesign the internal ANS.1 encoding/decoding library #​1340
• Set Ed25519 messageDigestAlgorithm to null as it is a pure signature scheme #​1338

📦 Dependency Upgrades

• Bump jackson from 3.1.2 to 3.1.3 #​1333
• Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 #​1334
• Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.21.4 #​1355
• Bump gradle-wrapper from 9.5.0 to 9.5.1 #​1335
• Bump com.microsoft.playwright:playwright from 1.59.0 to 1.60.0 #​1343
• Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.44.0 #​1336
• Bump quarkus from 3.35.4 to 3.36.0 #​1350
• Bump quarkus from 3.35.3 to 3.35.4 #​1345
• Bump quarkus from 3.35.2 to 3.35.3 #​1339
• Bump quarkus from 3.34.6 to 3.35.2 #​1332

🛠️ Build/Test

• Exclude fido-mds-integration tests from matrix jobs and run separately #​1349
• Move FIDO MDS real-endpoint tests to integration-tests/fido-mds-integration #​1348
• Add fido-integration-bdd: BDD integration test suite for WebAuthn protocol #​1347
• Downgrade Gradle from 9.5.1 to 9.4.1 #​1342
• Replace jreleaser with a lightweight custom Maven Central publish plugin #​1331

v0.31.5.RELEASE

Compare Source

📦 Dependency Upgrades

• Bump org.jreleaser from 1.23.0 to 1.24.0 #​1329
• Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198 #​1328
• Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 #​1327
• Bump gradle-wrapper from 9.4.1 to 9.5.0 #​1325
• Bump spring-boot-bom from 4.0.5 to 4.0.6 #​1322
• Bump quarkus from 3.34.5 to 3.34.6 #​1321

🛠️ Build/Test

• Remove explicit gson dependency from spring-security-passkeys integration test project #​1324

Note

Why is 0.31.4.RELEASE missing?
It was skipped due to a failure in the release process.

v0.31.3.RELEASE

Compare Source

⭐ Enhancements

• Support FIDO Registry v2.3 (SMART_CARD, SYNC_FABRIC) #​1318
  • This addresses the error introduced from MDS Blob v242. For more details see #​1317
• Enable passing AAGUID into emulator authenticators #​1307

📦 Dependency Upgrades

• Bump quarkus from 3.34.1 to 3.34.5 #​1316
• Bump bouncycastle from 1.83 to 1.84 #​1314
• Bump jackson from 3.1.1 to 3.1.2 #​1313
• Bump actions/github-script from 8 to 9 #​1312
• Bump org.seleniumhq.selenium:selenium-java from 4.41.0 to 4.43.0 #​1311
• Bump com.microsoft.playwright:playwright from 1.58.0 to 1.59.0 #​1310

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​slunker
• @​sksuraj7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.