Skip to content

Commit 84ed2a2

Browse files
james-d-elliottjames-d-elliott
authored
Merge branch 'master' into mapstructure
Signed-off-by: James Elliott <[email protected]>
2 parents b7932f0 + 689cf3e commit 84ed2a2

File tree

9 files changed

+54
-47
lines changed

9 files changed

+54
-47
lines changed

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -25,18 +25,18 @@ jobs:
2525
- 'go'
2626
steps:
2727
- name: 'Harden Runner'
28-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
28+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
2929
with:
3030
egress-policy: 'audit'
3131
- name: 'Checkout'
3232
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3333
- name: 'Initialize CodeQL'
34-
uses: github/codeql-action/init@e296a935590eb16afc0c0108289f68c87e2a89a5 # v3.29.5
34+
uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
3535
with:
3636
languages: ${{ matrix.language }}
3737
- name: 'Build'
38-
uses: github/codeql-action/autobuild@e296a935590eb16afc0c0108289f68c87e2a89a5 # v3.29.5
38+
uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
3939
- name: 'Perform CodeQL Analysis'
40-
uses: github/codeql-action/analyze@e296a935590eb16afc0c0108289f68c87e2a89a5 # v3.29.5
40+
uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
4141
with:
4242
category: '/language:${{ matrix.language }}'

‎.github/workflows/dependabot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
contents: 'write'
1313
steps:
1414
- name: 'Harden Runner'
15-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
15+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
1616
with:
1717
egress-policy: 'audit'
1818
- name: 'Dependabot Fetch Metadata'

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,10 @@ jobs:
99
runs-on: 'ubuntu-latest'
1010
steps:
1111
- name: 'Harden Runner'
12-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
12+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
1313
with:
1414
egress-policy: 'audit'
1515
- name: 'Checkout Repository'
1616
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1717
- name: 'Dependency Review'
18-
uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
18+
uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1

‎.github/workflows/go.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
runs-on: 'ubuntu-latest'
1313
steps:
1414
- name: 'Harden Runner'
15-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
15+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
1616
with:
1717
egress-policy: 'audit'
1818
- name: 'Set up Go'
@@ -42,7 +42,7 @@ jobs:
4242
fail-fast: false
4343
steps:
4444
- name: 'Harden Runner'
45-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
45+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
4646
with:
4747
egress-policy: 'audit'
4848
- name: 'Set up Go ${{ matrix.go }}'

‎.github/workflows/scorecards.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
actions: 'read'
1919
steps:
2020
- name: 'Harden Runner'
21-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
21+
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
2222
with:
2323
egress-policy: 'audit'
2424
- name: 'Checkout'
@@ -32,12 +32,12 @@ jobs:
3232
results_format: 'sarif'
3333
publish_results: true
3434
- name: 'Upload'
35-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
35+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
3636
with:
3737
name: 'SARIF file'
3838
path: 'results.sarif'
3939
retention-days: 5
4040
- name: 'Upload to Code Scanning Dashboard'
41-
uses: github/codeql-action/upload-sarif@e296a935590eb16afc0c0108289f68c87e2a89a5 # v3.29.5
41+
uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
4242
with:
4343
sarif_file: 'results.sarif'

‎CITATION.cff‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
---
2+
cff-version: 1.2.0
3+
type: software
4+
title: Go WebAuthn
5+
license: BSD-3-Clause
6+
commit: 80f6c83285fd577867f1ba20ce772412164f3be1
7+
version: 0.14.0
8+
date-released: '2025-09-15'
9+
repository-code: 'https://github.com/go-webauthn/webauthn/'
10+
abstract: >-
11+
The Go WebAuthn library is a FIDO2 Conformant WebAuthn and
12+
Passkey backend library for golang that simplifies the
13+
WebAuthn Relying Party implementation for go developers.
14+
It implements all of the attestation elements and conforms
15+
with modern conformance requirements from the FIDO
16+
Alliance, as well as implements the WebAuthn Level 3.
17+
message: >-
18+
If you use this software, please cite it using the
19+
metadata from this file.
20+
authors:
21+
- orcid: 'https://orcid.org/0009-0000-4673-5510'
22+
given-names: James
23+
family-names: Elliott
24+
email: [email protected]
25+
keywords:
26+
- webauthn
27+
- passkeys
28+
- cryptography
29+
- crypto
30+
- golang

‎LICENSE‎

Lines changed: 2 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
Copyright (c) 2017 Duo Security, Inc. All rights reserved.
1+
Copyright (c) 2025 github.com/go-webauthn/webauthn authors.
22

33
Redistribution and use in source and binary forms, with or without
44
modification, are permitted provided that the following conditions
@@ -23,27 +23,4 @@ PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
2323
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
2424
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
2525
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
26-
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27-
28-
29-
Copyright (c) 2021-2022 github.com/go-webauthn/webauthn authors.
30-
31-
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the
32-
following conditions are met:
33-
34-
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following
35-
disclaimer.
36-
37-
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following
38-
disclaimer in the documentation and/or other materials provided with the distribution.
39-
40-
3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products
41-
derived from this software without specific prior written permission.
42-
43-
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
44-
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
45-
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
46-
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
47-
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
48-
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
49-
THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26+
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

‎go.mod‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,12 @@ module github.com/go-webauthn/webauthn
22

33
go 1.24.0
44

5-
toolchain go1.25.2
5+
toolchain go1.25.4
66

77
require (
88
github.com/fxamacker/cbor/v2 v2.9.0
99
github.com/go-viper/mapstructure/v2 v2.4.0
10-
github.com/go-webauthn/x v0.1.25
10+
github.com/go-webauthn/x v0.1.26
1111
github.com/golang-jwt/jwt/v5 v5.3.0
1212
github.com/google/go-tpm v0.9.6
1313
github.com/google/uuid v1.6.0
@@ -19,7 +19,7 @@ require (
1919
github.com/davecgh/go-spew v1.1.1 // indirect
2020
github.com/pmezard/go-difflib v1.0.0 // indirect
2121
github.com/x448/float16 v0.8.4 // indirect
22-
golang.org/x/crypto v0.42.0 // indirect
23-
golang.org/x/sys v0.36.0 // indirect
22+
golang.org/x/crypto v0.43.0 // indirect
23+
golang.org/x/sys v0.37.0 // indirect
2424
gopkg.in/yaml.v3 v3.0.1 // indirect
2525
)

‎go.sum‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@ github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sa
44
github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
55
github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
66
github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
7-
github.com/go-webauthn/x v0.1.25 h1:g/0noooIGcz/yCVqebcFgNnGIgBlJIccS+LYAa+0Z88=
8-
github.com/go-webauthn/x v0.1.25/go.mod h1:ieblaPY1/BVCV0oQTsA/VAo08/TWayQuJuo5Q+XxmTY=
7+
github.com/go-webauthn/x v0.1.26 h1:eNzreFKnwNLDFoywGh9FA8YOMebBWTUNlNSdolQRebs=
8+
github.com/go-webauthn/x v0.1.26/go.mod h1:jmf/phPV6oIsF6hmdVre+ovHkxjDOmNH0t6fekWUxvg=
99
github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
1010
github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
1111
github.com/google/go-tpm v0.9.6 h1:Ku42PT4LmjDu1H5C5ISWLlpI1mj+Zq7sPGKoRw2XROA=
@@ -20,10 +20,10 @@ github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
2020
github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
2121
go.uber.org/mock v0.6.0 h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y=
2222
go.uber.org/mock v0.6.0/go.mod h1:KiVJ4BqZJaMj4svdfmHM0AUx4NJYO8ZNpPnZn1Z+BBU=
23-
golang.org/x/crypto v0.42.0 h1:chiH31gIWm57EkTXpwnqf8qeuMUi0yekh6mT2AvFlqI=
24-
golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
25-
golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
26-
golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
23+
golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
24+
golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
25+
golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
26+
golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
2727
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
2828
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
2929
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

0 commit comments

Comments
 (0)