Skip to content

deps(deps): bump the production-dependencies group across 1 directory with 3 updates#86

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4100940f87
Open

deps(deps): bump the production-dependencies group across 1 directory with 3 updates#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4100940f87

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 3 updates in the / directory: @simplewebauthn/browser, idb-keyval and libsodium-wrappers.

Updates @simplewebauthn/browser from 13.2.2 to 13.3.0

Release notes

Sourced from @​simplewebauthn/browser's releases.

v13.3.0

  • [browser] startRegistration() and startAuthentication() will recognize punycode domains as valid domains when trying to identify why an error occurred (#750)
  • [server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Changelog

Sourced from @​simplewebauthn/browser's changelog.

v13.3.0

Changes:

  • [browser] startRegistration() and startAuthentication() will recognize punycode domains when trying to identify why an error occurred (#750)
  • [server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Commits

Updates idb-keyval from 6.2.2 to 6.2.4

Commits

Updates libsodium-wrappers from 0.7.15 to 0.8.4

Release notes

Sourced from libsodium-wrappers's releases.

0.8.4

No release notes provided.

0.8.3

Update to libsodium 1.0.22.

0.8.2

No release notes provided.

0.8.1

Quite a lot of changes in this version:

  • The wrapper code was simplified a little bit and converted to TypeScript
  • The promise chain in WASM fallback was fixed to prevent race conditions
  • In addition to the browser benchmarks, there are now local benchmarks, that can be run with make benchmark
  • Automatically generated Typescript definitions are now included
  • Libsodium was updated to the latest 1.0.21-stable version
  • LTO was disabled - At least in Emscripten 4, it caused a significant performance degradation on some platforms.
  • The API documentation files are now way more useful, and automatically generated along with the TypeScript definitions.

0.8.0

This new release is based on libsodium 1.0.21.

0.7.16

  • ESM modules support was added (dist/modules-esm/, dist/modules-sumo-esm/).
  • Libsodium has been updated
  • Various bug fixes (crypto exclusion for browser, pointer fixes)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 3 updates

Bumps the production-dependencies group with 3 updates in the / directory: [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser), [idb-keyval](https://github.com/jakearchibald/idb-keyval) and [libsodium-wrappers](https://github.com/jedisct1/libsodium.js).


Updates `@simplewebauthn/browser` from 13.2.2 to 13.3.0
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.0/packages/browser)

Updates `idb-keyval` from 6.2.2 to 6.2.4
- [Changelog](https://github.com/jakearchibald/idb-keyval/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jakearchibald/idb-keyval/commits)

Updates `libsodium-wrappers` from 0.7.15 to 0.8.4
- [Release notes](https://github.com/jedisct1/libsodium.js/releases)
- [Commits](jedisct1/libsodium.js@0.7.15...0.8.4)

---
updated-dependencies:
- dependency-name: "@simplewebauthn/browser"
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: idb-keyval
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: libsodium-wrappers
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants