Sourced from @​simplewebauthn/server's releases.

v14.1.0

Changes:

• [server] Support for the FIDO Convenience Metadata Service has been added with the new ConvenienceMetadataService. See https://simplewebauthn.dev/docs/advanced/server/metadata-service#convenience-metadata-service for more info (#812)
• [server] verifyRegistrationResponse() and verifyAuthenticationResponse() will now raise a SimpleWebAuthnError when expectedRPID or expectedOrigin are not valid values (#824)
• [server] "android-key" attestation statement verification now checks that the x5c root certificate is a known one before verifying the certificate chain (#821)
• [server] "android-key" attestation statement verification now knows about the new Google Android Key Attestation CA1 trust anchor (#820)
• [server] "tpm" attestation statement verification now properly parses non-TPM_ALG_NULL schemes in pubArea (#822)

Sourced from @​simplewebauthn/server's changelog.

v14.1.0

Changes:

• [server] Support for the FIDO Convenience Metadata Service has been added with the new ConvenienceMetadataService. See https://simplewebauthn.dev/docs/advanced/server/metadata-service#convenience-metadata-service for more info (#812)
• [server] verifyRegistrationResponse() and verifyAuthenticationResponse() will now raise a SimpleWebAuthnError when expectedRPID or expectedOrigin are not valid values (#824)
• [server] "android-key" attestation statement verification now checks that the x5c root certificate is a known one before verifying the certificate chain (#821)
• [server] "android-key" attestation statement verification now knows about the new Google Android Key Attestation CA1 trust anchor (#820)
• [server] "tpm" attestation statement verification now properly parses non-TPM_ALG_NULL schemes in pubArea (#822)

• 01d1a64 Fix deno publish issue
• f8b71cb Update server version to v14.1.0
• 60c34a1 Require ASCII inputs for expectedRPID and expectedOrigin (#824)
• 8f41b23 Improve TPM pubArea parsing (#822)
• 6a87602 Mount better defenses against malicious cert chains in Android Key attestatio...
• a0d9d94 Add Google Android Key Attestation CA1 trust anchor (#820)
• 96f0f24 Fix copy-pasted "teeEnforced" w/"softwareEnforced" in Android Key error messa...
• df53178 Add support for FIDO Convenience MDS (#812)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)