build(deps): Bump github.com/go-webauthn/webauthn from 0.16.3 to 0.17.2 in /server

[dependabot]

Bumps github.com/go-webauthn/webauthn from 0.16.3 to 0.17.2.

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.17.2

v0.17.2 (2026-05-03)

Bug Fixes

• webauthn: include verify attestation func for credential (#679) (1f354c8)

v0.17.1

0.17.1 (2026-05-03)

Bug Fixes

• protocol: remove unnecessary guard (#675) (1e07db1)
• webauthn: minimized encoding outputs (#670) (3847681)

v0.17.0

0.17.0 (2026-04-21)

• fix!: split attestation type and format (#658) (3c1e870), closes #658 #476
• feat!: tighten cross-origin defaults (#647) (80cc224), closes #647

Bug Fixes

• protocol: short-circuit apple attestation extension lookup (#664) (5296bc7)

Features

• webauthn: add authenticator registration filtering (#668) (0be632e)
• webauthn: credential message pack (#660) (c7d933c)

BREAKING CHANGES

• A bug with the Credential Record which was introduced early in the libraries lifecycle has resulted in a breaking change to the Credential struct. If you are manually serializing this struct instead of using encoding/json you will be required to make manual changes; though Integrators should consider these notes regardless.

  • protocol.CredentialTypeFIDOU2F has been removed; replace uses with protocol.AttestationFormatFIDOUniversalSecondFactor (cast to string where the destination field is a plain string).

  • The semantics of the AttestationType field on webauthn.Credential

... (truncated)

Changelog

Sourced from github.com/go-webauthn/webauthn's changelog.

v0.17.2 (2026-05-03)

Bug Fixes

• webauthn: include verify attestation func for credential (#679) (1f354c8)

0.17.1 (2026-05-03)

Bug Fixes

• protocol: remove unnecessary guard (#675) (1e07db1)
• webauthn: minimized encoding outputs (#670) (3847681)

0.17.0 (2026-04-21)

• fix!: split attestation type and format (#658) (3c1e870), closes #658 #476
• feat!: tighten cross-origin defaults (#647) (80cc224), closes #647

Bug Fixes

• protocol: short-circuit apple attestation extension lookup (#664) (5296bc7)

Features

• webauthn: add authenticator registration filtering (#668) (0be632e)
• webauthn: credential message pack (#660) (c7d933c)

BREAKING CHANGES

• A bug with the Credential Record which was introduced early in the libraries lifecycle has resulted in a breaking change to the Credential struct. If you are manually serializing this struct instead of using encoding/json you will be required to make manual changes; though Integrators should consider these notes regardless.

  • protocol.CredentialTypeFIDOU2F has been removed; replace uses with protocol.AttestationFormatFIDOUniversalSecondFactor (cast to string where the destination field is a plain string).

  • The semantics of the AttestationType field on webauthn.Credential and protocol.CredentialDescriptor have changed. Integrators that inspect this field to detect a format (typically checking for "fido-u2f") must switch to the new AttestationFormat field; the

... (truncated)

Commits

• 1cdfb45 release: v0.17.2 (#680)
• 1f354c8 fix(webauthn): include verify attestation func for credential (#679)
• de0a809 docs: fix changelog (#678)
• ec12181 release: v0.17.1 (#677)
• 3c9f513 docs(webauthn): add json guidance (#676)
• 1e07db1 fix(protocol): remove unnecessary guard (#675)
• d7551b8 build(deps): update step-security/harden-runner action to v2.19.1 (#674)
• ae5eea6 build(deps): update github/codeql-action action to v4.35.3 (#673)
• 3847681 fix(webauthn): minimized encoding outputs (#670)
• 383315f docs: add storage docs and pkgsite makefile (#672)
• Additional commits viewable in compare view

[dependabot]

Superseded by #72.