Skip to content

build(deps): Bump @passwordless-id/webauthn from 2.1.2 to 2.4.1 - #9025

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/passwordless-id/webauthn-2.4.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/passwordless-id/webauthn-2.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @passwordless-id/webauthn from 2.1.2 to 2.4.1.

Release notes

Sourced from @​passwordless-id/webauthn's releases.

2.4.1

No release notes provided.

2.4.0

IMPORTANT NOTE: In this version the browser field was removed in package.json due to issues how various tooling interpret it. Check out #108 for more details.

2.3.5

No release notes provided.

2.3.4

No release notes provided.

2.3.3

No release notes provided.

2.3.2

Updated list of authenticators + minor dev deps update

2.3.1

Updated list of "official" aaguids and added chromium virtual authenticator

2.3.0

No release notes provided.

2.2.0

No release notes provided.

Commits
  • fc4cae4 v2.4.1
  • 22ca808 v2.4.0
  • 382ffaf added a few more tests regarding signatures
  • c0bcbfa Merge pull request #116 from ahoisl/fix/failing-unit-tests
  • 358b1da Merge pull request #115 from ahoisl/fix/114-der-signature-length
  • d13c8fd Fix ES256 verification rejecting signatures with short r/s (#114)
  • f21a6e8 Run tests in CI
  • 4542470 Fix randomUUID test with jest-environment-jsdom 30
  • d2cceb0 Fix verifyRegistration tests broken by the RpIdHash check
  • 76b7450 fixed styling issues
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​passwordless-id/webauthn since your current version.


@dependabot
dependabot Bot requested review from a team as code owners October 19, 2026 20:34
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@vercel

vercel Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs-v2 Ready Ready Preview Oct 21, 2026 8:06pm UTC
nebula Ready Ready Preview Oct 21, 2026 8:06pm UTC
thirdweb_playground Ready Ready Preview Oct 21, 2026 8:06pm UTC
thirdweb-www Ready Ready Preview Oct 21, 2026 8:06pm UTC
wallet-ui Ready Ready Preview Oct 21, 2026 8:06pm UTC

@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: ad9bd7fe-4208-4e52-8984-63c99ab365c9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@changeset-bot

changeset-bot Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 5f331d6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot added packages SDK Involves changes to the thirdweb SDK labels Oct 19, 2026
@socket-security

socket-security Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​passwordless-id/​webauthn@​2.1.2 ⏵ 2.4.1100 +210010089 +9100

View full report

Bumps [@passwordless-id/webauthn](https://github.com/passwordless-id/webauthn) from 2.1.2 to 2.4.1.
- [Release notes](https://github.com/passwordless-id/webauthn/releases)
- [Commits](passwordless-id/webauthn@2.1.2...2.4.1)

---
updated-dependencies:
- dependency-name: "@passwordless-id/webauthn"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

This branch was successfully deployed

5 active deployments
Preview – thirdweb-www — 5f331d60 Deployed Oct 21, 2026 by vercel[bot]
Preview – docs-v2 — 5f331d60 Deployed Oct 21, 2026 by vercel[bot]
Preview – thirdweb_playground — 5f331d60 Deployed Oct 21, 2026 by vercel[bot]
Preview – nebula — 5f331d60 Deployed Oct 21, 2026 by vercel[bot]
Preview – wallet-ui — 5f331d60 Deployed Oct 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code packages SDK Involves changes to the thirdweb SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants