Update dependency com.webauthn4j:webauthn4j-core to v0.15.0.RELEASE - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
com.webauthn4j:webauthn4j-core	compile	minor	0.12.0.RELEASE -> 0.15.0.RELEASE

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	7.5	CVE-2020-28491	#140

---

Release Notes

webauthn4j/webauthn4j

v0.15.0.RELEASE

Compare Source

This release is broken (Not published properly to Maven Central). Please use 0.15.1.RELEASE instead.

⚠️ Breaking Changes

• Clarify nullability for better Kotlin interoperability
  • Clarify nullability for better Kotlin interoperability #​372
  • Correct WebAuthn data class nullability #​429
  • Make AuthenticationData member nullable #​376
  • Redesign converter return value nullability #​401
  • Clarify webauthn4j-device-check module classes nullability #​394
  • Make AndroidSafetyNetAttestationStatement Response members nullable #​383
  • Make AuthenticatorSelectionCriteria.requireResidentKey nullable #​382
  • Refine ServerProperty nullability and remove getOrigin method #​375
  • Redesign Converters not to pass through null value #​373
  • Add null check assertion to non-null marked members #​400
  • Polish Nullability annotations #​476
  • Polish null check logic #​475
  • Move Parameters classes non-null check into these classes #​377
  • Refine COSEKey classes nullability #​374
  • Revisit nullability #​402
  • Correct userHandle nullability #​422
• Update UserVerificationMethod #​445
• Deprecate a ServerProperty constructor whose origins arg is Collection #​415
• Redesign JWS classes #​388

⭐ Enhancements

• Add error member to Android Safetynet Attestation Response #​386
• Add revocationCheckEnabled option #​460
• Expose OriginValidator to public #​459
• Make DeviceCheckManager.createObjectConverter public #​458
• Make converters to throw DataConversionException when null check failed #​430
• Add NullAppleAnonymousAttestationStatementValidator to createNonStrictWebAuthnRegistrationManager() #​419
• Make AuthenticatorResponse public #​414
• Make DCAssertion class public #​395
• Polish CertPathSerializer #​387
• Reformat code #​390
• Remove deprecated suppressions #​391
• Move docs build from Travis-CI to GitHub Actions #​452
• Remove bintray dependency as it shutdowns #​473

📦 Dependency Upgrades

• Bump dependency-check-gradle from 6.1.0 to 6.1.5 #​478 #​477 #​472 #​468 #​461
• Bump spring-boot-dependencies from 2.3.4.RELEASE to 2.4.4 #​469 #​463 #​443 #​424 #​393 #​370
• Bump build-info-extractor-gradle from 4.13.0 to 4.21.0 #​466 #​451 #​368
• Bump asciidoctor-gradle-jvm from 3.2.0 to 3.3.0 #​464 #​457 #​384
• Bump mockitoVersion from 3.5.13 to 3.8.0 #​465 #​444 #​437 #​411 #​369 #​367
• Bump dependency-check-gradle from 6.0.2 to 6.1.0 #​450 #​439 #​436 #​385
• Bump checker-qual from 3.9.1 to 3.11.1 #​467 #​454
• Bump sonarqube-gradle-plugin from 3.0 to 3.1.1 #​449 #​440
• Bump checker-qual from 2.5.5 to 3.9.1 #​441 #​438 #​417 #​379
• Bump bouncyCastleVersion from 1.66 to 1.68 #​434 #​371

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​DTonoki

v0.14.1.RELEASE

Compare Source

⭐ Enhancements

• Remove BouncyCastle from webauthn4j-util dependency #​423

v0.14.0.RELEASE

Compare Source

⚠️ Breaking Changes

• Bugfix: Failed to parse attestatation certificate DN #​359
• Relax origin scheme requirement #​354
• Redesign registration timestamp handling #​352
• Remove expectedExtensionIds member #​344
• Segregate client independent logic from validators #​343
• Deprecate SignatureUtil#getRS256, getES256 #​336

⭐ Enhancements

• Support Apple App Attest attestation statement #​329
• Support Apple Anonymous attestation statement #​357
• Support fido2 api for android Origin and support validation against multiple origins #​353
• Update SonarCloud runner java version to 11 #​361
• Normalize Origin scheme and host & assign schemeSpecificPart value for http/https #​356
• CodeQL scanning #​355
• Add doc about how to serialize/deserialize authenticator #​350
• Add CoreAuthenticatorImpl #​349
• Add documentation about how to validate FIDO2 CTAP authenticator attestation and assertion #​347

📦 Dependency Upgrades

• Bump spring-boot-dependencies from 2.3.3.RELEASE to 2.3.4.RELEASE #​341
• Align Mockito version and update to 3.5.13 #​364
• Bump dependency-check-gradle from 5.3.2.1 to 6.0.2 #​334 #​339 #​351
• Bump build-info-extractor-gradle from 4.17.1 to 4.17.2 #​333

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​veehaitch
• @​dayasakti-2020
• @​VinodAnandan

v0.13.0.RELEASE

Compare Source

⚠️ Breaking Changes

• Redesign Exntesions #​306 #​318
• Deprecate expectedExtensionIds member #​330
• Remove deprecated features #​295

⭐ Enhancements

• Improve extension builder #​311
• Add CredentialProptectionExtension #​309
• Add stale bot definition #​299

📦 Dependency Upgrades

• Bump spring-boot-dependencies from 2.3.0.RELEASE to 2.3.3.RELEASE #​302 #​317 #​324
• Bump kerby-asn1 from 2.0.0 to 2.0.1 #​297
• Bump bouncyCastleVersion from 1.65 to 1.66 #​315
• Bump sonarqube-gradle-plugin from 2.8.0.1969 to 3.0 #​301
• Bump build-info-extractor-gradle from 4.15.2 to 4.17.1 #​305 #​314 #​323 #​327
• Update AsciiDoctorJ #​307
• Create Dependabot config file #​303

---

• If you want to rebase/retry this PR, click this checkbox.