Skip to content

v0.8.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Apr 07:42
v0.8.0
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: BsdGvKi3Med56Wy4VisZQhWin20c4hORHHUxNM9bVlw
Verified
Learn about vigilant mode.
7fd5f58
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • chore: release v0.8.0 (#52)
  • chore: release v0.8.0
  • feat(auth): add skipMfaOnPasskeyAuth to resolve MFA-policy dilemma (#50)
  • test(e2e): fixme own mfa-bypass spec pending rpId infra fix
  • ci: pick up typo3-ci-workflows npm lockfile fix
  • ci: trigger fresh run to pick up typo3-ci-workflows cms-install fix
  • ci: trigger fresh run to pick up typo3-ci-workflows e2e fix
  • fix(config): defensive fallback for skipMfaOnPasskeyAuth
  • test(functional): enable BypassFinals in functional bootstrap
  • test(e2e): Playwright coverage for MFA bypass during passkey login
  • test(auth): functional test for MFA session-key round-trip
  • feat(auth): add skipMfaOnPasskeyAuth setting (default enabled)
  • test(e2e): triage 6 pre-existing broken specs with .fixme() (#51)
  • test(e2e): triage pre-existing broken specs with .fixme()

Installation

composer require netresearch/nr-passkeys-be

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-passkeys-be-0.8.0.zip.bundle \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-passkeys-be-0.8.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

Assets 12
Loading