v0.6.0

Changes

• chore(release): v0.6.0 (#56)
• feat(login): arm the WebAuthn conditional-UI ceremony the docs promise (#55)
• ci: sync checks.yml gate job from the org template (#51)
• feat(rector): add the TYPO3 v13 level set (#50)
• feat: register plugins as CType on both supported TYPO3 versions (#47)
• chore(deps): update step-security/harden-runner action to v2.20.1 (#49)
• ci: sync checks.yml gate job from the org template (#48)
• feat(rector): enable rector with the shared org config (#43)
• chore(deps): drop dev-dependencies the shared package already provides (#46)
• test: re-enable the functional and integration suites in CI (#44)
• docs: state the commit-signing requirement where contributors look (#42)
• ci: sync labeler fork-PR fix from typo3-extension template (#41)
• chore(zizmor): drop the local policy copy, the reusable supplies it (#40)
• docs: sync the scanner wording from the template (#39)
• ci: drop the deprecated GITLEAKS_LICENSE secret mapping (#38)
• ci: add gitleaks and zizmor scanners to checks.yml (#37)
• chore(deps): update dependency jsdom to v30 (#36)

Installation

composer require netresearch/nr-passkeys-fe

Publication status

• TER: extensions.typo3.org/extension/nr_passkeys_fe — 0.6.0 verified
• Packagist: packagist.org/packages/netresearch/nr-passkeys-fe — 0.6.0 verified
• Documentation: docs.typo3.org/p/netresearch/nr-passkeys-fe/0.6/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-passkeys-fe-0.6.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-passkeys-fe-0.6.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.