chore(deps): bump github.com/go-webauthn/webauthn from 0.10.2 to 0.15.0 in /backend

[dependabot]

Bumps github.com/go-webauthn/webauthn from 0.10.2 to 0.15.0.

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.15.0

v0.15.0 (2025-11-09)

BREAKING CHANGES

This release has a very small chance to have a breaking change that was not detected in the automatic or manual tests due to the module replacement of github.com/mitchellh/mapstructure with github.com/go-viper/mapstructure/v2. This is exclusively used by the metadata implementation and the Android SafetyNet Attestation implementation.

It's unlikely anyone will encounter any issues but if they do please report them via normal means and the issue can either be fixed or an addendum to the release notes can be made; whichever is most appropriate.

v0.14.0

0.14.0 (2025-09-14)

Bug Fixes

• webauthn: edge case in owned credentials validation (#487) (9410f91)
• webauthn: skip mds validation for none format (#497) (a1b2775), closes #387

Features

• metadata: update schema to 3.1 (#454) (3c6b5a1)
• protocol: att format updates (#485) (c079c8b)
• protocol: update tpm manufacturers (#496) (46046ca)
• protocol: validate native app origins (#468) (0b2a549), closes #462 #463

0.13.4

0.13.4 (2025-07-18)

Bug Fixes

• metadata: biometric accuracy descriptor types (#451) (c561b4d), closes #450

v0.13.3

0.13.3 (2025-07-11)

In addition to the below changes the go docs have been dramatically updated and should be considered the primary source of documentation going forward.

Bug Fixes

• missing helpers (#444) (380a944)

v0.13.2

0.13.2 (2025-07-11)

Bug Fixes

• webauthn: missing passkey tooling (#443) (088d7c4)

... (truncated)

Commits

• 2b7fd8f release: v0.15.0 (#535)
• 9a8c2c4 build(deps): use github.com/go-viper/mapstructure/v2 (#522)
• 689cf3e build(deps): update dependency go to v1.25.4 (#532)
• 3faf53d build(deps): update module github.com/go-webauthn/x to v0.1.26 (#534)
• b84ab1d build(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 (#533)
• c306438 build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 (#531)
• a664f00 docs: update citation (#530)
• 4487237 docs: update citation (#529)
• 5dc4c56 build(deps): bump github/codeql-action from 4.30.8 to 4.31.0 (#527)
• ffd3614 build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#528)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)