fix(deps): bump @simplewebauthn/browser from 11.0.0 to v13

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@simplewebauthn/browser (source)	^11.0.0 -> ^13.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

MasterKale/SimpleWebAuthn (@​simplewebauthn/browser)

v13.0.0

Compare Source

Hot on the heels of the last major release, v13 introduces support for registration hints! Refined
types and improved attestation trust anchor verification are also included. Last but not least, we
say goodbye to one of the project's packages for better docs and fewer dependencies to install. Read
on for more information, including refactor advice for dealing with the retirement of
@​simplewebauthn/types.

Changes:

• [server] A new preferredAuthenticatorType argument can be set when calling
  generateRegistrationOptions() to generate options that encourage the browser to direct the user
  to register one of three types of authenticators: 'securityKey', 'localDevice', or
  'remoteDevice' (a.k.a. opinionated
  WebAuthn hints
  support) (#​653)
• [browser] startRegistration() will recognize hints if specified in optionsJSON
  (#​652)
• [server] Attestation verification now recognizes intermediate certificates as trust anchors
  (#​650)
• [browser] [server] The types previously maintained in the types package are now included
  within the browser and server packages. See Breaking Changes below for more info
  (#​655)

Breaking Changes

@​typescript/types is being retired. Its types will now be included directly in
@​simplewebauthn/browser and @​simplewebauthn/server.

To refactor existing imports from /types, simply import them from /browser or /server
instead:

Before:

import type {
  AuthenticationResponseJSON,
  RegistrationResponseJSON,
  WebAuthnCredential,
} from '@&#8203;simplewebauthn/types'; // <--

After:

import type {
  AuthenticationResponseJSON,
  RegistrationResponseJSON,
  WebAuthnCredential,
} from '@&#8203;simplewebauthn/server'; // <--

v12.0.0

Compare Source

All SimpleWebAuthn packages are now available for installation from the
JavaScript Registry (JSR)! JSR is an "open-source package registry
for modern JavaScript and TypeScript" - you can read more about this new package registry and its
ESM-centric capabilities here.

All packages in v12.0.0 are functionally identical to v11.0.0! And JSR package hosting is in
addition to existing package hosting on NPM. Nothing changes about package installation via
npm install. Read on for more information.

Packages

• @​simplewebauthn/browser@​12.0.0
• @​simplewebauthn/server@​12.0.0
• @​simplewebauthn/types@​12.0.0

Changes

• [browser] [server] [types] All packages can now be installed from JSR wherever JSR
  imports are supported (#​634)
• [browser] Deno projects using frameworks like Fresh can now import and use
  @​simplewebauthn/browser (#​634)

To install from JSR, use npx jsr add @​simplewebauthn/... or deno add jsr:@​simplewebauthn/...
depending on which package manager is available.

Projects using npm for package management:

npx jsr add @​simplewebauthn/browser

npx jsr add @​simplewebauthn/server

npx jsr add @​simplewebauthn/types

Projects using deno for package management:

deno add jsr:@​simplewebauthn/browser

deno add jsr:@​simplewebauthn/server

deno add jsr:@​simplewebauthn/types

Projects using HTTPS modules via deno.land/x:

v12.0.0 officially deprecates importing SimpleWebAuthn from deno.land/x. See Breaking Changes
below for refactor guidance.

Breaking Changes

Importing SimpleWebAuthn packages from "https://deno.land/x/simplewebauthn/..." URLs is no longer
supported. Please use Deno's native support for JSR imports instead, available in projects running
Deno v1.42 and higher.

Before:

import { generateAuthenticationOptions } from 'https://deno.land/x/simplewebauthn/deno/server.ts';

After:

import { generateAuthenticationOptions } from 'jsr:@​simplewebauthn/server';

Alternatively, use deno add to install these packages from
JSR:

---

Configuration

📅 Schedule: Branch creation - "before 5am on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.