Merge pull request #479 from cedarcode/temciuc--prepare-for-release-3.4.2

Update `safety_net_attestation` constraint from `~> 0.4.0` to `~> 0.5.0`

Author: nicolastemciuc

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [v3.4.2] - 2025-09-22
+
+### Added
+
+- Updated `safety_net_attestation` dependency from `~> 0.4.0` to `~> 0.5.0`.
+
 ## [v3.4.1] - 2025-06-06
 
 - Avoid requiring `base64` as it's not a direct dependency. [#459](https://github.com/cedarcode/webauthn-ruby/pull/459)[@santiagorodriguez96]
@@ -421,6 +427,7 @@ Note: Both additions should help making it compatible with Chrome for Android 70
   - `WebAuthn::AuthenticatorAttestationResponse.valid?` can be used to validate fido-u2f attestations returned by the browser
 - Works with ruby 2.5
 
+[v3.4.2]: https://github.com/cedarcode/webauthn-ruby/compare/v3.4.1...v3.4.2/
 [v3.4.1]: https://github.com/cedarcode/webauthn-ruby/compare/v3.4.0...v3.4.1/
 [v3.4.0]: https://github.com/cedarcode/webauthn-ruby/compare/v3.3.0...v3.4.0/
 [v3.3.0]: https://github.com/cedarcode/webauthn-ruby/compare/v3.2.2...v3.3.0/

lib/webauthn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module WebAuthn
-  VERSION = "3.4.1"
+  VERSION = "3.4.2"
 end

spec/spec_helper.rb

@@ -114,9 +114,8 @@ def finder_for(certificate_file, return_empty: false)
   RootCertificateFinder.new(certificate_file, return_empty)
 end
 
-def create_rsa_key
-  key_bits = 1024 # NOTE: Use 2048 or more in real life! We use 1024 here just for making the test fast.
-
+# NOTE: Use 2048 or more in real life! We use 1024 here just for making the test fast.
+def create_rsa_key(key_bits = 1024)
   OpenSSL::PKey::RSA.new(key_bits)
 end
 

spec/webauthn/attestation_statement/android_safetynet_spec.rb

@@ -30,7 +30,7 @@
         OpenSSL::Digest::SHA256.digest(authenticator_data_bytes + client_data_hash)
       )
     end
-    let(:attestation_key) { create_rsa_key }
+    let(:attestation_key) { create_rsa_key(2048) }
 
     let(:leaf_certificate) do
       issue_certificate(root_certificate, root_key, attestation_key, name: "CN=attest.android.com")

webauthn.gemspec

@@ -38,7 +38,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "cbor", "~> 0.5.9"
   spec.add_dependency "cose", "~> 1.1"
   spec.add_dependency "openssl", ">= 2.2"
-  spec.add_dependency "safety_net_attestation", "~> 0.4.0"
+  spec.add_dependency "safety_net_attestation", "~> 0.5.0"
   spec.add_dependency "tpm-key_attestation", "~> 0.14.0"
 
   spec.add_development_dependency "bundler", ">= 1.17", "< 3.0"