chore(deps): bump github.com/go-webauthn/webauthn from 0.10.2 to 0.16.1 in /backend

[dependabot]

Bumps github.com/go-webauthn/webauthn from 0.10.2 to 0.16.1.

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.16.1

v0.16.1 (2026-03-12)

Bug Fixes

• webauthncose: validate keys earlier (#615) (18ca901)

v0.16.0

0.16.0 (2026-03-01)

Bug Fixes

• webauthn: empty top origins not allowed (#562) (fe3b74c), closes #537
• webauthn: session expiration not enforced (#561) (f5adbbf), closes #552

Features

• protocol: compound attestation statements (#571) (cc4e649)
• protocol: enhance rpid validation (#564) (7610304), closes #553
• protocol: signals structs (#574) (f75a34a)
• webauthncose: allow ber integers in ecdsa sigs (#593) (68db4d4), closes #408
• webauthn: return explicit error on unknown credential (#560) (1defb4a), closes #550

v0.15.0

v0.15.0 (2025-11-09)

BREAKING CHANGES

This release has a very small chance to have a breaking change that was not detected in the automatic or manual tests due to the module replacement of github.com/mitchellh/mapstructure with github.com/go-viper/mapstructure/v2. This is exclusively used by the metadata implementation and the Android SafetyNet Attestation implementation.

It's unlikely anyone will encounter any issues but if they do please report them via normal means and the issue can either be fixed or an addendum to the release notes can be made; whichever is most appropriate.

v0.14.0

0.14.0 (2025-09-14)

Bug Fixes

• webauthn: edge case in owned credentials validation (#487) (9410f91)
• webauthn: skip mds validation for none format (#497) (a1b2775), closes #387

Features

• metadata: update schema to 3.1 (#454) (3c6b5a1)
• protocol: att format updates (#485) (c079c8b)
• protocol: update tpm manufacturers (#496) (46046ca)

... (truncated)

Commits

• dbe10a2 build(deps): update module github.com/go-webauthn/x to v0.2.2 (#618)
• 18ca901 fix(webauthncose): validate keys earlier (#615)
• d45f1bb build(deps): update step-security/harden-runner action to v2.15.1 (#616)
• 70195d2 build(deps): update actions/dependency-review-action action to v4.9.0 (#614)
• 79cb507 build(deps): update github/codeql-action action to v4.32.6 (#613)
• bfefda6 build(deps): update dependency go to v1.26.1 (#617)
• 68db4d4 feat(webauthncose): allow ber integers in ecdsa sigs (#593)
• 16f192f build(deps): update actions/upload-artifact action to v7 (#612)
• 24f2869 build(deps): update actions/setup-go action to v6.3.0 (#611)
• 76502c0 build(deps): update step-security/harden-runner action to v2.15.0 (#610)
• Additional commits viewable in compare view

[dependabot]

Superseded by #2579.