Weekly github digest (WebAuthn)

Issues
------
* w3c/webauthn (+4/-3/💬34)
  4 issues created:
  - Add onlyCreate to prevent creation of a new key for existing user (by mitar)
    https://github.com/w3c/webauthn/issues/2313 [stat:Discuss] [subtype:FeatureProposal] 
  - Add a note about `appid` extension not compatible with related origin requests (by jaiminbhatt7)
    https://github.com/w3c/webauthn/issues/2312 [type:editorial] 
  - New `userVerification` value with conditional behavior (by mscdex)
    https://github.com/w3c/webauthn/issues/2310 [stat:Discuss] [subtype:FeatureProposal] 
  - Add excludeUsers to prevent creation of new keys for known users (by mitar)
    https://github.com/w3c/webauthn/issues/2309 [stat:Discuss] [subtype:FeatureProposal] 

  11 issues received 34 new comments:
  - #2313 Add onlyCreate to prevent creation of a new key for existing user (3 by emlun, mitar)
    https://github.com/w3c/webauthn/issues/2313 [stat:Discuss] [subtype:FeatureProposal] 
  - #2312 Add a note about `appid` extension not compatible with related origin requests (1 by kzaky)
    https://github.com/w3c/webauthn/issues/2312 [type:editorial] 
  - #2310 New `userVerification` value with conditional behavior (1 by emlun)
    https://github.com/w3c/webauthn/issues/2310 [stat:Discuss] [subtype:FeatureProposal] 
  - #2309 Add excludeUsers to prevent creation of new keys for known users (3 by Firstyear, mitar)
    https://github.com/w3c/webauthn/issues/2309 [stat:Discuss] [subtype:FeatureProposal] 
  - #2303 See you F2F at TPAC 2026 in Kobe? Decide < 2025-06-20 (1 by simoneonofri)
    https://github.com/w3c/webauthn/issues/2303 [type:process] 
  - #2247 [L3 CR] Horizontal Review: TAG Design Reviews (1 by simoneonofri)
    https://github.com/w3c/webauthn/issues/2247 [type:process] 
  - #2244 [L3 CR] Horizontal Review: Security & Privacy (1 by simoneonofri)
    https://github.com/w3c/webauthn/issues/2244 [type:process] 
  - #2157 Add AAGUID to credProps (1 by micolous)
    https://github.com/w3c/webauthn/issues/2157 [stat:Discuss] [type:technical] 
  - #2053 Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints.  (4 by MasterKale, akshayku, emlun)
    https://github.com/w3c/webauthn/issues/2053 [type:technical] [@Risk] 
  - #1749 How to know if a user has already registered a device? (1 by mitar)
    https://github.com/w3c/webauthn/issues/1749 
  - #1568 Support a "create or get [or replace]" credential re-association operation (17 by FlxMgdnz, MasterKale, akshayku, emlun, mitar, ryanhiebert)
    https://github.com/w3c/webauthn/issues/1568 [type:technical] [@Risk] 

  3 issues closed:
  - Add excludeUsers to prevent creation of new keys for known users https://github.com/w3c/webauthn/issues/2309 [stat:Discuss] [subtype:FeatureProposal] 
  - Support a "create or get [or replace]" credential re-association operation https://github.com/w3c/webauthn/issues/1568 [type:technical] [@Risk] 
  - Support a "create or get [or replace]" credential re-association operation https://github.com/w3c/webauthn/issues/1568 [type:technical] [@Risk] 



Pull requests
-------------
* w3c/webauthn (+0/-1/💬1)
  1 pull requests received 1 new comments:
  - #1945 Add importCryptoKey input to PRF extension (1 by cr6750903177Aguinaldok4)
    https://github.com/w3c/webauthn/pull/1945 [type:technical] [subtype:extensions] [@Risk] 

  1 pull requests merged:
  - Fix typo
    https://github.com/w3c/webauthn/pull/2311 [type:editorial] 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webauthn


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config