build(deps): Update Rust crate soft-fido2-ctap to 0.11.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
soft-fido2-ctap	workspace.dependencies	minor	0.10.1 → 0.11.0

---

Release Notes

pando85/soft-fido2 (soft-fido2-ctap)

v0.11.0

Compare Source

Added

• Add #[non_exhaustive] to public enums (2c25131)
• Add Hash and FromStr traits to StatusCode (8c01e8e)
• Add eddsa (ed25519) support and fix built-in uv flow (0335b68)
• Add support for ed25519 algorithm identifier (-19) (83d6f7d)

Fixed

• hmac-secret: Use stored PIN protocol keypair for shared secret (9b93ad2)
• Security audit findings and hardening (Issue #​67) (223c17b)
• Collapse nested if statements for clippy (9a5ae31)
• Apply rustfmt formatting to fix CI (218d187)

Documentation

• Add SAFETY comments to ecdh.rs expect() calls (bdf8487)

Build

• ci: Automerge patch and minor requests (cb9f30b)
• deps: Update Rust crate nix to 0.31 (0a610c8)

Fix

• Cargo fmt and clippy warnings (48bac4c)

Refactor

• Consolidate MockCallbacks into shared test utility module (6f4c7f7)
• Remove duplicate MAX_PIN_RETRIES constant (5b4db97)
• Add constants for authenticator data flags (f1b0fb4)
• Add #[non_exhaustive] to public enums (6b2b9e1)
• Add SAFETY comments to expect() calls in production code (fa68320)
• Replace magic timeout values with DEFAULT_TIMEOUT_MS constant (981dd11)

Testing

• Add integration tests for eddsa and built-in uv flow (911a7b0)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package soft-fido2-ctap@0.10.1 --precise 0.11.0
    Updating crates.io index
error: failed to select a version for the requirement `soft-fido2-ctap = "^0.10.1"`
candidate versions found which didn't match: 0.11.0
location searched: crates.io index
required by package `soft-fido2 v0.10.1`
    ... which satisfies dependency `soft-fido2 = "^0.10.1"` of package `passless-rs v0.8.0 (/tmp/renovate/repos/github/pando85/passless/cmd/passless)`

[forkline-bot]

❌ CI Fix Failed

I was unable to automatically fix the CI failure:

Task failed after maximum retry attempts. Please try again or contact support.

Please review the CI logs and fix the issue manually.

---

Task ID: c176b596-18cc-4fc1-97fc-406fda450011

[forkline-bot]

✅ CI Fix Applied

I've pushed a fix for the CI failure. The changes should trigger a new CI run.

Commit:

Waiting for CI to re-run...

[forkline-bot]

❌ CI Fix Failed

I was unable to automatically fix the CI failure:

Task failed after maximum retry attempts. Please try again or contact support.

Please review the CI logs and fix the issue manually.

---

Task ID: 95b7d0d5-27d7-471a-9d88-c4e3114d0170

[forkline-bot]

❌ CI Fix Failed

I was unable to automatically fix the CI failure:

model inactivity timeout: no output for 300 seconds

Please review the CI logs and fix the issue manually.

---

Task ID: 2bc0c70b-97e5-449f-a857-5a4d284a4a05

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.11.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.