Update python-u2flib-server requirement from ==4.* to >=4,<6 in /src

[dependabot]

Updates the requirements on python-u2flib-server to permit the latest version.

Changelog

Sourced from python-u2flib-server's changelog.

• Version 5.0.1 (released 2020-11-03) ** Support hex encoded metadata values.

• Version 5.0.0 (released 2017-03-30) ** Major release: This release is NOT backwards compatible. ** Object model has been updated to reflect the 1.1 FIDO JavaScript API. ** Full Python 2.7 and 3.3+ support. ** Lots of things have been rewritten.

• Version 4.0.1 (released 2016-04-05) ** Bugfix: Certificates sometimes failed to parse on Python 3. ** Bugfix: Example server wasn't properly updated for cryptography.

• Version 4.0.0 (released 2016-03-01) ** Major release: Changed backend from M2Crypto to cryptography ** Added support for Python 3.3+ and PyPy 2.6+ ** Added support for reading transport information from attestation certificates, as well as metadata statements. ** Added dependency on cryptography 1.2 or higher ** Added dependency on enum34 on python versions < 3.4 ** Removed dependency on M2Crypto, pyasn1, and pyasn1-modules ** utils.rand_bytes() now sources bytes from os.urandom() ** utils.websafe_encode(), u2f_v2.RawRegistrationResponse.serialize(), and u2f_v2.RawAuthenticationResponse.serialize() now all return text strings (unicode() on Python 2.x, str() on Python 3.x)

• Version 3.2.0 (released 2015-06-16) ** License change release: Changed license to BSD 2-clause.

• Version 3.1.2 (released 2015-06-02) ** Bugfix release: Attestation data reading was still broken in 3.1.1.

• Version 3.1.1 (released 2015-06-02) ** Fix reading attestation data from directories.

• Version 3.1.0 (released 2015-02-02) ** Added U2F high-level API. ** Added attestation and device metadata support.

• Version 3.0.1 (released 2015-01-14) ** Fix JSONDict not pickling. ** Set 0 unused bits in attestation certificate signatures with known unused bits.

• Version 3.0.0 (released 2014-10-09) ** Complete API rewrite to simplify library significantly.

• Version 2.0.0 (released 2014-09-26) ** Updated to the latest U2F_V2 standard. ** Expose more low level U2F primitives.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)