Drop unneeded dependencies

Author: emlun

NEWS

@@ -35,6 +35,7 @@ Fixes:
 * Fixed various typos and mistakes in JavaDocs.
 * Moved version constraints for test dependencies from meta-module
   `webauthn-server-parent` to unpublished test meta-module.
+* `yubico-util` dependency removed from downstream compile scope.
 
 
 `webauthn-server-attestation`:
@@ -50,6 +51,8 @@ Fixes:
 * `FidoMetadataDownloader` now verifies the SHA-256 hash of the cached trust
   root certificate, as promised in the JavaDoc of `useTrustRootCacheFile` and
   `useTrustRootCache`.
+* BouncyCastle dependency dropped.
+* Guava dependency dropped (but still remains in core module).
 
 
 == Version 2.0.0 ==

webauthn-server-attestation/build.gradle.kts

@@ -37,9 +37,7 @@ dependencies {
   api(project(":webauthn-server-core"))
 
   implementation(project(":yubico-util"))
-  implementation("com.google.guava:guava")
   implementation("com.fasterxml.jackson.core:jackson-databind")
-  implementation("org.bouncycastle:bcprov-jdk18on")
   implementation("org.slf4j:slf4j-api")
 
   testImplementation(platform(project(":test-platform")))

webauthn-server-core/build.gradle.kts

@@ -20,8 +20,7 @@ java {
 dependencies {
   api(platform(rootProject))
 
-  api(project(":yubico-util"))
-
+  implementation(project(":yubico-util"))
   implementation("com.augustcellars.cose:cose-java")
   implementation("com.fasterxml.jackson.core:jackson-databind")
   implementation("com.google.guava:guava")