Update NEWS with BouncyCastle made optional

emlun · emlun · commit a08b0dce3d23 · 2021-03-10T18:05:10.000+01:00
diff --git a/NEWS b/NEWS
@@ -1,3 +1,15 @@
+== Version 1.8.0 (unreleased) ==
+
+Changes:
+
+* BouncyCastle dependency is now optional.
+
+  In order to opt out, depend on `webauthn-server-core-minimal` instead of `webauthn-server-core`.
+  This is not recommended unless you know your JVM includes JCA providers for all signature algorithms.
+
+  Note that `webauthn-server-attestation` still depends on BouncyCastle.
+
+
 == Version 1.7.0 ==
 
 webauthn-server-attestation:
