A new version of warden-webauthn is out (the foundation for devise-passkeys)
This one ensures that the underlying credentials must be discoverable by default; but provides hooks to override in edge cases where you need to allow non-discoverable credentials. Check out the Github issue for more info!
Check it out! And, as always, we need maintainers!