Skip to content

build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 #1160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
+33 −43
Open

build(deps): bump @sigstore/tuf from 4.0.2 to 5.0.0 #1160

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@
"@actions/tool-cache": "^4.0.0",
"@sigstore/bundle": "^4.0.0",
"@sigstore/sign": "^4.1.1",
"@sigstore/tuf": "^4.0.2",
"@sigstore/tuf": "^5.0.0",
"@sigstore/verify": "^3.1.1",
"async-retry": "^1.3.3",
"csv-parse": "^6.2.1",
Expand Down
74 changes: 32 additions & 42 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -470,7 +470,7 @@ __metadata:
"@eslint/js": "npm:^9.39.3"
"@sigstore/bundle": "npm:^4.0.0"
"@sigstore/sign": "npm:^4.1.1"
"@sigstore/tuf": "npm:^4.0.2"
"@sigstore/tuf": "npm:^5.0.0"
"@sigstore/verify": "npm:^3.1.1"
"@types/gunzip-maybe": "npm:^1.4.3"
"@types/he": "npm:^1.2.3"
Expand Down Expand Up @@ -785,7 +785,7 @@ __metadata:
languageName: node
linkType: hard

"@gar/promise-retry@npm:^1.0.0, @gar/promise-retry@npm:^1.0.2":
"@gar/promise-retry@npm:^1.0.0, @gar/promise-retry@npm:^1.0.2, @gar/promise-retry@npm:^1.0.3":
version: 1.0.3
resolution: "@gar/promise-retry@npm:1.0.3"
checksum: 10/0d13ea3bb1025755e055648f6e290d2a7e0c87affaf552218f09f66b3fcd9ea9d5c9cc5fe2aa6e285e1530437768e40f9448fe9a86f4f3417b216dcf488d3d1a
Expand Down Expand Up @@ -1372,13 +1372,13 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/tuf@npm:^4.0.2":
version: 4.0.2
resolution: "@sigstore/tuf@npm:4.0.2"
"@sigstore/tuf@npm:^5.0.0":
version: 5.0.0
resolution: "@sigstore/tuf@npm:5.0.0"
dependencies:
"@sigstore/protobuf-specs": "npm:^0.5.0"
tuf-js: "npm:^4.1.0"
checksum: 10/14882b8e71be4185ec417744b97a47392a50da00aafd4207a46bb74b40aa019ebf22d928052fd2d31a8da0da1efe7ebebac5a70898b31a74239a1ada997be754
tuf-js: "npm:^6.0.0"
checksum: 10/74723623c8383a22f755a1eca03d1c0f481d2624e8c5607422af8fe1d2847b2f478513c471693fdd37b24a7c2a17782cabef592a76431b3a54ab328716510303
languageName: node
linkType: hard

Expand Down Expand Up @@ -1414,13 +1414,13 @@ __metadata:
languageName: node
linkType: hard

"@tufjs/models@npm:4.1.0":
version: 4.1.0
resolution: "@tufjs/models@npm:4.1.0"
"@tufjs/models@npm:5.0.0":
version: 5.0.0
resolution: "@tufjs/models@npm:5.0.0"
dependencies:
"@tufjs/canonical-json": "npm:2.0.0"
minimatch: "npm:^10.1.1"
checksum: 10/144d58b634ff96bba8f3cc2577868a0c5dd5bb4515c191edc2a9971245fe3694603b56f0515fd4f7b2f1fb73642d4a36b59b0094ba773fe1c14550915bc9af43
minimatch: "npm:^10.2.1"
checksum: 10/94946c22b44d1f4c5d493270640af9fc7ad9868ec1450403d68829f9eee7da0626f307b6782e6688f35a8e28845f52f4c0941bb16e77712c353fb35952cfac27
languageName: node
linkType: hard

Expand Down Expand Up @@ -2161,6 +2161,15 @@ __metadata:
languageName: node
linkType: hard

"brace-expansion@npm:^5.0.5":
version: 5.0.6
resolution: "brace-expansion@npm:5.0.6"
dependencies:
balanced-match: "npm:^4.0.2"
checksum: 10/a7acf120fefa79e9d7c9c92898114f57c07596a3920197f3c5917e6a628b04220a5f7f9618c30bdd973a6576a32113b99f9c3f1c8245ccc399dd2a9a718d81d8
languageName: node
linkType: hard

"browserify-zlib@npm:^0.1.4":
version: 0.1.4
resolution: "browserify-zlib@npm:0.1.4"
Expand Down Expand Up @@ -3675,25 +3684,6 @@ __metadata:
languageName: node
linkType: hard

"make-fetch-happen@npm:^15.0.1":
version: 15.0.3
resolution: "make-fetch-happen@npm:15.0.3"
dependencies:
"@npmcli/agent": "npm:^4.0.0"
cacache: "npm:^20.0.1"
http-cache-semantics: "npm:^4.1.1"
minipass: "npm:^7.0.2"
minipass-fetch: "npm:^5.0.0"
minipass-flush: "npm:^1.0.5"
minipass-pipeline: "npm:^1.2.4"
negotiator: "npm:^1.0.0"
proc-log: "npm:^6.0.0"
promise-retry: "npm:^2.0.1"
ssri: "npm:^13.0.0"
checksum: 10/78da4fc1df83cb596e2bae25aa0653b8a9c6cbdd6674a104894e03be3acfcd08c70b78f06ef6407fbd6b173f6a60672480d78641e693d05eb71c09c13ee35278
languageName: node
linkType: hard

"make-fetch-happen@npm:^15.0.4":
version: 15.0.5
resolution: "make-fetch-happen@npm:15.0.5"
Expand Down Expand Up @@ -3723,12 +3713,12 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^10.1.1":
version: 10.1.1
resolution: "minimatch@npm:10.1.1"
"minimatch@npm:^10.2.1":
version: 10.2.5
resolution: "minimatch@npm:10.2.5"
dependencies:
"@isaacs/brace-expansion": "npm:^5.0.0"
checksum: 10/110f38921ea527022e90f7a5f43721838ac740d0a0c26881c03b57c261354fb9a0430e40b2c56dfcea2ef3c773768f27210d1106f1f2be19cde3eea93f26f45e
brace-expansion: "npm:^5.0.5"
checksum: 10/19e87a931aff60ee7b9d80f39f817b8bfc54f61f8356ee3549fbf636dbccacacfec8d803eac73293955c4527cd085247dfc064bce4a5e349f8f3b85e2bf5da0f
languageName: node
linkType: hard

Expand Down Expand Up @@ -5000,14 +4990,14 @@ __metadata:
languageName: node
linkType: hard

"tuf-js@npm:^4.1.0":
version: 4.1.0
resolution: "tuf-js@npm:4.1.0"
"tuf-js@npm:^6.0.0":
version: 6.0.0
resolution: "tuf-js@npm:6.0.0"
dependencies:
"@tufjs/models": "npm:4.1.0"
"@gar/promise-retry": "npm:^1.0.3"
"@tufjs/models": "npm:5.0.0"
debug: "npm:^4.4.3"
make-fetch-happen: "npm:^15.0.1"
checksum: 10/ae6d3f3e5de940fd6b9faeab3964f9cbddd8885e6dc01d3db7bacdb009abf31a3fab2e10162fc527781a67b04fb957cda2b6aa0017ce49b695fd3c24167aed97
checksum: 10/e18e528bb5b848c80ad15b5eb23cf5ff5de65867a8ebe5a97ecb71b4d8c0568251d6f14db05f54b8bf3955d6febf3d3846a4d094953aa59eb4dae9a21905d904
languageName: node
linkType: hard

Expand Down
Loading