Skip to content

Commit 75de28c

Browse files
dependabot[bot]bdukes
authored andcommitted
Bump sigstore in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [sigstore](https://github.com/sigstore/sigstore-js). Updates `sigstore` from 4.0.0 to 4.1.1 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.0.0...sigstore@4.1.1) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 07950f0 commit 75de28c

1 file changed

Lines changed: 99 additions & 41 deletions

File tree

‎yarn.lock‎

Lines changed: 99 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,11 @@
4848
resolved "https://registry.yarnpkg.com/@floating-ui/utils/-/utils-0.2.11.tgz#a269e055e40e2f45873bae9d1a2fdccbd314ea3f"
4949
integrity sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==
5050

51+
"@gar/promise-retry@^1.0.0", "@gar/promise-retry@^1.0.2":
52+
version "1.0.3"
53+
resolved "https://registry.yarnpkg.com/@gar/promise-retry/-/promise-retry-1.0.3.tgz#65e726428e794bc4453948e0a41e6de4215ce8b0"
54+
integrity sha512-GmzA9ckNokPypTg10pgpeHNQe7ph+iIKKmhKu3Ob9ANkswreCx7R3cKmY781K8QK3AqVL3xVh9A42JvIAbkkSA==
55+
5156
"@gulpjs/messages@^1.1.0":
5257
version "1.1.0"
5358
resolved "https://registry.npmjs.org/@gulpjs/messages/-/messages-1.1.0.tgz"
@@ -446,6 +451,11 @@
446451
resolved "https://registry.yarnpkg.com/@npmcli/redact/-/redact-3.2.2.tgz#4a6745e0ae269120ad223780ce374d6c59ae34cd"
447452
integrity sha512-7VmYAmk4csGv08QzrDKScdzn11jHPFGyqJW39FyPgPuAp3zIaUmuCo1yxw9aGs+NEJuTGQ9Gwqpt93vtJubucg==
448453

454+
"@npmcli/redact@^4.0.0":
455+
version "4.0.0"
456+
resolved "https://registry.yarnpkg.com/@npmcli/redact/-/redact-4.0.0.tgz#c91121e02b7559a997614a2c1057cd7fc67608c4"
457+
integrity sha512-gOBg5YHMfZy+TfHArfVogwgfBeQnKbbGo3pSUyK/gSI0AVu+pEiDVcKlQb0D8Mg1LNRZILZ6XG8I5dJ4KuAd9Q==
458+
449459
"@npmcli/run-script@^10.0.0":
450460
version "10.0.2"
451461
resolved "https://registry.yarnpkg.com/@npmcli/run-script/-/run-script-10.0.2.tgz#aa00b1c002138cb83b0fe034cad58bcfa24070c4"
@@ -496,7 +506,7 @@
496506
dependencies:
497507
"@sigstore/protobuf-specs" "^0.5.0"
498508

499-
"@sigstore/core@^3.0.0":
509+
"@sigstore/core@^3.2.0", "@sigstore/core@^3.2.1":
500510
version "3.2.1"
501511
resolved "https://registry.yarnpkg.com/@sigstore/core/-/core-3.2.1.tgz#4efd4ab0f59e768b6daf65612024ba925787de72"
502512
integrity sha512-qRsxPnCrbC/puegGxKuynfnxgLiHqWStrSjxkoB4YKqq3Z3s4cyZyj42ZdWFAEblNP65C+rBH8EuREHIXoi83g==
@@ -506,33 +516,33 @@
506516
resolved "https://registry.yarnpkg.com/@sigstore/protobuf-specs/-/protobuf-specs-0.5.0.tgz#e5f029edcb3a4329853a09b603011e61043eb005"
507517
integrity sha512-MM8XIwUjN2bwvCg1QvrMtbBmpcSHrkhFSCu1D11NyPvDQ25HEc4oG5/OcQfd/Tlf/OxmKWERDj0zGE23jQaMwA==
508518

509-
"@sigstore/sign@^4.0.0":
510-
version "4.0.1"
511-
resolved "https://registry.yarnpkg.com/@sigstore/sign/-/sign-4.0.1.tgz#36ed397d0528e4da880b9060e26234098de5d35b"
512-
integrity sha512-KFNGy01gx9Y3IBPG/CergxR9RZpN43N+lt3EozEfeoyqm8vEiLxwRl3ZO5sPx3Obv1ix/p7FWOlPc2Jgwfp9PA==
519+
"@sigstore/sign@^4.1.1":
520+
version "4.1.1"
521+
resolved "https://registry.yarnpkg.com/@sigstore/sign/-/sign-4.1.1.tgz#34765fe4a190d693340c0771a3d150a397bcfc55"
522+
integrity sha512-Hf4xglukg0XXQ2RiD5vSoLjdPe8OBUPA8XeVjUObheuDcWdYWrnH/BNmxZCzkAy68MzmNCxXLeurJvs6hcP2OQ==
513523
dependencies:
524+
"@gar/promise-retry" "^1.0.2"
514525
"@sigstore/bundle" "^4.0.0"
515-
"@sigstore/core" "^3.0.0"
526+
"@sigstore/core" "^3.2.0"
516527
"@sigstore/protobuf-specs" "^0.5.0"
517-
make-fetch-happen "^15.0.2"
518-
proc-log "^5.0.0"
519-
promise-retry "^2.0.1"
528+
make-fetch-happen "^15.0.4"
529+
proc-log "^6.1.0"
520530

521-
"@sigstore/tuf@^4.0.0":
522-
version "4.0.0"
523-
resolved "https://registry.yarnpkg.com/@sigstore/tuf/-/tuf-4.0.0.tgz#8b3ae2bd09e401386d5b6842a46839e8ff484e6c"
524-
integrity sha512-0QFuWDHOQmz7t66gfpfNO6aEjoFrdhkJaej/AOqb4kqWZVbPWFZifXZzkxyQBB1OwTbkhdT3LNpMFxwkTvf+2w==
531+
"@sigstore/tuf@^4.0.2":
532+
version "4.0.2"
533+
resolved "https://registry.yarnpkg.com/@sigstore/tuf/-/tuf-4.0.2.tgz#7d2fa2abcd5afa5baf752671d14a1c6ed0ed3196"
534+
integrity sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==
525535
dependencies:
526536
"@sigstore/protobuf-specs" "^0.5.0"
527-
tuf-js "^4.0.0"
537+
tuf-js "^4.1.0"
528538

529-
"@sigstore/verify@^3.0.0":
530-
version "3.0.0"
531-
resolved "https://registry.yarnpkg.com/@sigstore/verify/-/verify-3.0.0.tgz#59a1ffa98246f8b3f91a17459e3532095ee7fbb7"
532-
integrity sha512-moXtHH33AobOhTZF8xcX1MpOFqdvfCk7v6+teJL8zymBiDXwEsQH6XG9HGx2VIxnJZNm4cNSzflTLDnQLmIdmw==
539+
"@sigstore/verify@^3.1.1":
540+
version "3.1.1"
541+
resolved "https://registry.yarnpkg.com/@sigstore/verify/-/verify-3.1.1.tgz#13c1c1cff28fe81f662de29d85ba5ae048fcbd8d"
542+
integrity sha512-qv7+G3J2cc6wwFj3yKvXOamzqhMwSk1ogPGmhpS8iXllcPrJaIIBA+4HbttlHVu1pqWTdmaCH/WE7UOC51kdoA==
533543
dependencies:
534544
"@sigstore/bundle" "^4.0.0"
535-
"@sigstore/core" "^3.0.0"
545+
"@sigstore/core" "^3.2.1"
536546
"@sigstore/protobuf-specs" "^0.5.0"
537547

538548
"@simple-git/args-pathspec@^1.0.3":
@@ -567,13 +577,13 @@
567577
resolved "https://registry.npmjs.org/@tufjs/canonical-json/-/canonical-json-2.0.0.tgz"
568578
integrity sha512-yVtV8zsdo8qFHe+/3kw81dSLyF7D576A5cCFCi4X7B39tWT7SekaEFUnvnWJHz+9qO7qJTah1JbrDjWKqFtdWA==
569579

570-
"@tufjs/models@4.0.0":
571-
version "4.0.0"
572-
resolved "https://registry.yarnpkg.com/@tufjs/models/-/models-4.0.0.tgz#91fa6608413bb2d593c87d8aaf8bfbf7f7a79cb8"
573-
integrity sha512-h5x5ga/hh82COe+GoD4+gKUeV4T3iaYOxqLt41GRKApinPI7DMidhCmNVTjKfhCWFJIGXaFJee07XczdT4jdZQ==
580+
"@tufjs/models@4.1.0":
581+
version "4.1.0"
582+
resolved "https://registry.yarnpkg.com/@tufjs/models/-/models-4.1.0.tgz#494b39cf5e2f6855d80031246dd236d8086069b3"
583+
integrity sha512-Y8cK9aggNRsqJVaKUlEYs4s7CvQ1b1ta2DVPyAimb0I2qhzjNk+A+mxvll/klL0RlfuIUei8BF7YWiua4kQqww==
574584
dependencies:
575585
"@tufjs/canonical-json" "2.0.0"
576-
minimatch "^9.0.5"
586+
minimatch "^10.1.1"
577587

578588
"@types/debug@^4.1.13":
579589
version "4.1.13"
@@ -1549,7 +1559,7 @@ dateformat@^5.0.3:
15491559
resolved "https://registry.npmjs.org/dateformat/-/dateformat-5.0.3.tgz"
15501560
integrity sha512-Kvr6HmPXUMerlLcLF+Pwq3K7apHpYmGDVqrxcDasBg86UcKeTSNWbEzU8bwdXnxnR44FtMhJAxI4Bov6Y/KUfA==
15511561

1552-
debug@4, debug@^4.1.1, debug@^4.3.4, debug@^4.4.0, debug@^4.4.1, debug@^4.4.3:
1562+
debug@4, debug@^4.1.1, debug@^4.3.4, debug@^4.4.0, debug@^4.4.3:
15531563
version "4.4.3"
15541564
resolved "https://registry.yarnpkg.com/debug/-/debug-4.4.3.tgz#c6ae432d9bd9662582fce08709b038c58e9e3d6a"
15551565
integrity sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==
@@ -3462,7 +3472,7 @@ make-fetch-happen@^14.0.3:
34623472
promise-retry "^2.0.1"
34633473
ssri "^12.0.0"
34643474

3465-
make-fetch-happen@^15.0.0, make-fetch-happen@^15.0.2:
3475+
make-fetch-happen@^15.0.0:
34663476
version "15.0.2"
34673477
resolved "https://registry.yarnpkg.com/make-fetch-happen/-/make-fetch-happen-15.0.2.tgz#4fd4e6263e0f26852cd73cae04ff2b2e433caa76"
34683478
integrity sha512-sI1NY4lWlXBAfjmCtVWIIpBypbBdhHtcjnwnv+gtCnsaOffyFil3aidszGC8hgzJe+fT1qix05sWxmD/Bmf/oQ==
@@ -3479,6 +3489,24 @@ make-fetch-happen@^15.0.0, make-fetch-happen@^15.0.2:
34793489
promise-retry "^2.0.1"
34803490
ssri "^12.0.0"
34813491

3492+
make-fetch-happen@^15.0.1, make-fetch-happen@^15.0.4:
3493+
version "15.0.6"
3494+
resolved "https://registry.yarnpkg.com/make-fetch-happen/-/make-fetch-happen-15.0.6.tgz#079dee708c88a04a1f79735bb02789a63597840e"
3495+
integrity sha512-Je0fLJ0F5atA7F+eIlLzk+Wkcl57JDf4kf+EW8xiP5E31xOQxkIxTbgf1Oi1Lw9tRI9UEMRdI5Vz2xTzoNU1Jw==
3496+
dependencies:
3497+
"@gar/promise-retry" "^1.0.0"
3498+
"@npmcli/agent" "^4.0.0"
3499+
"@npmcli/redact" "^4.0.0"
3500+
cacache "^20.0.1"
3501+
http-cache-semantics "^4.1.1"
3502+
minipass "^7.0.2"
3503+
minipass-fetch "^5.0.0"
3504+
minipass-flush "^1.0.5"
3505+
minipass-pipeline "^1.2.4"
3506+
negotiator "^1.0.0"
3507+
proc-log "^6.0.0"
3508+
ssri "^13.0.0"
3509+
34823510
map-age-cleaner@^0.1.3:
34833511
version "0.1.3"
34843512
resolved "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz"
@@ -3632,7 +3660,7 @@ minimatch@^5.0.1:
36323660
dependencies:
36333661
brace-expansion "^2.0.1"
36343662

3635-
minimatch@^9.0.0, minimatch@^9.0.4, minimatch@^9.0.5:
3663+
minimatch@^9.0.0, minimatch@^9.0.4:
36363664
version "9.0.5"
36373665
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.5.tgz#d74f9dd6b57d83d8e98cfb82133b03978bc929e5"
36383666
integrity sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==
@@ -3662,6 +3690,17 @@ minipass-fetch@^4.0.0:
36623690
optionalDependencies:
36633691
encoding "^0.1.13"
36643692

3693+
minipass-fetch@^5.0.0:
3694+
version "5.0.2"
3695+
resolved "https://registry.yarnpkg.com/minipass-fetch/-/minipass-fetch-5.0.2.tgz#3973a605ddfd8abb865e50d6fc634853c8239729"
3696+
integrity sha512-2d0q2a8eCi2IRg/IGubCNRJoYbA1+YPXAzQVRFmB45gdGZafyivnZ5YSEfo3JikbjGxOdntGFvBQGqaSMXlAFQ==
3697+
dependencies:
3698+
minipass "^7.0.3"
3699+
minipass-sized "^2.0.0"
3700+
minizlib "^3.0.1"
3701+
optionalDependencies:
3702+
iconv-lite "^0.7.2"
3703+
36653704
minipass-flush@^1.0.5:
36663705
version "1.0.5"
36673706
resolved "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.5.tgz"
@@ -3683,6 +3722,13 @@ minipass-sized@^1.0.3:
36833722
dependencies:
36843723
minipass "^3.0.0"
36853724

3725+
minipass-sized@^2.0.0:
3726+
version "2.0.0"
3727+
resolved "https://registry.yarnpkg.com/minipass-sized/-/minipass-sized-2.0.0.tgz#2228ee97e3f74f6b22ba6d1319addb7621534306"
3728+
integrity sha512-zSsHhto5BcUVM2m1LurnXY6M//cGhVaegT71OfOXoprxT6o780GZd792ea6FfrQkuU4usHZIUczAQMRUE2plzA==
3729+
dependencies:
3730+
minipass "^7.1.2"
3731+
36863732
minipass@^3.0.0:
36873733
version "3.3.6"
36883734
resolved "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz"
@@ -4399,6 +4445,11 @@ proc-log@^6.0.0:
43994445
resolved "https://registry.yarnpkg.com/proc-log/-/proc-log-6.0.0.tgz#a75b516bc4437b1e07df6771450588f57a0a6548"
44004446
integrity sha512-KG/XsTDN901PNfPfAMmj6N/Ywg9tM+bHK8pAz+27fS4N4Pcr+4zoYBOcGSBu6ceXYNPxkLpa4ohtfxV1XcLAfA==
44014447

4448+
proc-log@^6.1.0:
4449+
version "6.1.0"
4450+
resolved "https://registry.yarnpkg.com/proc-log/-/proc-log-6.1.0.tgz#18519482a37d5198e231133a70144a50f21f0215"
4451+
integrity sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==
4452+
44024453
process-nextick-args@~2.0.0:
44034454
version "2.0.1"
44044455
resolved "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
@@ -4829,16 +4880,16 @@ signal-exit@^4.0.1, signal-exit@^4.1.0:
48294880
integrity sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==
48304881

48314882
sigstore@^4.0.0:
4832-
version "4.0.0"
4833-
resolved "https://registry.yarnpkg.com/sigstore/-/sigstore-4.0.0.tgz#cc260814a95a6027c5da24b819d5c11334af60f9"
4834-
integrity sha512-Gw/FgHtrLM9WP8P5lLcSGh9OQcrTruWCELAiS48ik1QbL0cH+dfjomiRTUE9zzz+D1N6rOLkwXUvVmXZAsNE0Q==
4883+
version "4.1.1"
4884+
resolved "https://registry.yarnpkg.com/sigstore/-/sigstore-4.1.1.tgz#2959993dbf978c759a5d23d854cbd3729b6dcd97"
4885+
integrity sha512-endqECJkfhozrXMK5ngu/UAA0xVcVEFdnHJCElGaExypjW+HK5i6zu3NteLoaX/iFbRUbC3+DjttQs0GARr+5w==
48354886
dependencies:
48364887
"@sigstore/bundle" "^4.0.0"
4837-
"@sigstore/core" "^3.0.0"
4888+
"@sigstore/core" "^3.2.1"
48384889
"@sigstore/protobuf-specs" "^0.5.0"
4839-
"@sigstore/sign" "^4.0.0"
4840-
"@sigstore/tuf" "^4.0.0"
4841-
"@sigstore/verify" "^3.0.0"
4890+
"@sigstore/sign" "^4.1.1"
4891+
"@sigstore/tuf" "^4.0.2"
4892+
"@sigstore/verify" "^3.1.1"
48424893

48434894
simple-git@^3.36.0:
48444895
version "3.36.0"
@@ -4959,6 +5010,13 @@ ssri@^12.0.0:
49595010
dependencies:
49605011
minipass "^7.0.3"
49615012

5013+
ssri@^13.0.0:
5014+
version "13.0.1"
5015+
resolved "https://registry.yarnpkg.com/ssri/-/ssri-13.0.1.tgz#2d8946614d33f4d0c84946bb370dce7a9379fd18"
5016+
integrity sha512-QUiRf1+u9wPTL/76GTYlKttDEBWV1ga9ZXW8BG6kfdeyyM8LGPix9gROyg9V2+P0xNyF3X2Go526xKFdMZrHSQ==
5017+
dependencies:
5018+
minipass "^7.0.3"
5019+
49625020
stdin-discarder@^0.3.1:
49635021
version "0.3.1"
49645022
resolved "https://registry.yarnpkg.com/stdin-discarder/-/stdin-discarder-0.3.1.tgz#92a1e741e709248865d0562bb7babe84d350ae6a"
@@ -5334,14 +5392,14 @@ tslib@^2.1.0:
53345392
resolved "https://registry.npmjs.org/tslib/-/tslib-2.4.1.tgz"
53355393
integrity sha512-tGyy4dAjRIEwI7BzsB0lynWgOpfqjUdq91XXAlIWD2OwKBH7oCl/GZG/HT4BOHrTlPMOASlMQ7veyTqpmRcrNA==
53365394

5337-
tuf-js@^4.0.0:
5338-
version "4.0.0"
5339-
resolved "https://registry.yarnpkg.com/tuf-js/-/tuf-js-4.0.0.tgz#dbfc7df8b4e04fd6a0c598678a8c789a3e5f9c27"
5340-
integrity sha512-Lq7ieeGvXDXwpoSmOSgLWVdsGGV9J4a77oDTAPe/Ltrqnnm/ETaRlBAQTH5JatEh8KXuE6sddf9qAv1Q2282Hg==
5395+
tuf-js@^4.1.0:
5396+
version "4.1.0"
5397+
resolved "https://registry.yarnpkg.com/tuf-js/-/tuf-js-4.1.0.tgz#ae4ef9afa456fcb4af103dc50a43bc031f066603"
5398+
integrity sha512-50QV99kCKH5P/Vs4E2Gzp7BopNV+KzTXqWeaxrfu5IQJBOULRsTIS9seSsOVT8ZnGXzCyx55nYWAi4qJzpZKEQ==
53415399
dependencies:
5342-
"@tufjs/models" "4.0.0"
5343-
debug "^4.4.1"
5344-
make-fetch-happen "^15.0.0"
5400+
"@tufjs/models" "4.1.0"
5401+
debug "^4.4.3"
5402+
make-fetch-happen "^15.0.1"
53455403

53465404
twig@^1.17.1:
53475405
version "1.17.1"

0 commit comments

Comments
 (0)