Skip to content

build(deps): bump sigstore from 4.0.0 to 4.1.1 #1419

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joshuaslate merged 1 commit into from
Jul 2, 2026
Merged

build(deps): bump sigstore from 4.0.0 to 4.1.1 #1419

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added .yarn/cache/@gar-promise-retry-npm-1.0.3-f96d9024c8-0d13ea3bb1.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/@npmcli-redact-npm-4.0.0-b3e2eeb8d8-4e029c44a8.zip
View file
Open in desktop
Binary file not shown.
Binary file removed .yarn/cache/@sigstore-sign-npm-4.0.0-8fb767fd1a-d72b4529f2.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/@sigstore-sign-npm-4.1.1-ff369a9b0e-886d7237ab.zip
View file
Open in desktop
Binary file not shown.
Binary file removed .yarn/cache/@sigstore-tuf-npm-4.0.0-d5f0e6e9b4-e576623912.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/@sigstore-tuf-npm-4.0.2-0a8cbe0611-d29383dc32.zip
View file
Open in desktop
Binary file not shown.
Binary file removed .yarn/cache/@sigstore-verify-npm-3.0.0-e65c1b8775-336d8af044.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/@sigstore-verify-npm-3.1.1-fea273058f-0e94527b3f.zip
View file
Open in desktop
Binary file not shown.
Binary file renamed ...odels-npm-4.0.0-09fe5928ae-46327be152.zip → ...odels-npm-4.1.0-771963a1bc-7707ffd1a5.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/balanced-match-npm-4.0.4-fd666b3c7f-fb07bb66a0.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/brace-expansion-npm-5.0.7-48dc108338-5739c92d98.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/iconv-lite-npm-0.7.2-716fc012a0-faf884c1f6.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/make-fetch-happen-npm-15.0.6-a629c70972-40fa97a045.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/minimatch-npm-10.2.5-f1c8297822-000423875f.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/minipass-fetch-npm-5.0.2-cd03eefed8-d4dfdd9700.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/minipass-sized-npm-2.0.0-a911fc7d3f-1a1fd251ae.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/proc-log-npm-6.1.0-84e609b3f4-ac450ff824.zip
View file
Open in desktop
Binary file not shown.
Binary file removed .yarn/cache/sigstore-npm-4.0.0-53b73532ef-a8179dade1.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/sigstore-npm-4.1.1-9ab7be1c91-4ec76cf1ba.zip
View file
Open in desktop
Binary file not shown.
Binary file removed .yarn/cache/tuf-js-npm-4.0.0-77755680f6-c4a92ec90f.zip
View file
Open in desktop
Binary file not shown.
Binary file added .yarn/cache/tuf-js-npm-4.1.0-e5a68e66e6-51fec075a1.zip
View file
Open in desktop
Binary file not shown.
Binary file modified .yarn/install-state.gz
View file
Open in desktop
Binary file not shown.
195 changes: 147 additions & 48 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -674,6 +674,13 @@ __metadata:
languageName: node
linkType: hard

"@gar/promise-retry@npm:^1.0.0, @gar/promise-retry@npm:^1.0.2":
version: 1.0.3
resolution: "@gar/promise-retry@npm:1.0.3"
checksum: 0d13ea3bb1025755e055648f6e290d2a7e0c87affaf552218f09f66b3fcd9ea9d5c9cc5fe2aa6e285e1530437768e40f9448fe9a86f4f3417b216dcf488d3d1a
languageName: node
linkType: hard

"@hutson/parse-repository-url@npm:^3.0.0":
version: 3.0.2
resolution: "@hutson/parse-repository-url@npm:3.0.2"
Expand Down Expand Up @@ -1677,6 +1684,13 @@ __metadata:
languageName: node
linkType: hard

"@npmcli/redact@npm:^4.0.0":
version: 4.0.0
resolution: "@npmcli/redact@npm:4.0.0"
checksum: 4e029c44a8593304bb1aa5a8f1559cb8f37b4dc3880c589ce546da0b8cfa741d16a054db38ee309e81c2120c148ba33edbb3252f97a78b3234ba9ab3fa3e176c
languageName: node
linkType: hard

"@npmcli/run-script@npm:10.0.3, @npmcli/run-script@npm:^10.0.0":
version: 10.0.3
resolution: "@npmcli/run-script@npm:10.0.3"
Expand Down Expand Up @@ -1989,7 +2003,7 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/core@npm:^3.0.0":
"@sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
version: 3.2.1
resolution: "@sigstore/core@npm:3.2.1"
checksum: 7123bb904b2e79f6521ede79a5f026267fb4c83e15088d02971833fad45bcbc976417ac0d697c0806e2826546a836b36357b17a322cf7ec307ff29fdd8eda326
Expand All @@ -2003,38 +2017,38 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/sign@npm:^4.0.0":
version: 4.0.0
resolution: "@sigstore/sign@npm:4.0.0"
"@sigstore/sign@npm:^4.1.1":
version: 4.1.1
resolution: "@sigstore/sign@npm:4.1.1"
dependencies:
"@sigstore/bundle": "npm:^4.0.0"
"@sigstore/core": "npm:^3.0.0"
"@sigstore/protobuf-specs": "npm:^0.5.0"
make-fetch-happen: "npm:^15.0.0"
proc-log: "npm:^5.0.0"
promise-retry: "npm:^2.0.1"
checksum: d72b4529f25087cb9974391fc6c2db142c8567a35764a92b80d4f1cb307ea79b9aa842609f6cbc666dd04689a86792644368838963c1b507e15a1fad3ae9158e
"@gar/promise-retry": ^1.0.2
"@sigstore/bundle": ^4.0.0
"@sigstore/core": ^3.2.0
"@sigstore/protobuf-specs": ^0.5.0
make-fetch-happen: ^15.0.4
proc-log: ^6.1.0
checksum: 886d7237ab22a2b70cc72f581c90cf61055114b2b46b9b79b3cdb60fedd966bdd2570ac71043348d220a00d36cf382c19678ebe3679348340093e7af500bd20c
languageName: node
linkType: hard

"@sigstore/tuf@npm:^4.0.0":
version: 4.0.0
resolution: "@sigstore/tuf@npm:4.0.0"
"@sigstore/tuf@npm:^4.0.2":
version: 4.0.2
resolution: "@sigstore/tuf@npm:4.0.2"
dependencies:
"@sigstore/protobuf-specs": "npm:^0.5.0"
tuf-js: "npm:^4.0.0"
checksum: e5766239120c16cab983354d147bdea52ee9eefc5f7cddbf9b30bf56fb9f101e20b2c0fd223a1a669f2c1ef51ad8d9bad8c686f7be89abc6cfbdc9d8a11d730a
"@sigstore/protobuf-specs": ^0.5.0
tuf-js: ^4.1.0
checksum: d29383dc32cd1d2683bf7e35eb017f1e94c2e4778fffc305dae0baddfed624062849e5d2a9b9e81a35516dfcd46c24191fa6e245c0b22ccf2d021f01de61bc16
languageName: node
linkType: hard

"@sigstore/verify@npm:^3.0.0":
version: 3.0.0
resolution: "@sigstore/verify@npm:3.0.0"
"@sigstore/verify@npm:^3.1.1":
version: 3.1.1
resolution: "@sigstore/verify@npm:3.1.1"
dependencies:
"@sigstore/bundle": "npm:^4.0.0"
"@sigstore/core": "npm:^3.0.0"
"@sigstore/protobuf-specs": "npm:^0.5.0"
checksum: 336d8af044691e7d342fedfd7748c9815974bfac72924bdc541889d6b5a3e844c568f8c8c7c3e3d0594e7e405610d33a11199d6dbbe9370005bd83f7a0df3500
"@sigstore/bundle": ^4.0.0
"@sigstore/core": ^3.2.1
"@sigstore/protobuf-specs": ^0.5.0
checksum: 0e94527b3f2b8fddbcf0d3476f15cacf4381c36ceb0bcae799af246bf3b8f8c74234291267c6a993c8a377efa1858e7ad6138efb00e920f7db7072b3eea8864c
languageName: node
linkType: hard

Expand Down Expand Up @@ -2070,13 +2084,13 @@ __metadata:
languageName: node
linkType: hard

"@tufjs/models@npm:4.0.0":
version: 4.0.0
resolution: "@tufjs/models@npm:4.0.0"
"@tufjs/models@npm:4.1.0":
version: 4.1.0
resolution: "@tufjs/models@npm:4.1.0"
dependencies:
"@tufjs/canonical-json": "npm:2.0.0"
minimatch: "npm:^9.0.5"
checksum: 46327be1524628b7b6bc2756a8153c04c9de996335d9babf3706a22f743db3584e26887d76a6ccd68d098b5ec79cf2c4a6615deb19318b5cc20f5804aa13afa9
"@tufjs/canonical-json": 2.0.0
minimatch: ^10.1.1
checksum: 7707ffd1a51e0f9c9d67dcda3f74e23bcbe46edcb22a95983f8fccd59385d8115b0c375280521c05dff633a1e9bfac2d425a2a582a5d2c1b0c91f2a03aa7798d
languageName: node
linkType: hard

Expand Down Expand Up @@ -2838,6 +2852,13 @@ __metadata:
languageName: node
linkType: hard

"balanced-match@npm:^4.0.2":
version: 4.0.4
resolution: "balanced-match@npm:4.0.4"
checksum: fb07bb66a0959c2843fc055838047e2a95ccebb837c519614afb067ebfdf2fa967ca8d712c35ced07f2cd26fc6f07964230b094891315ad74f11eba3d53178a0
languageName: node
linkType: hard

"base64-js@npm:^1.3.1":
version: 1.5.1
resolution: "base64-js@npm:1.5.1"
Expand Down Expand Up @@ -2911,6 +2932,15 @@ __metadata:
languageName: node
linkType: hard

"brace-expansion@npm:^5.0.5":
version: 5.0.7
resolution: "brace-expansion@npm:5.0.7"
dependencies:
balanced-match: ^4.0.2
checksum: 5739c92d984dfb4b8460e46e52e2a75baa7364261f700f739e0925e9ce7414776d5eb0b10eb19bb10427c444c4114875e1ff1e829fe6a6c3fc490ca4294eb3a0
languageName: node
linkType: hard

"braces@npm:^3.0.3":
version: 3.0.3
resolution: "braces@npm:3.0.3"
Expand Down Expand Up @@ -3507,7 +3537,7 @@ __metadata:
languageName: node
linkType: hard

"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.4, debug@npm:^4.4.1":
"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.4, debug@npm:^4.4.3":
version: 4.4.3
resolution: "debug@npm:4.4.3"
dependencies:
Expand Down Expand Up @@ -4571,6 +4601,15 @@ __metadata:
languageName: node
linkType: hard

"iconv-lite@npm:^0.7.2":
version: 0.7.2
resolution: "iconv-lite@npm:0.7.2"
dependencies:
safer-buffer: ">= 2.1.2 < 3.0.0"
checksum: faf884c1f631a5d676e3e64054bed891c7c5f616b790082d99ccfbfd017c661a39db8009160268fd65fae57c9154d4d491ebc9c301f3446a078460ef114dc4b8
languageName: node
linkType: hard

"ieee754@npm:^1.1.13":
version: 1.2.1
resolution: "ieee754@npm:1.2.1"
Expand Down Expand Up @@ -5968,6 +6007,26 @@ __metadata:
languageName: node
linkType: hard

"make-fetch-happen@npm:^15.0.1, make-fetch-happen@npm:^15.0.4":
version: 15.0.6
resolution: "make-fetch-happen@npm:15.0.6"
dependencies:
"@gar/promise-retry": ^1.0.0
"@npmcli/agent": ^4.0.0
"@npmcli/redact": ^4.0.0
cacache: ^20.0.1
http-cache-semantics: ^4.1.1
minipass: ^7.0.2
minipass-fetch: ^5.0.0
minipass-flush: ^1.0.5
minipass-pipeline: ^1.2.4
negotiator: ^1.0.0
proc-log: ^6.0.0
ssri: ^13.0.0
checksum: 40fa97a045bd29af0ce665935db5087839eb9086d59235a51c6235bdda9e64bbbae150370ed95f1d2a21af24b7469c14db06c33c36b7eb1c48fb598df4b2c368
languageName: node
linkType: hard

"makeerror@npm:1.0.12":
version: 1.0.12
resolution: "makeerror@npm:1.0.12"
Expand Down Expand Up @@ -6091,6 +6150,15 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^10.1.1":
version: 10.2.5
resolution: "minimatch@npm:10.2.5"
dependencies:
brace-expansion: ^5.0.5
checksum: 000423875fecbc7da1d74bf63c9081363a71291ef2588c376c45647ac004582cb5bc8cc09ef84420b26bfb490f4d0818d328e78569c6228e20d90271283f73ba
languageName: node
linkType: hard

"minimatch@npm:^5.0.1":
version: 5.1.0
resolution: "minimatch@npm:5.1.0"
Expand All @@ -6100,7 +6168,7 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^9.0.4, minimatch@npm:^9.0.5":
"minimatch@npm:^9.0.4":
version: 9.0.9
resolution: "minimatch@npm:9.0.9"
dependencies:
Expand Down Expand Up @@ -6151,6 +6219,21 @@ __metadata:
languageName: node
linkType: hard

"minipass-fetch@npm:^5.0.0":
version: 5.0.2
resolution: "minipass-fetch@npm:5.0.2"
dependencies:
iconv-lite: ^0.7.2
minipass: ^7.0.3
minipass-sized: ^2.0.0
minizlib: ^3.0.1
dependenciesMeta:
iconv-lite:
optional: true
checksum: d4dfdd9700fc8aba445834f75f2abaf9e5d404c10eda06e2db4a8ba89fc66a26956d19703d0edf9be864cb30dec22356d343509ad0a105446516c0ead4330328
languageName: node
linkType: hard

"minipass-flush@npm:^1.0.5":
version: 1.0.5
resolution: "minipass-flush@npm:1.0.5"
Expand Down Expand Up @@ -6178,6 +6261,15 @@ __metadata:
languageName: node
linkType: hard

"minipass-sized@npm:^2.0.0":
version: 2.0.0
resolution: "minipass-sized@npm:2.0.0"
dependencies:
minipass: ^7.1.2
checksum: 1a1fd251aef4e24050a04ea03fdc0514960f7304a374fd01f352bfdb72c0a2c084ad05d63e76011c181cadfb38dbf487f8782e1e778337f6a099ac2da26b6d5d
languageName: node
linkType: hard

"minipass@npm:^3.0.0":
version: 3.1.3
resolution: "minipass@npm:3.1.3"
Expand Down Expand Up @@ -7112,6 +7204,13 @@ __metadata:
languageName: node
linkType: hard

"proc-log@npm:^6.1.0":
version: 6.1.0
resolution: "proc-log@npm:6.1.0"
checksum: ac450ff8244e95b0c9935b52d629fef92ae69b7e39aea19972a8234259614d644402dd62ce9cb094f4a637d8a4514cba90c1456ad785a40ad5b64d502875a817
languageName: node
linkType: hard

"process-nextick-args@npm:~2.0.0":
version: 2.0.1
resolution: "process-nextick-args@npm:2.0.1"
Expand Down Expand Up @@ -7563,16 +7662,16 @@ __metadata:
linkType: hard

"sigstore@npm:^4.0.0":
version: 4.0.0
resolution: "sigstore@npm:4.0.0"
version: 4.1.1
resolution: "sigstore@npm:4.1.1"
dependencies:
"@sigstore/bundle": "npm:^4.0.0"
"@sigstore/core": "npm:^3.0.0"
"@sigstore/protobuf-specs": "npm:^0.5.0"
"@sigstore/sign": "npm:^4.0.0"
"@sigstore/tuf": "npm:^4.0.0"
"@sigstore/verify": "npm:^3.0.0"
checksum: a8179dade1e86aee2a235b47813063c063d5356df8fc95cd3731774a8a3f12e9321c48a1dedd8ff67c0ca6c3db365b5cd1f26607b847a4382c9bffd745230c2b
"@sigstore/bundle": ^4.0.0
"@sigstore/core": ^3.2.1
"@sigstore/protobuf-specs": ^0.5.0
"@sigstore/sign": ^4.1.1
"@sigstore/tuf": ^4.0.2
"@sigstore/verify": ^3.1.1
checksum: 4ec76cf1ba00ba2a06b70d2495cb84996ef307d525d7f18663eac921f12ab898641d5bb98de7fa0c34b2f6dde0327b243f2ee773a859f261ef007aa5cfdd7463
languageName: node
linkType: hard

Expand Down Expand Up @@ -8070,14 +8169,14 @@ __metadata:
languageName: node
linkType: hard

"tuf-js@npm:^4.0.0":
version: 4.0.0
resolution: "tuf-js@npm:4.0.0"
"tuf-js@npm:^4.1.0":
version: 4.1.0
resolution: "tuf-js@npm:4.1.0"
dependencies:
"@tufjs/models": "npm:4.0.0"
debug: "npm:^4.4.1"
make-fetch-happen: "npm:^15.0.0"
checksum: c4a92ec90f5efa74111fef7d6511e5f42c00a1e8b425d7bf4620aa7b318b46d3eabbcc1f73f434d4c5a7e0b021b848595cd0f43f66285d1a3d024fbd10bfcb22
"@tufjs/models": 4.1.0
debug: ^4.4.3
make-fetch-happen: ^15.0.1
checksum: 51fec075a1e3007803010fb01b3fa4057a353af37cbcf8deec947bf289f17b36bcc34c8bd80e478693999a956bf345a60d0675103c83fd54ef69d7ffb1ab1338
languageName: node
linkType: hard

Expand Down
Loading