deps: @sigstore/[email protected]

node_modules/.gitignore

@@ -42,7 +42,6 @@
 !/@tufjs/
 /@tufjs/*
 !/@tufjs/canonical-json
-!/@tufjs/models
 !/abbrev
 !/agent-base
 !/aggregate-error
@@ -211,6 +210,11 @@
 !/tiny-relative-date
 !/treeverse
 !/tuf-js
+!/tuf-js/node_modules/
+/tuf-js/node_modules/*
+!/tuf-js/node_modules/@tufjs/
+/tuf-js/node_modules/@tufjs/*
+!/tuf-js/node_modules/@tufjs/models
 !/unique-filename
 !/unique-slug
 !/util-deprecate

node_modules/@sigstore/tuf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/tuf",
-  "version": "2.3.2",
+  "version": "2.3.3",
   "description": "Client for the Sigstore TUF repository",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,12 +28,12 @@
   },
   "devDependencies": {
     "@sigstore/jest": "^0.0.0",
-    "@tufjs/repo-mock": "^2.0.0",
+    "@tufjs/repo-mock": "^2.0.1",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
     "@sigstore/protobuf-specs": "^0.3.0",
-    "tuf-js": "^2.2.0"
+    "tuf-js": "^2.2.1"
   },
   "engines": {
     "node": "^16.14.0 || >=18.0.0"

node_modules/@tufjs/models/package.json → node_modules/tuf-js/node_modules/@tufjs/models/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tufjs/models",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "TUF metadata models",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,7 +29,7 @@
   "homepage": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme",
   "dependencies": {
     "@tufjs/canonical-json": "2.0.0",
-    "minimatch": "^9.0.3"
+    "minimatch": "^9.0.4"
   },
   "engines": {
     "node": "^16.14.0 || >=18.0.0"

node_modules/tuf-js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tuf-js",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "JavaScript implementation of The Update Framework (TUF)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,14 +28,14 @@
   },
   "homepage": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme",
   "devDependencies": {
-    "@tufjs/repo-mock": "2.0.0",
+    "@tufjs/repo-mock": "2.0.1",
     "@types/debug": "^4.1.12",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
-    "@tufjs/models": "2.0.0",
+    "@tufjs/models": "2.0.1",
     "debug": "^4.3.4",
-    "make-fetch-happen": "^13.0.0"
+    "make-fetch-happen": "^13.0.1"
   },
   "engines": {
     "node": "^16.14.0 || >=18.0.0"

package-lock.json

@@ -95,7 +95,7 @@
         "@npmcli/promise-spawn": "^7.0.2",
         "@npmcli/redact": "^2.0.0",
         "@npmcli/run-script": "^8.1.0",
-        "@sigstore/tuf": "^2.3.2",
+        "@sigstore/tuf": "^2.3.3",
         "abbrev": "^2.0.0",
         "archy": "~1.0.0",
         "cacache": "^18.0.3",
@@ -2025,13 +2025,13 @@
       }
     },
     "node_modules/@sigstore/tuf": {
-      "version": "2.3.2",
-      "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.2.tgz",
-      "integrity": "sha512-mwbY1VrEGU4CO55t+Kl6I7WZzIl+ysSzEYdA1Nv/FTrl2bkeaPXo5PnWZAVfcY2zSdhOpsUTJW67/M2zHXGn5w==",
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.3.tgz",
+      "integrity": "sha512-agQhHNkIddXFslkudjV88vTXiAMEyUtso3at6ZHUNJ1agZb7Ze6VW/PddHipdWBu1t+8OWLW5X5yZOPiOnaWJQ==",
       "inBundle": true,
       "dependencies": {
         "@sigstore/protobuf-specs": "^0.3.0",
-        "tuf-js": "^2.2.0"
+        "tuf-js": "^2.2.1"
       },
       "engines": {
         "node": "^16.14.0 || >=18.0.0"
@@ -2064,7 +2064,7 @@
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-2.0.0.tgz",
       "integrity": "sha512-c8nj8BaOExmZKO2DXhDfegyhSGcG9E/mPN3U13L+/PsoWm1uaGiHHjxqSHQiasDBQwDA3aHuw9+9spYAP1qvvg==",
-      "inBundle": true,
+      "dev": true,
       "dependencies": {
         "@tufjs/canonical-json": "2.0.0",
         "minimatch": "^9.0.3"
@@ -13825,14 +13825,27 @@
       }
     },
     "node_modules/tuf-js": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/tuf-js/-/tuf-js-2.2.0.tgz",
-      "integrity": "sha512-ZSDngmP1z6zw+FIkIBjvOp/II/mIub/O7Pp12j1WNsiCpg5R5wAc//i555bBQsE44O94btLt0xM/Zr2LQjwdCg==",
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/tuf-js/-/tuf-js-2.2.1.tgz",
+      "integrity": "sha512-GwIJau9XaA8nLVbUXsN3IlFi7WmQ48gBUrl3FTkkL/XLu/POhBzfmX9hd33FNMX1qAsfl6ozO1iMmW9NC8YniA==",
       "inBundle": true,
       "dependencies": {
-        "@tufjs/models": "2.0.0",
+        "@tufjs/models": "2.0.1",
         "debug": "^4.3.4",
-        "make-fetch-happen": "^13.0.0"
+        "make-fetch-happen": "^13.0.1"
+      },
+      "engines": {
+        "node": "^16.14.0 || >=18.0.0"
+      }
+    },
+    "node_modules/tuf-js/node_modules/@tufjs/models": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-2.0.1.tgz",
+      "integrity": "sha512-92F7/SFyufn4DXsha9+QfKnN03JGqtMFMXgSHbZOo8JG59WkTni7UzAouNQDf7AuP9OAMxVOPQcqG3sB7w+kkg==",
+      "inBundle": true,
+      "dependencies": {
+        "@tufjs/canonical-json": "2.0.0",
+        "minimatch": "^9.0.4"
       },
       "engines": {
         "node": "^16.14.0 || >=18.0.0"

package.json

@@ -60,7 +60,7 @@
     "@npmcli/promise-spawn": "^7.0.2",
     "@npmcli/redact": "^2.0.0",
     "@npmcli/run-script": "^8.1.0",
-    "@sigstore/tuf": "^2.3.2",
+    "@sigstore/tuf": "^2.3.3",
     "abbrev": "^2.0.0",
     "archy": "~1.0.0",
     "cacache": "^18.0.3",