diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5709ac08f18..101080fa7d9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -503,6 +503,7 @@ overrides: cross-spawn@>=7.0.0 <7.0.5: '>=7.0.5' diff@>=6.0.0 <8.0.3: '>=8.0.3' dompurify: ^3.3.3 + sigstore@<4.1.1: ^4.1.1 yaml@>=2.0.0 <2.8.3: '>=2.8.3' importers: @@ -6948,50 +6949,26 @@ packages: '@shikijs/vscode-textmate@10.0.2': resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==} - '@sigstore/bundle@3.1.0': - resolution: {integrity: sha512-Mm1E3/CmDDCz3nDhFKTuYdB47EdRFRQMOE/EAbiG1MJW77/w1b3P7Qx7JSrVJs8PfwOLOVcKQCHErIwCTyPbag==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/bundle@4.0.0': resolution: {integrity: sha512-NwCl5Y0V6Di0NexvkTqdoVfmjTaQwoLM236r89KEojGmq/jMls8S+zb7yOwAPdXvbwfKDlP+lmXgAL4vKSQT+A==} engines: {node: ^20.17.0 || >=22.9.0} - '@sigstore/core@2.0.0': - resolution: {integrity: sha512-nYxaSb/MtlSI+JWcwTHQxyNmWeWrUXJJ/G4liLrGG7+tS4vAz6LF3xRXqLH6wPIVUoZQel2Fs4ddLx4NCpiIYg==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/core@3.2.1': resolution: {integrity: sha512-qRsxPnCrbC/puegGxKuynfnxgLiHqWStrSjxkoB4YKqq3Z3s4cyZyj42ZdWFAEblNP65C+rBH8EuREHIXoi83g==} engines: {node: ^20.17.0 || >=22.9.0} - '@sigstore/protobuf-specs@0.4.3': - resolution: {integrity: sha512-fk2zjD9117RL9BjqEwF7fwv7Q/P9yGsMV4MUJZ/DocaQJ6+3pKr+syBq1owU5Q5qGw5CUbXzm+4yJ2JVRDQeSA==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/protobuf-specs@0.5.1': resolution: {integrity: sha512-/ScWUhhoFasJsSRGTVBwId1loQjjnjAfE4djL6ZhrXRpNCmPTnUKF5Jokd58ILseOMjzET3UrMOtJPS9sYeI0g==} engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/sign@3.1.0': - resolution: {integrity: sha512-knzjmaOHOov1Ur7N/z4B1oPqZ0QX5geUfhrVaqVlu+hl0EAoL4o+l0MSULINcD5GCWe3Z0+YJO8ues6vFlW0Yw==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/sign@4.1.1': resolution: {integrity: sha512-Hf4xglukg0XXQ2RiD5vSoLjdPe8OBUPA8XeVjUObheuDcWdYWrnH/BNmxZCzkAy68MzmNCxXLeurJvs6hcP2OQ==} engines: {node: ^20.17.0 || >=22.9.0} - '@sigstore/tuf@3.1.1': - resolution: {integrity: sha512-eFFvlcBIoGwVkkwmTi/vEQFSva3xs5Ot3WmBcjgjVdiaoelBLQaQ/ZBfhlG0MnG0cmTYScPpk7eDdGDWUcFUmg==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/tuf@4.0.2': resolution: {integrity: sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==} engines: {node: ^20.17.0 || >=22.9.0} - '@sigstore/verify@2.1.1': - resolution: {integrity: sha512-hVJD77oT67aowHxwT4+M6PGOp+E2LtLdTK3+FC0lBO9T7sYwItDMXZ7Z07IDCvR1M717a4axbIWckrW67KMP/w==} - engines: {node: ^18.17.0 || >=20.5.0} - '@sigstore/verify@3.1.1': resolution: {integrity: sha512-qv7+G3J2cc6wwFj3yKvXOamzqhMwSk1ogPGmhpS8iXllcPrJaIIBA+4HbttlHVu1pqWTdmaCH/WE7UOC51kdoA==} engines: {node: ^20.17.0 || >=22.9.0} @@ -7151,10 +7128,6 @@ packages: resolution: {integrity: sha512-yVtV8zsdo8qFHe+/3kw81dSLyF7D576A5cCFCi4X7B39tWT7SekaEFUnvnWJHz+9qO7qJTah1JbrDjWKqFtdWA==} engines: {node: ^16.14.0 || >=18.0.0} - '@tufjs/models@3.0.1': - resolution: {integrity: sha512-UUYHISyhCU3ZgN8yaear3cGATHb3SMuKHsQ/nVbHXcmnBf+LzQ/cQfhNG+rfaSHgqGKNEm2cOCLVLELStUQ1JA==} - engines: {node: ^18.17.0 || >=20.5.0} - '@tufjs/models@4.1.0': resolution: {integrity: sha512-Y8cK9aggNRsqJVaKUlEYs4s7CvQ1b1ta2DVPyAimb0I2qhzjNk+A+mxvll/klL0RlfuIUei8BF7YWiua4kQqww==} engines: {node: ^20.17.0 || >=22.9.0} @@ -12390,10 +12363,6 @@ packages: resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==} engines: {node: '>=14'} - sigstore@3.1.0: - resolution: {integrity: sha512-ZpzWAFHIFqyFE56dXqgX/DkDRZdz+rRcjoIk/RQU4IX0wiCv1l8S7ZrXDHcCc+uaf+6o7w3h2l3g6GYG5TKN9Q==} - engines: {node: ^18.17.0 || >=20.5.0} - sigstore@4.1.1: resolution: {integrity: sha512-endqECJkfhozrXMK5ngu/UAA0xVcVEFdnHJCElGaExypjW+HK5i6zu3NteLoaX/iFbRUbC3+DjttQs0GARr+5w==} engines: {node: ^20.17.0 || >=22.9.0} @@ -12956,10 +12925,6 @@ packages: engines: {node: '>=18.0.0'} hasBin: true - tuf-js@3.1.0: - resolution: {integrity: sha512-3T3T04WzowbwV2FDiGXBbr81t64g1MUGGJRgT4x5o97N+8ArdhVCAF9IxFrxuSJmM3E5Asn7nKHkao0ibcZXAg==} - engines: {node: ^18.17.0 || >=20.5.0} - tuf-js@4.1.0: resolution: {integrity: sha512-50QV99kCKH5P/Vs4E2Gzp7BopNV+KzTXqWeaxrfu5IQJBOULRsTIS9seSsOVT8ZnGXzCyx55nYWAi4qJzpZKEQ==} engines: {node: ^20.17.0 || >=22.9.0} @@ -19016,33 +18981,14 @@ snapshots: '@shikijs/vscode-textmate@10.0.2': {} - '@sigstore/bundle@3.1.0': - dependencies: - '@sigstore/protobuf-specs': 0.4.3 - '@sigstore/bundle@4.0.0': dependencies: '@sigstore/protobuf-specs': 0.5.1 - '@sigstore/core@2.0.0': {} - '@sigstore/core@3.2.1': {} - '@sigstore/protobuf-specs@0.4.3': {} - '@sigstore/protobuf-specs@0.5.1': {} - '@sigstore/sign@3.1.0': - dependencies: - '@sigstore/bundle': 3.1.0 - '@sigstore/core': 2.0.0 - '@sigstore/protobuf-specs': 0.4.3 - make-fetch-happen: 14.0.3 - proc-log: 5.0.0 - promise-retry: 2.0.1 - transitivePeerDependencies: - - supports-color - '@sigstore/sign@4.1.1': dependencies: '@gar/promise-retry': 1.0.3 @@ -19054,13 +19000,6 @@ snapshots: transitivePeerDependencies: - supports-color - '@sigstore/tuf@3.1.1': - dependencies: - '@sigstore/protobuf-specs': 0.4.3 - tuf-js: 3.1.0 - transitivePeerDependencies: - - supports-color - '@sigstore/tuf@4.0.2': dependencies: '@sigstore/protobuf-specs': 0.5.1 @@ -19068,12 +19007,6 @@ snapshots: transitivePeerDependencies: - supports-color - '@sigstore/verify@2.1.1': - dependencies: - '@sigstore/bundle': 3.1.0 - '@sigstore/core': 2.0.0 - '@sigstore/protobuf-specs': 0.4.3 - '@sigstore/verify@3.1.1': dependencies: '@sigstore/bundle': 4.0.0 @@ -19285,11 +19218,6 @@ snapshots: '@tufjs/canonical-json@2.0.0': {} - '@tufjs/models@3.0.1': - dependencies: - '@tufjs/canonical-json': 2.0.0 - minimatch: 9.0.9 - '@tufjs/models@4.1.0': dependencies: '@tufjs/canonical-json': 2.0.0 @@ -20242,7 +20170,7 @@ snapshots: es-toolkit: 1.48.1 micromatch: 4.0.8 semver: 7.8.5 - sigstore: 3.1.0 + sigstore: 4.1.1 ssri: 12.0.0 tslib: 2.8.1 transitivePeerDependencies: @@ -25944,17 +25872,6 @@ snapshots: signal-exit@4.1.0: {} - sigstore@3.1.0: - dependencies: - '@sigstore/bundle': 3.1.0 - '@sigstore/core': 2.0.0 - '@sigstore/protobuf-specs': 0.4.3 - '@sigstore/sign': 3.1.0 - '@sigstore/tuf': 3.1.1 - '@sigstore/verify': 2.1.1 - transitivePeerDependencies: - - supports-color - sigstore@4.1.1: dependencies: '@sigstore/bundle': 4.0.0 @@ -26549,14 +26466,6 @@ snapshots: optionalDependencies: fsevents: 2.3.3 - tuf-js@3.1.0: - dependencies: - '@tufjs/models': 3.0.1 - debug: 4.4.3 - make-fetch-happen: 14.0.3 - transitivePeerDependencies: - - supports-color - tuf-js@4.1.0: dependencies: '@tufjs/models': 4.1.0 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 951fdf5db5f..0f09a8e4ecb 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -185,4 +185,5 @@ overrides: cross-spawn@>=7.0.0 <7.0.5: ">=7.0.5" diff@>=6.0.0 <8.0.3: ">=8.0.3" dompurify: ^3.3.3 + sigstore@<4.1.1: ^4.1.1 yaml@>=2.0.0 <2.8.3: ">=2.8.3"