chore(deps): bump @sigstore/core and @sigstore/sign in /packages/attest

mirror of https://github.com/actions/toolkit.git synced 2026-08-07 00:00:18 +02:00

Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) to 4.0.1 and updates ancestor dependency [@sigstore/sign](https://github.com/sigstore/sigstore-js). These dependencies need to be updated together.


Updates `@sigstore/core` from 2.0.0 to 4.0.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

Updates `@sigstore/sign` from 3.1.0 to 5.0.0
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

---
updated-dependencies:
- dependency-name: "@sigstore/core"
  dependency-version: 4.0.1
  dependency-type: indirect
- dependency-name: "@sigstore/sign"
  dependency-version: 5.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

This commit is contained in:

dependabot[bot]

2026-07-28 11:22:38 +00:00

committed by

GitHub

parent ecc1f60406

commit f7b2aea292

2 changed files with 215 additions and 680 deletions

packages/attest/package-lock.json

Generated

+214 -679

View File

File diff suppressed because it is too large Load Diff

									
										packages/attest/package.json
									
		+1
		-1
	
												View File
												
				@@ -54,7 +54,7 @@

				    "@actions/http-client": "^4.0.0",

				    "@octokit/plugin-retry": "^8.0.3",

				    "@sigstore/bundle": "^3.1.0",

				    "@sigstore/sign": "^3.1.0",

				    "@sigstore/sign": "^5.0.0",

				    "jose": "^5.10.0"

				  }

				}