chore(deps): bump @sigstore/core and @sigstore/sign in /packages/attest

Browse Source

Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) to 4.0.1 and updates ancestor dependency [@sigstore/sign](https://github.com/sigstore/sigstore-js). These dependencies need to be updated together.


Updates `@sigstore/core` from 2.0.0 to 4.0.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

Updates `@sigstore/sign` from 3.1.0 to 5.0.0
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

---
updated-dependencies:
- dependency-name: "@sigstore/core"
  dependency-version: 4.0.1
  dependency-type: indirect
- dependency-name: "@sigstore/sign"
  dependency-version: 5.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

...

This commit is contained in:

dependabot[bot]

2026-07-28 11:22:38 +00:00

committed by GitHub

parent ecc1f60406

commit f7b2aea292

2 changed files with 215 additions and 680 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

packages/attest/package-lock.json

Generated

+214 -679

File diff suppressed because it is too large Load Diff