dependabot[bot]andGitHub f7b2aea292 chore(deps): bump @sigstore/core and @sigstore/sign in /packages/attest ...

Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) to 4.0.1 and updates ancestor dependency [@sigstore/sign](https://github.com/sigstore/sigstore-js). These dependencies need to be updated together.


Updates `@sigstore/core` from 2.0.0 to 4.0.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

Updates `@sigstore/sign` from 3.1.0 to 5.0.0
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/[email protected]...@sigstore/[email protected])

---
updated-dependencies:
- dependency-name: "@sigstore/core"
  dependency-version: 4.0.1
  dependency-type: indirect
- dependency-name: "@sigstore/sign"
  dependency-version: 5.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

2026-07-28 11:22:38 +00:00

..

artifact

Merge pull request #2432 from actions/dependabot/npm_and_yarn/packages/artifact/markdown-it-14.2.0

2026-07-28 12:12:36 +01:00

attest

chore(deps): bump @sigstore/core and @sigstore/sign in /packages/attest

2026-07-28 11:22:38 +00:00

cache

feat(cache): add cache-mode client behavior (read-denied warning + ACTIONS_CACHE_MODE skip) (#2447)

2026-07-13 10:03:16 -05:00

core

release new versions for a few packages

2026-04-21 17:15:02 +00:00

exec

Bump @actions/io to 3.0.2

2026-01-28 15:59:40 -05:00

github

chore(deps): bump undici from 6.24.0 to 6.28.0 in /packages/github

2026-07-26 16:14:19 +00:00

glob

chore(deps): bump brace-expansion from 5.0.6 to 5.0.7 in /packages/glob

2026-07-21 11:08:05 +00:00

http-client

release new versions for a few packages

2026-04-21 17:15:02 +00:00

io

@actions/io: update lock file version

2026-01-28 14:36:03 -05:00

tool-cache

Audit tool-cache

2026-05-01 16:36:55 +00:00