New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade sigstore from 1.7.0 to 1.8.0 #115

Open

Theo13111 wants to merge 1 commit into latest from snyk-upgrade-9f1bd18ad72dbd52a99c4547f0ce936e

Owner

Theo13111 commented Aug 10, 2023

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sigstore from 1.7.0 to 1.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago, on 2023-07-19.

Release notes

Package name: sigstore

1.8.0 - 2023-07-19
Minor Changes
- f1b8bad: Support for verifying v0.2 Sigstore bundles that contain inclusion proofs from Rekor
- d9b1540: Integrate @ sigstore/bundle package
Patch Changes
- e0c16ec: Bump @ sigstore/protobuf-specs from 0.1.0 to 0.2.0
- 6abe9ec: Fix bug when setting tlogThreshold/ctLogThreshold verification options to 0
- Updated dependencies [e0c16ec]
- Updated dependencies [f1b8bad]
- Updated dependencies [a388e25]
- Updated dependencies [e0c16ec]
- Updated dependencies [2a5f500]
- Updated dependencies [2a869ba]
  - @ sigstore/bundle@1.0.0
  - @ sigstore/tuf@1.0.3
1.7.0 - 2023-06-30
Minor Changes
- f374dd3: Include transparency log inclusion proof in Sigstore bundle
- fbfb315: Exports new createVerifier function
Patch Changes
- bd1e1e1: Internal refactoring of Typescript types
- Updated dependencies [b97be71]
  - @ sigstore/tuf@1.0.1

from sigstore GitHub release notes

Commit messages

Package name: sigstore

8d69554 Version Packages ([BUG] EMISSINGARG on npm install npm/cli#588)
dae6278 Bump @ oclif/core from 2.9.3 to 2.9.4 ([QUESTION] registry metadata mismatch with actual package.json npm/cli#626)
8b7d0cf Bump @ oclif/color from 1.0.8 to 1.0.9 ([BUG] <title> npm/cli#625)
df2c298 Bump @ oclif/plugin-help from 5.2.13 to 5.2.14 ([BUG] Failed to install npm package from git in docker since v6.11.0 npm/cli#624)
6985917 Bump the dev-dependencies group with 2 updates ([BUG] running ls after clean-install for git dependency shows UNMET DEPENDENCY npm/cli#623)
a388e25 promote @ sigstore/bundle to 1.0.0 ([BUG] E403 has a misleading message for most cases npm/cli#622)
b4c351c Bump @ oclif/plugin-help from 5.2.12 to 5.2.13 (npm ERR! typeerror Error: Missing required argument npm/cli#621)
0a0d9d3 Bump the dev-dependencies group with 1 update ([BUG] on version 12.14, npm prune fails in Jenkins jobs npm/cli#620)
2a869ba envelope serialization funcs in bundle pkg (Get several instances of @material-ui/styles initialised in this application warning. npm/cli#617)
335cb74 integrate w/ Sigstore conformance test suite (error invalid bin entry for package npm/cli#613)
6abe9ec Fix bug w/ threshold verification options (npm login does not accept email address as an user name npm/cli#616)
a88a986 Bump @ oclif/core from 2.9.2 to 2.9.3 ([FEATURE] opt-in install and postinstall scripts npm/cli#619)
7b5af13 Bump nock from 13.3.1 to 13.3.2 (npm ERR! cb() never called! npm/cli#618)
63556ae Bump the dev-dependencies group with 1 update ([DOCS] Document optional config in optionalDependencies entry npm/cli#614)
0e66d54 Bump @ oclif/core from 2.9.0 to 2.9.2 ([TESTING] ci: add testing output to GHA npm/cli#615)
b80f72f add link to @ sigstore/bundle in root README (Issues with installing a config for a beginner javascript course npm/cli#612)
5d04fee backward compat verification tests ([BUG] npm install -g npm removes npm command npm/cli#611)
f1b8bad verification of v0.2 Sigstore bundles (CI: add caching. npm/cli#605)
6ec4f0c development dependency updates ([QUESTION] Why does not npm run the local installed executable with npm run command? npm/cli#610)
e0c16ec Bump @ sigstore/protobuf-specs from 0.1.0 to 0.2.0 ([BUG] npm update --depth breaks dependencies npm/cli#607)
00e82f6 Bump @ oclif/core from 2.8.12 to 2.9.0 ([QUESTION] Conflicting documentation npm/cli#609)
580469a Bump @ oclif/color from 1.0.7 to 1.0.8 ([BUG] NPM error when installing package (forever) npm/cli#608)
fa528ad Bump @ oclif/core from 2.8.11 to 2.8.12 (Use the npm lint script on CI. npm/cli#604)
ec4e3ce Bump @ oclif/plugin-help from 5.2.11 to 5.2.12 (Remove the unused appveyor.yml npm/cli#603)

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade sigstore from 1.7.0 to 1.8.0

00886e3

Snyk has created this PR to upgrade sigstore from 1.7.0 to 1.8.0.

See this package in npm:
https://www.npmjs.com/package/sigstore

See this project in Snyk:
https://app.snyk.io/org/theoelma1311/project/cf25ed21-c434-4a3d-a24a-38d01b68e4a3?utm_source=github&utm_medium=referral&page=upgrade-pr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment