Bump tuf-js from 1.1.6 to 1.1.7 (#556)

* Bump tuf-js from 1.1.6 to 1.1.7

Bumps [tuf-js](https://github.com/theupdateframework/tuf-js) from 1.1.6 to 1.1.7.
- [Release notes](https://github.com/theupdateframework/tuf-js/releases)
- [Commits](https://github.com/theupdateframework/tuf-js/compare/tuf-js@1.1.6...tuf-js@1.1.7)

---
updated-dependencies:
- dependency-name: tuf-js
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add changeset for dependabot updates

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com>

Author: 3 people

.changeset/shiny-radios-fly.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': patch
+---
+
+Bump tuf-js from 1.1.6 to 1.1.7

package-lock.json

@@ -38,7 +38,7 @@
   "dependencies": {
     "@sigstore/protobuf-specs": "^0.1.0",
     "make-fetch-happen": "^11.0.1",
-    "tuf-js": "^1.1.3"
+    "tuf-js": "^1.1.7"
   },
   "engines": {
     "node": "^14.17.0 || ^16.13.0 || >=18.0.0"