Commit cfb1143
fix(deps): update npm (#2851)
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@actions/core](https://togithub.com/actions/toolkit/tree/main/packages/core)
([source](https://togithub.com/actions/toolkit)) | [`1.10.0` ->
`1.10.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/1.10.0/1.10.1)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [@octokit/webhooks-types](https://togithub.com/octokit/webhooks) |
[`7.0.0` ->
`7.3.1`](https://renovatebot.com/diffs/npm/@octokit%2fwebhooks-types/7.0.0/7.3.1)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[sigstore](https://togithub.com/sigstore/sigstore-js/tree/main/packages/client#readme)
([source](https://togithub.com/sigstore/sigstore-js)) | [`1.8.0` ->
`1.9.0`](https://renovatebot.com/diffs/npm/sigstore/1.8.0/1.9.0) |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [yaml](https://eemeli.org/yaml/)
([source](https://togithub.com/eemeli/yaml)) | [`2.3.1` ->
`2.3.3`](https://renovatebot.com/diffs/npm/yaml/2.3.1/2.3.3) |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>actions/toolkit (@​actions/core)</summary>
###
[`v1.10.1`](https://togithub.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1101)
- Fix error message reference in oidc utils
[#​1511](https://togithub.com/actions/toolkit/pull/1511)
</details>
<details>
<summary>octokit/webhooks (@​octokit/webhooks-types)</summary>
###
[`v7.3.1`](https://togithub.com/octokit/webhooks/releases/tag/v7.3.1)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.3.0...v7.3.1)
##### Bug Fixes
- declare pull_request auto_merge properties as string|null
([#​829](https://togithub.com/octokit/webhooks/issues/829))
([c8983a4](https://togithub.com/octokit/webhooks/commit/c8983a4e4cbdb8ccc5d14d49fcf4ff9510f4c8d3))
###
[`v7.3.0`](https://togithub.com/octokit/webhooks/releases/tag/v7.3.0)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.2.0...v7.3.0)
##### Features
- **examples:** add GitHub Enterprise Server versions
([#​841](https://togithub.com/octokit/webhooks/issues/841))
([1983486](https://togithub.com/octokit/webhooks/commit/198348645ecc62aed2a63d28821bbce48cfb7ec5))
###
[`v7.2.0`](https://togithub.com/octokit/webhooks/releases/tag/v7.2.0)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.1.0...v7.2.0)
##### Features
- add support for `deployment_review` event
([#​816](https://togithub.com/octokit/webhooks/issues/816))
([4e36ca2](https://togithub.com/octokit/webhooks/commit/4e36ca291922552ea2994710b5b347a1ab1dff99))
###
[`v7.1.0`](https://togithub.com/octokit/webhooks/releases/tag/v7.1.0)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.0.3...v7.1.0)
##### Features
- new and updated payload examples with resulting schema changes
([#​813](https://togithub.com/octokit/webhooks/issues/813))
([9f7f7f3](https://togithub.com/octokit/webhooks/commit/9f7f7f3cf3309e25210c60461bf62bdf266c09b2)),
closes [#​812](https://togithub.com/octokit/webhooks/issues/812)
###
[`v7.0.3`](https://togithub.com/octokit/webhooks/releases/tag/v7.0.3)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.0.2...v7.0.3)
##### Bug Fixes
- update `wont_fix` typo in `secret_scanning_alert`
([#​807](https://togithub.com/octokit/webhooks/issues/807))
([b709535](https://togithub.com/octokit/webhooks/commit/b709535eca2788c42f1f0bdfa9118faa90b2bd90))
###
[`v7.0.2`](https://togithub.com/octokit/webhooks/releases/tag/v7.0.2)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.0.1...v7.0.2)
##### Bug Fixes
- mark `action` as required in `secret_scanning_alert_location.created`
event ([#​801](https://togithub.com/octokit/webhooks/issues/801))
([39fb367](https://togithub.com/octokit/webhooks/commit/39fb3671d63abf656870c23d896c92d9112119a0))
###
[`v7.0.1`](https://togithub.com/octokit/webhooks/releases/tag/v7.0.1)
[Compare
Source](https://togithub.com/octokit/webhooks/compare/v7.0.0...v7.0.1)
##### Bug Fixes
- **deps:** update dependency
[@​octokit/webhooks-types](https://togithub.com/octokit/webhooks-types)
to v7 ([#​802](https://togithub.com/octokit/webhooks/issues/802))
([2051599](https://togithub.com/octokit/webhooks/commit/2051599f1710e986123e3fe74dc55084c822b3a4))
</details>
<details>
<summary>sigstore/sigstore-js (sigstore)</summary>
###
[`v1.9.0`](https://togithub.com/sigstore/sigstore-js/releases/tag/sigstore%401.9.0)
[Compare
Source](https://togithub.com/sigstore/sigstore-js/compare/sigstore@1.8.0...sigstore@1.9.0)
##### Minor Changes
- [`75ba6cd`](https://togithub.com/sigstore/sigstore-js/commit/75ba6cd):
Integrate `@sigstore/sign` package
- [`e44f05c`](https://togithub.com/sigstore/sigstore-js/commit/e44f05c):
Use bundle construction helpers from `@sigstore/bundle` package
##### Patch Changes
- [`9b8c140`](https://togithub.com/sigstore/sigstore-js/commit/9b8c140):
Fix bug in inclusion proof verification
- Updated dependencies
\[[`fe31654`](https://togithub.com/sigstore/sigstore-js/commit/fe31654)]
- Updated dependencies
\[[`5de42a0`](https://togithub.com/sigstore/sigstore-js/commit/5de42a0)]
- Updated dependencies
\[[`84eee0b`](https://togithub.com/sigstore/sigstore-js/commit/84eee0b)]
- Updated dependencies
\[[`abcebbf`](https://togithub.com/sigstore/sigstore-js/commit/abcebbf)]
-
[@​sigstore/sign](https://togithub.com/sigstore/sign)[@​1](https://togithub.com/1).0.0
-
[@​sigstore/bundle](https://togithub.com/sigstore/bundle)[@​1](https://togithub.com/1).1.0
</details>
<details>
<summary>eemeli/yaml (yaml)</summary>
### [`v2.3.3`](https://togithub.com/eemeli/yaml/releases/tag/v2.3.3)
[Compare
Source](https://togithub.com/eemeli/yaml/compare/v2.3.2...v2.3.3)
- Do not throw error on malformed URI escape in tag
([#​498](https://togithub.com/eemeli/yaml/issues/498))
### [`v2.3.2`](https://togithub.com/eemeli/yaml/releases/tag/v2.3.2)
[Compare
Source](https://togithub.com/eemeli/yaml/compare/v2.3.1...v2.3.2)
- Fix docs typo
([#​489](https://togithub.com/eemeli/yaml/issues/489))
- Do not require quotes for implicit keys with flow indicators
([#​494](https://togithub.com/eemeli/yaml/issues/494))
- Update Prettier to v3 & update ESLint config
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4xOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
---------
Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Ian Lewis <ianlewis@google.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>1 parent b0eae7f commit cfb1143
32 files changed
Lines changed: 6273 additions & 4087 deletions
File tree
- .github/actions
- compute-sha256
- dist
- create-container_based-predicate
- dist
- detect-workflow-js
- dist
- generate-attestations
- dist
- privacy-check
- dist
- sign-attestations
- dist
- verify-token
- dist
- actions/delegator/setup-generic
- dist
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | | - | |
| 21 | + | |
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
| |||
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
923 | 923 | | |
924 | 924 | | |
925 | 925 | | |
926 | | - | |
| 926 | + | |
927 | 927 | | |
928 | 928 | | |
929 | 929 | | |
| |||
Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 7 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
37 | | - | |
| 37 | + | |
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
833 | 833 | | |
834 | 834 | | |
835 | 835 | | |
836 | | - | |
| 836 | + | |
837 | 837 | | |
838 | 838 | | |
839 | 839 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments