deps: bump pacote from 17.0.5 to 17.0.6 (#936)

Bumps [pacote](https://github.com/npm/pacote) from 17.0.5 to 17.0.6. - [Release notes](https://github.com/npm/pacote/releases) - [Changelog](https://github.com/npm/pacote/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/pacote/compare/v17.0.5...v17.0.6) --- updated-dependencies: - dependency-name: pacote dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Jan 24, 2024 at 12:36 UTC 8f405a2b915906d1c4a087416f593f7230c4529c
1 file changed +48 -24
package-lock.json
+48 -24
@@ -8416,9 +8416,9 @@
8416 "integrity": "sha512-RNiOoTPkptFtSVzQevY/yWtZwf/RxyVnPy/OcA9HBM3MlGDnBEYL5B41H0MTn0Uec8Hi+2qUtTfG2WWZBmMejQ=="
8417 },
8418 "node_modules/@sigstore/bundle": {
8419 - "version": "2.1.0",
8420 - "resolved": "https://registry.npmjs.org/@sigstore/bundle/-/bundle-2.1.0.tgz",
8421 - "integrity": "sha512-89uOo6yh/oxaU8AeOUnVrTdVMcGk9Q1hJa7Hkvalc6G3Z3CupWk4Xe9djSgJm9fMkH69s0P0cVHUoKSOemLdng==",
8419 + "version": "2.1.1",
8420 + "resolved": "https://registry.npmjs.org/@sigstore/bundle/-/bundle-2.1.1.tgz",
8421 + "integrity": "sha512-v3/iS+1nufZdKQ5iAlQKcCsoh0jffQyABvYIxKsZQFWc4ubuGjwZklFHpDgV6O6T7vvV78SW5NHI91HFKEcxKg==",
8422 "dependencies": {
8423 "@sigstore/protobuf-specs": "^0.2.1"
8424 },
@@ -8426,6 +8426,14 @@
8426 "node": "^16.14.0 || >=18.0.0"
8427 }
8428 },
8429 + "node_modules/@sigstore/core": {
8430 + "version": "0.2.0",
8431 + "resolved": "https://registry.npmjs.org/@sigstore/core/-/core-0.2.0.tgz",
8432 + "integrity": "sha512-THobAPPZR9pDH2CAvDLpkrYedt7BlZnsyxDe+Isq4ZmGfPy5juOFZq487vCU2EgKD7aHSiTfE/i7sN7aEdzQnA==",
8433 + "engines": {
8434 + "node": "^16.14.0 || >=18.0.0"
8435 + }
8436 + },
8437 "node_modules/@sigstore/protobuf-specs": {
8438 "version": "0.2.1",
8439 "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.2.1.tgz",
@@ -8435,11 +8443,12 @@
8443 }
8444 },
8445 "node_modules/@sigstore/sign": {
8438 - "version": "2.2.0",
8439 - "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-2.2.0.tgz",
8440 - "integrity": "sha512-AAbmnEHDQv6CSfrWA5wXslGtzLPtAtHZleKOgxdQYvx/s76Fk6T6ZVt7w2IGV9j1UrFeBocTTQxaXG2oRrDhYA==",
8446 + "version": "2.2.1",
8447 + "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-2.2.1.tgz",
8448 + "integrity": "sha512-U5sKQEj+faE1MsnLou1f4DQQHeFZay+V9s9768lw48J4pKykPj34rWyI1lsMOGJ3Mae47Ye6q3HAJvgXO21rkQ==",
8449 "dependencies": {
8442 - "@sigstore/bundle": "^2.1.0",
8450 + "@sigstore/bundle": "^2.1.1",
8451 + "@sigstore/core": "^0.2.0",
8452 "@sigstore/protobuf-specs": "^0.2.1",
8453 "make-fetch-happen": "^13.0.0"
8454 },
@@ -8448,12 +8457,25 @@
8457 }
8458 },
8459 "node_modules/@sigstore/tuf": {
8451 - "version": "2.2.0",
8452 - "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.2.0.tgz",
8453 - "integrity": "sha512-KKATZ5orWfqd9ZG6MN8PtCIx4eevWSuGRKQvofnWXRpyMyUEpmrzg5M5BrCpjM+NfZ0RbNGOh5tCz/P2uoRqOA==",
8460 + "version": "2.3.0",
8461 + "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.0.tgz",
8462 + "integrity": "sha512-S98jo9cpJwO1mtQ+2zY7bOdcYyfVYCUaofCG6wWRzk3pxKHVAkSfshkfecto2+LKsx7Ovtqbgb2LS8zTRhxJ9Q==",
8463 "dependencies": {
8464 "@sigstore/protobuf-specs": "^0.2.1",
8456 - "tuf-js": "^2.1.0"
8465 + "tuf-js": "^2.2.0"
8466 + },
8467 + "engines": {
8468 + "node": "^16.14.0 || >=18.0.0"
8469 + }
8470 + },
8471 + "node_modules/@sigstore/verify": {
8472 + "version": "0.1.0",
8473 + "resolved": "https://registry.npmjs.org/@sigstore/verify/-/verify-0.1.0.tgz",
8474 + "integrity": "sha512-2UzMNYAa/uaz11NhvgRnIQf4gpLTJ59bhb8ESXaoSS5sxedfS+eLak8bsdMc+qpNQfITUTFoSKFx5h8umlRRiA==",
8475 + "dependencies": {
8476 + "@sigstore/bundle": "^2.1.1",
8477 + "@sigstore/core": "^0.2.0",
8478 + "@sigstore/protobuf-specs": "^0.2.1"
8479 },
8480 "engines": {
8481 "node": "^16.14.0 || >=18.0.0"
@@ -30115,9 +30137,9 @@
30137 }
30138 },
30139 "node_modules/pacote": {
30118 - "version": "17.0.5",
30119 - "resolved": "https://registry.npmjs.org/pacote/-/pacote-17.0.5.tgz",
30120 - "integrity": "sha512-TAE0m20zSDMnchPja9vtQjri19X3pZIyRpm2TJVeI+yU42leJBBDTRYhOcWFsPhaMxf+3iwQkFiKz16G9AEeeA==",
30140 + "version": "17.0.6",
30141 + "resolved": "https://registry.npmjs.org/pacote/-/pacote-17.0.6.tgz",
30142 + "integrity": "sha512-cJKrW21VRE8vVTRskJo78c/RCvwJCn1f4qgfxL4w77SOWrTCRcmfkYHlHtS0gqpgjv3zhXflRtgsrUCX5xwNnQ==",
30143 "dependencies": {
30144 "@npmcli/git": "^5.0.0",
30145 "@npmcli/installed-package-contents": "^2.0.1",
@@ -30134,7 +30156,7 @@
30156 "promise-retry": "^2.0.1",
30157 "read-package-json": "^7.0.0",
30158 "read-package-json-fast": "^3.0.0",
30137 - "sigstore": "^2.0.0",
30159 + "sigstore": "^2.2.0",
30160 "ssri": "^10.0.0",
30161 "tar": "^6.1.11"
30162 },
@@ -34167,14 +34189,16 @@
34189 "integrity": "sha512-6+eerH9fEnNmi/hyM1DXcRK3pWdoMQtlkQ+ns0ntzunjKqp5i3sKCc80ym8Fib3iaYhdJUOPdhlJWj1tvge2Ww=="
34190 },
34191 "node_modules/sigstore": {
34170 - "version": "2.1.0",
34171 - "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-2.1.0.tgz",
34172 - "integrity": "sha512-kPIj+ZLkyI3QaM0qX8V/nSsweYND3W448pwkDgS6CQ74MfhEkIR8ToK5Iyx46KJYRjseVcD3Rp9zAmUAj6ZjPw==",
34192 + "version": "2.2.0",
34193 + "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-2.2.0.tgz",
34194 + "integrity": "sha512-fcU9clHwEss2/M/11FFM8Jwc4PjBgbhXoNskoK5guoK0qGQBSeUbQZRJ+B2fDFIvhyf0gqCaPrel9mszbhAxug==",
34195 "dependencies": {
34174 - "@sigstore/bundle": "^2.1.0",
34196 + "@sigstore/bundle": "^2.1.1",
34197 + "@sigstore/core": "^0.2.0",
34198 "@sigstore/protobuf-specs": "^0.2.1",
34176 - "@sigstore/sign": "^2.1.0",
34177 - "@sigstore/tuf": "^2.1.0"
34199 + "@sigstore/sign": "^2.2.1",
34200 + "@sigstore/tuf": "^2.3.0",
34201 + "@sigstore/verify": "^0.1.0"
34202 },
34203 "engines": {
34204 "node": "^16.14.0 || >=18.0.0"
@@ -37983,9 +38007,9 @@
38007 "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg=="
38008 },
38009 "node_modules/tuf-js": {
37986 - "version": "2.1.0",
37987 - "resolved": "https://registry.npmjs.org/tuf-js/-/tuf-js-2.1.0.tgz",
37988 - "integrity": "sha512-eD7YPPjVlMzdggrOeE8zwoegUaG/rt6Bt3jwoQPunRiNVzgcCE009UDFJKJjG+Gk9wFu6W/Vi+P5d/5QpdD9jA==",
38010 + "version": "2.2.0",
38011 + "resolved": "https://registry.npmjs.org/tuf-js/-/tuf-js-2.2.0.tgz",
38012 + "integrity": "sha512-ZSDngmP1z6zw+FIkIBjvOp/II/mIub/O7Pp12j1WNsiCpg5R5wAc//i555bBQsE44O94btLt0xM/Zr2LQjwdCg==",
38013 "dependencies": {
38014 "@tufjs/models": "2.0.0",
38015 "debug": "^4.3.4",