Bump the prod-deps group across 1 directory with 7 updates (#1512)

* Bump the prod-deps group across 1 directory with 7 updates

Bumps the prod-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@oclif/core](https://github.com/oclif/core) | `4.7.2` | `4.8.0` |
| [@oclif/plugin-help](https://github.com/oclif/plugin-help) | `6.2.34` | `6.2.36` |
| [make-fetch-happen](https://github.com/npm/make-fetch-happen) | `15.0.2` | `15.0.3` |
| [@peculiar/x509](https://github.com/PeculiarVentures/x509) | `1.14.0` | `1.14.2` |
| [pkijs](https://github.com/PeculiarVentures/PKI.js) | `3.2.5` | `3.3.3` |
| [pvutils](https://github.com/PeculiarVentures/pvutils) | `1.1.3` | `1.1.5` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |



Updates `@oclif/core` from 4.7.2 to 4.8.0
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.7.2...4.8.0)

Updates `@oclif/plugin-help` from 6.2.34 to 6.2.36
- [Release notes](https://github.com/oclif/plugin-help/releases)
- [Changelog](https://github.com/oclif/plugin-help/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-help@6.2.34...6.2.36)

Updates `make-fetch-happen` from 15.0.2 to 15.0.3
- [Release notes](https://github.com/npm/make-fetch-happen/releases)
- [Changelog](https://github.com/npm/make-fetch-happen/blob/main/CHANGELOG.md)
- [Commits](npm/make-fetch-happen@v15.0.2...v15.0.3)

Updates `@peculiar/x509` from 1.14.0 to 1.14.2
- [Release notes](https://github.com/PeculiarVentures/x509/releases)
- [Commits](PeculiarVentures/x509@v1.14.0...v1.14.2)

Updates `pkijs` from 3.2.5 to 3.3.3
- [Release notes](https://github.com/PeculiarVentures/PKI.js/releases)
- [Commits](PeculiarVentures/PKI.js@v3.2.5...v3.3.3)

Updates `pvutils` from 1.1.3 to 1.1.5
- [Changelog](https://github.com/PeculiarVentures/pvutils/blob/master/CHANGELOG.md)
- [Commits](PeculiarVentures/pvutils@v1.1.3...v1.1.5)

Updates `express` from 5.1.0 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: "@oclif/core"
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@oclif/plugin-help"
  dependency-version: 6.2.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: make-fetch-happen
  dependency-version: 15.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@peculiar/x509"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: pkijs
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pvutils
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix type error

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Brian DeHamer <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <[email protected]>

Author: dependabot[bot]

package-lock.json

@@ -43,7 +43,7 @@
     "sigstore": "^4.0.0"
   },
   "devDependencies": {
-    "make-fetch-happen": "^15.0.2",
+    "make-fetch-happen": "^15.0.3",
     "oclif": "^4",
     "ts-node": "^10.9.2",
     "tslib": "^2.8.1"

packages/cli/package.json

@@ -22,10 +22,10 @@
     "@oclif/core": "^4",
     "@sigstore/mock": "^0.11.0",
     "@tufjs/repo-mock": "^4.0.0",
-    "express": "5.2.0"
+    "express": "5.2.1"
   },
   "devDependencies": {
-    "@types/express": "^5.0.4",
+    "@types/express": "^5.0.6",
     "oclif": "^4",
     "tslib": "^2.8.1"
   },

packages/mock-server/package.json

@@ -27,19 +27,19 @@
   },
   "devDependencies": {
     "@sigstore/rekor-types": "^4.0.0",
-    "make-fetch-happen": "^15.0.2"
+    "make-fetch-happen": "^15.0.3"
   },
   "dependencies": {
     "@peculiar/webcrypto": "^1.5.0",
-    "@peculiar/x509": "^1.14.0",
+    "@peculiar/x509": "^1.14.2",
     "@sigstore/protobuf-specs": "^0.5.0",
     "asn1js": "^3.0.6",
     "bytestreamjs": "^2.0.1",
     "canonicalize": "^2.1.0",
     "jose": "^5.9.6",
     "nock": "^13.5.5",
-    "pkijs": "^3.2.5",
-    "pvutils": "^1.1.3"
+    "pkijs": "^3.3.3",
+    "pvutils": "^1.1.5"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"

packages/mock/package.json

@@ -15,7 +15,6 @@ limitations under the License.
 */
 
 import { Crypto, CryptoKey } from '@peculiar/webcrypto';
-import * as asn1js from 'asn1js';
 import * as bs from 'bytestreamjs';
 import type { KeyPairKeyObjectResult } from 'crypto';
 import * as pkijs from 'pkijs';
@@ -110,7 +109,7 @@ class CTLogImpl implements CTLog {
       version,
       logID: this.logID.buffer,
       timestamp,
-      signature: asn1js.fromBER(sig).result,
+      signature: sig,
       hashAlgorithm: 'sha256',
       signatureAlgorithm: 'ecdsa',
     }).toStream().buffer;

packages/mock/src/fulcio/ctlog.ts

@@ -29,7 +29,7 @@
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
-    "make-fetch-happen": "^15.0.2",
+    "make-fetch-happen": "^15.0.3",
     "proc-log": "^5.0.0"
   },
   "engines": {

packages/oci/package.json

@@ -36,7 +36,7 @@
     "@sigstore/bundle": "^4.0.0",
     "@sigstore/core": "^3.0.0",
     "@sigstore/protobuf-specs": "^0.5.0",
-    "make-fetch-happen": "^15.0.2",
+    "make-fetch-happen": "^15.0.3",
     "proc-log": "^5.0.0",
     "promise-retry": "^2.0.1"
   },