Prepare v4 major release (#1463)

* drop support for node 18

Signed-off-by: Brian DeHamer <[email protected]>

* bump make-fetch-happen from 14.x to 15.x

Signed-off-by: Brian DeHamer <[email protected]>

* npm audit fix

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>

Author: bdehamer

.changeset/beige-peas-wait.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/sign': major
+---
+
+Bump make-fetch-happen from 14.x to 15.x

.changeset/many-rice-accept.md

@@ -0,0 +1,9 @@
+---
+'@sigstore/conformance': minor
+'@sigstore/mock-server': minor
+'@sigstore/mock': minor
+'@sigstore/cli': minor
+'@sigstore/oci': minor
+---
+
+Drop support for node 18

.changeset/mean-laws-check.md

@@ -0,0 +1,7 @@
+---
+'@sigstore/mock': minor
+'@sigstore/cli': minor
+'@sigstore/oci': minor
+---
+
+Bump make-fetch-happen from 14.x to 15.x

.changeset/smart-parts-beg.md

@@ -0,0 +1,11 @@
+---
+'@sigstore/rekor-types': major
+'@sigstore/bundle': major
+'sigstore': major
+'@sigstore/verify': major
+'@sigstore/core': major
+'@sigstore/sign': major
+'@sigstore/tuf': major
+---
+
+Drop support for node 18

.changeset/violet-geckos-lick.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': major
+---
+
+Bump tuf-js from 3.x to 4.x

.github/workflows/ci.yml

@@ -36,10 +36,9 @@ jobs:
       fail-fast: false
       matrix:
         node-version:
-          - 18.17.0
-          - 18.x
-          - 20.5.0
+          - 20.17.0
           - 20.x
+          - 22.9.0
           - 22.x
         platform:
           - os: ubuntu-latest

.github/workflows/compatibility-check.yml

@@ -23,7 +23,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v3
       with:
-        node-version: 18.17
+        node-version: 20
         cache: npm
     - name: Install CLI
       run: npm install -g @sigstore/cli

.github/workflows/release.yml

@@ -25,13 +25,13 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: 18.17.0
+          node-version: 20
           registry-url: 'https://registry.npmjs.org'
           cache: npm
 
       - name: Install npm w/ OIDC support
         run: |
-          curl -fsSL https://raw.githubusercontent.com/npm/cli/refs/heads/oidc-install/install.sh | bash
+          npm install -g npm@^11.5.0
 
       - name: Install dependencies
         run: npm ci

.github/workflows/smoke-test.yml

@@ -23,7 +23,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
-        node-version: 18.17
+        node-version: 20
         cache: npm
     - name: Install dependencies
       run: npm ci
@@ -61,7 +61,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
-        node-version: 18.17
+        node-version: 20
         cache: npm
     - name: Install dependencies
       run: npm ci
@@ -114,7 +114,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
-        node-version: 18.17
+        node-version: 20
         cache: npm
     - name: Install dependencies
       run: npm ci