Merge branch 'main' into dependabot/npm_and_yarn/dev-deps-834cd6d316

Author: ejahnGithub

.github/workflows/scorecard.yml

@@ -67,6 +67,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/upload-sarif@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
         with:
           sarif_file: results.sarif

package-lock.json

@@ -27,7 +27,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@sigstore/protobuf-specs": "^0.4.3"
+    "@sigstore/protobuf-specs": "^0.5.0"
   },
   "engines": {
     "node": "^18.17.0 || >=20.5.0"

packages/bundle/package.json

@@ -36,7 +36,7 @@
   "dependencies": {
     "@sigstore/bundle": "^3.1.0",
     "@sigstore/core": "^2.0.0",
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "@sigstore/sign": "^3.1.0",
     "@sigstore/tuf": "^3.1.0",
     "@sigstore/verify": "^2.1.0"

packages/client/package.json

@@ -19,7 +19,7 @@
   "dependencies": {
     "@oclif/core": "^4",
     "@sigstore/bundle": "^3.1.0",
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "@sigstore/tuf": "^3.1.0",
     "@sigstore/verify": "^2.1.0",
     "elliptic": "^6.6.1",

packages/conformance/package.json

@@ -32,7 +32,7 @@
   "dependencies": {
     "@peculiar/webcrypto": "^1.5.0",
     "@peculiar/x509": "^1.12.4",
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "asn1js": "^3.0.6",
     "bytestreamjs": "^2.0.1",
     "canonicalize": "^2.1.0",

packages/mock/package.json

@@ -35,7 +35,7 @@
   "dependencies": {
     "@sigstore/bundle": "^3.1.0",
     "@sigstore/core": "^2.0.0",
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "make-fetch-happen": "^14.0.3",
     "proc-log": "^5.0.0",
     "promise-retry": "^2.0.1"

packages/sign/package.json

@@ -32,7 +32,7 @@
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "tuf-js": "^3.0.1"
   },
   "engines": {

packages/tuf/package.json

@@ -26,7 +26,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@sigstore/protobuf-specs": "^0.4.3",
+    "@sigstore/protobuf-specs": "^0.5.0",
     "@sigstore/bundle": "^3.1.0",
     "@sigstore/core": "^2.0.0"
   },