[Snyk] Upgrade sigstore from 1.7.0 to 1.8.0

[Theo13111]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sigstore from 1.7.0 to 1.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2023-07-19.

Release notes

Package name: sigstore

• 1.8.0 - 2023-07-19
  

  Minor Changes

  • f1b8bad: Support for verifying v0.2 Sigstore bundles that contain inclusion proofs from Rekor
  • d9b1540: Integrate @ sigstore/bundle package

  Patch Changes

  • e0c16ec: Bump @ sigstore/protobuf-specs from 0.1.0 to 0.2.0
  • 6abe9ec: Fix bug when setting tlogThreshold/ctLogThreshold verification options to 0
  • Updated dependencies [e0c16ec]
  • Updated dependencies [f1b8bad]
  • Updated dependencies [a388e25]
  • Updated dependencies [e0c16ec]
  • Updated dependencies [2a5f500]
  • Updated dependencies [2a869ba]
    • @ sigstore/bundle@1.0.0
    • @ sigstore/tuf@1.0.3
• 1.7.0 - 2023-06-30
  

  Minor Changes

  • f374dd3: Include transparency log inclusion proof in Sigstore bundle
  • fbfb315: Exports new createVerifier function

  Patch Changes

  • bd1e1e1: Internal refactoring of Typescript types
  • Updated dependencies [b97be71]
    • @ sigstore/tuf@1.0.1

from sigstore GitHub release notes

Commit messages

Package name: sigstore

• 8d69554 Version Packages ([BUG] EMISSINGARG on npm install npm/cli#588)
• dae6278 Bump @ oclif/core from 2.9.3 to 2.9.4 ([QUESTION] registry metadata mismatch with actual package.json npm/cli#626)
• 8b7d0cf Bump @ oclif/color from 1.0.8 to 1.0.9 ([BUG] <title> npm/cli#625)
• df2c298 Bump @ oclif/plugin-help from 5.2.13 to 5.2.14 ([BUG] Failed to install npm package from git in docker since v6.11.0  npm/cli#624)
• 6985917 Bump the dev-dependencies group with 2 updates ([BUG] running ls after clean-install for git dependency shows UNMET DEPENDENCY npm/cli#623)
• a388e25 promote @ sigstore/bundle to 1.0.0 ([BUG] E403 has a misleading message for most cases npm/cli#622)
• b4c351c Bump @ oclif/plugin-help from 5.2.12 to 5.2.13 (npm ERR! typeerror Error: Missing required argument npm/cli#621)
• 0a0d9d3 Bump the dev-dependencies group with 1 update ([BUG] on version 12.14, npm prune fails in Jenkins jobs npm/cli#620)
• 2a869ba envelope serialization funcs in bundle pkg (Get several instances of @material-ui/styles initialised in this application warning. npm/cli#617)
• 335cb74 integrate w/ Sigstore conformance test suite (error invalid bin entry for package npm/cli#613)
• 6abe9ec Fix bug w/ threshold verification options (npm login does not accept email address as an user name npm/cli#616)
• a88a986 Bump @ oclif/core from 2.9.2 to 2.9.3 ([FEATURE] opt-in install and postinstall scripts npm/cli#619)
• 7b5af13 Bump nock from 13.3.1 to 13.3.2 (npm ERR! cb() never called! npm/cli#618)
• 63556ae Bump the dev-dependencies group with 1 update ([DOCS] Document optional config in optionalDependencies entry npm/cli#614)
• 0e66d54 Bump @ oclif/core from 2.9.0 to 2.9.2 ([TESTING] ci: add testing output to GHA npm/cli#615)
• b80f72f add link to @ sigstore/bundle in root README (Issues with installing a config for a beginner javascript course npm/cli#612)
• 5d04fee backward compat verification tests ([BUG] npm install -g npm removes npm command npm/cli#611)
• f1b8bad verification of v0.2 Sigstore bundles (CI: add caching. npm/cli#605)
• 6ec4f0c development dependency updates ([QUESTION] Why does not npm run the local installed executable with npm run command? npm/cli#610)
• e0c16ec Bump @ sigstore/protobuf-specs from 0.1.0 to 0.2.0 ([BUG] npm update --depth breaks dependencies npm/cli#607)
• 00e82f6 Bump @ oclif/core from 2.8.12 to 2.9.0 ([QUESTION] Conflicting documentation npm/cli#609)
• 580469a Bump @ oclif/color from 1.0.7 to 1.0.8 ([BUG] NPM error when installing package (forever) npm/cli#608)
• fa528ad Bump @ oclif/core from 2.8.11 to 2.8.12 (Use the npm lint script on CI. npm/cli#604)
• ec4e3ce Bump @ oclif/plugin-help from 5.2.11 to 5.2.12 (Remove the unused appveyor.yml npm/cli#603)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs