deps: sigstore@4.1.0

Author: wraithgar

node_modules/sigstore/dist/sigstore.js

@@ -78,7 +78,8 @@ async function verify(bundle, dataOrOptions, options) {
     else {
         options = dataOrOptions;
     }
-    return createVerifier(options).then((verifier) => verifier.verify(bundle, data));
+    const verifier = await createVerifier(options);
+    return verifier.verify(bundle, data);
 }
 async function createVerifier(
 /* istanbul ignore next */
@@ -105,8 +106,7 @@ options = {}) {
         verify: (bundle, payload) => {
             const deserializedBundle = (0, bundle_1.bundleFromJSON)(bundle);
             const signedEntity = (0, verify_1.toSignedEntity)(deserializedBundle, payload);
-            verifier.verify(signedEntity, policy);
-            return;
+            return verifier.verify(signedEntity, policy);
         },
     };
 }

node_modules/sigstore/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigstore",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "code-signing for npm packages",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -30,16 +30,16 @@
     "@sigstore/rekor-types": "^4.0.0",
     "@sigstore/jest": "^0.0.0",
     "@sigstore/mock": "^0.11.0",
-    "@tufjs/repo-mock": "^3.0.1",
+    "@tufjs/repo-mock": "^4.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
     "@sigstore/bundle": "^4.0.0",
-    "@sigstore/core": "^3.0.0",
+    "@sigstore/core": "^3.1.0",
     "@sigstore/protobuf-specs": "^0.5.0",
-    "@sigstore/sign": "^4.0.0",
-    "@sigstore/tuf": "^4.0.0",
-    "@sigstore/verify": "^3.0.0"
+    "@sigstore/sign": "^4.1.0",
+    "@sigstore/tuf": "^4.0.1",
+    "@sigstore/verify": "^3.1.0"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"

package-lock.json

@@ -10587,16 +10587,18 @@
       }
     },
     "node_modules/sigstore": {
-      "version": "4.0.0",
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-4.1.0.tgz",
+      "integrity": "sha512-/fUgUhYghuLzVT/gaJoeVehLCgZiUxPCPMcyVNY0lIf/cTCz58K/WTI7PefDarXxp9nUKpEwg1yyz3eSBMTtgA==",
       "inBundle": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@sigstore/bundle": "^4.0.0",
-        "@sigstore/core": "^3.0.0",
+        "@sigstore/core": "^3.1.0",
         "@sigstore/protobuf-specs": "^0.5.0",
-        "@sigstore/sign": "^4.0.0",
-        "@sigstore/tuf": "^4.0.0",
-        "@sigstore/verify": "^3.0.0"
+        "@sigstore/sign": "^4.1.0",
+        "@sigstore/tuf": "^4.0.1",
+        "@sigstore/verify": "^3.1.0"
       },
       "engines": {
         "node": "^20.17.0 || >=22.9.0"