From 0fcab880dfba32c99c3cffe1501ad7175456c756 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 12 Feb 2024 00:02:25 +0000 Subject: [PATCH] fix: node_modules/sigstore/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 --- node_modules/sigstore/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/node_modules/sigstore/package.json b/node_modules/sigstore/package.json index 2ca34e2a445ad..abab51fc10d07 100644 --- a/node_modules/sigstore/package.json +++ b/node_modules/sigstore/package.json @@ -39,8 +39,8 @@ }, "dependencies": { "@sigstore/protobuf-specs": "^0.1.0", - "make-fetch-happen": "^11.0.1", - "tuf-js": "^1.1.3" + "make-fetch-happen": "^12.0.0", + "tuf-js": "^2.0.0" }, "engines": { "node": "^14.17.0 || ^16.13.0 || >=18.0.0"