actions/attest
1
0
Fork 0
Code Issues Pull Requests Actions 645 Packages Projects Releases Wiki Activity

Bump @sigstore/oci from 0.2.0 to 0.3.0 (#35)

Browse Source 
* Bump @sigstore/oci from 0.2.0 to 0.3.0

Bumps [@sigstore/oci](https://github.com/sigstore/sigstore-js) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/oci@0.2.0...@sigstore/oci@0.3.0)

---
updated-dependencies:
- dependency-name: "@sigstore/oci"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* rebuild dist

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
dependabot[bot]
2024-04-25 07:46:14 -07:00
committed by GitHub
parent 5353367542
commit 6675b10a5b
3 changed files with 10 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dist/index.js
Generated Vendored
+2 -15
View File
@@ -11452,7 +11452,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
};
var _OCIImage_instances, _OCIImage_client, _OCIImage_credentials, _OCIImage_downgrade, _OCIImage_createReferrersIndexByTag;
var _OCIImage_instances, _OCIImage_client, _OCIImage_credentials, _OCIImage_createReferrersIndexByTag;
Object.defineProperty(exports, "__esModule", ({ value: true }));
exports.OCIImage = void 0;
/*
@@ -11474,17 +11474,13 @@ const constants_1 = __nccwpck_require__(61319);
const error_1 = __nccwpck_require__(60064);
const registry_1 = __nccwpck_require__(27464);
const EMPTY_BLOB = Buffer.from('{}');
const DOWNGRADE_REGISTRIES = ['amazonaws.com'];
class OCIImage {
constructor(image, creds, opts) {
_OCIImage_instances.add(this);
_OCIImage_client.set(this, void 0);
_OCIImage_credentials.set(this, void 0);
_OCIImage_downgrade.set(this, false);
__classPrivateFieldSet(this, _OCIImage_client, new registry_1.RegistryClient(image.registry, image.path, opts), "f");
__classPrivateFieldSet(this, _OCIImage_credentials, creds, "f");
// If the registry is not OCI-compliant, downgrade to Docker V2 API
__classPrivateFieldSet(this, _OCIImage_downgrade, DOWNGRADE_REGISTRIES.some((r) => image.registry.includes(r)), "f");
}
async addArtifact(opts) {
let artifactDescriptor;
@@ -11512,15 +11508,6 @@ class OCIImage {
},
annotations,
});
/* istanbul ignore if */
if (__classPrivateFieldGet(this, _OCIImage_downgrade, "f")) {
// ECR can't handle media types with parameters, so we need to strip the
// version parameter from the Sigstore bundle media type.
manifest.artifactType = manifest.artifactType
? manifest.artifactType.replace(/;.*/, '')
: undefined;
manifest.layers[0].mediaType = manifest.layers[0].mediaType.replace(/;.*/, '');
}
// Upload artifact manifest
artifactDescriptor = await __classPrivateFieldGet(this, _OCIImage_client, "f").uploadManifest(JSON.stringify(manifest));
// Manually update the referrers list if the referrers API is not supported.
@@ -11562,7 +11549,7 @@ class OCIImage {
}
}
exports.OCIImage = OCIImage;
_OCIImage_client = new WeakMap(), _OCIImage_credentials = new WeakMap(), _OCIImage_downgrade = new WeakMap(), _OCIImage_instances = new WeakSet(), _OCIImage_createReferrersIndexByTag =
_OCIImage_client = new WeakMap(), _OCIImage_credentials = new WeakMap(), _OCIImage_instances = new WeakSet(), _OCIImage_createReferrersIndexByTag =
// Create a referrers index by tag. This is a fallback for registries that do
// not support the referrers API.
// https://github.com/opencontainers/distribution-spec/blob/main/spec.md#pushing-manifests-with-subject
package-lock.json
Generated
+7 -7
View File
@@ -12,7 +12,7 @@
"@actions/attest": "^1.1.0",
"@actions/core": "^1.10.1",
"@actions/glob": "^0.4.0",
"@sigstore/oci": "^0.2.0"
"@sigstore/oci": "^0.3.0"
},
"devDependencies": {
"@sigstore/mock": "^0.7.2",
@@ -1708,9 +1708,9 @@
}
},
"node_modules/@sigstore/oci": {
"version": "0.2.0",
"resolved": "https://registry.npmjs.org/@sigstore/oci/-/oci-0.2.0.tgz",
"integrity": "sha512-fPKD4jd/D6VR/AqkJn7YHYguZlVcd2GI6lc2d/cK2xwZNV/bfCVd6jvJht5wdz8tyAvVvLyfMHBh/UtNwDG0fg==",
"version": "0.3.0",
"resolved": "https://registry.npmjs.org/@sigstore/oci/-/oci-0.3.0.tgz",
"integrity": "sha512-RZeirZtdSQvBC04j+rvPwBOnzMsc1NC3Ucx4krSh37Ch/Z1BwwAEV3QDQ18McXX2Guvc2pnWeGd6RXn+vpivww==",
"dependencies": {
"make-fetch-happen": "^13.0.0"
},
@@ -9858,9 +9858,9 @@
}
},
"@sigstore/oci": {
"version": "0.2.0",
"resolved": "https://registry.npmjs.org/@sigstore/oci/-/oci-0.2.0.tgz",
"integrity": "sha512-fPKD4jd/D6VR/AqkJn7YHYguZlVcd2GI6lc2d/cK2xwZNV/bfCVd6jvJht5wdz8tyAvVvLyfMHBh/UtNwDG0fg==",
"version": "0.3.0",
"resolved": "https://registry.npmjs.org/@sigstore/oci/-/oci-0.3.0.tgz",
"integrity": "sha512-RZeirZtdSQvBC04j+rvPwBOnzMsc1NC3Ucx4krSh37Ch/Z1BwwAEV3QDQ18McXX2Guvc2pnWeGd6RXn+vpivww==",
"requires": {
"make-fetch-happen": "^13.0.0"
}
package.json
+1 -1
View File
@@ -72,7 +72,7 @@
"@actions/attest": "^1.1.0",
"@actions/core": "^1.10.1",
"@actions/glob": "^0.4.0",
"@sigstore/oci": "^0.2.0"
"@sigstore/oci": "^0.3.0"
},
"devDependencies": {
"@sigstore/mock": "^0.7.2",