97b7fa81c8
regenerate package lock
...
Signed-off-by: Meredith Lancaster <malancas@github.com >
2025-12-08 19:22:04 -08:00
9ca26d4946
regenerate package lock
...
Signed-off-by: Meredith Lancaster <malancas@github.com >
2025-12-08 13:17:18 -08:00
f014075da9
Bump tar from 7.5.1 to 7.5.2 in /packages/attest
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 7.5.1 to 7.5.2.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.1...v7.5.2 )
---
updated-dependencies:
- dependency-name: tar
dependency-version: 7.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-06 01:06:03 +00:00
47017fa24b
Bump glob from 10.4.5 to 10.5.0 in /packages/attest
...
Bumps [glob](https://github.com/isaacs/node-glob ) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0 )
---
updated-dependencies:
- dependency-name: glob
dependency-version: 10.5.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-19 17:36:35 +00:00
d3ade9ecfc
Prepare @actions/attest 2.0.0 release
2025-10-20 12:07:20 +01:00
347c887e54
package json
2025-10-15 16:27:29 +01:00
fb5ae2a0e0
Keep attest at the same version
2025-10-15 16:27:29 +01:00
33a9b6c09c
update with dist updates
2025-10-15 16:22:51 +01:00
b738f10ef3
package updates
2025-09-04 15:15:02 +01:00
8f32f385e0
Bump package versions, and fix issues
2025-09-04 14:16:27 +01:00
41b3ce3141
Bump undici from 5.28.5 to 5.29.0 in /packages/attest
...
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-15 16:30:57 +00:00
36db4d62ad
Merge pull request #2045 from actions/dependabot/npm_and_yarn/packages/attest/octokit/endpoint-9.0.6
...
Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest
2025-05-08 10:47:59 -07:00
957610a37a
Bump @octokit/request-error from 5.1.0 to 5.1.1 in /packages/attest
...
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js ) from 5.1.0 to 5.1.1.
- [Release notes](https://github.com/octokit/request-error.js/releases )
- [Commits](https://github.com/octokit/request-error.js/compare/v5.1.0...v5.1.1 )
---
updated-dependencies:
- dependency-name: "@octokit/request-error"
dependency-version: 5.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-08 11:19:50 +00:00
6ed621e7d1
Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest
...
Bumps [@octokit/endpoint](https://github.com/octokit/endpoint.js ) from 9.0.5 to 9.0.6.
- [Release notes](https://github.com/octokit/endpoint.js/releases )
- [Commits](https://github.com/octokit/endpoint.js/compare/v9.0.5...v9.0.6 )
---
updated-dependencies:
- dependency-name: "@octokit/endpoint"
dependency-version: 9.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-08 11:19:48 +00:00
0bc338adab
set workflow.ref provenance field from ref claim
...
Updates the `buildSLSAProvenancePredicate` function to populate the
`workflow.ref` field from the `ref` claim in the OIDC token.
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2025-02-26 08:47:27 -08:00
95e747361e
bump undici to 5.28.5
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2025-02-14 08:02:10 -08:00
29d342f176
Merge pull request #1848 from actions/bdehamer/attest-prep-1-5
...
`@actions/attest`: prep release of @actions/attest v1.5.0
2024-10-14 12:49:33 -07:00
72113fe791
Merge pull request #1847 from actions/bdehamer/attest-update-core
...
`@actions/attest`: bump @actions/core from 1.10.1 to 1.11.1
2024-10-14 12:49:15 -07:00
26c752f562
prep release of @actions/attest v1.5.0
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-10-14 12:33:10 -07:00
ac1332a8e2
bump @actions/core from 1.10.1 to 1.11.1
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-10-14 12:16:09 -07:00
c6c5ef6b8e
bump @sigstore/sign from 2.3.2 to 3.0.0
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-10-14 12:06:26 -07:00
2a07de1333
fix bug with customized oidc issuer
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-09-04 10:24:28 -07:00
1e69bffbba
bump @actions/http-client from 2.2.1 to 2.2.3
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-08-22 07:52:03 -07:00
340a1033a5
support for headers param in attest functions
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-08-15 15:35:32 -07:00
b28406bd1f
fix proxy support for jwks retrieval
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-07-26 15:03:40 -07:00
8735a7e2da
prep 1.3.0 release of @actions/attest
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-21 13:11:37 -07:00
0e8fe8af62
retry request on failure to save attestation
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-24 15:07:39 -07:00
2961d73391
remove dep on make-fetch-happen
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-23 09:39:17 -07:00
f8d95a85df
generate v0.3 bundles in attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-03 12:12:26 -07:00
a0e6af1e53
build provenance stmt from OIDC claims
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-03-22 12:34:42 -07:00
37a562b194
bump @actions/attest to 1.0.0
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-26 10:21:47 -08:00
6079dea4c4
add new @actions/attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-26 08:52:20 -08:00
Meredith Lancaster