Update packages/http-client/RELEASES.md

Co-authored-by: Copilot <[email protected]>

packages/attest/RELEASES.md

@@ -1,5 +1,12 @@
 # @actions/attest Releases
 
+### 2.0.0
+
+- Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
+- Bump @sigstore/bundle from 3.0.0 to 3.1.0
+- Bump @sigstore/sign from 3.0.0 to 3.1.0
+- Bump jose from 5.2.3 to 5.10.0
+
 ### 1.6.0
 
 - Update `buildSLSAProvenancePredicate` to populate `workflow.ref` field from the `ref` claim in the OIDC token [#1969](https://github.com/actions/toolkit/pull/1969)

packages/attest/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@actions/attest",
-  "version": "1.6.0",
+  "version": "2.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@actions/attest",
-      "version": "1.6.0",
+      "version": "2.0.0",
       "license": "MIT",
       "dependencies": {
         "@actions/core": "^1.11.1",

packages/attest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actions/attest",
-  "version": "1.6.0",
+  "version": "2.0.0",
   "description": "Actions attestation lib",
   "keywords": [
     "github",

packages/attest/src/attest.ts

@@ -102,8 +102,7 @@ function toAttestation(bundle: Bundle, attestationID?: string): Attestation {
       throw new Error('Bundle must contain an x509 certificate')
   }
 
-  // Convert Buffer to Uint8Array for Node.js 24 compatibility
+  const signingCert = new X509Certificate(certBytes)
-  const signingCert = new X509Certificate(new Uint8Array(certBytes))
 
   // Collect transparency log ID if available
   const tlogEntries = bundle.verificationMaterial.tlogEntries

packages/http-client/RELEASES.md

@@ -1,5 +1,8 @@
 ## Releases
 
+## 3.0.0
+- Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
+
 ## 2.2.3
 - Fixed an issue where proxy username and password were not handled correctly [#1799](https://github.com/actions/toolkit/pull/1799)