bump actions/attest from 1.1.1 to 1.1.2 (#79 )

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Bump the npm-development group with 2 updates (#72 )
2024-05-16 12:41:02 -07:00 · 2024-05-13 08:16:24 -07:00 · 2024-05-10 10:47:07 -07:00 · 2024-05-10 10:46:46 -07:00
4 changed files with 19 additions and 11 deletions
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -28,3 +28,11 @@ otherwise, skip directly to step #5.
   ```shell
   gh release create vX.X.X
   ```
+
+1. Move (or create) the major version tag to point to the same commit tagged
+   above:
+
+   ```shell
+   git tag -fa vX -m "vX"
+   git push origin vX --force
+   ```
--- a/action.yml
+++ b/action.yml
@@ -45,7 +45,7 @@ runs:
  steps:
    - uses: actions/attest-build-provenance/predicate@db1dde0f270afe12073070ac7aa802958ae3ec04 # predicate@1.0.0
      id: generate-build-provenance-predicate
-    - uses: actions/attest@d442d85e120905fa5821e76edb1e07a75b94ee7a # v1.1.0
+    - uses: actions/attest@12c083815ed46d5d78222e3824f4a26c42c234d3 # v1.1.2
      id: attest
      with:
        subject-path: ${{ inputs.subject-path }}
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
      },
      "devDependencies": {
        "@types/jest": "^29.5.12",
-        "@types/node": "^20.12.8",
+        "@types/node": "^20.12.11",
        "@typescript-eslint/eslint-plugin": "^7.8.0",
        "@typescript-eslint/parser": "^7.8.0",
        "@vercel/ncc": "^0.38.1",
@@ -24,7 +24,7 @@
        "eslint-plugin-jsonc": "^2.15.1",
        "eslint-plugin-prettier": "^5.1.3",
        "jest": "^29.7.0",
-        "jose": "^5.2.4",
+        "jose": "^5.3.0",
        "markdownlint-cli": "^0.40.0",
        "nock": "^13.5.4",
        "prettier": "^3.2.5",
@@ -1724,9 +1724,9 @@
      "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w=="
    },
    "node_modules/@types/node": {
-      "version": "20.12.8",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.12.8.tgz",
-      "integrity": "sha512-NU0rJLJnshZWdE/097cdCBbyW1h4hEg0xpovcoAQYHl8dnEyp/NAOiE45pvc+Bd1Dt+2r94v2eGFpQJ4R7g+2w==",
+      "version": "20.12.11",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.12.11.tgz",
+      "integrity": "sha512-vDg9PZ/zi+Nqp6boSOT7plNuthRugEKixDv5sFTIpkE89MmNtEArAShI4mxuX2+UrLEe9pxC1vm2cjm9YlWbJw==",
      "dependencies": {
        "undici-types": "~5.26.4"
      }
@@ -5398,9 +5398,9 @@
      }
    },
    "node_modules/jose": {
-      "version": "5.2.4",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-5.2.4.tgz",
-      "integrity": "sha512-6ScbIk2WWCeXkmzF6bRPmEuaqy1m8SbsRFMa/FLrSCkGIhj8OLVG/IH+XHVmNMx/KUo8cVWEE6oKR4dJ+S0Rkg==",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-5.3.0.tgz",
+      "integrity": "sha512-IChe9AtAE79ru084ow8jzkN2lNrG3Ntfiv65Cvj9uOCE2m5LNsdHG+9EbxWxAoWRF9TgDOqLN5jm08++owDVRg==",
      "dev": true,
      "funding": {
        "url": "https://github.com/sponsors/panva"
--- a/package.json
+++ b/package.json
@@ -75,7 +75,7 @@
  },
  "devDependencies": {
    "@types/jest": "^29.5.12",
-    "@types/node": "^20.12.8",
+    "@types/node": "^20.12.11",
    "@typescript-eslint/eslint-plugin": "^7.8.0",
    "@typescript-eslint/parser": "^7.8.0",
    "@vercel/ncc": "^0.38.1",
@@ -85,7 +85,7 @@
    "eslint-plugin-jsonc": "^2.15.1",
    "eslint-plugin-prettier": "^5.1.3",
    "jest": "^29.7.0",
-    "jose": "^5.2.4",
+    "jose": "^5.3.0",
    "markdownlint-cli": "^0.40.0",
    "nock": "^13.5.4",
    "prettier": "^3.2.5",
Author	SHA1	Message	Date
Brian DeHamer	173725a120	bump actions/attest from 1.1.1 to 1.1.2 (#79 ) Signed-off-by: Brian DeHamer <bdehamer@github.com>	2024-05-16 12:41:02 -07:00
dependabot[bot]	f0669b95f6	Bump the npm-development group with 2 updates (#72 ) Bumps the npm-development group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [jose](https://github.com/panva/jose). Updates `@types/node` from 20.12.8 to 20.12.11 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jose` from 5.2.4 to 5.3.0 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v5.2.4...v5.3.0) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: jose dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-05-13 08:16:24 -07:00
Brian DeHamer	951c0c5f8e	update release documentation (#66 ) Signed-off-by: Brian DeHamer <bdehamer@github.com>	2024-05-10 10:47:07 -07:00
Brian DeHamer	33e2a1e792	bump actions/attest from v1.1.0 to v1.1.1 (#67 ) Signed-off-by: Brian DeHamer <bdehamer@github.com>	2024-05-10 10:46:46 -07:00