bump actions/attest from 1.1.1 to 1.1.2 (#63 )

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Bump @types/node from 20.12.8 to 20.12.11 in the npm-development group (#62 )
2024-05-16 12:41:11 -07:00 · 2024-05-13 08:13:52 -07:00
3 changed files with 6 additions and 6 deletions
--- a/action.yml
+++ b/action.yml
@@ -52,7 +52,7 @@ runs:
      id: generate-sbom-predicate
      with:
        sbom-path: ${{ inputs.sbom-path || steps.sbom-output.outputs.path }}
-    - uses: actions/attest@32f49af6653ef9b7d1a40182d53fc9ebd53447d8 # v1.1.1
+    - uses: actions/attest@12c083815ed46d5d78222e3824f4a26c42c234d3 # v1.1.2
      id: attest
      with:
        subject-path: ${{ inputs.subject-path }}
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
      "devDependencies": {
        "@actions/attest": "^1.2.1",
        "@types/jest": "^29.5.12",
-        "@types/node": "^20.12.8",
+        "@types/node": "^20.12.11",
        "@typescript-eslint/eslint-plugin": "^7.8.0",
        "@typescript-eslint/parser": "^7.8.0",
        "@vercel/ncc": "^0.38.1",
@@ -1885,9 +1885,9 @@
      "dev": true
    },
    "node_modules/@types/node": {
-      "version": "20.12.8",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.12.8.tgz",
-      "integrity": "sha512-NU0rJLJnshZWdE/097cdCBbyW1h4hEg0xpovcoAQYHl8dnEyp/NAOiE45pvc+Bd1Dt+2r94v2eGFpQJ4R7g+2w==",
+      "version": "20.12.11",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.12.11.tgz",
+      "integrity": "sha512-vDg9PZ/zi+Nqp6boSOT7plNuthRugEKixDv5sFTIpkE89MmNtEArAShI4mxuX2+UrLEe9pxC1vm2cjm9YlWbJw==",
      "dev": true,
      "dependencies": {
        "undici-types": "~5.26.4"
--- a/package.json
+++ b/package.json
@@ -75,7 +75,7 @@
  "devDependencies": {
    "@actions/attest": "^1.2.1",
    "@types/jest": "^29.5.12",
-    "@types/node": "^20.12.8",
+    "@types/node": "^20.12.11",
    "@typescript-eslint/eslint-plugin": "^7.8.0",
    "@typescript-eslint/parser": "^7.8.0",
    "@vercel/ncc": "^0.38.1",