Compare commits

...

6 Commits

Author SHA1 Message Date
github-actions[bot] b228dba1db chore: update generated content 2026-06-29 14:18:07 +00:00
dependabot[bot] 7fd454c341 build(deps): bump @sigstore/core from 3.1.0 to 3.2.1
Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) from 3.1.0 to 3.2.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...@sigstore/core@3.2.1)

---
updated-dependencies:
- dependency-name: "@sigstore/core"
  dependency-version: 3.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-29 14:17:13 +00:00
CrazyMax 041b2bc7bf Merge pull request #284 from crazy-max/fix-esbuild
preserve names in esbuild bundle
2026-06-29 16:15:25 +02:00
CrazyMax b99bfad9ec preserve names in esbuild bundle
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-06-29 15:05:55 +02:00
temenuzhka-thede fad6f4094f Merge pull request #279 from docker/sec-cli/npm-ci-20260612-184919
fix: replace npm install with npm ci (20260612-184919)
2026-06-12 14:11:06 -05:00
securityeng-bot[bot] 1ff0cd31e1 fix: use lockfile-aware install commands 2026-06-12 18:49:20 +00:00
6 changed files with 109 additions and 124 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ FROM base AS deps
RUN --mount=type=bind,target=.,rw \
--mount=type=cache,target=/src/.yarn/cache \
--mount=type=cache,target=/src/node_modules \
yarn install && mkdir /vendor && cp yarn.lock /vendor
yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
FROM scratch AS vendor-update
COPY --from=deps /vendor /
Generated Vendored
+104 -104
View File
File diff suppressed because one or more lines are too long
Generated Vendored
+2 -2
View File
File diff suppressed because one or more lines are too long
Generated Vendored
-1
View File
@@ -4,7 +4,6 @@ https://www.npmjs.com/package/generate-license-file
The following npm packages may be included in this product:
- @sigstore/bundle@4.0.0
- @sigstore/core@3.2.0
- @sigstore/core@3.2.1
- @sigstore/protobuf-specs@0.5.0
- @sigstore/sign@4.1.1
+1 -1
View File
@@ -4,7 +4,7 @@
"type": "module",
"main": "src/main.ts",
"scripts": {
"build": "esbuild src/main.ts --bundle --platform=node --target=node24 --format=cjs --outfile=dist/index.cjs --sourcemap --minify && yarn run license",
"build": "esbuild src/main.ts --bundle --platform=node --target=node24 --format=cjs --outfile=dist/index.cjs --sourcemap --minify --keep-names && yarn run license",
"lint": "eslint --max-warnings=0 .",
"format": "eslint --fix .",
"test": "vitest run",
+1 -15
View File
@@ -1653,21 +1653,7 @@ __metadata:
languageName: node
linkType: hard
"@sigstore/core@npm:^3.1.0":
version: 3.1.0
resolution: "@sigstore/core@npm:3.1.0"
checksum: 10/c7a2e2d32f52494b40d9c469bc2241cc5d14d5f93fa028f099dcfe403443713f90ef3178684ee11c32e078a4b9fad79500746dfef10f10044c7fa00c909f3760
languageName: node
linkType: hard
"@sigstore/core@npm:^3.2.0":
version: 3.2.0
resolution: "@sigstore/core@npm:3.2.0"
checksum: 10/2425d20297d57a5f5a62f0e6c2f4280818015ea00b3defebdac63f13c7d01db988602c316c16e374ba091c3649dd9a22ae8c9ba3ac165f736b0503164c5da5f5
languageName: node
linkType: hard
"@sigstore/core@npm:^3.2.1":
"@sigstore/core@npm:^3.1.0, @sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
version: 3.2.1
resolution: "@sigstore/core@npm:3.2.1"
checksum: 10/2f6c1ced55f8ed3f7fc705a668eb95db9471511dfb1f054927822bf97a051dd62228ecf6a9f1932d240c2c4ae69a3b5066550789e5ad8f4257839a4370e5a120