diff --git a/package.json b/package.json index 9e56a206..31e5ed7d 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ "@oclif/core": "^3.10.2", "chalk": "^5.3.0", "debug": "^4.3.4", - "npm": "10.2.3", + "npm": "10.4.0", "npm-run-path": "^4.0.1", "semver": "^7.5.4", "shelljs": "^0.8.5", diff --git a/yarn.lock b/yarn.lock index 11bc0c89..b48c372b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1028,7 +1028,7 @@ treeverse "^3.0.0" walk-up-path "^3.0.1" -"@npmcli/config@^8.0.1": +"@npmcli/config@^8.0.2": version "8.1.0" resolved "https://registry.yarnpkg.com/@npmcli/config/-/config-8.1.0.tgz#2c7f6f80d78b9c18d8a70ae7c5fdb481be727bb0" integrity sha512-61LNEybTFaa9Z/f8y6X9s2Blc75aijZK67LxqC5xicBcfkw8M/88nYrRXGXxAUKm6GRlxTZ216dp1UK2+TbaYw== @@ -1240,7 +1240,7 @@ dependencies: which "^3.0.0" -"@npmcli/promise-spawn@^7.0.0": +"@npmcli/promise-spawn@^7.0.0", "@npmcli/promise-spawn@^7.0.1": version "7.0.1" resolved "https://registry.yarnpkg.com/@npmcli/promise-spawn/-/promise-spawn-7.0.1.tgz#a836de2f42a2245d629cf6fbb8dd6c74c74c55af" integrity sha512-P4KkF9jX3y+7yFUxgcUdDtLy+t4OlDGuEBLNs57AZsfSfg+uV6MLndqGpnl4831ggaEdXwR50XFoZP4VFtHolg== @@ -1275,15 +1275,15 @@ read-package-json-fast "^3.0.0" which "^3.0.0" -"@npmcli/run-script@^7.0.0", "@npmcli/run-script@^7.0.2": - version "7.0.3" - resolved "https://registry.yarnpkg.com/@npmcli/run-script/-/run-script-7.0.3.tgz#a803e05c4b58e2a7b3f801a9f2767f22822df457" - integrity sha512-ZMWGLHpzMq3rBGIwPyeaoaleaLMvrBrH8nugHxTi5ACkJZXTxXPtVuEH91ifgtss5hUwJQ2VDnzDBWPmz78rvg== +"@npmcli/run-script@^7.0.0", "@npmcli/run-script@^7.0.2", "@npmcli/run-script@^7.0.4": + version "7.0.4" + resolved "https://registry.yarnpkg.com/@npmcli/run-script/-/run-script-7.0.4.tgz#9f29aaf4bfcf57f7de2a9e28d1ef091d14b2e6eb" + integrity sha512-9ApYM/3+rBt9V80aYg6tZfzj3UWdiYyCt7gJUD1VJKvWF5nwKDSICXbYIQbspFTq6TOpbsEtIC0LArB8d9PFmg== dependencies: "@npmcli/node-gyp" "^3.0.0" + "@npmcli/package-json" "^5.0.0" "@npmcli/promise-spawn" "^7.0.0" node-gyp "^10.0.0" - read-package-json-fast "^3.0.0" which "^4.0.0" "@oclif/core@^3.10.2", "@oclif/core@^3.16.0", "@oclif/core@^3.18.1": @@ -1464,13 +1464,6 @@ dependencies: "@sigstore/protobuf-specs" "^0.2.0" -"@sigstore/bundle@^2.1.0": - version "2.1.0" - resolved "https://registry.yarnpkg.com/@sigstore/bundle/-/bundle-2.1.0.tgz#c6140ca97b68815edf7c4fb7bdbf58d656525c39" - integrity sha512-89uOo6yh/oxaU8AeOUnVrTdVMcGk9Q1hJa7Hkvalc6G3Z3CupWk4Xe9djSgJm9fMkH69s0P0cVHUoKSOemLdng== - dependencies: - "@sigstore/protobuf-specs" "^0.2.1" - "@sigstore/bundle@^2.1.1": version "2.1.1" resolved "https://registry.yarnpkg.com/@sigstore/bundle/-/bundle-2.1.1.tgz#7fad9a1728939301607103722ac6f2a083d2f09a" @@ -1497,15 +1490,6 @@ "@sigstore/protobuf-specs" "^0.2.0" make-fetch-happen "^11.0.1" -"@sigstore/sign@^2.1.0": - version "2.2.0" - resolved "https://registry.yarnpkg.com/@sigstore/sign/-/sign-2.2.0.tgz#4918207d8356877ab42d85d360d5729e9b3ec65a" - integrity sha512-AAbmnEHDQv6CSfrWA5wXslGtzLPtAtHZleKOgxdQYvx/s76Fk6T6ZVt7w2IGV9j1UrFeBocTTQxaXG2oRrDhYA== - dependencies: - "@sigstore/bundle" "^2.1.0" - "@sigstore/protobuf-specs" "^0.2.1" - make-fetch-happen "^13.0.0" - "@sigstore/sign@^2.2.1": version "2.2.1" resolved "https://registry.yarnpkg.com/@sigstore/sign/-/sign-2.2.1.tgz#b37383db1f25ab20cfec980d23ce08e6f99e6caf" @@ -1524,7 +1508,7 @@ "@sigstore/protobuf-specs" "^0.2.0" tuf-js "^1.1.7" -"@sigstore/tuf@^2.1.0", "@sigstore/tuf@^2.3.0": +"@sigstore/tuf@^2.3.0": version "2.3.0" resolved "https://registry.yarnpkg.com/@sigstore/tuf/-/tuf-2.3.0.tgz#de64925ea10b16f3a7e77535d91eaf22be4dd904" integrity sha512-S98jo9cpJwO1mtQ+2zY7bOdcYyfVYCUaofCG6wWRzk3pxKHVAkSfshkfecto2+LKsx7Ovtqbgb2LS8zTRhxJ9Q== @@ -2917,7 +2901,7 @@ cacache@^17.0.0: tar "^6.1.11" unique-filename "^3.0.0" -cacache@^18.0.0: +cacache@^18.0.0, cacache@^18.0.2: version "18.0.2" resolved "https://registry.yarnpkg.com/cacache/-/cacache-18.0.2.tgz#fd527ea0f03a603be5c0da5805635f8eef00c60c" integrity sha512-r3NU8h/P+4lVUHfeRw1dtgQYar3DZMm4/cm2bZgOvrFC/su7budSOeqh52VJIC4U4iG1WWwV6vRW0znqBvxNuw== @@ -3095,7 +3079,7 @@ chownr@^2.0.0: resolved "https://registry.yarnpkg.com/chownr/-/chownr-2.0.0.tgz#15bfbe53d2eab4cf70f18a8cd68ebe5b3cb1dece" integrity sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ== -ci-info@^3.8.0, ci-info@^3.9.0: +ci-info@^3.8.0: version "3.9.0" resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-3.9.0.tgz#4279a62028a7b1f262f3473fc9605f5e218c59b4" integrity sha512-NIxF55hv4nSqQswkAeiOi1r83xy8JldOFDTWiug55KBu9Jnblncd2U6ViHmYgHf01TPZS77NJBhBMKdWj9HQMQ== @@ -3105,12 +3089,12 @@ ci-info@^4.0.0: resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-4.0.0.tgz#65466f8b280fc019b9f50a5388115d17a63a44f2" integrity sha512-TdHqgGf9odd8SXNuxtUBVx8Nv+qZOejE6qyqiy5NtbYYQOeFa6zmHkxlPzmaLxWWHsU6nJmB7AETdVPi+2NBUg== -cidr-regex@^3.1.1: - version "3.1.1" - resolved "https://registry.yarnpkg.com/cidr-regex/-/cidr-regex-3.1.1.tgz#ba1972c57c66f61875f18fd7dd487469770b571d" - integrity sha512-RBqYd32aDwbCMFJRL6wHOlDNYJsPNTt8vC82ErHF5vKt8QQzxm1FrkW8s/R5pVrXMf17sba09Uoy91PKiddAsw== +cidr-regex@4.0.3: + version "4.0.3" + resolved "https://registry.yarnpkg.com/cidr-regex/-/cidr-regex-4.0.3.tgz#07b52c9762d1ff546a50740e92fc2b5b13a6d871" + integrity sha512-HOwDIy/rhKeMf6uOzxtv7FAbrz8zPjmVKfSpM+U7/bNBXC5rtOyr758jxcptiSx6ZZn5LOhPJT5WWxPAGDV8dw== dependencies: - ip-regex "^4.1.0" + ip-regex "^5.0.0" clean-regexp@^1.0.0: version "1.0.0" @@ -4913,10 +4897,10 @@ interpret@^1.0.0: resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.4.0.tgz#665ab8bc4da27a774a40584e812e3e0fa45b1a1e" integrity sha512-agE4QfB2Lkp9uICn7BAqoscw4SZP9kTE2hxiFI3jBPmXJfdqiahTbUuKGsMoN2GtqL9AxhYioAcVvgsb1HvRbA== -ip-regex@^4.1.0: - version "4.3.0" - resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-4.3.0.tgz#687275ab0f57fa76978ff8f4dddc8a23d5990db5" - integrity sha512-B9ZWJxHHOHUhUjCPrMpLD4xEq35bUTClHM1S6CBU5ixQnkZmwipwgc96vAd7AAGM9TGHvJR+Uss+/Ak6UphK+Q== +ip-regex@^5.0.0: + version "5.0.0" + resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-5.0.0.tgz#cd313b2ae9c80c07bd3851e12bf4fa4dc5480632" + integrity sha512-fOCG6lhoKKakwv+C6KdsOnGvgXnmgfmp0myi3bcNwj3qfwPAxRKWEuFhvEFF7ceYIz6+1jRZ+yguLFAmUNPEfw== ip@^2.0.0: version "2.0.0" @@ -4976,12 +4960,12 @@ is-callable@^1.1.3, is-callable@^1.1.4, is-callable@^1.2.7: resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.2.7.tgz#3bc2a85ea742d9e36205dcacdd72ca1fdc51b055" integrity sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA== -is-cidr@^4.0.2: - version "4.0.2" - resolved "https://registry.yarnpkg.com/is-cidr/-/is-cidr-4.0.2.tgz#94c7585e4c6c77ceabf920f8cde51b8c0fda8814" - integrity sha512-z4a1ENUajDbEl/Q6/pVBpTR1nBjjEE1X7qb7bmWYanNnPoKAvUCPFKeXV6Fe4mgTkWKBqiHIcwsI3SndiO5FeA== +is-cidr@^5.0.3: + version "5.0.3" + resolved "https://registry.yarnpkg.com/is-cidr/-/is-cidr-5.0.3.tgz#fcf817c0146dd4a318f27938af89e98a9b21bdd5" + integrity sha512-lKkM0tmz07dAxNsr8Ii9MGreExa9ZR34N9j8mTG5op824kcwBqinZPowNjcVWWc7j+jR8XAMMItOmBkniN0jOA== dependencies: - cidr-regex "^3.1.1" + cidr-regex "4.0.3" is-core-module@^2.11.0, is-core-module@^2.13.0, is-core-module@^2.5.0, is-core-module@^2.8.1: version "2.13.0" @@ -5278,7 +5262,7 @@ json-parse-even-better-errors@^2.3.0, json-parse-even-better-errors@^2.3.1: resolved "https://registry.yarnpkg.com/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz#7c47805a94319928e05777405dc12e1f7a4ee02d" integrity sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w== -json-parse-even-better-errors@^3.0.0: +json-parse-even-better-errors@^3.0.0, json-parse-even-better-errors@^3.0.1: version "3.0.1" resolved "https://registry.yarnpkg.com/json-parse-even-better-errors/-/json-parse-even-better-errors-3.0.1.tgz#02bb29fb5da90b5444581749c22cedd3597c6cb0" integrity sha512-aatBvbL26wVUCLmbWdCpeu9iF5wOyWpagiKkInA+kfws3sWdBrTnsvN2CKcyCYyUrc7rebNBlK6+kteg7ksecg== @@ -5394,10 +5378,10 @@ libnpmdiff@^6.0.3: pacote "^17.0.4" tar "^6.2.0" -libnpmexec@^7.0.3: - version "7.0.6" - resolved "https://registry.yarnpkg.com/libnpmexec/-/libnpmexec-7.0.6.tgz#9489ff1401135d595285feaa120e88ca395e6207" - integrity sha512-TWvtfKyBQ/UiWl54uG7ALuLAGE5s6H6FTQKs7bAH5H19jtEgpxujQz6+iNNVOIMw7Cfw3Oat6RZqL8ZfXmJA9g== +libnpmexec@^7.0.4: + version "7.0.7" + resolved "https://registry.yarnpkg.com/libnpmexec/-/libnpmexec-7.0.7.tgz#ffa67bfbb06f8881ada989d0aa5094e2033f4194" + integrity sha512-pkca7D8s84GqLQf8wh7QKWXUlUKc+BQlwztzCqjWqxVNYjl2sF+WRGB1cmVFBshJ82tm2etWkpmxmkrHus4uJQ== dependencies: "@npmcli/arborist" "^7.2.1" "@npmcli/run-script" "^7.0.2" @@ -5444,10 +5428,10 @@ libnpmpack@^6.0.3: npm-package-arg "^11.0.1" pacote "^17.0.4" -libnpmpublish@^9.0.1: - version "9.0.3" - resolved "https://registry.yarnpkg.com/libnpmpublish/-/libnpmpublish-9.0.3.tgz#644ee50543687eee79bcf2a5bd759a2ff6e60a0d" - integrity sha512-XoF0QgT1Ph9RMBfTwiwZeRN4Rs5t4w1POaRxaoVoWCMUqysswwlAPu3ZZJDNbh7asXBWXcXTJziDWkInhpbiBg== +libnpmpublish@^9.0.2: + version "9.0.4" + resolved "https://registry.yarnpkg.com/libnpmpublish/-/libnpmpublish-9.0.4.tgz#0222c14578088ca9a758585c36d8133b828c87ad" + integrity sha512-330o6pVsCCg77jQ/+kidyG/RiohXYQKpqmzOC4BjUDWcimb+mXptRBh1Kvy27/Zb/CStZLVrfgGc6tXf5+PE3Q== dependencies: ci-info "^4.0.0" normalize-package-data "^6.0.0" @@ -5455,7 +5439,7 @@ libnpmpublish@^9.0.1: npm-registry-fetch "^16.0.0" proc-log "^3.0.0" semver "^7.3.7" - sigstore "^2.1.0" + sigstore "^2.2.0" ssri "^10.0.5" libnpmsearch@^7.0.0: @@ -6458,25 +6442,25 @@ npm-user-validate@^2.0.0: resolved "https://registry.yarnpkg.com/npm-user-validate/-/npm-user-validate-2.0.0.tgz#7b69bbbff6f7992a1d9a8968d52fd6b6db5431b6" integrity sha512-sSWeqAYJ2dUPStJB+AEj0DyLRltr/f6YNcvCA7phkB8/RMLMnVsQ41GMwHo/ERZLYNDsyB2wPm7pZo1mqPOl7Q== -npm@10.2.3: - version "10.2.3" - resolved "https://registry.yarnpkg.com/npm/-/npm-10.2.3.tgz#f30ed73c400685ab52bf3f21cd3fcab1c5b007ce" - integrity sha512-GbUui/rHTl0mW8HhJSn4A0Xg89yCR3I9otgJT1i0z1QBPOVlgbh6rlcUTpHT8Gut9O1SJjWRUU0nEcAymhG2tQ== +npm@10.4.0: + version "10.4.0" + resolved "https://registry.yarnpkg.com/npm/-/npm-10.4.0.tgz#904025b4d932cfaed8799e644a1c5ae7f02729fc" + integrity sha512-RS7Mx0OVfXlOcQLRePuDIYdFCVBPCNapWHplDK+mh7GDdP/Tvor4ocuybRRPSvfcRb2vjRJt1fHCqw3cr8qACQ== dependencies: "@isaacs/string-locale-compare" "^1.1.0" "@npmcli/arborist" "^7.2.1" - "@npmcli/config" "^8.0.1" + "@npmcli/config" "^8.0.2" "@npmcli/fs" "^3.1.0" "@npmcli/map-workspaces" "^3.0.4" "@npmcli/package-json" "^5.0.0" - "@npmcli/promise-spawn" "^7.0.0" - "@npmcli/run-script" "^7.0.2" - "@sigstore/tuf" "^2.1.0" + "@npmcli/promise-spawn" "^7.0.1" + "@npmcli/run-script" "^7.0.4" + "@sigstore/tuf" "^2.3.0" abbrev "^2.0.0" archy "~1.0.0" - cacache "^18.0.0" + cacache "^18.0.2" chalk "^5.3.0" - ci-info "^3.9.0" + ci-info "^4.0.0" cli-columns "^4.0.0" cli-table3 "^0.6.3" columnify "^1.6.0" @@ -6487,16 +6471,16 @@ npm@10.2.3: hosted-git-info "^7.0.1" ini "^4.1.1" init-package-json "^6.0.0" - is-cidr "^4.0.2" - json-parse-even-better-errors "^3.0.0" + is-cidr "^5.0.3" + json-parse-even-better-errors "^3.0.1" libnpmaccess "^8.0.1" libnpmdiff "^6.0.3" - libnpmexec "^7.0.3" + libnpmexec "^7.0.4" libnpmfund "^5.0.1" libnpmhook "^10.0.0" libnpmorg "^6.0.1" libnpmpack "^6.0.3" - libnpmpublish "^9.0.1" + libnpmpublish "^9.0.2" libnpmsearch "^7.0.0" libnpmteam "^6.0.0" libnpmversion "^5.0.1" @@ -6517,7 +6501,7 @@ npm@10.2.3: npm-user-validate "^2.0.0" npmlog "^7.0.1" p-map "^4.0.0" - pacote "^17.0.4" + pacote "^17.0.6" parse-conflict-json "^3.0.1" proc-log "^3.0.0" qrcode-terminal "^0.12.0" @@ -6525,7 +6509,6 @@ npm@10.2.3: semver "^7.5.4" spdx-expression-parse "^3.0.1" ssri "^10.0.5" - strip-ansi "^6.0.1" supports-color "^9.4.0" tar "^6.2.0" text-table "~0.2.0" @@ -6823,7 +6806,7 @@ pacote@^15.2.0: ssri "^10.0.0" tar "^6.1.11" -pacote@^17.0.0, pacote@^17.0.4: +pacote@^17.0.0, pacote@^17.0.4, pacote@^17.0.6: version "17.0.6" resolved "https://registry.yarnpkg.com/pacote/-/pacote-17.0.6.tgz#874bb59cda5d44ab784d0b6530fcb4a7d9b76a60" integrity sha512-cJKrW21VRE8vVTRskJo78c/RCvwJCn1f4qgfxL4w77SOWrTCRcmfkYHlHtS0gqpgjv3zhXflRtgsrUCX5xwNnQ== @@ -7572,16 +7555,6 @@ sigstore@^1.3.0: "@sigstore/tuf" "^1.0.3" make-fetch-happen "^11.0.1" -sigstore@^2.1.0: - version "2.1.0" - resolved "https://registry.yarnpkg.com/sigstore/-/sigstore-2.1.0.tgz#c577b596642b3f360dc4135d476466e6edeb2364" - integrity sha512-kPIj+ZLkyI3QaM0qX8V/nSsweYND3W448pwkDgS6CQ74MfhEkIR8ToK5Iyx46KJYRjseVcD3Rp9zAmUAj6ZjPw== - dependencies: - "@sigstore/bundle" "^2.1.0" - "@sigstore/protobuf-specs" "^0.2.1" - "@sigstore/sign" "^2.1.0" - "@sigstore/tuf" "^2.1.0" - sigstore@^2.2.0: version "2.2.0" resolved "https://registry.yarnpkg.com/sigstore/-/sigstore-2.2.0.tgz#acba5f73ca2158d2b0507bc52d3592149c3ed20e"