Merge remote-tracking branch 'origin/main' into sm/check-allowlist-first

CHANGELOG.md

@@ -1,3 +1,9 @@
+## [3.1.2](https://github.com/salesforcecli/plugin-trust/compare/3.1.1...3.1.2) (2023-12-05)
+
+### Bug Fixes
+
+- bump npm ([3c50c17](https://github.com/salesforcecli/plugin-trust/commit/3c50c17eb6b628efc449e7eb1dd7f36dff07f412))
+
 ## [3.1.1](https://github.com/salesforcecli/plugin-trust/compare/3.1.0...3.1.1) (2023-12-03)
 
 ### Bug Fixes

README.md

@@ -119,6 +119,6 @@ EXAMPLES
   $ @salesforce/plugin-trust plugins trust verify --npm @scope/npmName
 ```
 
-_See code: [src/commands/plugins/trust/verify.ts](https://github.com/salesforcecli/plugin-trust/blob/3.1.1/src/commands/plugins/trust/verify.ts)_
+_See code: [src/commands/plugins/trust/verify.ts](https://github.com/salesforcecli/plugin-trust/blob/3.1.2/src/commands/plugins/trust/verify.ts)_
 
 <!-- commandsstop -->

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/plugin-trust",
   "description": "validate a digital signature for a npm package",
-  "version": "3.1.1",
+  "version": "3.1.2",
   "author": "Salesforce",
   "bin": {
     "sf-trust": "bin/dev"
@@ -12,15 +12,15 @@
     "@salesforce/core": "^6.1.3",
     "@salesforce/sf-plugins-core": "^5.0.4",
     "got": "^13.0.0",
-    "npm": "9.9.1",
+    "npm": "10.2.3",
     "npm-run-path": "^4.0.1",
     "proxy-agent": "^6.3.1",
     "shelljs": "^0.8.4"
   },
   "devDependencies": {
     "@oclif/plugin-command-snapshot": "^5.0.3",
     "@salesforce/cli-plugins-testkit": "^5.0.6",
-    "@salesforce/dev-scripts": "^7.1.1",
+    "@salesforce/dev-scripts": "^8.0.0",
     "@salesforce/plugin-command-reference": "^3.0.47",
     "@salesforce/plugin-telemetry": "^2.3.8",
     "@salesforce/ts-sinon": "^1.4.18",