deps: @sigstore/tuf@4.0.1

Author: wraithgar

DEPENDENCIES.md

@@ -258,7 +258,6 @@ graph LR;
   bin-links-->proc-log;
   bin-links-->read-cmd-shim;
   bin-links-->write-file-atomic;
-  brace-expansion-->balanced-match;
   cacache-->fs-minipass;
   cacache-->glob;
   cacache-->lru-cache;
@@ -398,7 +397,6 @@ graph LR;
   make-fetch-happen-->proc-log;
   make-fetch-happen-->promise-retry;
   make-fetch-happen-->ssri;
-  minimatch-->brace-expansion;
   minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
   minipass-->yallist;
   minipass-collect-->minipass;

node_modules/.gitignore

@@ -39,18 +39,13 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
-!/@tufjs/models/node_modules/
-/@tufjs/models/node_modules/*
-!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
 !/aproba
 !/archy
-!/balanced-match
 !/bin-links
 !/binary-extensions
-!/brace-expansion
 !/cacache
 !/chalk
 !/chownr

node_modules/@sigstore/tuf/dist/client.js

@@ -23,9 +23,11 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const tuf_js_1 = require("tuf-js");
 const _1 = require(".");
+const package_json_1 = require("../package.json");
 const target_1 = require("./target");
 const TARGETS_DIR_NAME = 'targets';
 class TUFClient {
+    updater;
     constructor(options) {
         const url = new URL(options.mirrorURL);
         const repoName = encodeURIComponent(url.host + url.pathname.replace(/\/$/, ''));
@@ -101,6 +103,7 @@ function initClient(options) {
     const config = {
         fetchTimeout: options.timeout,
         fetchRetry: options.retry,
+        userAgent: `${encodeURIComponent(package_json_1.name)}/${package_json_1.version}`,
     };
     return new tuf_js_1.Updater({
         metadataBaseUrl: options.mirrorURL,

node_modules/@sigstore/tuf/dist/error.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TUFError = void 0;
 class TUFError extends Error {
+    code;
+    cause;
     constructor({ code, message, cause, }) {
         super(message);
         this.code = code;

node_modules/@sigstore/tuf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/tuf",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Client for the Sigstore TUF repository",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,12 +28,12 @@
   },
   "devDependencies": {
     "@sigstore/jest": "^0.0.0",
-    "@tufjs/repo-mock": "^3.0.1",
+    "@tufjs/repo-mock": "^4.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
     "@sigstore/protobuf-specs": "^0.5.0",
-    "tuf-js": "^4.0.0"
+    "tuf-js": "^4.1.0"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"