deps: update ssri@12.0.0

node_modules/.gitignore

@@ -59,6 +59,7 @@
 !/@npmcli/metavuln-calculator/node_modules/npm-registry-fetch
 !/@npmcli/metavuln-calculator/node_modules/pacote
 !/@npmcli/metavuln-calculator/node_modules/proc-log
+!/@npmcli/metavuln-calculator/node_modules/ssri
 !/@npmcli/metavuln-calculator/node_modules/unique-filename
 !/@npmcli/metavuln-calculator/node_modules/unique-slug
 !/@npmcli/name-from-folder
@@ -104,6 +105,7 @@
 !/@sigstore/sign/node_modules/cacache
 !/@sigstore/sign/node_modules/make-fetch-happen
 !/@sigstore/sign/node_modules/proc-log
+!/@sigstore/sign/node_modules/ssri
 !/@sigstore/sign/node_modules/unique-filename
 !/@sigstore/sign/node_modules/unique-slug
 !/@sigstore/tuf
@@ -130,7 +132,6 @@
 !/cacache/node_modules/minizlib
 !/cacache/node_modules/mkdirp
 !/cacache/node_modules/p-map
-!/cacache/node_modules/ssri
 !/cacache/node_modules/tar
 !/cacache/node_modules/yallist
 !/chalk
@@ -196,7 +197,6 @@
 /make-fetch-happen/node_modules/*
 !/make-fetch-happen/node_modules/minipass-fetch
 !/make-fetch-happen/node_modules/minizlib
-!/make-fetch-happen/node_modules/ssri
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
@@ -233,6 +233,7 @@
 !/node-gyp/node_modules/make-fetch-happen
 !/node-gyp/node_modules/nopt
 !/node-gyp/node_modules/proc-log
+!/node-gyp/node_modules/ssri
 !/node-gyp/node_modules/unique-filename
 !/node-gyp/node_modules/unique-slug
 !/nopt
@@ -274,7 +275,6 @@
 !/pacote/node_modules/npm-bundled
 !/pacote/node_modules/npm-normalize-package-bin
 !/pacote/node_modules/npm-packlist
-!/pacote/node_modules/ssri
 !/pacote/node_modules/which
 !/parse-conflict-json
 !/path-key
@@ -340,6 +340,7 @@
 !/tuf-js/node_modules/cacache
 !/tuf-js/node_modules/make-fetch-happen
 !/tuf-js/node_modules/proc-log
+!/tuf-js/node_modules/ssri
 !/tuf-js/node_modules/unique-filename
 !/tuf-js/node_modules/unique-slug
 !/unique-filename

node_modules/cacache/node_modules/ssri/package.json → node_modules/@npmcli/metavuln-calculator/node_modules/ssri/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssri",
-  "version": "12.0.0",
+  "version": "10.0.6",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
   "main": "lib/index.js",
   "files": [
@@ -13,12 +13,11 @@
     "posttest": "npm run lint",
     "test": "tap",
     "coverage": "tap",
-    "lint": "npm run eslint",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run eslint -- --fix",
-    "snap": "tap",
-    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
+    "lintfix": "npm run lint -- --fix",
+    "snap": "tap"
   },
   "tap": {
     "check-coverage": true,
@@ -51,16 +50,16 @@
     "minipass": "^7.0.3"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.22.0",
     "tap": "^16.0.1"
   },
   "engines": {
-    "node": "^18.17.0 || >=20.5.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.22.0",
     "publish": "true"
   }
 }

node_modules/make-fetch-happen/node_modules/ssri/package.json → node_modules/@sigstore/sign/node_modules/ssri/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssri",
-  "version": "12.0.0",
+  "version": "10.0.6",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
   "main": "lib/index.js",
   "files": [
@@ -13,12 +13,11 @@
     "posttest": "npm run lint",
     "test": "tap",
     "coverage": "tap",
-    "lint": "npm run eslint",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run eslint -- --fix",
-    "snap": "tap",
-    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
+    "lintfix": "npm run lint -- --fix",
+    "snap": "tap"
   },
   "tap": {
     "check-coverage": true,
@@ -51,16 +50,16 @@
     "minipass": "^7.0.3"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.22.0",
     "tap": "^16.0.1"
   },
   "engines": {
-    "node": "^18.17.0 || >=20.5.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.22.0",
     "publish": "true"
   }
 }

node_modules/pacote/node_modules/ssri/package.json → node_modules/node-gyp/node_modules/ssri/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssri",
-  "version": "12.0.0",
+  "version": "10.0.6",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
   "main": "lib/index.js",
   "files": [
@@ -13,12 +13,11 @@
     "posttest": "npm run lint",
     "test": "tap",
     "coverage": "tap",
-    "lint": "npm run eslint",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run eslint -- --fix",
-    "snap": "tap",
-    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
+    "lintfix": "npm run lint -- --fix",
+    "snap": "tap"
   },
   "tap": {
     "check-coverage": true,
@@ -51,16 +50,16 @@
     "minipass": "^7.0.3"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/template-oss": "4.22.0",
     "tap": "^16.0.1"
   },
   "engines": {
-    "node": "^18.17.0 || >=20.5.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.22.0",
     "publish": "true"
   }
 }

node_modules/ssri/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssri",
-  "version": "10.0.6",
+  "version": "12.0.0",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
   "main": "lib/index.js",
   "files": [
@@ -13,11 +13,12 @@
     "posttest": "npm run lint",
     "test": "tap",
     "coverage": "tap",
-    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
+    "lint": "npm run eslint",
     "postlint": "template-oss-check",
     "template-oss-apply": "template-oss-apply --force",
-    "lintfix": "npm run lint -- --fix",
-    "snap": "tap"
+    "lintfix": "npm run eslint -- --fix",
+    "snap": "tap",
+    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
   },
   "tap": {
     "check-coverage": true,
@@ -50,16 +51,16 @@
     "minipass": "^7.0.3"
   },
   "devDependencies": {
-    "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.22.0",
+    "@npmcli/eslint-config": "^5.0.0",
+    "@npmcli/template-oss": "4.23.3",
     "tap": "^16.0.1"
   },
   "engines": {
-    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+    "node": "^18.17.0 || >=20.5.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.22.0",
+    "version": "4.23.3",
     "publish": "true"
   }
 }

node_modules/tuf-js/node_modules/ssri/LICENSE.md

@@ -0,0 +1,16 @@
+ISC License
+
+Copyright 2021 (c) npm, Inc.
+
+Permission to use, copy, modify, and/or distribute this software for
+any purpose with or without fee is hereby granted, provided that the
+above copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE COPYRIGHT HOLDER DISCLAIMS
+ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR
+CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE
+USE OR PERFORMANCE OF THIS SOFTWARE.