gar/deps updates

DEPENDENCIES.md

@@ -274,21 +274,15 @@ graph LR;
   bin-links-->write-file-atomic;
   brace-expansion-->balanced-match;
   builtins-->semver;
-  cacache-->chownr;
   cacache-->fs-minipass;
   cacache-->glob;
-  cacache-->infer-owner;
   cacache-->lru-cache;
   cacache-->minipass-collect;
   cacache-->minipass-flush;
   cacache-->minipass-pipeline;
   cacache-->minipass;
-  cacache-->mkdirp;
   cacache-->npmcli-fs["@npmcli/fs"];
-  cacache-->npmcli-move-file["@npmcli/move-file"];
   cacache-->p-map;
-  cacache-->promise-inflight;
-  cacache-->rimraf;
   cacache-->ssri;
   cacache-->tar;
   cacache-->unique-filename;
@@ -464,7 +458,6 @@ graph LR;
   make-fetch-happen-->https-proxy-agent;
   make-fetch-happen-->is-lambda;
   make-fetch-happen-->lru-cache;
-  make-fetch-happen-->minipass-collect;
   make-fetch-happen-->minipass-fetch;
   make-fetch-happen-->minipass-flush;
   make-fetch-happen-->minipass-pipeline;
@@ -488,6 +481,7 @@ graph LR;
   minizlib-->minipass;
   minizlib-->yallist;
   node-gyp-->env-paths;
+  node-gyp-->exponential-backoff;
   node-gyp-->glob;
   node-gyp-->graceful-fs;
   node-gyp-->make-fetch-happen;
@@ -707,8 +701,6 @@ graph LR;
   npmcli-mock-registry-->npmcli-template-oss["@npmcli/template-oss"];
   npmcli-mock-registry-->pacote;
   npmcli-mock-registry-->tap;
-  npmcli-move-file-->mkdirp;
-  npmcli-move-file-->rimraf;
   npmcli-package-json-->glob;
   npmcli-package-json-->json-parse-even-better-errors;
   npmcli-package-json-->normalize-package-data;
@@ -778,7 +770,11 @@ graph LR;
   shebang-command-->shebang-regex;
   sigstore-->make-fetch-happen;
   sigstore-->sigstore-protobuf-specs["@sigstore/protobuf-specs"];
+  sigstore-->sigstore-tuf["@sigstore/tuf"];
   sigstore-->tuf-js;
+  sigstore-tuf-->make-fetch-happen;
+  sigstore-tuf-->sigstore-protobuf-specs["@sigstore/protobuf-specs"];
+  sigstore-tuf-->tuf-js;
   socks-->ip;
   socks-->smart-buffer;
   socks-proxy-agent-->agent-base;

node_modules/.gitignore

@@ -6,9 +6,6 @@
 !/@colors/
 /@colors/*
 !/@colors/colors
-!/@gar/
-/@gar/*
-!/@gar/promisify
 !/@isaacs/
 /@isaacs/*
 !/@isaacs/cliui
@@ -29,7 +26,6 @@
 !/@npmcli/installed-package-contents
 !/@npmcli/map-workspaces
 !/@npmcli/metavuln-calculator
-!/@npmcli/move-file
 !/@npmcli/name-from-folder
 !/@npmcli/node-gyp
 !/@npmcli/package-json
@@ -42,6 +38,7 @@
 !/@sigstore/
 /@sigstore/*
 !/@sigstore/protobuf-specs
+!/@sigstore/tuf
 !/@tootallnate/
 /@tootallnate/*
 !/@tootallnate/once
@@ -103,6 +100,7 @@
 !/err-code
 !/event-target-shim
 !/events
+!/exponential-backoff
 !/fastest-levenshtein
 !/foreground-child
 !/fs-minipass
@@ -123,7 +121,6 @@
 !/ignore-walk
 !/imurmurhash
 !/indent-string
-!/infer-owner
 !/inflight
 !/inherits
 !/ini
@@ -188,32 +185,16 @@
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/@npmcli/
-/node-gyp/node_modules/@npmcli/*
-!/node-gyp/node_modules/@npmcli/fs
 !/node-gyp/node_modules/abbrev
 !/node-gyp/node_modules/are-we-there-yet
 !/node-gyp/node_modules/brace-expansion
-!/node-gyp/node_modules/cacache
-!/node-gyp/node_modules/cacache/node_modules/
-/node-gyp/node_modules/cacache/node_modules/*
-!/node-gyp/node_modules/cacache/node_modules/brace-expansion
-!/node-gyp/node_modules/cacache/node_modules/glob
-!/node-gyp/node_modules/cacache/node_modules/minimatch
-!/node-gyp/node_modules/fs-minipass
 !/node-gyp/node_modules/gauge
 !/node-gyp/node_modules/glob
-!/node-gyp/node_modules/make-fetch-happen
 !/node-gyp/node_modules/minimatch
-!/node-gyp/node_modules/minipass-fetch
-!/node-gyp/node_modules/minipass
 !/node-gyp/node_modules/nopt
 !/node-gyp/node_modules/npmlog
 !/node-gyp/node_modules/readable-stream
 !/node-gyp/node_modules/signal-exit
-!/node-gyp/node_modules/ssri
-!/node-gyp/node_modules/unique-filename
-!/node-gyp/node_modules/unique-slug
 !/node-gyp/node_modules/which
 !/nopt
 !/normalize-package-data

node_modules/@isaacs/cliui/node_modules/strip-ansi/index.js

@@ -1,9 +1,14 @@
 import ansiRegex from 'ansi-regex';
 
+const regex = ansiRegex();
+
 export default function stripAnsi(string) {
 	if (typeof string !== 'string') {
 		throw new TypeError(`Expected a \`string\`, got \`${typeof string}\``);
 	}
 
-	return string.replace(ansiRegex(), '');
+	// Even though the regex is global, we don't need to reset the `.lastIndex`
+	// because unlike `.exec()` and `.test()`, `.replace()` does it automatically
+	// and doing it manually has a performance penalty.
+	return string.replace(regex, '');
 }

node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "strip-ansi",
-	"version": "7.0.1",
+	"version": "7.1.0",
 	"description": "Strip ANSI escape codes from a string",
 	"license": "MIT",
 	"repository": "chalk/strip-ansi",