bump tuf-js from 2.2.1 to 3.0.0 (#1273)

Signed-off-by: Brian DeHamer <[email protected]>
sigstore · Oct 10, 2024 · 52005b2 · 52005b2
1 parent 32eaf8a
commit 52005b2
Show file tree

Hide file tree

Showing 4 changed files with 286 additions and 11 deletions.
diff --git a/.changeset/cold-feet-roll.md b/.changeset/cold-feet-roll.md
@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': major
+---
+
+Bump `tuf-js` from 2.2.1 to 3.0.0
diff --git a/.changeset/nasty-eyes-pretend.md b/.changeset/nasty-eyes-pretend.md
@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': major
+---
+
+Drop support for node 16
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/tuf/package.json b/packages/tuf/package.json
@@ -33,9 +33,9 @@
   },
   "dependencies": {
     "@sigstore/protobuf-specs": "^0.3.2",
-    "tuf-js": "^2.2.1"
+    "tuf-js": "^3.0.0"
   },
   "engines": {
-    "node": "^16.14.0 || >=18.0.0"
+    "node": "^18.17.0 || >=20.5.0"
   }
 }