Skip to content

build(deps): bump @sigstore/verify from 4.1.0 to 4.1.2 - #1270

Merged
crazy-max merged 1 commit into
mainfrom
dependabot/npm_and_yarn/sigstore/verify-4.1.2
Aug 13, 2026
Merged

build(deps): bump @sigstore/verify from 4.1.0 to 4.1.2#1270
crazy-max merged 1 commit into
mainfrom
dependabot/npm_and_yarn/sigstore/verify-4.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor

Bumps @sigstore/verify from 4.1.0 to 4.1.2.

Release notes

Sourced from @​sigstore/verify's releases.

@​sigstore/verify@​4.1.2

Patch Changes

  • e66d99f: harden pre-signature checkpoint parsing

@​sigstore/verify@​4.1.1

Patch Changes

  • adbe253: Deduplicate transparency-log entries before counting them toward tlogThreshold, so repeated copies of a single entry no longer over-count. This matches the existing duplicate checks for timestamps and SCTs in the same verifier.
Commits

Bumps [@sigstore/verify](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.2.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/verify@4.1.0...@sigstore/verify@4.1.2)

---
updated-dependencies:
- dependency-name: "@sigstore/verify"
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sigstore/verify-4.1.2 branch from 00d6d84 to a448bd4 Compare August 9, 2026 14:08
@crazy-max
crazy-max merged commit 9b67686 into main Aug 13, 2026
116 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/sigstore/verify-4.1.2 branch August 13, 2026 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant