From 492975879e630376abc8966bc985bbb8d5ce5502 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 31 Jul 2026 21:28:24 +0000
Subject: [PATCH] Bump sigstore from 4.1.0 to 4.1.1 in /pulumi

Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pulumi/package-lock.json | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/pulumi/package-lock.json b/pulumi/package-lock.json
index 71db548..ebbb6f1 100644
--- a/pulumi/package-lock.json
+++ b/pulumi/package-lock.json
@@ -1168,26 +1168,26 @@
             }
         },
         "node_modules/@sigstore/sign": {
-            "version": "4.1.0",
-            "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.0.tgz",
-            "integrity": "sha512-Vx1RmLxLGnSUqx/o5/VsCjkuN5L7y+vxEEwawvc7u+6WtX2W4GNa7b9HEjmcRWohw/d6BpATXmvOwc78m+Swdg==",
+            "version": "4.1.1",
+            "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-4.1.1.tgz",
+            "integrity": "sha512-Hf4xglukg0XXQ2RiD5vSoLjdPe8OBUPA8XeVjUObheuDcWdYWrnH/BNmxZCzkAy68MzmNCxXLeurJvs6hcP2OQ==",
             "license": "Apache-2.0",
             "dependencies": {
+                "@gar/promise-retry": "^1.0.2",
                 "@sigstore/bundle": "^4.0.0",
-                "@sigstore/core": "^3.1.0",
+                "@sigstore/core": "^3.2.0",
                 "@sigstore/protobuf-specs": "^0.5.0",
-                "make-fetch-happen": "^15.0.3",
-                "proc-log": "^6.1.0",
-                "promise-retry": "^2.0.1"
+                "make-fetch-happen": "^15.0.4",
+                "proc-log": "^6.1.0"
             },
             "engines": {
                 "node": "^20.17.0 || >=22.9.0"
             }
         },
         "node_modules/@sigstore/tuf": {
-            "version": "4.0.1",
-            "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.1.tgz",
-            "integrity": "sha512-OPZBg8y5Vc9yZjmWCHrlWPMBqW5yd8+wFNl+thMdtcWz3vjVSoJQutF8YkrzI0SLGnkuFof4HSsWUhXrf219Lw==",
+            "version": "4.0.2",
+            "resolved": "https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.2.tgz",
+            "integrity": "sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==",
             "license": "Apache-2.0",
             "dependencies": {
                 "@sigstore/protobuf-specs": "^0.5.0",
@@ -3295,17 +3295,17 @@
             "license": "ISC"
         },
         "node_modules/sigstore": {
-            "version": "4.1.0",
-            "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-4.1.0.tgz",
-            "integrity": "sha512-/fUgUhYghuLzVT/gaJoeVehLCgZiUxPCPMcyVNY0lIf/cTCz58K/WTI7PefDarXxp9nUKpEwg1yyz3eSBMTtgA==",
+            "version": "4.1.1",
+            "resolved": "https://registry.npmjs.org/sigstore/-/sigstore-4.1.1.tgz",
+            "integrity": "sha512-endqECJkfhozrXMK5ngu/UAA0xVcVEFdnHJCElGaExypjW+HK5i6zu3NteLoaX/iFbRUbC3+DjttQs0GARr+5w==",
             "license": "Apache-2.0",
             "dependencies": {
                 "@sigstore/bundle": "^4.0.0",
-                "@sigstore/core": "^3.1.0",
+                "@sigstore/core": "^3.2.1",
                 "@sigstore/protobuf-specs": "^0.5.0",
-                "@sigstore/sign": "^4.1.0",
-                "@sigstore/tuf": "^4.0.1",
-                "@sigstore/verify": "^3.1.0"
+                "@sigstore/sign": "^4.1.1",
+                "@sigstore/tuf": "^4.0.2",
+                "@sigstore/verify": "^3.1.1"
             },
             "engines": {
                 "node": "^20.17.0 || >=22.9.0"