From ba2fe9bb5fbc408ed416434be0f25070d9e3a2cd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jul 2024 09:32:12 -0700 Subject: [PATCH 01/28] Bump the npm-development group with 3 updates (#179) Bumps the npm-development group with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [typescript](https://github.com/Microsoft/TypeScript). Updates `@typescript-eslint/eslint-plugin` from 7.16.1 to 7.17.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.17.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.16.1 to 7.17.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.17.0/packages/parser) Updates `typescript` from 5.5.3 to 5.5.4 - [Release notes](https://github.com/Microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](https://github.com/Microsoft/TypeScript/compare/v5.5.3...v5.5.4) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 96 +++++++++++++++++++++++------------------------ package.json | 6 +-- 2 files changed, 51 insertions(+), 51 deletions(-) diff --git a/package-lock.json b/package-lock.json index aedede7..16fd088 100644 --- a/package-lock.json +++ b/package-lock.json @@ -15,8 +15,8 @@ "devDependencies": { "@types/jest": "^29.5.12", "@types/node": "^20.14.11", - "@typescript-eslint/eslint-plugin": "^7.16.1", - "@typescript-eslint/parser": "^7.16.1", + "@typescript-eslint/eslint-plugin": "^7.17.0", + "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", @@ -30,7 +30,7 @@ "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", "ts-jest": "^29.2.3", - "typescript": "^5.5.3" + "typescript": "^5.5.4" }, "engines": { "node": ">=20" @@ -1784,16 +1784,16 @@ "license": "MIT" }, "node_modules/@typescript-eslint/eslint-plugin": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-7.16.1.tgz", - "integrity": "sha512-SxdPak/5bO0EnGktV05+Hq8oatjAYVY3Zh2bye9pGZy6+jwyR3LG3YKkV4YatlsgqXP28BTeVm9pqwJM96vf2A==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-7.17.0.tgz", + "integrity": "sha512-pyiDhEuLM3PuANxH7uNYan1AaFs5XE0zw1hq69JBvGvE7gSuEoQl1ydtEe/XQeoC3GQxLXyOVa5kNOATgM638A==", "dev": true, "dependencies": { "@eslint-community/regexpp": "^4.10.0", - "@typescript-eslint/scope-manager": "7.16.1", - "@typescript-eslint/type-utils": "7.16.1", - "@typescript-eslint/utils": "7.16.1", - "@typescript-eslint/visitor-keys": "7.16.1", + "@typescript-eslint/scope-manager": "7.17.0", + "@typescript-eslint/type-utils": "7.17.0", + "@typescript-eslint/utils": "7.17.0", + "@typescript-eslint/visitor-keys": "7.17.0", "graphemer": "^1.4.0", "ignore": "^5.3.1", "natural-compare": "^1.4.0", @@ -1817,15 +1817,15 @@ } }, "node_modules/@typescript-eslint/parser": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-7.16.1.tgz", - "integrity": "sha512-u+1Qx86jfGQ5i4JjK33/FnawZRpsLxRnKzGE6EABZ40KxVT/vWsiZFEBBHjFOljmmV3MBYOHEKi0Jm9hbAOClA==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-7.17.0.tgz", + "integrity": "sha512-puiYfGeg5Ydop8eusb/Hy1k7QmOU6X3nvsqCgzrB2K4qMavK//21+PzNE8qeECgNOIoertJPUC1SpegHDI515A==", "dev": true, "dependencies": { - "@typescript-eslint/scope-manager": "7.16.1", - "@typescript-eslint/types": "7.16.1", - "@typescript-eslint/typescript-estree": "7.16.1", - "@typescript-eslint/visitor-keys": "7.16.1", + "@typescript-eslint/scope-manager": "7.17.0", + "@typescript-eslint/types": "7.17.0", + "@typescript-eslint/typescript-estree": "7.17.0", + "@typescript-eslint/visitor-keys": "7.17.0", "debug": "^4.3.4" }, "engines": { @@ -1845,13 +1845,13 @@ } }, "node_modules/@typescript-eslint/scope-manager": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-7.16.1.tgz", - "integrity": "sha512-nYpyv6ALte18gbMz323RM+vpFpTjfNdyakbf3nsLvF43uF9KeNC289SUEW3QLZ1xPtyINJ1dIsZOuWuSRIWygw==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-7.17.0.tgz", + "integrity": "sha512-0P2jTTqyxWp9HiKLu/Vemr2Rg1Xb5B7uHItdVZ6iAenXmPo4SZ86yOPCJwMqpCyaMiEHTNqizHfsbmCFT1x9SA==", "dev": true, "dependencies": { - "@typescript-eslint/types": "7.16.1", - "@typescript-eslint/visitor-keys": "7.16.1" + "@typescript-eslint/types": "7.17.0", + "@typescript-eslint/visitor-keys": "7.17.0" }, "engines": { "node": "^18.18.0 || >=20.0.0" @@ -1862,13 +1862,13 @@ } }, "node_modules/@typescript-eslint/type-utils": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-7.16.1.tgz", - "integrity": "sha512-rbu/H2MWXN4SkjIIyWcmYBjlp55VT+1G3duFOIukTNFxr9PI35pLc2ydwAfejCEitCv4uztA07q0QWanOHC7dA==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-7.17.0.tgz", + "integrity": "sha512-XD3aaBt+orgkM/7Cei0XNEm1vwUxQ958AOLALzPlbPqb8C1G8PZK85tND7Jpe69Wualri81PLU+Zc48GVKIMMA==", "dev": true, "dependencies": { - "@typescript-eslint/typescript-estree": "7.16.1", - "@typescript-eslint/utils": "7.16.1", + "@typescript-eslint/typescript-estree": "7.17.0", + "@typescript-eslint/utils": "7.17.0", "debug": "^4.3.4", "ts-api-utils": "^1.3.0" }, @@ -1889,9 +1889,9 @@ } }, "node_modules/@typescript-eslint/types": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-7.16.1.tgz", - "integrity": "sha512-AQn9XqCzUXd4bAVEsAXM/Izk11Wx2u4H3BAfQVhSfzfDOm/wAON9nP7J5rpkCxts7E5TELmN845xTUCQrD1xIQ==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-7.17.0.tgz", + "integrity": "sha512-a29Ir0EbyKTKHnZWbNsrc/gqfIBqYPwj3F2M+jWE/9bqfEHg0AMtXzkbUkOG6QgEScxh2+Pz9OXe11jHDnHR7A==", "dev": true, "engines": { "node": "^18.18.0 || >=20.0.0" @@ -1902,13 +1902,13 @@ } }, "node_modules/@typescript-eslint/typescript-estree": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-7.16.1.tgz", - "integrity": "sha512-0vFPk8tMjj6apaAZ1HlwM8w7jbghC8jc1aRNJG5vN8Ym5miyhTQGMqU++kuBFDNKe9NcPeZ6x0zfSzV8xC1UlQ==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-7.17.0.tgz", + "integrity": "sha512-72I3TGq93t2GoSBWI093wmKo0n6/b7O4j9o8U+f65TVD0FS6bI2180X5eGEr8MA8PhKMvYe9myZJquUT2JkCZw==", "dev": true, "dependencies": { - "@typescript-eslint/types": "7.16.1", - "@typescript-eslint/visitor-keys": "7.16.1", + "@typescript-eslint/types": "7.17.0", + "@typescript-eslint/visitor-keys": "7.17.0", "debug": "^4.3.4", "globby": "^11.1.0", "is-glob": "^4.0.3", @@ -1954,15 +1954,15 @@ } }, "node_modules/@typescript-eslint/utils": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-7.16.1.tgz", - "integrity": "sha512-WrFM8nzCowV0he0RlkotGDujx78xudsxnGMBHI88l5J8wEhED6yBwaSLP99ygfrzAjsQvcYQ94quDwI0d7E1fA==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-7.17.0.tgz", + "integrity": "sha512-r+JFlm5NdB+JXc7aWWZ3fKSm1gn0pkswEwIYsrGPdsT2GjsRATAKXiNtp3vgAAO1xZhX8alIOEQnNMl3kbTgJw==", "dev": true, "dependencies": { "@eslint-community/eslint-utils": "^4.4.0", - "@typescript-eslint/scope-manager": "7.16.1", - "@typescript-eslint/types": "7.16.1", - "@typescript-eslint/typescript-estree": "7.16.1" + "@typescript-eslint/scope-manager": "7.17.0", + "@typescript-eslint/types": "7.17.0", + "@typescript-eslint/typescript-estree": "7.17.0" }, "engines": { "node": "^18.18.0 || >=20.0.0" @@ -1976,12 +1976,12 @@ } }, "node_modules/@typescript-eslint/visitor-keys": { - "version": "7.16.1", - "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-7.16.1.tgz", - "integrity": "sha512-Qlzzx4sE4u3FsHTPQAAQFJFNOuqtuY0LFrZHwQ8IHK705XxBiWOFkfKRWu6niB7hwfgnwIpO4jTC75ozW1PHWg==", + "version": "7.17.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-7.17.0.tgz", + "integrity": "sha512-RVGC9UhPOCsfCdI9pU++K4nD7to+jTcMIbXTSOcrLqUEW6gF2pU1UUbYJKc9cvcRSK1UDeMJ7pdMxf4bhMpV/A==", "dev": true, "dependencies": { - "@typescript-eslint/types": "7.16.1", + "@typescript-eslint/types": "7.17.0", "eslint-visitor-keys": "^3.4.3" }, "engines": { @@ -7987,9 +7987,9 @@ } }, "node_modules/typescript": { - "version": "5.5.3", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.5.3.tgz", - "integrity": "sha512-/hreyEujaB0w76zKo6717l3L0o/qEUtRgdvUBvlkhoWeOVMjMuHNHk0BRBzikzuGDqNmPQbg5ifMEqsHLiIUcQ==", + "version": "5.5.4", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.5.4.tgz", + "integrity": "sha512-Mtq29sKDAEYP7aljRgtPOpTvOfbwRWlS6dPRzwjdE+C0R4brX/GUyhHSecbHMFLNBLcJIPt9nl9yG5TZ1weH+Q==", "dev": true, "bin": { "tsc": "bin/tsc", diff --git a/package.json b/package.json index b4588ea..ba6b8fa 100644 --- a/package.json +++ b/package.json @@ -76,8 +76,8 @@ "devDependencies": { "@types/jest": "^29.5.12", "@types/node": "^20.14.11", - "@typescript-eslint/eslint-plugin": "^7.16.1", - "@typescript-eslint/parser": "^7.16.1", + "@typescript-eslint/eslint-plugin": "^7.17.0", + "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", @@ -91,6 +91,6 @@ "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", "ts-jest": "^29.2.3", - "typescript": "^5.5.3" + "typescript": "^5.5.4" } } From 3630726af12fff79d666cc848a4a8dd181af7eff Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Jul 2024 09:37:12 -0700 Subject: [PATCH 02/28] Bump @types/node from 20.14.11 to 22.0.0 (#180) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.14.11 to 22.0.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 15 ++++++++------- package.json | 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 16fd088..b617ad8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,7 +14,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^20.14.11", + "@types/node": "^22.0.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", @@ -1729,11 +1729,11 @@ "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==" }, "node_modules/@types/node": { - "version": "20.14.11", - "resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.11.tgz", - "integrity": "sha512-kprQpL8MMeszbz6ojB5/tU8PLN4kesnN8Gjzw349rDlNgsSzg90lAVj3llK99Dh7JON+t9AuscPPFW6mPbTnSA==", + "version": "22.0.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.0.0.tgz", + "integrity": "sha512-VT7KSYudcPOzP5Q0wfbowyNLaVR8QWUdw+088uFWwfvpY6uCWaXpqV6ieLAu9WBcnTa7H4Z5RLK8I5t2FuOcqw==", "dependencies": { - "undici-types": "~5.26.4" + "undici-types": "~6.11.1" } }, "node_modules/@types/qs": { @@ -8032,8 +8032,9 @@ } }, "node_modules/undici-types": { - "version": "5.26.5", - "license": "MIT" + "version": "6.11.1", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.11.1.tgz", + "integrity": "sha512-mIDEX2ek50x0OlRgxryxsenE5XaQD4on5U2inY7RApK3SOJpofyw7uW2AyfMKkhAxXIceo2DeWGVGwyvng1GNQ==" }, "node_modules/unique-filename": { "version": "3.0.0", diff --git a/package.json b/package.json index ba6b8fa..e6ddb8b 100644 --- a/package.json +++ b/package.json @@ -75,7 +75,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^20.14.11", + "@types/node": "^22.0.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", From 9ff3713ef183e028b07415e8a740b634c054a663 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Tue, 30 Jul 2024 11:16:49 -0700 Subject: [PATCH 03/28] Bump @actions/attest from 1.3.0 to 1.3.1 (#181) Signed-off-by: Brian DeHamer --- dist/index.js | Bin 3168568 -> 2938659 bytes dist/licenses.txt | Bin 164487 -> 129439 bytes package-lock.json | 275 ++-------------------------------------------- package.json | 4 +- 4 files changed, 12 insertions(+), 267 deletions(-) diff --git a/dist/index.js b/dist/index.js index 57a77f8f391b47ba6228eddea1448cd1b609a0b4..811e50bb6951ce0d53a12fadaaefe1fcfaf44936 100644 GIT binary patch delta 15149 zcmb_j34B!5)&I@Ro5_CfePmAvd4Z73WSPvK1w#mk3IZl9q9BGLnIr>ACd-7dg+*+s ziYNwhT&e`cY8Mf;`rNS4)@rR)sCKcfELLk#EZEfr;XC)eH#3ibwBPsp`s>5Id(XY^ z-gD1A=YN)Y_Q`{WhxR^Y*tfn2j*c|`9J-;n-xTT#fPbQ)(Cqd&e9osXvtDJ| z&>ZUO3roufR`f}=(sHD*H}?ko;lQj=v%h2J!mH;6!q(NnKu3$z76|iqYp}1cKhSHl zO-hvTf9m+PQn!C~N66nI4dOH^y)xPIf$+6~-eBu$YdEwb&{d{a{1Nr{8_CG{)X3WmCDm%|60IdtgtN5{FQ_?yE)+(d;x91iq_i_cpZ zj%y9JMVHjv5e#&NhxXfjS?cP8t&+7sC9?Mh`uaP<;Czl`KzCAl+|X4O`7q%G9Wz7Y zj=C*%4m)2Vac)Yjq5iHG{I@r<`6qgk)2VI@ zXTauTjxEO=27HY8nD7zsG2>&wCr&=*h@UrE-rpBL^u?B%n-lO!#3xCvxjEVRw7^dr z4xAwm$_o~fS%!?js%|`zPUM8YqltfMn!mX{AP-+hCL0A;rOykS+Q~%tY7x0rsPy`L zL(aP=z~hU_9mXmzbT1=CP~Jr1pz{WDv)SXWu68K|*-OZ+W~bNXR9}CwglsXpU5;vR zWOxE>zLDI7vR7THw&5&W%+=LZRh8ghinAVVB7hVYSU90Y3JV&1O%P%Uh{Tk0fz$|1z@5T*VueHl*8Z_IX^sD&_Sr&18ew<#l`2 z{oK())|j1+YM(>tbq2^ckx|ti{w5y{kjo4vXQdaMN#;VB)<(V|R99E3q^H`*HgjdQ z!>xV>UoG(cb`pT^Z4#vPi!v8_=3CuxqMamv4f7!`NL=QsDzCQKr9pCw;PCjAPsnUJ z88DbDJubJh0{QV3#AFoQ$a-~sd%JK6$2yT^KCcfPN#==wO*bV~dpyo+6vdVPUN{^g znGp9Z%QSnP4!6pK?IAKE_MCvQfhKLokNYt{Zp64SztyF396!j zaJWSmpBoMz zCw8;D+UcrPl+9Cv#3gtgRX+H90%vn`|nYM;ZyI{gU|q46-WLHF$>Q4ID;U7@hl*WcY8>J0~4 z>`-umX2^SQAz>pFY$bKc>()gTsTFFslB`^*s7Ug6wAuT@{@!rk!eF@FTHG*o`aD;$ zZRqfWnQ&)-F?gVyy38y69sL1#vz(5D4Zky(;dfifgR#aOdFXcHHYIX>rft$NjK}cy zounLocR-+U+KMM|TBbH5GT`_ykxYD}3egQerQ_l5?IZ<)FH-_jrcnmxtaPkG4rjKL zBseil7*v!|3tVNTW56gwdRcacvFP;mmOPRwMw^Z?0%JDFRmDl9=w`l#%ffd?c!IkPC@c2BMWl#jS zNS<>aiA%&|ek_N&;rWM&1CCXhDU7V4*_S-)#yw=LyzvpT!vJsQQHupXgNF;7e~F6P zb2lqAEQL)YC^YN8OHu_qX9-GvN%Aa(Yw`F8p{J5%$lv}RSz&~Iw;BYP_8_-$yO8M( zo3c~jy2o%Gr+y0hsDd=_L7HPm8=_%y%0WV(Oiswm^ zy#Ez4J^>uxWY$Xx*1@AJ2f80YQ8;`U&(Ql6DU$PlMM8qS_c!EABlNsZa?N#i6eIYw zAUiE4Ar~~hyNifwqb&cPEHembKb`8)?f)a0tlBR{?+RS+>eceHcgY}bGvx@$G8k=> z;MmKFbVP`W0UC&psxF;5?f31fAnI=rpm?;6;BKuF7~k*qeUcCysm5$Xz9`vPIRvT7S_yFH->PVFl& z!@A!a;-T&LhCD%%2Fny+o}`-?R-PeOs8|RNo*_TXM)ZTmsn31^3IfBl(hS)A6)8fi z>hn7EYWT=kq*Q@dI-@M7oFyhhbw?m9EtofbZd3i0)91{eq!^&^>h3_ORqFDu47T~h z2%Kwc@l+8-2U>%O5Q-66NCj}*oshbrPG|Y*?AGGhp*6vd4u6H$?vRRYHq8xDSv#kG z_H^WFF?U;v)ss^@uAM%2-i&MJ@V=E^yU*^{dSmOtuBC-*`2>R%g=;nX!KITHB@QNj zEk_j4jU(r+?pzk?up&%r?e9`t8T16MKxd?VW(1mBgI(SI;WDY2r}tTsrV`)eNsVvZ?Au~J=mxGSKYkgS=mwBUX+yMgb?3^J+Ly+yV{Pf zYsctu(7l;t!?)^bGIUKsZz0MSc&tH)+Ys*U51^}+*xcdo>yzdNIuUuO?yn{#=+<>; zT04x+Q>Z_Dd4I2;D}AlCITY$>2@Q0OZjK$AM#wijAE!W6*4eGK!IKGeOny_uiYUBj zQf^vgcAN&DSZ7Uz`R5ROT$6@+e(yQ*!yMGjZD>}?r1pTnCD7YfBWaV=?L0#3vLY|` zQHzG%!wIQo?l{-M69zgvJ4!fuA9~6mBb}TUql|4$PvkezT*!E$gpRMXFTS+=F9E;V zIu4}bM6wG zTBjX_jlaY850f+Dz)un^kd#1EjOgp#7f079XPK;uu8u(#n{_#cOJMiB#MGe!&1SR0 zb!fcRkgjkvK{XGRoD*sc<~_=O^aDlo~XZcs?(|>{dhKu(i|z zKS-eKa#eNRtG~LJwvpH9Y4t{uUx8p(+vRwhYhtk~9`52%u!!B{7E?!Qy})o$We2f8@n6@f6S zm{GQ$Z^6vPSzSVoehKO!*D2?7@rA@tL$aRLusxApWx_xW)IXY};Vks~FH?gz@KO@Z zO^mtxuNb0QE{{{^AAXcZ$I+%}n34;J<{ff856`@1C4AMQ zT%1nln-TV*&-ZtWwpzub!C*xKj9Y~Nd{~E`arrtjF|xMfgq8>xtE#@}zI5y5_*2Ex zYtyLbf<@{=7L|o`k{YtuKZVYQwuv+qa_iCWdTAmhGMh+W#zpe@L!n$+N*^|=?!SyN zfvv`2Cp9POo$)&z^sFH8=o&>h@dE#f%9A7W@kA>+g&9FVEEFB&jBj&;WztA*z;~dGBE!WapjD;At3br6PRhLnW`fN@pJT-vv z^gwZBJ>Z{9Ght*`V!T=T5v8;o`E3%zpYhTLQ2bvMfWN{AmpA`*VIGbQf7IQC=nw+2T`pAVPq}Z;?cc znizt^uaH#9kH+&qeQqKoUQhE)wz5R%7|GGf&EjQ3A#RMH+z{*EQu=O`?$r4&=&=mWQCG;LRnv8dM+Ku!nnEGpy zZmGkBSuhMeXG_vyTN524w>Hr@jA&!zO1((TPiwVkQp}?0l;pSDs9RMuv3o8TEThAM zmK;%R#o{)+j!Jq3Vgq!upk_*k>~_4(hklW2fvel;tl=>y3xc@f zWj;@_jfW1;i5PO+)r4wk_G$d+D@R0^n>ZNRDL{2CmNJA1k}$*CBJF~ z4G4}ZZxtM0f#ym1i+0coi^qZ45gY97KpVZNgI;McVUhuQR*Ex*HfCSPBX<^fU?J+g zgG_49i?Q zj9TWh)$~Km1UXzVB}8|_&(_iz7A2&trWZ_3G$Fb$)Sh*8QHqK~2YUV8-GLUUc#=$j z{6SpnErZlCw6`V!W*nl)i8Yc&VTba5^h|d=MRHOiO~I91{P#aatYV}IL#^0`AVX&B zDK!|KKG?pJ?S}7e!KvTeK%Z2DV)8dPQi~yvClq;Z5_7xD`deEAy%L5@)W7;{@W>`Q z1>UqWv*P(5qTN8k#?=uO9x_$ciC=Xa$lx&m@4*!vqXkkblER6{_Y<-oMV`kIkc7tah-Pwp7 z<6QL*_=90gA!#3K!se#seN9d~#?Abg_{Q*#*45A(T!|+2YR-Pn?=qf4!e|)=ituex zB8>clM^~JWBXsFZ#UpB|Cb!=U)B+9 zzBI!C8I~je_~-N=26*`wv;=ytGNj4E>$ErlHJhh0B3W^8^#~*I%CG4Zqtgio=N3;> zprJhc8`@(u@*B}znkKv6p&^3_Q<>2C+w9H!)>&lxA85d+B{h$?2{*~vN9cH?32$KZ ze$IdkueHptwNW)eqXnN^EHh8)+Thdq)TRMKjsndJ3e;gkx%>nAngNDg=<<~Og{Bzb z+@I-ZQLy~a4{0Gszzb~ZX>=o|4|FvLrnLu}S8#A|w_}w=Pk*pC&@v5^Zk>HgVEqYN zo^l=`Ja>ZnMm2qPf_g_aP5Fp=vd?c;3VD3|L=A?H82Bdjd+;Scjyz~*h zE4t)4AJey^FVac+unyF7u>a+U=skUSlD-}xlArj5er$}q!M&&HYq}u_G2x@X(Q?@N zDP0pKO8FaoC;IaK-{?r>MZW3pv?=CnjQo>YVdQBN5A>gOC_)6-JYV2P!H>8U4*j0q z2%G*zH^rB(yP@1xC)ExAn=VbW)}iC>ZwsyC0UcBV12$V7Ed4iKG?rggYo{Mw|3J%P z&k~+7j=W*=#)!E6(7)+?$+bi)X;BZazYBFqZIsfz1a{|^q){HO$EYz@mo)Q;G0gpp zZq3p);E>t=aJ#*i7rnq8Mr%4$Jc7x_)89i#W%-=8r<_L&;m=XEmp+1yszR~rbGmF4 zMcfy3f{w!R1+5-M5&8nt&#^h+3p!~O#qanW+YaGZ>i$B~M|Ea=iFwdszJx~0WJlXVS~pgzl-De$5KjuzDelz;yv z1%q01fJG5^D>l`lDl_hNrNK34={GRfhR73+KO*Gvf`LT&tFyF9;Atg!vWey6c(g@o zQ3b-5B6C-$CC~)hceDJ|N|(#)iJD!t!|7m>$>H$o++CduI_`aD$0`jh0BU%jVHylg zp$~raEOVKCSTR%uPh87VVdv2 zJ#39EC$NzS!M1i*2**-bl15dL&y&|lY@AVT7@ocZi+|aPp;O*n*a4?UhLuWb;dN_@3)8;(>G|PoK=`2xuj}Yx0-49bT z*o^|m5UP)HmWUR(zmzp-gu1QiH2C~7_MBO{z|c_6()AxXTFx@#FvG#i=U@uHV1U4D zX9a0oO)kI+h$=N1qgy-`s*d#NS zQlUG**EV|a3x4J?bD->i-Sy0C!cFLkjdX5Y{Z!^Nd%SLp!mQ(EODczA;`x8MeJ7`} z`%UVK_}!5ozmhd-viZzR)};L@<84ec#3`vetlGdbNEZ}s#LV@p8^{<_LD&yHWvGoE zn~0S+5qSL+OOyv^v&lv+9e=TnZ*0K&FjZ*2-@w|;UQab*uTjS*|Dlojc|jWj=2$7$ zvH9!@9Um`pfj>QH$%75g7FmG3jkgvfx#*`|)W`ns85q6l1q)gJSY_q?;a~^iWK1%4 z2K%s-)n-*Uv}qM9k=HF`NfFJ(^_jfuI(Gkg4f7YVj0lgH-@vH86B2J{hoNi_i-)dl ztQfx9#ze)zk{`Q~%|J}XrC4DJhs!!{D4P1xQuTk5pP0+06UvLJbfJYAA_`8?*eF$^ zT+_--27#9Z$+c~)QQNAF1a`FCxfV{SYEk=(MD+r>9R`ED3u&RsYVgY59ry73VEl#w!Tv+U7gLBW9 z)IiSEs3RAZ4tYU{{XKFNSM{)o+M+sp7+@7FhA33c8i`$`!K?u^7wXA>jX{aYqja2> znJQ77ITx$XcSA5+8^D-gfV&tGCGs^QCZmWYXjd1|aOS|CwQLv?ZlQTlF&E9^;5wAP zaWN-MRcx~YU2RwbR#zvv99XM3B^L{$($}*-12kM=h?D1RWJ3l8J*Cw)=6;K1 z>6kPcP{i)x*VSDqSD0jIiO92t9CLsyz~r9A0B4o zjb1lgGc)db?r5p{`#!JAy(#GO>+2NXaMz#0P?q>URTj0RwhZsMq zg6&?6D#pSla_xO=*r31-Wa$X3yr0#m&`Za&`Vrim@Bn)R-h6;%B-Poc^{(y?htLIu zyj=*zI4X(G%06M4aF-tZ38v1eXn+3;LXath?8va#{F zzhVi0XaL8zVl1@$EtV&EdA2WtzAxAVeVci(W(h-E&UZ;!=J_`qeW~UZJir3y2G|6v zf<>a(vtiymyjN?L3Xg7oi<+WU)e8BPjf0T}!o)s*M_9eZ5iVn27Q8!$h;r+%*^iAT zKKm21Sq6+8!9mh*ajW}Bu%`5n>sSIb{EG;%@q1K|lip#!HbseLByKZdA*|b{14o9n zAg&fOO*~44@Mi?R{~jyRSR7SpDX~x$hp$nf76}cqGNzSI>yEczFD=nRVjuqrZ$rav z@q(dRhqiT>DF)$m&IG?#UVVtLd)bPXR@Z-{I_H1Du8-(0M%HT2V&aG2ayQKWoK;Qqx}BAd=rzTX$a(Fd@I1^v>)8rZ7P723J5Nj7 zCds*9uwNn^LAX8&j_Bk=F@cYrL3EyDMgyOS^60({4ZC38ScZPEZGLS z>IJ_1l=GGkOV369JHBGL{Tzbzm(Q`cv7{Qkc$b=VsWpi;X2mgv!$UdaRSU7lBwmrK zx=O*ms9BL}VXPod%$XFeXgseI1qGHrhG{$g`w>NnL|oD|I2R{I%BfxP;tk4=RM6(_ z28E<5L990OpPf|cpgRv|kFFAy@kbD|1QY)3MNNF*=&LU}P>q1f&rp$J3XT5;hC70{ z!h$sMuTXU*qJ^Gx@t^Qy2IiA@W{autj@^){0y&7ss2snOQ$#bO$~ zmM&()m~8PIV9XK6{=ZGznj>BbuV#uisLjR2vs_Vt4|Bu`#=%6mBOO}?a>c1C!Ifjh z9K{GVV>|-4H)X7t3;wa9pLdtQt$E^DEZ>nNI5SqXLV2EOONdspg7ZqWsz1pS3!pw< zl++R5%@;G^zI-u8+a^iOf#Z@mi+7a4K!KQ+t*$^So<4VO z)69kQn`X?pwtm)(%Zn$$&kDrZ>J0adkIXQ8y!wgbY50ksju(9@!R85K>NvjO^Jlwy zo^HCG6U1v(>Yo*gx%%C|RET?7P$<^I@j|g3EO!|*FalyI5*yWJZ=NXH;rWTkytzeU z9XwKmEK>NCT`Y>0L1ijPDi-s{VO?h*R%D{mDCXg8tn!q2>1B(A6{EPLyNktUb>uXw zSQHuQwTd3-wTh*NL70_>a~Ik~w}3yvs*FJp_}nH=z#xLp<${6|v0lEcI_1kfTNXc+ ziccCo>GI;IGJa)|Z+JOlan_a{?`PnXi4Xrf8=o9}a`739PaZzw@X5zV!lwYA@%T)@ zr%>MU{zTh%Fd^VVSN&dl72LVChzLA;2<-NvERzotJDcW=&xR?t6_s0>732v$cNJyG z`)@6BV-8Jm!wSAtGzAXbUSt;9!{Kh;pDA#s45A%o-qELw+;aN1B7BPRvEpOHrv#r; ze9G`C$Hy+8zOCX%KdY^%Kp3jVaPa3=Ef|prv;cmMzZ delta 199537 zcmd44349dSkw5+!X-0Q<>pnSJLNFsF4I14NU=Sc|*&G6ajg3JJ(f|XJM$C-B7?XkA zhwYdsrV?k@#<}ApHsl(|v11cEn~f7ECg;J9yx_f#?BaR&Z z-!Gq!!>IecdiCnntEyL3uljwDe$w&yC(b#}yk-&oYozR3(=Y7Lo7NZSPJe&VSjOQf zU8;2~EbnUX?rdmSnl}=fh(z`MhYv)C!x2B}-_2^s>h`sF_B2f2y}J67_qdxg>CkTq zYv`H(lT$*+e_Q3eZU5n@_fQ}l+;hYe4IKzfH0gT-(ZQ+RW5JP|0!KW-NMtGyZfMev z>i((GU|?b-(5r78ShIS#Z|jbd5h|z zKYgmQkS@HVEQ^j0lvLAwTinG|7_4_y8cp@P?$V=2CIg{8MrYdem|A`6wT>Jr-08?B zeQlAG)b_mWq75Mvye`mnQ|)lZ9GZM(Q4K9QQI?f$4u0^ovzm6i*O?OoU5??uB}??p zf#_6tBBJ~C5&ziOZvV&u0MW-nBmQVWkM0ZTlVaZbfxr=cPbe%N?F}9ZOz1b>vPIt) z@Q((q+Ny*Ew5^_LgKn(&PJ zqkek$R8C1g|MG?dk*TpLef`PW>gnmG2C92SDI@)ayF8Yl$K|GILFWNIEln055Bt2M zfjxczZ}1!yPq&7Hy}E5suVDG9a8N(i;01|>f_o=|6MLC~L6l-%wgbUYlRvS%bRxUH zg7oRKg0d#D+{>3Q*C(dN#+VcFetKhhMKS(mV2RDpK$qTBR+E2BV0w&+Lnlw=%%g$N z*DBOPWmzs}v}3QEY<|;ZvjhKS;J-}#=fr<5{FjCQvg4D@IYZZF_O!N<<7nv(H2Krw z!jk=weZh&SK7ozX8x2nd^uo? zp~E!i6Z!MGT~;3dxoT?9oQ}b5}m*!bPMj$J+*Q?Z!jW%c>E1a zL-AMz-L2=l8)(V4lIoZoPGX@)f_GvAVeF}~QGItnKO7hvYd$a$Iy`~xg)KPlXMSwb zBfRY+lR>dhvHfPC3@H@VM?-AkVdnp>2h(;Fc zkT~FFJ5CX=F*Cn+EHJS*x=*hKZ|o+=!MQcG@?M8iJH{kq>W^Rtwk)NSTNYF}{N#Hk zuQaw~v9Xf7gVDpmNT7F*e=NeQi7q-i+_hZyZx8O!cj~+Gk66-e8#m)6GgVl~CkBfV zTfj+qdFE<)gOKbHS{Tt>Ne?fct{e2942PnjXbeKs8#p-S=Y|Px@XELLmnIZlwDv^z z`J)n^g@!pa-UTB~AQM_FWlVt>7>WrH3J3RM{C;D=RZ}tMz0}c`T5S!C%=WV*xHK_w zh?Qt49Js>7jj62`6St$q7|%WqpmJk7UQ6kGsjDLX?17x=|8@F&U9EKSEk(D`t{>zt z@U;56JG&aZlH?$Um>7!)f7n01>Ih`!+EBP}Y%g8fkX;>X?KYdN@7p%KarKt|Ef}xm zj_#JGyxi66`i6#vw{94?xqtIe-#UJQr-PdZ)(>pKv*A?(vT-Xv-qLsd@KFCI(c5P} z7}y|Nw6vlHH1WnY{cDC3Ej=;w_g#7tSnN;TlREseWqM~r3LH5AL*ZYubxM*g{z#y+ zeQS8kv)dnu;U}|HuEExLgeQ5qxzH4oWB!qVXUXy_o#dv6?0UFt#7-RgcvIlajM#WOIRSE}h@#E_be8Gt@^H9BOGyUnQua%W=SjFiIq- z)cHYqZ3*2NiUjQ7{bPFt7S@Ph4eNI*AwUOU!TWX6@F$u+piPS{`2kWeLXZ-LW6}wnCkQfw;BhX1SgZTF(WX4^(&tTd#kWv6KuQ4z? zO`4(Q#N3xzsKoZoGAn_-9>H9KdxDsap#q^M>)fDu0)a-|UDpIdVeE)}lXk=gbaB@~ zuZ{bIY>-)GxoY}D^2~zitn>#b)d};xE}Xm$;lwJ$Orc?4h09Q`S#Q;s=>~vV5W;Y? z6V4plAY1J6bki}OK|B8;e{jsddn{nlj+Zz62Dy3+V`m z8Agy@WBbI;XtIe7-d>m4L|3)^SB+OJ&DJ(3B02Q0UjE4CmOm1cgPF^3Fb0#>Cb(uH zZ@(#Naj51)@zi(#Iw~53jksH!cW|zOr7t*lHiGVFv9y~FHbXdBFZ-Px$G_eb}6vD}_!6MB>00*8;e ze=UTCU0|V=AdH1FlP-kuWg8pXAw8Cu>^0+_in_^JcGOKuO4JiAOtLDBBnSZPcuD-# zuCkc%w=~q)X2lyZN5fvlpUIZyNN8#TroJ$1JYY3gG*N#TM8yGRQY-{hVAA3poZxZ~ z?+cCvU}|tftho6SnmC3|`l3b5v)fZ%V-fiPDA%^J(dYzdtlfExi9ld9G6cbe`K0ZC z-E!Ts9}M%t>LbB6$C{Jj8nd<@+HLIpFh941)&#-{o2g0vD{asi_TJ@fP@bv9#Nu>? z4%P$9yh~OfvK>p31c&O2S)CrmwoO=ZTSzM@$c?#$n7~woJWfE5=;Kq;ycG?SVac{a zd|>hYhYj1vR3s7wmZP&t6^oN%FpBInh1V-Flxek_%#GPw9aH)xI`h`Ay@kc0m-;mg1HNs2HOE+z}Q08j-cSY~Hc zi39IZAvQhsJ}Y2^_3CYG7#X9B?aD}7Vu|-0dMC^}5G}=?H}-=Kvg8dMc~-%R)UEIH zN8sKW!#Sn5uB8rK!+y75G@^Gk`*ijPizCmNIFxwtI(0mO9Gw`>Es05hu%q?_!(gWn zP6$yO{5s#P;3uZWcL#W4I|}&3mWI%lQ75(}_$nr3C05vwWvL)}wQN>lf^$bgsZxK& z&M;2vM=u8
Cl&tUY_J@yyP)#7a_ehknlQ-wPWXHGs>%427ePEMU+V!QEc%yJrS*;f z2)E{pDGD(s-FiEPdxQs0;3RBFyGWHyw?n1uz;yU=@It|f|HT(3z50>cC z`HkN2OGfvNOVwiPC+HJ$lw_2ZnDn!p(~->qm8HV7E$MY+EaV@>${8)alYa38Duw;|QN$QPD#$4ID3uy7 z1$2+$f}@kaQ|8dS?{OBiGsMvD{eX7k(8dh_g^r-K04Q)`e|vC`hug3TS+dsDwG1!cp zN;wPO_QIX#m47$o(UH;Yc?laN(ZCK{c>Os@K|gw0^*Fl_a3){Iyc_8Hug)u?7h7wb zM&PxV4*o(ZF9gf=V5@_fpZvofXwBt*zqGjgipAErH!z zI0h{|Y`xPbTFc8@I>g%zq3Egr&P9R5tLnDyHt|k&xnmLsz)|aUg{!j-W6{~6l1fJl zUCLTeRmLncV;DMpdTwbm4&v<9 zIJaiKm|`Nt0;Fa%OuPjnAZ`?%8bJt!w@NCJY2_2yr3LoK^rw$FtDWs2F8N9_t}jd_ z8f|JRnN!t{b-}jfm&r>b$QeTp07B}Lns(q4_gN^LM7?CFAe}*7hKq^tKaxtx4du+K zJ)B#%W#+(E6pV3C*OA3c3dxe233{n1&(40Ut`zdLvyIOFy5xrR6q{qC*bIg>i3T4s zGjX30iJLirtD)Qs=n3Lk@R`xfu_PI{gf!lGwp}E+?Y5aXBoT4OV6(E`jFy6wMKd3R znq?WCt#t0kjt#W>ykh~i&dDvM`_4P+^4!-g_jP!?ye)1z@5?TCcJ#D#Q%gz44LQt- zk-+#NI$2y>MZ3;BvJ%}&-8(zIzE*Dw2d1xE-tBE+0DU)T70wP{SBv0tx=@;tm2S9B zZ;#nJv$Lg#gMl}=c(ieP_(SDY&X%4QKtQlv=+TAI;CKMBXfv3~4fzoc_~VnHI$i(? zTG3lyQG-;GmX;P~MX5jy9mmb-{PT{oZZS%5Yz$#!Y~xWrE{{h%{2ra8decqKIBsi4 zdR1*TRs2#drseCM*^7mTXU|v&QHumFjk>)H3^YcDE`7DG!YMFtyfL?|(olf*Ui=%X z^0hhTIgA7}I5dG-ZymX`t|)=HV>>GzN!D#;WhnR`Uchw4G(P{9Nf5h zOaB@wy5Oj6=!En))0Pkh9UeqXG=1}jk7$)KUM?n>kZN#1Al(7m#k7?;_|2-E2( zP;&=H+`amCw=fdj2+8%cNhp870CewQ{p3cTlxVe?O-X(^X#Uu2HXk&9#5NCcN6{z= zLi1!KBA{5Etv-XI%MM{%CZWB0D$L145?8~Jbx(#tULbPF=Vt5##=W{53@{1Y=Z4M4 z!hjWzVYrH?$6y(LqON8Qo2b%s6p1ZT2D24fYrPQp88E^d3_DG5pu`PNw;Y)y$8xQV zo>`_jW4y+qw|oPcE_uS%XT~yMPBWevOS9bo1Jl?9Jfo>ZndN;rL@zv@T`;g~>x49m z(OV{_)YTs~ARVjo?h@NU*lfl`Q}_bO6Vf81^WRoW=z(n&d34-el@;4n2cp!;(*>-$ zunZg7V2j)!-k6phoqGj} za9Cn&oYCNcun>aDfjA}@ zi^>n^e4AQ9r+<)_hEKqM7PMm=;5;}5%?*p6H?=O_3LX@IEf(bwW%8JgL@p#LiCtjM z4U$O85o3ako0N$)vj{~d8J*awEvS(5@*#82vyF7>k?gretsTB@UJW^XXkvtXzb~okZEx@Cv7R2)Zwed%5F7%V^bznz zG%ysvzfn9k9}I?rhw%KS0G(U_1%Kfcrz>XaLQAg>_pQ5r2&})|ZD}-1ky+|%HkAm` zb%Uw?ZZNgp4W`nYfb4T)?=WK;3l|f*TyEWD6ugm1!HjJP$=J1Oiedx-AS5Ma_*6J- zoM49|Bm0mwV5moFtVRYVdf{9MMs8-d=;cJXn8<1L2yZR0FdYv;G!^M2<{KD(NR=HD zNj>H>#9m}SxG0)*P zd0B|wu%WU6ZKZe-PX*lW|ICvz5rn{BZyD0P;K_Vc<1M~#`nKQlEhR~jaoSRB(8 zVw-7V8;c!i8$dR$qw{wtB{A7wWJEzxCL?aJR}yw+OFMEh<;x&~OvAo1AlWW9E1bxb zkR4YBWHg)=5PW;Qw~|OB*BTQ;%#Ix)yh%j6S)ojXw!n}Tr=Ap8kiAIHMM|%Y#J1LU zh`VJ|gHlk_!Pu;rB@p9wqjoS!^d6szLWB-VKjBrNmejs3X5+DB?1bGgFagPcOhm|R zc11_70)Ep3pz_z0c($@9{BQTT$qr=jH`84b zfoKy5f+08!%37YuMh5#8Y62L7|m zlFt3iSx#s67i7_eThuJ_K3bkb8@h_J=G9u*;I6^VEcgu?3cRQN56x{!v@qCE5Qot= zuW|@0#3YMOKkCk@h)Mhn7l;8uCgG+SDNVXa^0(qAFn0_qhF1aRjRn|*V#psWULpJy zDI>)^vu!ry;^T%0M=?dT1H&1=jNuGBQ-%VDqoHBrwP8%TO`QyN$iIcB!EM|J!Xy0R zM=`h^q*CE__$k{7xzA7bM}uygXfW+I@Yt~AVfJlo2iv$UdrCsEOe6D8OI64R26~GF z@=pUX;jA$c5`Rccn(}rC&&S-k7C9haa7 zM*cxuNPFdt;H#AzGb-q*|H&_E6vuW+#b87l<%5#em=b#fa3(fJqgNkZR7KZasxO$n zu*(^%T_rNm61QHAX5a%*LV}bA1t3YtUVnrQU(Zpo!(h(znsGRWmu+~RCuN(^HsmSb%R~+~h)M6d z$EkFu>4fwgad1oUT^i8T_;^k=J$`?#dfjC}44G#?)4w~jE&brfg>#x_K5xMCr+JE{ zq2|YPD(Newj{H8kvMGd3p{pUAh0GFuFkHq$G|xZA^rf?J$Su$3b(Xy2CI3;abP=!c z%)!09XM}r&U6$bh6>Y06iKXJ;*)_AL&EB$H00Ni8xPS=96??1dj~Xa|rH<`tXb_IK z#8r+ZJ3T9UHxJ!4ICNM4P{R^0Uu6nU2?5o5Mf|ZeKa$*6*j@R|t1Xa8uzc6wOV#*$P!7%}}Drdo< z&sZ(mwNughC zBREpIVOC^JRmxK}yn3UiJW23WisYq}_c%)t_mj>lLsfX_!taz)TDC>WoBnJ=0X=!F zJa@GvQDHkJa5c;-b77Ot90_JKCs4aCqcqpjD-?UtQBHq)J|~Oj-R;coGHny+7X#j~ zO(lEx1jn$6EelX&4Db-tH{V^l+~~0#|H`W{ZcCAfC?fb!DhY`(Zb0*#jUnmG-Oh3? zg|c+wyUvoGoZFt!HlqC4P1r)T_nOMYgt`3GA3=ThujocXWICrI*(p<=c<)P zH0i5Zir8%_ zNs8<6?0|ce2XnKHA{z&J1~w>yHnR!bfLZu~Jlv+WXJc~BC zq5in5f^L6O&0*eiQf*aj)%ujhvoU_11^6vNI1*LMv)<&d@?%Yx}d3V$K(^cj4z&*}Z4GTADPa0a_2qQt{-Uy6_f&LGH`GoZ9qg(orxo|(8jX2u z14Qd5A1Yv~d&~!>hT?=pX^;;k&R1rVUayg?C(lQ^ZrFA(c+y$VW-E$~W>?aio+z#8 zL7@pTs#}Oc1bwaH4P(f7J<357cnHk$3m)2ZE~_ktl=3Yb*KF)XO_FhhecAJ|$A1W$ z3?>e%oAJ=-6yKvYGQJTEL8y4QNP!ax{%rX2_@ZJ2;;zuIC`7^?4Vx)prx~$e11;9v zp4x4u@H1pLgs;tS$yR*AY_{3VrpYYKd=ORKyEe-tEaTjAa=f;tj0St_a{xn1}wqw4S%~V*cIMvi4VwGAjI5N!GwjPGUPQ!Ly6Y2MUm0i9zM23kL`0ZW5-F)#zNx4%@xDRx^Bna1eNs6ybyEwz_iG; z7g>Gt;A%8uVAf7BOJo_oMHipVJ@n=NlKFGkt7NGI!_qeYwmBUCwLGJU{&cPYMXv5F z$rDbd@{pmWNY~8;#1kBq;4q5Zt-FwBL}vaCM)ZWlp|Vl1FGFyQnuQJ1$;fMMP?+Sdfds~ zY;Gb1dl7JQ)1TLul)JoeD~`~Momr)^lwtXW>5?)^eZa?RN>cIGi|6Agvcp$YP@}{o z!c`zAftwcykvR~Wpf9~#t~exG^Wb(8t{Wj>l1@Zh;3%Vq3y`Fy^()yi6Q9erk4Vp& z87RC4Jg)$De4TLx(yv>DA`ayq0gypi-e;}BMBZLJ2Wu&;u==wdB6tk6S2 z+>J;ayd{$w%WXk7ypJ@nR#9p4*4k`8bNg)EWgh_*N+g3=M|;zekANPM^Vp^^q=OJP zQIA_h-(a@BSu2ULcf0Kx=jI=S%Vs=zQerpDs~bYsi7lQu$Q!ph#4DgA|HMU|m?gN5 zBK#mPh4hN}k#Oa}WQXC3ep93Hpf|AEv(qPcy! zq=u5_n1%YNn2B*og%RNSBOy^LN-=quKE^7~kjZk-vLK`FLyCfGBc2%o+4A0AjuGVb z6^q+gh{N*<@9o401mHvn7CPj<9G{E$*y`Isbeqf>TPS6FLqFoQLw;j>AcXr!8$ z3CPfUAiYo+M`aB9s;G_*pe2q(X$fm;Qp6x}B1K!T8PzqBXI?coDLl!1{PRa+IN*T5 zV$*JK-C;_15q;uQCU+73b*l$=fWn$NwWFf(RZWE@37w%&`r! zUe(}9HZ{Ry5|`W{A0p|HvWT(Vw7nqJWz|NuxDvrO>vh^N9zA-0Ze@-MjI>M6 znu?iy1uw~n*$>{8TfEF{ZyDy`CBwU5+U~Q8BN3{Tp)U?go9HD)>a2&f>As8->U}&X zpYmT@lYjl?h&&T1Fc@5VMgklk%FLi0E!i-yoCcpQ&pP$FN*6u-WWI~;Z7axKDwM1T&d=hn0Ij1OC||t(2bJtSPI~ z4q~_1XAYE#EP$1@3rh{RK1{X5$fbpCI}XvM^Ho*4acwfenwX{i^g)-Ns4VT|8P0@< z8IA_-*to}I*Nled;s7HR-JDU{DS}^@TT4?vS~&0)pr`*&ML8m999*4~Ru~!aN&54x zYS~`9=1y-o+X9m&$64A9mX4Wbefgjy`F2#4v?V-5$$`}*Cz0vYmxIxc2Nf$4co||` z7E2L5y~g0FC1D}Q=)Sg6*Zj-d;1MAtXxYt$IW0*Bdis!sNlGa+92fIzbHwa$QA=>n z9=2YDwQnezgyF{5tT|a#x~8Nsb}=n-R>wTxtE2xI>YMf|+W>3t5lLFs4H%K<5Ta z%B--3^kDlg!ypz)94`R@Wzq-rbrqG+yPi-BmRtu{b<)WbbqCC?E8iduHSFg@AkKX) z)OWhHbif+W!mD4_`eQB5VwKAyA7XbdZ>}|*@@J3RES4Agc-ykLps&BN*hTkM6lL+m zibNQ&Dun?3eBn~mxV0!yFWmQ6HF=JbBu{=>%B)cb$i$EvUlS381uhUY?p1r-Ob5W> zORDLJz(b@EK@|Ek32!EzC74gz{^oPmEq$CJj{GU{ueD@miw2a6NQH)c7YXV*SmM#fl7X5OL1Ttz`;$T0{$y{J1S9c;E=6Dzfjx0I${Pud2W*ja`Lu8P zYmZb{ns~t3oYaUM^AQzRUR#s9&1?dj2ii5^%#?BYx0M7c)Tphd?M|xx7v%xW3sGcs4EGpUK zNnUT0Ib;(~ezAB+KC(2p4Z8IEH1ic815?)i_DRsW0Z-Y+E74VsfJGK!K9#B|s2S8; zYBw~DoW}$?`K5^{UfRjvjZ9HrX;$T?D`8~-y%JjH*y->B(*&`9%(IXkE2M@dVZ}}9 z;JYhJHVB90<-9He>Xp!vLmNmfw-ZZv-qIr_opOBKGl|Ym=ps^g)?bNSvhNkvP>yY2 zRcyx!)%E)J+I3v!6ROm4{g)e=lNZb!BwZxDNkAeE%dF5URPl+nqViki%Y?7hNIMgTV^T3uH)s>lWg$Z=6ld>si)8$9wyP zt`Avxh1PTU%))_Qepx5tNt|aQZY9bexC75W_?ly^Q~tsodHKV5C$8i36LITM{xDvN z2pB&RckJa4ekE%2NNND(=Q<-Z(o^{5y);B#8`P5>wnx3Y2&sSUb?a znImdU4V=r3>u|=xr0Fv>aQ%j)9`<9Ja7g2xiP2q@4>zxVurG@dFcJVFR;-b&D?`bS zgpW){LtbhKyR=xsS;{sPy0hq-*;`80S*L}fzR2R^GUnER0Hr617S+wHW?A&3-zIHbB zWmSR0f)3KQpKU^NJF)I(fCk-o;WmAwwv2ZD+>y0{AO2-P#G#!wdDXJzGLZHcf}%4+ zS`FReRki-V3J&Jwh4CJux91hjue&lbbnf%zWvD1MasZ2D-by}l4XeZ}S4!VKU8Paa zv)S5)%VD3`30M<2rf0CpkmZ15&S2?#IX1}-pcQkbI1~RB+#E3PX zf)$q~gAhHl4VPFx5$T-CmPy0e_ZruqkRK!9k2V<)6fno7{N$Rz)1Or3^2*JT`AV=m2;V8+1dHW7oyg`;7!$VZH?!p&pP{=_n zIX4Z2!|Nk^(ReBv9OKJ;(980gG(SK}qyd~B`%HF)>7!>)#TH9YNf3Z&=K!gXjz(9!?XU70#^qQ)&?7lxDz=8J`=1n`ayjt~&z*{FMeSs5Y@zf)`sa zWo-Fces)Uy#%x7>KM7oXrA$EJRW|Sw?UH8%$9xP_zG2)yGQ?4Zu!rlnCe6yyHEfqj zv`n9xY=;1n6mSXgBAw1+Jw!P&D}1?wy+CDi{XwngmGiXmBszWU)RpB8g_uWKTF|?P>rLDC5?uU3QAA zN{q{SsEE`NkM6#3W|x$KMQN)6v)%%AT!shi46(-6Z6I2)SP^B7SwPU?X@+gFF=)G#i10$>Ccd%_3s|G2xO z_w)B-1cLw!v=|Izyul~4M8zG!Z9EB4NHCVfa6ESpDuVPi58cpbGM&N5ylUvi%qDxM zvYYXg|M4UyjUbPdk9-0ZNSOo`3MIy>gaOXVdsvdchV>>br@O&@$wnh}hFvAGq$Nqe zB0Md@%^-lKo~(y98i`GSeUiGF#UzfTr7jBrvs*G%lPG325kHQ2tf?jKHH+NbH{E7N z@w5~+j|tM4>+<(u^z>AfOcgVj@$bWnM+Mj6b}J`s+ZfY$3{79a20*VNd+FR5s+w)t zq!pFo+M9pO_+*gv`Zb%hTA8GPo3R$L)A9BdSzE4zV2o=MthJV8wRj*!0MU}LtNQ;o zUyuA{e4V^t=KeL4>kZ4yT90d4E^EKqR&KU!BBbb$kdrpEfEm^-!kSiPFu2s6By!M= z@9%oYy}&Id;TIw~=-o%sPXsEVLn0Y`xSIl>H2K3@yGE;YQS0vx-E*D~J*= zsTP&oK4I&Pr2^!ON$Z7OJ;--~nDx@ODdanNvr*?q4wfJ-zvD|jjHH-7#M_n7G^r@z zCLtP2ewT`C@>{NNBk{5Gc6w~>JxzSg=$++X^p4|@fYe7MGMM+n@48{A!Gk>ayWmN@ z3+}*%`nz^|m=q25OM+t8iBpRJWu8(v5jt_gv-^`Q7pVAHiY%8WfH3(O4fx*pTV6n7 zyKe^vqUGeIF1|v6DzKtQs|-&XTy_*qpw__SxUeFGo3$>Y z@Zkm<1j$*SD?Jn_T6hDmLW+Zp)iC7u0c-7WOux0D;>f2>i~JK_iCDs36A_U5mJP(-5d%9XA zy!8u}*SXN$_;c8;;FGxv8K1T`I$p0Vq>nCA?sj!|c6Q4SXc2Sa+n${*VhFs=CC#JU znd$5D(KFeug>=?~7TxVA5GYz~Yf$cVb^BU-B#QsrpuEwA*>!gF_hfeX+NS&7xsb-1l>@Zjt28*z0?LD+T~sU`8vAd zw|6V6GDdmELMI-;|GmFgDXED1VWWBQ|H%#Gul6e29Zp_XI(Ihz z7CO_KH9)T{Q&yq2ds}xGbuL%t(VJh$Du_=mR|YdBE}O~<8fj3=o}!UHWv#0du|t}MW>110EYQ~ekMP9^}kR#A>$UMt;93TH6Zt+ zDbiJ=h!g}yr;q=9feRNha65eGq%tSI_ZHbvO7_du_w4q>Aln}?0kutVv~5;+_^rt(i=i z(bYj;Ez>;C7RWR@y#xH#)7lLtJcv%_)=IFZjSCa3_t;LQPizOmb|{N~cv#8KV^*QF zL1j1X`ptqoy7MKa$jMwneT&udOlA=Otqs+uZc=n!_=S>54rJ7qlfJv&NoU?@XOg0= zI6vtpkkB>Rs1=dE21HnYQfXs$nNMflR)FjJwRu^z;W5bH@2poUY3{#))nBCSEV}O} z%1T~jHC}N*sdUg+?g3w4`Z|)nCVh2I$`4?{?`tYhsqlSDK0R8h*3juOMJrE~d0B(3 zBYYtP--Qix5T@Qs&z#6}(hu(e8@@WPK6h3aH8WtqMAG|^Cl?r}UH2+;1?utt98(Tt z(CMEqtfr^8f%8GDLK-}T|GV#>Tm`3`s5f>pq%?DxCn{XAsD|`6JF4k;Co0W9_HIQx zHL0u=?_S*G(CN%zed+Y^mtEdrDgM}&jfg*>@Nw-dct|ps^<8^heuf(*e(R+2i3}Ru z25PLn2bn^jjj0-TsWaE&XFB<8ZaKbaFF2Od25pSI*?2sYk&PD(1|AkW3(JBH2l+n_ zE{Oyu;e6sv0{;`XV&A)!3R)gfN^;CGX*dFQse47iJ>M5xCG^;vHMRIMJy%idJ3KY? z_J}e_-(IUOs5WUKzTROD4Tma5EBu)<*NGnubm9Wwzw51PVf>+}vOWWPvfW3%AJsz* zbgLWb)L~`W4CTWT+r<*Qf&7|Q5#Mx&(&2Qn-C>@1ZQQX}zrBSawed*cWyu<_Yb<~%|Uw(sf(cx^; zz1RY8QmSZjox>Ub@tc&jsOMZ=pLUlY3@Oz#cn@}XLKpn}{`zXcsB+hS?xeCfV=O@T zM3lOC{yUVAlR84U?f&XRWjXOXPbt68$o5ESOsA)nn&}ngi!))va>i9z7T)Z}z5T-7 z`1Xs;oZ`x@tdNFxPj4)*bnOGCueZ%CTY*jxfg;*Np(S!XwZQ*B(;FVJmiZw~}qqZG+gPuVo{|^B-2m9k+0-NsNpfGwGo3GmDOk zjHp8)r24iX!7ueC44~9UI4dGTz?W_t;;(*Gp>LvEPyMy>(3|H%Ko5LQS%eRWK=T)MDGyWWlX&*QUR9-A zp2UmpR(uZQ#FI)>k+8}wm5;1sTyyX7 zoc@ARA%1-J3(9qD^%U~W_s~>y&6G?)ZXoShqlxEPWgRyu8bJl#(a_G{nQ6}v}15#IlcHP zaNUES%E_f4Z(;R&+KIzP4h)OMUshhvT9qDq9?w^N85-j0=aoB8?NeRzS*zM8mteI9 z&whOMh)%o>CiN4KDn1Hj;NvU9jFk|#@E*glz-_$zQ$I%M2cgv(z6e9E{Hw~N^z2ua zd;TIW`N50OQGDpMX&)S4vT4J&@PA)E4}~Jmp!A3H*lT={q4)d%)@ATIMWdf(sPp5| zZzzroc~S15D!ac#D7Zc=xE_g{D!1OM~) zls2i!PJLf#aCLXI;}B_6dg&$I!za}?S3Bw$bc@qY4WD*I`GqmmuhiGVeg^jjMu*^f z5Ud)v9RZf+kBD+}X~ z{U7DKP8{leKHl`FY4IPh#Ddbi)eS@aJ%7OQNSsS6|ER3Uw5@D|LoKAN&$u*-JzMYk z^h4^8ozl}mmkuc(q_54x8Z~?yC(s#d%u}|THb2QydvW5$VZz2-&*Z7s89tf2Td`dD z@Bk{ZB-S&&KVSW!gElJa_u@WPbvS6Lre1QgU&FR2FBSrd@TS;LyBC_&CRayiS7#?3 zDN=hW;8%VV-%z6dPqvev+WNm-qb_sxw0E?&+H~~xIch^?yRXM5DsKp$!I5=zY9xS) zrBb$mVXEl&XVfM15`M)$KUaNAhD&@7oK7!Nad(Z4O}$FZCU2cOmv+~xznb-RUHr}k zYCSYTt=gK0ELRju<@5svH0)%zj$ul&N8x>LwOjgzY^0iH>W4gP7k&CVrCr$kRQ)5I zex61()C?VG*&Z6mMFrwmLH5?Xit~*r#eVdII$pmmSye#X8}u zu(3R^oRifDy{%PkHgB^^`LcZZUFvFsn&=J#K0R_1U-PqqICgziw4KruS?q zrl0=?C#Q{VY9m{3IAznif58IW_Z8K}2$z_J_>p1I*^U@5(&mj8i`DA*OKs{$9Ku~i z=WcO6M2kDsJx*U6+*9xDR2R!%U+7eqfRWnU8|ZwOS`k;f)axBi_Ds>moj5C>c5Bs? z-=nr>b^_aT--iBtr5AM@$5q4XV@apKj>f=dG-!09Mgv+OCnHn?5 zcxIW2#!Jh91{`^vaKt4})3y!uOkAmm-?LnOf98CY#2tzDC2}TBSH9hiL$~*->k4)D z+e3jsj|g*>&i1Ka3ncdzCZA~zrg>#qgDLM|45mDh5%W={5+(O1f}2I-oxS;QCm)!T}V<1PL%54N;@ty`TnRMRqohs0?xCwK@6A4zA!_;uH-n#0LnM&Wdsei0w^eDwzP z^U`XMe{w+0a@5E?l89CGoWIzP9B7s2l8yGi}J%gLTR+upqG z5$q%BP@TI|YtHCsr{^D0H{Jh7Ek8cFS$!4E-ww|rw7|RQ!u4>6#)j28qeH@zvvsTb z-(cW&K3Tk5w)>Bp)n-=*=or`F1)Hx&_8H!?X z8V<+fZ-Ga%;;1@BKV0R=r$WD$8~@>*>U;CqhOI!B|KKWQgs%=wP2l5;IJWZF@LK4_ zW9r=a=iaD3m}9u(uti8N<6kl{o{i))o5%U!NhSgO{&r&~c`kF`p?*QkC62k|WN4_( z2`9}s?k|q9D~q<>uP&yC_o-#^Q}?Ux+)OB6I`hlArs?BzhDqD2sdVc@>Pmbq5rcqX z8}WQs+v5370cXWpysa7a&hy!QR-FEcXXSm7`b z_udx2|3hkBMkc(KHuGcVmWlJ0$#AkAA`Jw=6Skeg$}UTU3mWKuYt#nAZeVL66V?J< zdPHdvKKS^DA61`seCW+*RR^8?gjz@U{#Gf9zwV5xIOubqP}ft}Csns<-j-P{KD{4$A(t`VIQYr`7k-y`NEk<>U(br=C~!O5DqVO|ZKl&)i1XOz)I;=#&#B*~A3mu*7=PVUATNFL zX>3*Dj<0xHo#sC`JK0EL{V3=xdF>s~s3&OdIdvz!{hWFmtzNH`OF!x0HZ6x*zM%H$ zz8!`uPYT?r2{^ZnKw)4Mb}$$k3R>C<@?X6D^g$deh~-X?O#;;QeQmvMfCXJmt18Od&y;ti!n-Q z?Qe4{og68lle@50S%$_3zNC^v8u3D@AHPnE*ahoHzN|hVEEM|1^D3NIYm~hB`15Kv zJk@;q|H#+W`QTY0ZA@jhh_Z&u+|&P-*+ygES85H(WizriomagGGPU*4`W0FWVr=a# zZPa&@)(XqK2a@~M9Iexk*FXAi*ubqFZLRG>bi?v$iNF0D>WG7W&HF#k`Li{hT5d0QPOETU@Puf~d9_iZz49ilZ6>a)TNpvw@k8~0 zDbx%6fPqSX)U-y@*CWz1Sg5U``MY6johihNog3gW-TjjKItTsY$3QCoqS`|nE~xj? z#S2h2`14u$>$exxoz9+ih(|+~Y!i#O8amqe>J~V!<&KtCGt`C`L-;@*)IJwrX}P1V z1#iR=pf57vGheMiaU(kTbXGa#54wuWIJPA<_VyN8i<)hKjTO1&^!1JIa;kWnRwjG_ zu}>A}*2@!33+7<*xCC6mUIn&^l@_CL%3T-K`qOU)dT|g_|re!$-bg+9-Wxmmh-Me)0 zbH#IL{yjwMPQyuvvxy^7^alm&6EZfifP6(+a&k22r=t`vPGg-0G|)E1OW!* z{ldosBcIq52g`IHZai8$(C`sw<-vRducyixJ2GPY15e z$oB@GN%JwjAZm=-EH0lQ+fL2}u?u#YvV)$T^V`KVx4Q?MWns{?6mhq7>Mh-RYphT2 z?$q(=hSmLg+Zw&4O>gn(EnRMJIDlXzsy8pu#oZY<4twr>fjis{J7lWTcJY;CjBo(o zJ~r4kg(t)q9eV33y&Evw^_CXBr7s0CzGjpL^kB36BJ}L2CxdNmO#wR#RD6^<1=$#m zo?fxX(qP-#b~RuFBZFqjYzpvX*j;*S3b9-DmYDBqhS=8H(c$a4Ec7;}b7zO%*?(04 z+uOSZxEPmR*(47*xv5M#5lSO2Jq|wRy8vGq7)OX$-v6>ISM0R4_*y&up@&~`mMq#R z3Iy@~^P&(RKQ}fniv*TawY$-TlYQKro8h6sFF31U9c2|6BX}pLBKtg|k>e)|Dkh-f z`47Xsu@8MG^n;Zp%ix8UG%+>cB=o{8TapzCjwE=?`i6MS7{-L+Vvy2;Kvw17av&jS zQ#i~(LlBFyezKsrG8GBajG>in1vRBi%AovmEL)uk+l-ppD|6?=g0=L8+0HZ(8+9L@ z{6}}G_cEjs(p^vl86a{P(TD!Dt}MF-sI|ftL!$&tv(-y0%e-`aLz$CKFI(hv;MBcr zQTbv6)1aXM_$+UtwLJ(>$SD<5Xn_OvW1dPHeEp&#YFV`~i7txpXgAOE;b?z!1xy@jW1uG z_)J;Js#!Qzs(*M!?W-t38zTZ^`L|%$W$92%YH#P}-NHWOB--8oPYzHi+R8A5N&>F`d8r-Go1$K!{Y?32+s8hO+Y4C)mp88jHP#&yHJgT=?x}=uo z@exHLN{{`k`dKFn2>R-1Sxt{|K?qltIW}@s$Tc(RLH2;DWc|RlMEFSXAvlblc17H>vgC)sH#xiFMGE zfg^!4&%7whD46=XA#M-Iz05D-#EN~pJ6 zYZ!nAv|6%@fW-_7Fxo74<6tSRZVps>IE_L0KVpFfx-=H*-OEV=#a=LKnE+5T3qjeD?_2bkc%lLdwF>lkZ551w9BQD;81 zO(7lSIk9G;1=j*)Beh9nL13ohOahx%vMvh;^h0M8TFSIinNL=+uug$8^4Fvf&)Y5O z&6G}IP%rBC(wSWvzSB_R&e06E6{Z?eN@U9LXPdRcT#+TmQ8~JOt0q$D6yrlLlB1`8 z_wxm-Jl0$iv}UA4iHC3$nU?aZ80xaYwuE)fmrwA=27 zkTrQRL)(j&zE&AEwWPjuvB!&?nje|*9PblXNJPRMI9Y`MROb2a3q--*5XO^;R|e=b+ccgQ*ZXP)+t#?KEHXyqC4bE>9^ z2S1O0zEFE-Mkd1GbYX4wwJh2-E{}}K)#hks?ohfA!@cF2BZGqm^@N2gihsFM%XGwF ztkO1#P(pqD#u_cpLEGkN&)ZgyuzHWh$LDL?9hpc*q?3oWhiHE->IEHt2NLq%R;$(1 zeIG(r`=)!!+Nd!{Go#lD+Q)CI(|+xs)%DuK_;|fW8LplVz8Q0H)cICiT|6)_&Pkrw z;pSe%vwoqwZO>2%dN2|h^oRZ9ykX3yIQUh)Hw0+#aKg1u752Bm` z4mey)eg(iS zFRtKWETK7l9ej!sgNpZ@;%350nMtk39mDBpB#I9KxM72&Vu*Spd>~7V)s;F{XVO?b zcAV{$Oh8D*c5@24oLpsMYhRz)A*2AnWEPW<$+sE7-_P$=+vuSoEtme`qqt@B@hw^}ee8AWUfdbMGyKY>hnls;Su+2H zlju|QEK*^RYsk|6Q)MO8a(`LYXS`a(K~HSc@>Us05043ZRA%C)YMBPs8I%5C7F?*@knLF60-K$I;1~LC3di%jkHcc0CnzYAc;AZ>4l!xwZVp zJZP?|Fuq5JILE(tBIuYdc$yHy3De#lCS}eiEMA*W&?W0a5IS@jh_X zoqZy5Vr;+o>Td0VWBU80h4jE24VlN9Rvw3HeH|9yEvl5pJA{VIU=F<40EwICQ9>6`EkrP}nbysJgEPAHfLQm@xKot&4FbS`P4?#;Oi zXw5@v*&IgkkAP z3)8_eZEj(EN8%ng?#k_@6Q`AVPGOqX4rqE4AJO@FMC$H@B?Nm6e|Qf>kBFQEH@vxY z>BBXpmHc$nIv4X+Ss_gkq{7UhcMNDXB}s2VJ~mV!K5O{xT>4a@R!qm=hXm@-2Nf4R z{37yHIK7scZys&EQK`zrxK#U!Qke~hAD7~y6Gh1UzO6#dt4llAq#L4ia_6G*qM%uA z69P@3Oq*U)U*|P!3@I{a#@VI`*aw3N%&B%bV-D%d%c`!lZgbMj&seu8oxNL~ zH$C{2E1yH0!rAQ&(A#$|s?3vRS_a_rCg1PM%3V+ty+||7QOgSKzAGvkah8aWfm`mY zCOY|;yN({2)Cvj{+@9EsH6;ny@TVvCVYOm^v6Mc(O{-XQ)yB7!l9thJhG~#F)h4uJ z4rUy8{O0x^izz6Lta#fTj0-GXn!~<)nogV%p4lki1SJu45 zYhhILCb`45;8w%tG!3EtP0^5YBb)l(n17jF4|B~62B~KYnUg}UMv6gLREa)b1hF~B z?Y5;g(8c@fOG}ep^Gx_K<3C?g!pz9gDcOMIOAT~!nWvNr^Xgp!lh$j)B$pwzdLe~` z6l*p9l+nhkkv^&8w_V%#g*;#zO1O&fCfFb`oyB{2F7iFkG%Yp=Z~J{aSOgYG)R{Va zV8fV1QT7->T0x#sF-ddL_%L-1izZ0b&g7@Q0ykUgi}&zsdE9meJ}ZVT?E=F*wB+ud zJ-E7U;b)T^3H-$FcM1i|>UW_m@Q0@O=%6Tio6hq+ed)Q9>B;j5kPl@$X~}I`*&Nf9 z6lZmFhbI`SI@jFPQL0_%sN-nuHSn@Mb5z*Y+&djtbEOh)VE#`GV>UF<;U-JX2Kd(` zmTW6neI^t;<8b!>3^{BgBwH$-S0to3yCvNx1}?PtHm&-y#7rY1bNJ(b?u|DM{%yqM zu6liT>%(N}Ym`I(KMI<^O0qO0ZQ?8KvuuNP#5SeD-Qw;y|%qY&)ltQ ztnL4n+r-BGSIzwG+>$40h|RQ;kpbHjV1uxEk+5yqDWHVoAvY@7u#L`}W6{-Z4w^hs zhDeg(Lz_#@Yj8%cybgx^mj<-z3}o&ZA zZ;J)+smX|kT#d`E(C%_eITpQqlXj6~1GY;5aa;me<(QLvPU;s2a`PNdw{6gt&>J>r z`{}_)aYa4J_uwS=My-nO`~bq|oFh(8yrj;_0^t#Yq_c%uWu6qd{H=rOi+LqkvU)b1 z|0r&+tlaG^rn}d}QK64u0p7n}t1U8`OXq>70bxv-f|d0nLXsF>R(G!@N{#2jVM-4l z#Mlx5{c0&rT)%pwBZqe7C|OQ;?cLKwJ;;8-UT`u8(7KJ<+!8QDYV1^atwiAnZrdE- zy4^E%q_JX2$1~3;`Cjj+5*{g=S}D36g^}11M=P_G91J<*ltd>#>{-l1LWnsgsOZhO z=zQP5DLG|n+QQs9ztvH}Edy88l6Jk(;mp{7nEJw~H*;ZE&a9|qV%_M(LR1`DS&SNG zqvGmiT6_n;QD!unyqZP_ucA@L=+%JA7`-Z32ZL7{5i3D|dYgv{;-tYJFRIAGvIz6& z!=6g^z*eKSMid7YKBR+1aCF8&7+FV5qi22x$37~G6bt5}SP}AM&MeK#6*ef%Ytyo* z@iuLtOYovN+KOSsLLlSh{Kk6=2m)T&4PyQq51y3kyiO^pSTsuUd4~7&rn}2%n*O zGZGe!=A^$1H?ju9xTnU9Du=kY4MQ+HTo!!$Ukd(XDd2lLEp%+yx6KN^&1#+&`{&zm zv56;RV2?}mzTrGc!oL!J<8#g`L70?cXwr3h;r@DAdD$zKwBdit#IgyA z)FyP2Wr-%d>qb_GFv(I3Um>T&qN>q~SLll%twTgZSTqA}!9N@H8Iq@5(D%W|{*3Nzw76;29IvgJ+Dn^V98 z0vmC0iI$wnpTqpD8aEPqlk-GNL)I-!nx`BM z*`V?UnMlgD<}LOl3lN(eC|(Bl-%cNHW3tYnUlwXP)5Se3s%Mi4c3J%Q<%(R%6>N*M zzhySIC`_V2Gg4nH8YRT#-(Znx<-eem&#QY2YM7AMyin=UOt&VBm*LjsGi_QPwHBdp z;T5Iy|8pyX4@%qi9=sqTj^LIT7T}<6?&yL8tQn5@|0h@K+R#r~L6))NQA)i@1icKy z^W7(vInofHzXqj0`Gu2ZCMk#+(OY5Sq3B09Lj1|Ot9K4^+LcH$;s8ZWawfves6=sc zRKl{W>p0wC1uIZn8yfYfFix#H_Vn2?Luy!1^eNX`C+=Hm?bALpub8>01MCKrk9l^oO zy2Wm-Bz^vf=9P(rKZ%2l;+b3jbW!B1{$gNt_Yb5k0spl}{$qM8NAql-~W4<8yC z^6v?V?-pScy5kOQC==z(xHd`?i9!Zfp8u;%36@&)=kKA|i7d^=(=RrsFO#cye~O@I z%#cDhs)*9}_`n?pK@I$6x%UKR+Bxscw#SW0o4I%?bdvxL%5iuZF$5&zjRzyaJ@oXQ zT1j&{3R=CAa9}E)zf=1*Dh_eQ1(8)M5<_o%4N|x)-VovJPrgQ5L#tk+l_$rvSDVpr zA#7JrUQAm!SNu-+1~@Z8#I{AbBRbfjmOI+$giC$6$|$Ca=}1Qd!sN30Gd=vid1dsT z&tz4JY}5kNUBlI&r#HQ)8uf;7L}8tga%($LJvu#&jx=~gMQN*?G?(W!p(kp)Ua51U z<#wyLF*J8gTrf%CBOf-QrYs8FY@CYX3d%ZRS@-I#9bDiBu3mg_j=zC`n|LDSoqYYu z+}IjaNEn|CBi#~5#kGE1IYz7nYlr_*sD`19@ls}#j8g)61JMMa#DW;Va3Q)Q<|=V< zae71a=O5Q@FtQ4^9oKGma^ZU;X>Fgjj<%oBmKn_x$*Z>FbBRoZc>8O$btnmpLi(}> z8Q=Xu{byM3%ie_SV>xCzAn_l*Nh?I@Kd#1RRKeLrNAK2tm2FUp?z{f7F?() zuAo-~xjFRK|BtWIv!SSlwjXSe*AjW@Bq@ng0saoOG- z&p72x;(f%5vyPpOck+Gzf6lq*-o6ch(n#LaN;O0Dz4tu-^Pm59{{KIpThS8rexdc7 zuGN*%pMI(JmFSV*Ub!;*Ctm=^IQ(PSJb(Pf)}P5Na`#KH97vJ7Ki2v}^u#|!{-gZ1 zRS&gEI?fz4rTAK!Xzgz!0mq@c(4E`z$N_WbEyz;q`FQDWYhfvMmwy?&F0T8}?&9&` zFSiz#Qumu*Ztc4J=vZ6yS6_zHwr%9m=%>);@;fcj=;y&e4!za-NK1^M(dd^k#KkA| zNcZWB7ssA?>GasC(c0DlvCR)4p2FgNwCpWF%?;sP zW+gq>;q5VYSD^iPXm0OdFC;!hPrcQ;ZwX_LzWNpf$Zh$xtGE#Rqu+fC$iDbgqlvd6 z=KaiD(0pv&9nqP$TQ?Af1D}U3^!c~Z+TsnZHZZ#sed{gMiW~cvXe@d-TH0tn7kQJ| z5&c+%y8ke0J-37bL@#{>I$UZdhriO=#+kf_{TBVLue2UpN<-_u+8PLI9ry{w*Jc}5of%3*J#lvX1C-BQ5I;@67@{%K% z;+mG;9njnRIS5U4|0VoW(NvB8L)D2AE~v(VFNxxKapL-jTn`?7d-o$-*B{zR}`+-Am78lYxlUPfjyYJG8fG;6J;6 zTl9(Fd*J@)-%hu+ysG*fuKlv3JramOp_wVDv_U#QBB{jfE0a|DNU)du)xHIdt<2Hv zS`$I#&e5p<$#v~5H>84E0lf^-3S3cxn((&ADs#Ft_b zQ^lBy4!D0-KgOkt2zEeb&P0=@?BKQ1^4WUy{7-ku#g)iSWV$p+6*qE~b1hX<&6u|` zFM!NW5dotLqHgZ4Be1+eu#;TZ0$M`B1oheXkif<}H*P_89HtDq&5MUCa`o^XEEXP= z@5Sv>LY%Lb*t9DOPgneQJ?PEWIrsUv9ISEooo3_i16{goy>ZPHkzD&2acT|)bexd+ zYZ#y2hhg!IQ>N%DK%q+1CB-m0`4N5RAGEbaz5jaI>M$Nl_ob;481}OxIA)%ltCT?- zCgG4iiyL;(Q@w~#pW^H-!87aIA!D==yfsJY;_)<+%o>#xUIeH^YvtIynjd6jrkSh} zT2wG#31r8i$Fc6$%hB^AE8BX|t~mEH@2(=ME_+-S$}d6x_CI*6Bed{1 zUkRQaIu+k8!=D6XKhijDG0uT>{efRCs73M%*BmCZr) zN2N6#+k{>)>;jn7ooEd=L`I(}Z{DCqVzKZ_cPp#N;9|W4HYxA}(N8L1I8f7OT8*WKc+?<%AYspS; ztxV6omZ=?UoSG}pbXu-N^rgSk(|#YtGtLGEKIFjr)`}gQPbH>v(aKiRSMJ{DwY_0p z$tLXtH@XQXzspRAvuBztx!{zOMP=>}V(#uWfw1*H2%pj5@9f?@qK;Toae{70QTdpYv>Na%Jj zRh%n7bF;qZSw>iS4}-N^vlG$acQ-SRiM;AvQPE87aY=J^KECzijK4J^cse zo(&_5U9S}V?^_VUe5gMTwY-f;=vs|o*?y_5_w9jA`IG%^h?urwwM}$r_&m85A*RZZ zD+M$;+9KyxCF7b<%g4n)#o`A@GO2=zWkcCgwHj8S?j+u4HZSX-HCTb2$g9l4$wf}q zN`5=q5~haO1O?(oniOc9Y-;fsSd)H*(TB`C5rfjh3Y7Pr8Yb#}6Z}aQmsbsSJY3;$ z_;|?RR=uHc8gE#`dl$_dUHkBThxaQDkA8q~ppc;mH}%e!VjT(q?z%#yQS3dqP9fB? zo7)gSCCQ@x#GShO_Cj3XLR{d&h%10}?6w8@`K;DE9T#pp?UkN91!t|6E76I+zpA}0 zV_?yDW>$0}<{JdqS~^xozw_!Nk8MnETZ7TE!MB(VZj1`Bm~v~CCNa}!{r8q_3IP!A zPV*fy;pDVu7O`kd^#-<#absi;g1)|B=qf@1saVW**R9+o7yHua!FP}-Zj>iW5XT^f zX<8lwV$b_P?=rAD2qCLnYl?jA#LcpCa zUoVN#1HWLSp;C>nXD?m4fGfOe^YDhdS?ZpiMnLz*aSD#}bC42C+K3J`D!#g<{T%v3 z!=^jXku-fs?++l4wCazxua9OwwXJ1cf`;U}2cy@|cW;0E<`n#x z%1C}*E>4#}#et{$P-z{rzx$oXJ4ESgpmWxF}clGXOEiHiK_mn;Q{SPsk}aVDv$Y2UDrok z9C%Gk&rg78^@;_pGSNzq2fX0i;^bKB$ZGfT0tEJcB+31>!o?mx=M@Sn8KQl)b@y}U09Ga<9 zvRxBh37z3?P`_K#mExps+}qMnU*9F@5HXe_Za>(Ef=F&sg4MD{9creC-GlV|H!Bya z*Mpm7WZ*W--~0N_`iTRkq4D`TOCe;v5}4(wB?=y7vfqg*oOVy&0)o|oJ^85R54SuL zed8++Jn%#YM(OAwcgU*303=2md7& zI3Z{s+^&ps=iRYHGLUb|acaSBQvo}0SD&T-4+BxaMr)v_PC~XqO)mP@=h`|vUzwA8L3q$4v!z`8T5aX=?thg+OK@u{ec=XQ> zY}|ZCu2}S*ngV$J{(I1Uo#0;H!aG4HZk|agR0f zI1d~jHG4}z9JxTfl?$u70tPn5I0)Q+sYDrv2Gx|oX#!Udm#>!LlK>KWl~M&vZ6LU_ z6-(7}_(|SFIm0js1Ai`Fm-(&CFhp)BrP~fQC;~y#IW0!#?vw9t5X>a5l+*26@|bu; zhMtEaD8~FYF}SK@yNXl>lF0$SFzYxsIK{O}72E{p8pwgt*cM)P3nu~Bp3HNM7n%(+ zld-2-B#;fhJN6L`|5azlDGt%{4J3pfpDs^43)Ye$1SDCDb2h;i)0P$x1r!dlP6=Q; zMy0$RM`_g1=_!WbsSiW4Pm!LKPSvoNvA=KMaT_|Ib!ayuX z50B5OoH&^eE=-pg17%)-2%EMNd;O$QTX4GM$jVYAp4-GLtP@PeccOvc-?_<2Yj%4% z4204X<1%VRgWqg#k7hepuZ+HTxaEPc`y8|b%G`Yr!EZnSpH#^-#$2SzwKUXh7YN8% zLZ*j&4bqEl7yfHSK~Qtx;h_Z((RE9q#kf2H3ypZw_2V6#>l;M)yK_I=E;(VNpLu)L z>RiKjdv4XE+d~CV*n*1Z)^Ca)d3oI`1qS-I@> zXkc0UmUROIhYsvPF_rIc2Ole_q9=b?3Ti8e46s1g1-v>M_)KTp?xgvQW{`$W?)LXm zl+p}_?b%ht(pSe;j=tBqykqoU$;3TUiH|_xT~H#}Tva6n$*N$VyhN4Ps8`Yc&$ezq zZ+H-isNp?65Nb4LUpYZfO)zH?}FPm4qVe zeK)bQvF$<)mavIDeYiDPpLqK$k6pfrh{SdAYZ^uI_LuSYT>O^iPm6}l=7&hGg~l44 z7=XX#+XJngr(C;Y9Zj_xiy+Tf^Lnn^7dRn@kS-10x4dlzEu~z(YJ?ARoZbdZm0w{Q zk?f2<52IH^^k4xz@sI2~oLNu9N|Hkg>v;$?5R-6v&0n%?weq!Y3X$`*=v)0eJI1`y zTv{!iSY#17?W$t|6VC!A83r8=aymo|1wnl>qUcMXU(qghu6`jbWl3hsctI2r9~qjN zEKUlK;C3OlMVEg9S10%WS{tqaYk73_W151UiP`IP$r?chM1^$_SX{y`jlT4w+uFkz zn=C##hxYCx9@VozW&9^#s9r5HP*t8sE<8IVNBXuW4$gFr^6Jmc%KrE9YINuB+HE1k zbq$vH;_1ccFbMN5&cLTj*NPLjg7diTB>#FXK>Pq5!NrzUf!T`2-jQ1~=76NpGqfZS+vcxL$(QIazI*@1w)9{LqVY#o>-?Sx0!PrfT#eJLPl4>{$rY#-9@MHvOyIiC3|N;$uaZX_WF zOuA{Q2Qta~;}|UHI2e<8aR;7G@Jdww6_0_X+AK~-zwpjOYb7l)tAfEG^iQOAZHq6G zZ5ePuK~fv+%{P~?jSjABTesTmP!R0TuG`#}v8VO86W3lUDNnhAcBWlHXG$}b@~6aC zbjSXK{d@g`N=POWBEsyFKmZ~~^o1Q=+e7S0NBPB3@FjJF%&8{8a0PjNuK333SyCO+ zko{~0K5uvlH#xjGK>tbxFvy;<4o4>|vscU4plSaL9`Ddo&@pm1C-^CF=AdPYoG{N$Ar~1LHEA0DDi+dye8kPaeDzjt zVl+eFK`s+G^XUAM_(B#CAsaFrJ4`&d4{TC_VFr&HcfgpVW%booQrhC3`#X6OO&|XoL3fmTWn6gCQ2x&&?gZmL9j-t zDvrmZPyfZ{joZ)6<4`2_3MJGM9b%q8cxPGXLoDYSi{AOk2il)Zl#}J)>cMb_|5@v! zH9jhs67I#{S=PD{=|&Gyj`92tuy4ef^GGx>y}GmSQ2&8_2YdQ<1*6-seVO2M`xRI> zgZ!(qbOQPqJX#6&QtyLvbkj;z>jsmqxaZK}f&K-0!;C@AeW&Ro(RaSGVPpQ#!2ZL{ z`%A5~4st88WPf%gr3?qrsyISq5|4MDY{7{roxpMRM}xe8jbv@hFVwK98%NI56FIu2 zP@sn?wjJ5K>eX9>(Qul3VHb`|AWqB{rxo4dGF%Nps}V7;DeTh0cnSQ!M91xE(g4yS z_Cp>9dP&W=*DX@ib3tqr0K2t4jQvO(`*l8% zls;;1SBkTyZY+{LvLYdWnpz>2LcAInrHUCA=yn1j8nE7~-iO|8)nerwaJO$lIo+g|8l zJ2!e7Zqc%zUID6zy%oLt=WXXxjBab1(cKQ5BT4j~|LNha3=v$hiM~6=R`U!{DK5fz zgpdwz;v3*F%5CySjz?6ys8ptQp;SFro}HI`_ydl`DfkjIT@bB8L%D_YYGpaim+Tz0 zfxF>?i)D6?ypRZM#W>&}T(8d4v(fo{7f!~UmeYzo1+cfofcdm@o`(PE&fA$i-09N} zj5|K?j1Yn{5^QI4h2zLav0@pJ# zohL3}+GD%DRN?6`T*nPRk>g^vpXi@v-Dv%p^=(fkkV;J9x$dR5LB;LsJ2pqZU0%}~ zJ#(bx!G7J_2?TOmg>&G4o<+4Mdj5;cAB(yjWN6%X=4L- zR}!&B;QZ?gt; z6Wu_15`F9KRc%|%3v2DpBUD4y1FIcf_{+`xs}<>4{Mx3@2j`0QDHWiQ((w6Dt#5x! zs0u?GI2gn==j9TSRC_IVzx!Y8i2mNSP3t!JEl|(djg~L3+q#1iyB(#PpM>1ngLp)S z+>YM+{grKxLQco+Ooo{GwM>8qiS+I0XZ~R2<||DK78yMv#RBvIOdD{`IX8#xu*IP_h>GoQB4jzr%WRxtnMYBY=_Q*cRCk zOmnA-^&(p7Hr5P5tvoVvp5~Q^*q*uW`TEsE4-wf}OTI^ceQ?XB)wXu@gC9K55iJ{8 z-yY=;ZfS}BS8R#xyrc>D7{5tO&DZL1JFA_9mdd+Y5OF2Q(fUtUc7*3@bVXyK@yg^a zLW~2IhrDsEwXLuKu1EKqJf|+=d|5aP=;?VOs93VsI|VyXl>trB_gtobEgHj;fY6|d*!G;P2wQ>vjvOyg{ym$Xn|h?ceQ*tX%| z-o1Mnq{p|K3P9e6`}gnR0f)RFeD3Mti$j;ro*ThZjiQ_Gv+DE5AL28}AI>4rxD+~v zLjG_cjXNQdoYCk>v*TI%67>d;g62plf;z)H0Ef^^$38P1;I3o!s;_on% zKvzKtov$sezyXIifqZ2XWwd3T!s74k9T3d(L*s8wIZr7iZl!*T5y|r8J!+DnYa&K`6qsOUmuF~tAcJ)Qy zsXwrzeGf_=>@k@|E{O3YUii9i$uCPVh~@0j%Uw06vndciA?hPY-uKa(|Al)^|Vo z>uo9oqr7%)N*iMk>qPJVCMZ{71nKlXJKVWti_|2Y;K%%2d9Ea3k*2vX8z#C*_=FX4G*YYGtW+oAvkAGH`<6qN4onI)P_XFb%UwZR z5+E#cGwa8*zz`!Z;ik|-vVW&V?y4xy z!pWmtujNjmh5~c90V)c$#BZbTe09geYj2`#Nv0^ozVG?YjnVHP-t^EmUF_WkfO^+D z`|G)aW}Jfmwuadeo3eHUM=iUe^#Jw@V+}}OU%y$5 zzVmx4H$8BmUoKtZyLj)c)S5Yj56_ddez@f<2d9vun!^;uTld7 z!s*YjY~5Lgm?)kC5ICQgobwH(rwRQm)9;C^C5h~y!12_Yq4N|R^RX%e?ox%r3I zxNZ7@M@=^jb;YU)`SWUDP*+iO6jyh(jUOqh+fiTvoJ~quBVf#tJ zXz-o2n|P5GXoI761OaHcM};{Ilsa(Jk zO9_2N;RlZ)YPcKDY$ZDn+opZC-(i!k;2RLrx(nltOqv5i`)&!P)Iy6I!d7UTk6Qo) zB;o+o*_SY4+#nmbi-=b7M3adv3hq=*+d4rXda#c znSsS!g>hGA6d$msH1~>e!{=V^Z8+ma$#M7qsoT>!9XZH|^AX5Sv6zU`cH`g19QmKF zx=8_`4_37_vp3)5DJ)Lr4Tm)K6%3|~fl0E2MHN%VK1zKx0wmbrB+`h1ba67WH)VZn ziRd@V-48zKe~SixVSPIUi|_u(nk~!0p@)|t_TcV+x^08-O}^=Rt$X7NTAiYSH#c zcX87{{f>`PPQab!#L8!08X3EI z`svdz1Mq#XjTU=9HQ4)VfA8VTy<=A%KYlsi_$HTn)pLAjpD%NiYbxDRB8KH|?qXMa z^z<{!H?5XuXs6MIpIqAxV};KNYe={EOsz6|fmgq3O_fl%BFPqwN^2l4jS3B8@(<{} zVs-Qsa_v>)OC&uSyvEUVXp6dITNd$$q}%WePCfx67*)xtbxeetY#>k4(C_)$+%%=g zJoe5&&uBkXQYRZErx+Ss5^*chn0JFuj7v^d!4C2ViM{UFZ`M!^JQ_zA?&-F=Szp3yy+t3NVBw~}qd?EhH>rKLl_KKHXhsxwVF(hx(r2QerhDeM1wMMr2# zWrEMPotml9!=JfXGxD(x$|8~78u>bGEUpBYSyxvQIVdiNvlNPa2mt6t%U1Biwr#z> zlM;ygVAB5iX))cK4Qn%plG)vorpTCCDD5(c2;zg@N#G{EVd&Z5)>J+moxdMEf3J)gGqS8pQ!9 ze-kv=k`%Ku!7C^gOZo=zkwj#IB58K-OB?*WR+_VoSr9 zD1LY7JCn23_3riR++ z;<*(vf_f6gOm!)$mMJ5W%K$;CAj*RC{YtsJbG5wUlP86@5hvX~mJ&yi)pT1&6N!9= zO!-np6x`Z|))m?QLBAcz>wDkcLwk8s{n-u9knaw* z>6o@<^WHs@K*QR&<=FVC`HAbuukk;0ZeD@<`+4a-9Dnxgjh40S*!(Do3eHK-mEkgi z4O5w&Bwe?tK)*mtJo@&9HEq!|d)KtlcahG0kE zJFt$5*s`|e9j&QpivqQR5R}-ewS-IxfSUr=3` zKU0~S4bH*_T1M^QiPxvh&lB!fzEZvRWYqWl4M=IoanWf*5?7)rIvAE`=4Wv1KsAsa zh^BwZrNt49O9ZVM2r_OV4jgU)*UC3A!YE5nKZ7+=Dp;K*G8i50}MHswm)##y<6MXGmFe_8QKqyA_i_p<~aF?kV(*Hh0JA7vy-JrZM3w5j+6=`<0DY;41Jff&xB11-#qHUKMZ#_J zX61K>=^5w-7dk5Sgjz5VhywK`F1NnPWwhG(O17%&OwOXX9n>|N06%3zD+!Xq27@nQuh~i{-%mOr-_z?0 zQkYzEh;QiHgM4i3LPI2$GE@cH5e=QiOFPIAdqzfiB#?}$Ixl}X=0mDmmyH!|Nzi%# zoVuucn;+Ly%-IFP=r0ai;$;bmd@;UTeCHg zmZ>7PFA}#Pi6GXeZk>H}I@%g=m>_ky2Ysblf^7~?((+z51j4z|g1;m3!7v6?y$No_ zf_7+}D##7Hw}aO$Wm=GZlpN|fmSAls4oF-4bTEQD#>JN zl1W1W&cFeel=qJ7p5b(!57s5YP|+VyOZg3Q0yxTX3FofVUNEJyYa_UcOaok;Ngo6t zS{4L42;KQQqCULR5o(XX3^O#uePCL#3p%!T)c229bi8V@10skd-~ow>^Ew(np&_5_ zPE;&~(37%KFta!^0O^f9X$1b@q#V&Fx9r#${puv-T0JP$VCin-f`e%(Mo1X9w)wd9 z!G5~oQ87^}LEwP@w=fY?7{PRjpne-KvFwN3>a`$KF9`w=$Bq?+ZN4k!R=|kGTL_kIUlqAt!+1S@harD zOG00iTK}KJeX8}9uKT?`0Jv*Su7o8ASO1&xzZf~w1kTI$-W@(Cx({Q{EPgW-!2+p+O4#d6bZjc;GyG3qcf*A6F!Fs(kGe=fusPAHsB&RYX_2fOn zRfdEQ1mmGf_&FA)R19WABBMkWrnUu{unufNPTa67g$c(z_@FRh9i}!%_n-s|7NL`Q zNwgHwZJ^-$W}{i`(DI0zOn_3GpP+tu6*0v09j5XE-6)eE?v5EEj1-Dzx=YeL(Q?8U z(W1C^{%|>A^vTa{;)x9*D3)1L><^W*WH6TSqvR|ZjAg&-mR1D67tYdqPn-q$Cbn%l zwFHK-IKS}M4J7gs&d8R$znfD^G7^KiM&?LJP$^s;R4NblK%QQlC5{ z%wTeX#RerTt_V|#nt_6P2$&j1OLG-a*72x~!nbc@GNLIRVD{=h z5(VGe&>oWDNVm2u<~o2#63o_Mw)j@XpRvj|?Go6EZis=~LIV z4^Sk--(A+Jx477s0FeEuWXLX@;?q+q&M}!VezM~_64FkEN*~1N zw2;k7=K)vmCK50&X34Tc5p8?}5Qd1Q_9g9<9Z6a85=}_j8bP`d7O;PB4N2igW=JAH zM6{)51!N`okG7na*N~is$cwNbF!zH$GAS`6dGa`2-s4h^B&$oddyKrKPO%Ybf1`RX za^CJhSy=wU@W{}mp%+h&4V^zTbbjd4D|E__o1=IFP2a0S%Cf4t(M5z{GPGpl@b zVV&2FEg@1i8zNi_nZIBOb}rApWsqDT0vaPd5}+wyX!1YCMx{(xfUpn=QV8AWBtvA~ zj(16$(w-HiS%ESj`5Hp=Dz3#6*n9#=1`-==?d< ztdfkm$}%#a@WgBhL%f(}$QA*6BiByr*=2=&r&f>NJG`MSdgs#*tvvLU5=a$*g=W^Q z;lwfSEK_at{oAYC9$DC&5QRT?{}!AX@#rGM@Rfv}OqR<^M7PK!mWULzSY|ioL zlL;aP*76LGE)^n44vPsfXYncHZj*#t<(Wq zj^&-b$dy5pDt7&qw>mZsh=mTKNgR=^K%-w%T#ZzM9YHsWzSp*^4_6 zz)X{Z+8N_>rt$4Q$xy=K*NI8k%m2@VYr*dld&p_p81h*x@pJ`=9VRP0gP|=M5LP=Y z{z@`#lb?RFjN?PdAh2E&NkvvwDy(F@siE_t1H3`u-XtW!WZ|t3&|0|ysbu6?`|#vp z2lVKdPOjc`KucxqQj37ha-K3~8cO)ZSKA&4lVZq+V~)lS`D{I^P3{@c8_t}Q%D z*WDe>eQs07Wy7c64^h-<%V_+0298cg11DCrhbfcP;G~+nJ$WW!h=A;9&)ukqh_OOZ zbfJ?~uQlPAaF#K)<7o019$w!9-5wFCP_~Xl%YN#ChY|OX@+pYAzPP!w-AK3INhg>M z6aUA@iE7_XC~RadH2h7Lrt3wC@>bSVd_xZT%=w*Ft9B!6hO#7qnthF~#cnF_l-4lX z!5KNNJ{BN@r?w3eEY%t&09q^`EN%AtupH``dQ6dLCRPk-wq0jDcn4Z3i>I|h8oCeu zZ{nG@<`N-CxhwkQQQlF9^cTqQ+ZGMAuG+b=Zb zWKQFv(WXhiKV6wbPO%_&a=uo_@zYcDz7 zmT_4H?qQ0%e;p?V)mwCe((W&oBuDk6WVEXW=Y}pJAIXqR{1Oyf=q_)%1=#aohtW2XEm0bMO`?PbpmUVQrW*x<#BgRhK@483|9 zh>YA7pewFrv<5eyaCWj6@(6Ry6kKFU0irdQU*$g6<;6h_CvxpG26F4{c^4Q4W z87h{S5bkpk{T=S_KR9ss@Sgp+g1P_j;Q`Z0LBn@;Sf~F2x??U-uUFS9;8tU{NDO`y z9;u~?uT;7Rp!&V-OJG%J zk?8rKT-yfGkK`48rM!EbnzLt{KB)4z{5&rgCX(;+sdzM-CgR7+>120FWZbC-lL`m}r!S3u!N zWvarvW=Ku-s@GbO8!27|z3p){5dN~YvnY0wasY!UFDogm2l>a3pNy+szM`FkmKR|T zrkD9y23KIL1RpLyj|XeVI#lDDO7pqnNBZ9!9q2uLKUt$8)*dq&AK&8-wp9E5}{xlt= zG0SrC#As!(hI=>m7jq$265Z5LiBr0NuU1PXk&i^qD=^X3w&HX_>4Zs%?U0{^qhJ2D zRh_(vG3eICki^d>K^8Pm{gofqe5A~EZhpFN3l4ymqBfTJR^G{VTT2hLrS2Xv zc#}wG1J@`g-t^$KQG#5;>%q{UWM-oFZVHMbZ+_=z5r%mQFz~)F2uM}2yuQ%YIk}J3 z%#8hp>=+$xR{(5JFRL~p0<0aT~J zV}6!AvD#z+fqMTV54MH)Cax{~O9qPEeOGxIY3u|pq6M7~z&|g+kR5j+uTTj#2d$x) z0jC+o|2xpW=(Pwf#15e^PIQA>=ZfLnX`}$ZmBV*t`6-(Vy=cUevm1kJtk2|v1s+Ql z5if+B6=8Gd1!Ispkg|sw8+5Fp)4{+1#sagjl+UqA1YBv`_HshgD9RiiU|=fH*8#C0 z&{MdvLkG7c*zie!!N1vH+jU3zs}$2ESsJKpuSrmiFtZ{dh0nVKMpPhQtJujKV1*KS z0C&l-GUapHCM`4uK=>emyB0nSe3+1nS8?%~yEFi&7?2sDbDl=H6{sjAo+33lo>U{) z3fBpki&glEaK11+yde6n0m_Z|2O)#%p@6gaJbx4LrY#AiQXGTaNVJ;^eH&tuLe8kWOMQvE-+?7 zx*pVVa9Ub=14O4+ycDR%nMf_9Gm@bn*S{u*GHwc>-QX+&rlyekI>!k zY5cUkY44*_5C|@RkxqckN5x-9Ldq9DyP`FE_Wbe(LV1~3N(P`9k^##O4Jb9bN-6f& z6#b=E;|6G48l4istH0740{wGI201jdD{Aq!0O0}&kpbxnD)xbjmS#))z{HUo;ryBH28ANw$%`6o+7=5kH zCX-5uwTZV`!!AS2%=|>@UN;$7-uv2Rf~h}*P4=YQWugQo_9@8ZXc5;^&wzbGS`G;-?I~5uj|Ef+&FK;09h2eR6nvJMwXH2&!g@Qz*L>4kC;oDA<_` z!OMt%v)|tb8xj1H%>)vwhEo}(hhBuuB@QV!yEJ}c?61evYMPtHLRbQYdrD&dF>6_e zRxpbQqGacj6EbDiF&f;zw(SWk5ItQ2SK#1fL(ngx0O7A7i>A_ZBXC-{-xG?$i#o*(QXAG4&f2Z0{USFpvvI*>qt}#* zv}CAmCA7+#M9|^J9cNkxGuB$87#em_EFhi~{Gz9e^2q|vwTo&GGLuvp^oigw2QLK2 z%8ee|q-YrZtE(N`a8J_4^`WCf1!}-(w0Zl;m4s;MpdeapS}rMz$!S<7W`sE_Af98K zjo7VpoESF3PSmO&LaMfJ#Sez3(rPHOWjM79G0F*-m_44g`?)a^#`F|1S2g+oBNjFZF}2VY%QYp)8rqVHd5YmdJA z`4taFb3d_cO?Ow9&XKp`GFugeEXJwI&2AKpC7ucSFM!d}@4vpLwa=&_vgv`?Nj;{4 zY-H<4F#927KaHA$D%tq_B%^h2yF>N3RFPWLd=}sn*JH4`;z&Fqhm)8x)f^*v=d5U} zVDV6%q6R@fYB>XTKXH4v?rUWffS`aXw447VyrGff3iv(GjHt2XEI6X#Ga$-dm2!ik z5UsAsaUAse;%p5=L)L(Wwn8kXvmp?K}Tw-u{AkRsaY+wlXJk!~z1Z+6^0w4_Ei#^0uc;_mZ z0@3$RtY}-Wua&&Xhv?fom$xx&EyJ)+6ad!iwPHM`?!_^6ZK^yIADQy)Gc_JaVF zp$5;{{&D2>);j=mwdzFA*g&3v0{GGc2FY6=?&Rp~mY65#4DVDFnSp8VXXc>I;TEl}(Jp4*C*qEau2oOcPjUb_v-AQy3b`Ios9mgH0;O#rRTP&K<2S!MQ5R)tlp$AHsR?@V3T(+vYd;sWMbi$s}2gP$# zyAM;3L z2S%%n88p5%R67k-1r&mIO&@bBL?J6QwqX%M82=tb;m=nDFpig~>vPrBg z0;Dy_mQ=!I1J{r|61c-;BCriX4S@TK`l7_5ouyccV$c^9cC_qccF|XMF5eKES2{*5 zIAoILqL^8+28N_(4%o@bhIS{!3{gPE zVS!u<)z5_%QU*|{nq3eOG(~{o1XOl011eJ#!^$oOSZR?^28_nD%Nb~;=WYb8pe9G6 zVkm$jhua{)ry=D63`Q?dFH&C}W|)!R(sBPO zFLV!OyuA@~E?r>?>>#{ThTG*^!VEnWv%~P`C$M1TJ|~Q9Ep!fcHdupsE30bn*jna9 ziDxMS3Aq3>B|e`;pE*-87F1wc2%FhnO<};u{7M?b1ME_`V@|;DP@-xUwZ2lvWJ^qD zZ(5|a1O1DJW7-44$S`losgRVn$3l|o*_?G;l;9iy6FO-O0n@CW6w@$5ND~kWMZF0? zehb}{vBQBD5XN<~aKgjV5l(pHN#$(gq|Q>*b(!|q7e%6Si_`Lqv5SFc69+AdiTnV{n}b8K?d$-=V5GAL;_NxX0c_@9+K+Mme+G|te=HMpw+HUb{sk|z5Lm72hNdjdA4Xm9A#vglAVzo!vMN0N%??KA z;i_OLrI~`DOQU_3cqYIDA#4IXYKKj?FRCfB8lFL0COMZ>a479c=}a>`0xb2!X$ifO zC%p5P7v+GK7=gJFwT+=FW-A#OE^u|Y3-nK5I_-+lXYxA{{(n43q4N=)05RCC3wMr! znCZ|ajQ}aEuYfh40#y0OYI9KLgwmr^4q9mW(Nu}iZlye7HxC3^Oet2nTpq;06u`c2 z_=<|=D+bW;6;L-{0k{moU^bWzv7=xl#TIY^LdNd;5afgB(DBLQ1kzAsN(mp8kbtAu zOex{R6cUhQ*uXqn8jEFx{e8jxp0YkUbqKt4%)ll%lym8UM4SSV|AwCRWl?&o5i8TyUj>m#0 zqUT@U-pS;0D{$MeQg;S0NkwcrQXVV6_67)>P;RT0LCjrQ%X6i|T*c)7xufz8`379| zMUPkO3yV454qitc1k%5yRN^ujFEnU|GJ|+64S9CVtT{Uc>B(ML6$1^yuSLJ|>swYW z$Rp5@@(4%$mn_h@^~6jTT1+Fkxz$|4Vj7T{^$hyK349hSyhA=-kqbnOWOAuFB=225 zdCqKI*(o2rjN*U`<`Dzez$LK{eA%%wW`wvW;m+h!6)>3wWcvW}M*=tt;urYb4^0N~ zme-d=5D;K&)nJ;I;9|l{7Dw&{Gbxulv{V9tfE1+=bZqhu>x2X($VC!yL5oBRBc<@X zj204UEa2ht-(r7+mz z4h9~XYva4ofO(k<(FM=N9D*5pW4D_9yt>?HK2=N@Uz&+p=qWv8VZBbq+L*SzU_6}M z--L{X!3tc{B9>ts;Px2YDF`YOTdmAO=>USkx~~YQ@gamQu6zRxe*o#khsc8L0s~Zb zaqr@YojQixz%c!JcS2*-iIbkW8H;V>xr}MvyXfH0_M?{^EF7>|7KB3#2JEoh7)UAj zRV~IXXwzcAt31)3eTVCB*+^}j}5PRZiX8%}vFko8@ zD8ph6qr}v`QUF;NmxgHw_q{08E9$YA3NY)d9CD`pkydNumu zpKQ4w884fgT|qwHFAtLeWB8ns%(mUkHiK1VPVU~BmCR8Vcd4xEg^aa*e};IOg5gs# z-RpL`WJygqlFs}C@T7Ro9~no|F*op}(6<&!nJk7xL#S3w9u>KhqGY=`#&ZPC+OXJ! z9ttDwo19UPn_k1YB{`Xzz`8*DDM?ExUd`Ibo(LMUr@(C1V_RmvRvb3x=Q7ma=-Z!t zXj_;$bTAZ(^p@Lbm#Q&iJUYbp$8u$L!Efa+IA~}u612=#;A}XpEo92XR0ZRca+b%Y z3K|A0MTEPizbj|u_wc&#)pP-6s?tCg(LUp-aM4ThE(7IZ zb7Mu%lv51psr?+L^DI1utf#aak)j{`+%=y=a40_jIp#XRQLz5S@JL`DN4V*iVh=5N ztx_*UZU`KM^CXMD@}`Z$i55cW>vj_?(gb&x9;=v^8WC!ytXVJU2uOD*$l}7aeP9sZ6sn z##E)%1S_k2(e7f}wP4t?%Z)Kl-TjZxw@u5aR9))9$(-pW2)c59PdKt8xt92B?NM&6 zO7jH@)tc!6ak50~&WIERj4&%8*J(W|9urO`d~@?!Zhd1tW0%DAhy@i?3g8SPtDIKJf0^*A-(CnJj~xvhe-F#iHFy3ZEe%yB_~UrB9& zfFE+>X+V!DqCtq4QotjX=Z)`$;T1U^bQ@<`V|4}^ls?HurJilE2P{SLCJOUAJ3=1t zb_u!w3AN=IDZHN0uYj5S$@lkh;+>k>;2wyuIpnz^BB)S+^}mXobaFufr~$}`U=6Sb z?olC6z?*9!2B3y)DXHR8=`TPZ8YKc68+27P?hfLq_rMhjV*+NR=;3T=E~)S-qRzy) z-^?&B#)dXpM~2=3aJ0nPV&V`$MrT%mN=|}M$VWpbj<)P|-dVa+dwYEvfc2B&qx$iR zxL#e4)_rYR`$~Nk4W3`#5hjlp2%zR6gNlaPF@uQ2td|jHXdKVQNrc`z6Ow8V!86E< zV6FS!ep+StnQW*>;thqMC(r?Se;zhN*ef_ z?4WEUw}-S)pz4hXG*@HB!@-bn8Ss1FC`A4jlHV@FL zQfUrg*4=>oPS*vTh;+G8I)y7sk=Rc<@!+^ru|PW0=w3u_jh1m0a%nCO?JdGts|1q^ zlM!ht2oETA261A3DJg&*G%-Cd@f7MlDdTaTjb{*K!1Y4|F%qbMqeTP~O!rNC1?^AJ z!&>yCf3juO7WHBx9JxKQzYH@mNMVxR)wOl(e6R|;XbpwKQIXY9Rv^o;Be*1cP?e>q zjVTi0TMx%s%Td|qndk-N%`zxW@6e&HWxY(NPv%%W&tk}qPwjkIAu`@e!x`q z6(M5*h18VHKCWfAzY|~-OK?mPmqFjhKsU2Hz^xl@2uA2pnyo!ayHW9PZ`^qIe}1=h ztDbdn2wmlx*%CtMdwQbxUS7T#$7vj`2vJ}G^0#=)YnN5!ZNtDBel4&XB+d7#7?!1I zYpXf?-30b#T;l=EQbA#E*m#Y@sY{kbsP>2{F%8>eLo|++KtvprGnUf87?h(bW!`9V zLJ`AsEM?Wp)_S!txmzzvfB88dOG%e~PC3}J3E9o4m!kICV*J@Eu z?otRc>6wN93JOHg;5XZm6DRoryHFmP zlgG}~;x}~)vo6>Gc4M$>%A3?6l*j-Zfck^e)6Y6pjIPWes#c#l%Kix-ksc)DiZ%gU zlp*hSY&=(+AAgbf=E*BM45?v95eUu3)J^(vfDKzk{uvjN@H|;Y;vQwiu;@1%gqUAs7+(%%f(^4;(4bs1eKm$tgwZ zF;;XSTU#UTKfe&jVw6=sx%t3^dT+)Z#Q`jlE792j22F(N3tUnMZ*_{?ATZ!-EW3qWkwhZ z*JAfsZ8e#OC&UQPOr>Ta<83tU2u(B%#z+y0m`<#CIwmd(G1+Re8W3YNu7`tFj3Ir} z9SIs>VPfQPVV4f2l&fo#Js@JH7NQC{&QMYj*}d&`W7}G?G!FQKk2Eebu;D~=4ZQ_e zWtRKy4}P`dxr?5Stl-D6#vt<{<~UbkAL(Q-MeiP8(N^}4hZfo?WBIZPGmXj1coBh9 z2&it7s>R39U3a2?akb+UOG}ZVQ4J2|AVuv8777_5ehit>8Ock+MhxE?R;5bFD=iJ{ zz_QLED7!Ri3P*h}w*{feSqp?Qk`W^yu{3LK z`n4^yYgpS&0Qud|oo_j&C5(Il5g4Fl+LCV16$}x}95??{3ZMrVC@E&hz4kCM4%Jif z0eWFj7@z0uHR=5xePMWe$5#C&B-;GMHdnDvvSX=cOliT_j3@EzghM~RNOgiFm6g^e zk%obzNUe^1(@MAwk_DU~tJ@|N^@;sk2$-cY&D9v0tXG{?wMB|JsL~l{W*t1wq57GC`bhZx-sVVv>uaaqS9VxHJ0WWQh( zp`^OhtaY}9iyrwk5cV6%g0nXQHJfQ$3fKn7No!i7$P1%vT&G_(KYpuTdag8ktv)3X zBgEq{b_+|99WSLh}S=VSfmbPSevz`&O+>_{eo-muaTWHZVutjpbnFIMY3b|1L5nw`pc!2 zcgx3DIT%^AVM#@(Z{16`lCfh|7RJK?r^zZ@#3xw*{&k>NvY!?YWxAO%oqSPsspi|~ zmP~~fST_tTYsJnL=QLBSt_I9hTns0~g+f>aXGP2OSB!;N*CxQhPZ&sF`_%!7om8(Q%|b<2x?wgL$gVhueoPTV}=}4tRuTYbzmVv0>eTR_*~>6H>Do_O+vVq+7>akdRoV_T?&bge|+^7MaM z8P@Z3zXb?_X-Z|VOyEifIW4DXjg7?Y(?-`5qs#DBP;l+W6g96k+RD^!jHu7r#7y`y zDU6^IQAJ0KI)CKBwL9Zt0tk6DLa{^M_annC04%SMEKpr?1DDIRbq>fW?OU=bXDosD z#gp^6U&BieAxSR1?>>PEEerI%Q*g07(0i?ihDkD8nG@R-kW;iIHCZUNlC*0o0XA7G za=p+c9M)R0T*^$iP_Qi9mU*FwqOKu0f(1BRlG4XUujtuNW?iJ@Ng}E^PxBTI!i2p<)i~%<(0T02C`4GwOQ) zO5w?{S}znv$b8S~#s_%uv6>=}nGcb{{NxQUzyPcts6YryE!=Iu#WQl5OVd7LErK(o zDpZ?sS3C#humxSIQV8-O1Q{jFIM3j;UOoquz2hT69jn;sVa*eCFc0V;o~?fAX^Gz5 z_h_3QXZSXFZN=E&TV4Xj zn=^f(NoJWWQBtO**BmVoX>ApYu}vk)g7%d~jYiah>O2p$WRmleY7Hl`5mwD)&1^RX z$8bG|MZ(c@x^tV?8Op6yH+Yz^^@iRcn=EQ3cMusQnM>-HN;A<#^AV)jE+%cyxeS=5 z{46yKSgUvQh`<0W!S9~7{^-;u#i&()8q$PbcHons4*vpgj6-H353@^;#vPjCQK|54 zw!&^3XL-&9f}w;ll-*V`BIU8G@xkV#(M%{NZFsr%Z0Q!yU&TXPHoVD)LbeZB3)z6R z&BWh<7`UHEM+sBiRQDCBrrLKN9r;_)fh%Px4jx@{R_pdHdWfB5I$5CPSTSS@$|jj9 zV2*WM7^+S?f$dRmH<5&M)>+FDr1WM)!{?=BXb5-;@*)la^e88^HBrhF&9ZFb@xiz2 z-iK;(mp-khG@N#7t17**`^E74k6?ppzrss3sU~1xHWL7%sPJ_B3a5i63Gi$Y=SVkr zgk*}lwYUNE5+nj_5&R4F5C1Zkq}g zK}=r0DXKocCdX%Lz1}XD;cyY-iaG-h zvxY38@I=l0#y|@kEZHSw(3>oS3u!9&<#l;eMa|k}6pvRm zuJWQZj|I#quge;jm7-?lGK$A*3PaZOzuU4o3NAmi8onZlIPf93G09y?a)@tKE@$;f zNF*LDFye-a800kii?Uwgtid~KFv1CPDhtP<`;_)O8Q1YN1m|8QU8w@73ri}Z3LtPx z`Zc1xMLdgd=A*B?PnWKm;{~iIhz8SUVHvE;h|1hhZg|1uMX^BcVAg8VMLFg({bIiw zelPvQQCQsnEz`$mI*7j{ACb6JRFiJ!gr?)mTZKiZAWyos?)w}rrLt2j&*F*Sk?@7b z8~ZFxPc5Ks#u%iD6%?1@%u~{=Wg8YjA}LfZdD*nGJqh*2$WY8V;5j-}p9BaLEya=B z3*jeu!Mf(y#xyWQ<42UW=RmHS6iYkJ49$iX@#wW;2BGj0o+MX*(|N6dff1CucAc-( zOGj{#;H4?L+FMg?WftC6<^nPJy<{gTWyzSPevCQ?9F@?KaU!$_F4l@2lMYf!?5alO8#lQ;A zR$}hnxv{wg%2*#gK|-A{Js{$vZf8ry{Qi}*XVn?OVN7!N{&`HI4KZ|>@rp;NkDjU@ z#C?;Gc;~X&HwJ-x;f4jleT}UYCPi63!BsrDz^2)Z-lI>{o5S1JJYk|~j-4BPd2D3x z%;~YA^OsIPefpxBDd%ya9!&U*SQ6_h4%($t?Wt+@-GWfo0*X zr0}7dpDn{6V0oW0q%>R8<@ey?W;h2v0aj7^fmq5^1tBMVjAha_|$ymWywT{o-koo zh_?;dVSx!#C1a)9OQEFF7jL2cLUyW0z-*wAv9bf!cc+ihUw?Naa;0B1iguijx}YP# zf@`mftblP7WF=*E4wG5k-0A`ZgfD`7gxW0SkG`}R>0lr>k7QGG*Y}E;w1JKfLYOM)uAuzajBB=6hoU(@20JFVh1VX3{ zh_y>%l(ek(E?qI}2Wg73r$L|z4byH)ZqF=?K4^cURD)fKF1AA!XK46JweRU&PS=i6 zgW5HpXei(&h`#js746YOZ*N}pIA25Y7tvJDrllHpEjSG1i};$e=>L6d^QKT6TKFzB zM^@$f9%sA~f!i1=f#w?QKZcyfV6BKze}jPyP%U97E!RPq;~)qrp~2M1!V^o-h)1ZG zCuDcIy!T`Bh}$}GL&-qCKi@CUm`CYa1-a&)D{7d*0-nuS!G_M=7B;?jDMR(7bAa^X z;DQr1+&ygOC!;96QRJXr4V<{^(tp={UNZ3gXW z?>i}SnSNBSCga=WQ`HNlDp=JFI6KF*XwdpS#jJ-Kv>wN)<2sf4%~EMLsNbvzw}lx5 zE66)VsxxH-G6MOrVL;1}axo67cXVtq9NL$}q4A|7k&aP3oqb1oz2Sx?7yYHwgi4si z-XjEcp&JXNG$5OpOd|;mPBguVL|Wy`>YGv9O9n z^lZy4$riJ)jW{7~0^MO+DaxIS4XuTKpK#Q?hjV9hc0u;(Lk?k%f=DE;^@HcV9)Mg z?_y-huOs7Ekp~zUCs276a?|_Cpkk;SyMO_JDO(J>nU0Jta9AFBi4l%DN+o#UTYKA?>PZNYm?0rH?ZlFQug0ufQU^TD7Y z8xVQOpWy<8%Nr9)xt_yvUo-OyPT7rAD5qspLtJfhzGn>OaO8lP)Gb&5MHEi7IG2;) zMCf3+f*tlowkBy^$PEkq5*HY)e_->*YsNmAPwVqbm#b1dF`FeW9f7#-1XlNeLfofI zMI$(zNpaxPBB+#wf>N~so0^u)K&Wj++$n_h@OY3%ZK6kBS-v%Nw-T3Y&q)A1PaL=*I-fXd+yD9W{v97#5@sQGv^z&4HK$Ty>`P_bV!WP_!@}Icm64!Q)<- zQ<9ixP@M2dam&YaIb%nhJPz>w5ynX@3lO0&tIG`ZSrB`Yyy|vr(X#0&1bt&x=HY|M z$&tXKY+`1^rVOY~cydZ6huN3kySSJVME~+?$0JJ%yR;s=>C3sY#1dn|r?+R zQ#+Ss!ctW{1ZdRLOE`1MI%%Gu4TC4BYlpjL66~E$8)vv=i*N{^n@eBY2?@rJ2&Ptr=*6Xg-aFXLybx17S-45FhR&6z3n@LVC=mb_?DU< zvP40N3kM%MjHRKm;ktW$)J!3=I@7G7>$h8?u9=QaVQfP;x`})b{IiJ6qljZTBuSo;EUJt^ za~3?AhCOY*2rn({lCb3NtG;>jX1+8rQ^Y;%u)~l_R%VOS`AYR#pS<34U{Bw{e1G4L zT4|z}Z)y|O@?5>wHrLBdSCjmN@m??FgIp4Zt8I=gJ6w2@s-PEImVH-VI|pgO-o<0^1|1)>2_gl9m|w>X;0)dKK|afW0$+qM4o1;|>A zGd(mw|8U8gH~f3S8j%2(fH}AfXNfx1u&j@?+lWDFvgQ?D42`0%|Gl+aZ8V*S8M+ik zjfTm@vgZUQi25sPi||0_8nd7?KZ%Qi)oH(B%qh=TW=)Pz?HjGb?mAH^RVTnHp;v2F z+)zCNOTQ(Fr$>r@JG-EQeQCLR ztk|O|1(N<^4w%-;rTK!m2h!5F-J-#nN=5Vk@4_Jxt^f#Yd0rID+v?1lT7Dca_Q(r_ zw#Y0|D?WeAGb7zzerKIAfr-fIDCINJQMDqE;~uCSay>)91E+!c14b4qv9zaLn}=z# z2tHJrwA9|T*F9BE@Y>Pteww5Q=;7~c>s%1)dEr}&J!Q&$KCaw}n*)dBS`CbePOlWO z+&l3uiV2yozT4#}O3-&{W)6vYWf_)4c$Dr8_!?L!M_(`0%hLqr3EO_wa+7DKdQ2}f ziMkAj$5vzcdKu}XaGaIROtt9IXj$9x&ec3u1Uj$&-6XX;`04SP%zby@|n2eHzw{sOF2|c!bc5Y^S z&|3-eeZor-e0i%{zBW}4UVnbRgtON(bP_7oL+(&ATBk@sfg7KPW>$;4e_i8UC@@O* z7jdU!?^_s}3&kdbCeSYM$G!akb85nP8ZUuw2sq3ZLBBaby#;AC5x-t(f5z`u)y}?Aj z*CbX3CoqH#<2@fkI76BGCsVfdiTyZufhrf|4Hp!}j}24A+BK^ zrgW1~{z|uwo2&z#Z|KIRwGGY~Yk)1HSxEg7PnTv@qfZxA@1j(DD)ghZ0}xE%C~Cd! z{1(;8?n<|rrmPOwyd<@b{_dY|=?oEgid0#1McgB8SE5?FR7Iw-V?p0*muru|iU05H zlaLtr7~2+j9F45~l9mkV&#~xJIG~*@O_XPfOyEe*U?XFA?ZU29oIEQ*v3;+N_C9{4 zKYU}fzxQyl_v#gNQcexic7hzz*li0mss%XU{_)ZNfd$&COw<$OgZo8{g7kwMmIBgL z1w%WyKwI-T`;e*I6AO|2lg-frCy>k?Khpo^=s@q`E0-sC_3Z33Qw>Rm>d-1}z*~%P zV)3cK;hy=N=StY?vl9r9!!cR4QbCRnyIfbRrP2kaBpZ^h;3X|TwF6SRK@s03>$9y-|VtT0jR)mbklqWn0*c>0@Hf%tblFW2!P$`r^tD z_#}&*RYF1=tK*5YC)O<^bX)4c1}1;=)3}!c*`Xi|8G=OvnCMsLe9dMCz;XmM$|22Z z?(xU9edjVM{o0ywY5+Sf9jAGZ;nHUm+CO33vl1eujlghuyl7UWa2Ay5p2O2dBSy-a z!*Vk@#5PQB&9OY+JZCRuc1Z`hG+AhXM1N-W(InLKJ6UL z{V5}kk#$;8(8lHHqp~5y2+90mh_y`wkHdG4(+)+HISy`n1b7ZHEk;l+V7^NWy}c;a zfVVmZbOL`oH{6A=)m9*`N1yoGvit9s*6;lm1F1F)Ylfv)1vkNhb>7yKK&N9gCsT@- zPc4d~)|XrmOU*nUV!_)o`sDET_Rx)_IRXmRb85>6!=v~bMWPX+iGc99kzFQbQg(Y7 zq$|J$(+M~)AiFd=Dj^>YC@CEv`zO4T+$1UAOU@Dsaa@*=IWOGj0Jl?FT+BpNAMY9v z%n(KnSLWkrqxD^~qb5R0gk*X4KFt4pAQYz+qmxhfba|X@1ZyYDmw``71d0Cds~v4} z9yqkH-%^2HTk;U=S02Z5fal@*BXY;GZ!21u-itz;JvGZ=Jd)12K^&MVzG3LKSv7Ar zJ>YSDLHTR5g6bAfAb!-LNp+QF2L;=a=%dbiFsAwTyR>uFotrI{;p+|t)m7$e0@qzT z1fSmPG`lozpW@+k&#~0;h|j-gE&gc*hn`NP(Cf*~9=VtN;wnoz4y})IqU;H09prks z>08?$9l6DY%i8(ky!VI5+ORU@Pp*_?0+E%6guu78*l=L+ym_dmsL?@Mw{U$KxwOjLc0(}17&{7nOf(nGg3nLf(5E7l+-`Qn<_$1(@}f! z1x9d0-`=^r4WTb|T60RNkSI&1MRQ>~4TCL6p5Ypb6BN_U5$wuqIiLKfT@bge>Wi&j znZ7~uc&JB)1$$%<1^s=TE^FVOrMQl(K&U_4(?TE1$z-(xPTxaSvy;QOgE6pi`lYl2 z`iM-cP$WHI*xfW#I}HL30|c*PNVb_(1nq}?YDR0Kzj9TfOhOHDz6-pqP3-No5vjS% z7~l#<0ge|*T~TOX=4ecQkzqNh5$ib;@9C4dVP4Ch1K+~&Z?QgwOg3-CtLJvEmlug7 zuz6l2Bf|@&&?B~jz%ZtaeU>x|KUB(>6ah$vNbHnCTD2p-*>42rD&?!UjPOFr9DlPw z_s=IBfiwix-^Mb~1bGyyp4!nLU*xDe3l_8gkS=n(X1#kC78Q9g1jZ$ImVKP{o|+Ab z7*wUdiLCb{cFmeNF@hT1b1*cWm>>N(3|g5XPu^8$`I`uXrZ>m?2uW3;nc`jaZ?1N9 zEY05(yhNj37t}KS%q9XMmGg-G3kRo$I0dpwzH|i^{9y&B`qH?Kb`EW}FdmV^mR^{s zAf`n^VPPj9f==VT5MOX}nm}!^TW%Z@*%78X?)M_hp5x}Y0aAcr`zE~VCK7g09Q4Bg z;cuI9dF`TpVvTp#V)*ksLE|Vg@3580IOB@MtIU?Jg>p2flhFo>df6ldoQh<^7lVxG zd^kv;kl;gvB7$gdi}^vvUK-9V<0K&se*hdQNE5#8_f3`0-c(Q`_|~n8XeZtyM5HX6 zaJDdIExA@}oGV6e3~zrZ9CdIxhV(~dbYdl>{AH`a?#am-#i=)N*k0u*Cuy(vUF$z&`=zqXnqYbETI9m0Z)Bf#YRZNPsD`iE~zI5kWA9KBpDD8 z+7JZKc;&i^7rfCfiF}=00i`%`K@bw(DJA~E`+(vn$Z|rkYGE#ZDVnCk36iAvf#D~n zLuPZs(HUco;sSJU;o-2l{5ivA+_(v3p@=~1q-`0-&nJR@odtvkXLPro^-xdDi4g4Y z?(=R`v1U}GI+trBqTTuPL0^&|!qp3&IA(l;8BfE(g-Z1_l^3kQ0u|p{E6%gfEJgm! zd1*q#;yc9C0#u9V*|<_Y+Jx2MiB7SA5*lJjB5N63R#fH(Avp_$yvIE8<5*FKbs|P8 zR_ehSNs4i94{sO7aXX{=$FZW0DFnCgCGCf?CM=1hE0AM~?i1%EIX5LgjurhlR@BR{ zkqEC_DjIzpD=M+FAIFL&vl4t9E2;`^wiM$DF@9Jh^nsvo#+=Q3u&BmO&9e6_J<8mj z*({Cu*l~Xx)~MIOLqb*c^y9F`1%&aB!x~*yDWf;rbOs-XH6lv#>kHZ>24r^4bk?_MMV9x)~!y2v4-kQ~EDQXb1)b>????!nB$zh!mHP9W)NPzsw_%5F} z-xQl(4oP*yH^53YunStUBnW02z-t9(oVQD-2Ok#LB|ML(rLC6)pDegu{&J;aJZt3- zA-EWaI5Mauu9uX}X}nBcZT`5~qp88YHgfCe%y?xw*RaCbtEbH;SFazdC+~UssH?Yx zrCN(qORXkL75&-tns#S(#Zd>cZ80+g+-xLMzyh*e9NTR|EcYxS$&E}w4p;OSdYq_) zh!CqT#XBD1lPrl7u6T5fhadF{JdZJj+}?cR1Oty|^CQ&ImN}1U;`}W;d&T}z@7_K8 z8Y^X`uV@l7)>ye4<4AQ zoUU+MIFQi#_LMZ2~j>hF#!cq%ES@k`FUexG=#c{>RW} zchL3zHh}G}aR;D%pnqs=Bi@OcKq&SjaE{ff9b&x)5R6*nsjYWQ6H?8~L7YKC+X6O$ z`H76_rrKkucig`2#ShyUFHmAsmLBUh;;KiE2&oSbPv9M)39y6E4_sGjnDlqncSPMR zB5j;=D@u$x+Ej=?hfB;@gnzXRdyR>avSbSycng`g=xRIA)!~b7<-vS%w zm7NFL)PuAnTbiHL+a6L6k`^@@l9DJ|evuR@Q6?#o;zJ^>Q1g;F;&6tZ8A_yF;kSx( zH?M8iRpN^@*)~qlO%Na(8%3hcZh^JaqG*$CH)_&NleFo&K$@hltQ(+cQlRN~&bjyh z?>`(;lq|22ECq}>^Z)m8?s?sF&pr3tt0i~)h&GF*%xj!O*SpHp7i|QKZZ>mtqh!hj z!^t;n=pq3R>hNv;8<_bnm;t^fLUD_x5Ggy`sBo`U0QaBU%~dYf3Q>kMBjIlh$ZU>tX!o9_JOtzQgqzgx}`1U%T zspOFpmAFW{(i)9+5G=>Tk0ECXhevkah@~@p+~q+@Slnq&9Ajl+(fLl6X6@8QX__h+@$oqn2y%+ZhbHFZapZQmit)JX?ebEdtQ{qe{foamyPpQ zA>uifq@$AR7yf+L=CuS?)=^$>IS*VS7uJ#lR^DM?oh;ioD!e=@51VZ2l$~wrah&E} z#(bg2k7&Vod6`AQFK5BHm~lQ03x>{+ti}UF1gk3j(US!-PCD3$t$HNH)VK`?lL<(X1k5}gCa0YCF85Kt*qtB zt|pX6ZJ9+fmwmG}wSlbUo{hD{<^8}-RCp$tsZEM-zBtrNvb+3Nhx;jJ9A8bs@ynDi zLT_9@?u_FP7kV%9ygG&xTWu}jI4%bj=d1C(mfPQF#I7YAH=h2r$ec9XIFdzPEVC6O zJpz$ACF^f-M?T&(@@tVEYmpw|CHt5G6FZ>7mwzp4hrUug=xh-&ntW-O*@k$B8ocH>_=L ze&P!mK8wxGEZd;iF0$RY;+_h+ahL9HhLhj7yPM*{Sk=xMZq)r$ZuVMX=PY3UsQ+`d zX4`7AO<7}l7}w0&BHLeNi`=ZZ$hL0v8p+|xnnY$knF?Pq%N?YXzH-?5LHD@mG}DsZ zk1zhpmc%9O?=<`DZcK9NR;17H#-y%1&Crh!K_se`CRsJ~ z3tK`XR(jiVZroTH*>`c%BZnzq6Dr)-gX~ltUYJbT^tG!N&_L@;HNABjCS5oKIL%QPv!mL0~8 z(03ixRHr^VA9B=BexY)cn)`vItDn@Go>&2KUdJ9kiAZ~0a9T<&!3FoR<}~;ENM{jRDAT>jsJ@;pKc7He zPcLbDF7DDTwv-9f3+S_l6G_A}nMP>=v!h8~TP75dtc^$6%XjTdmW4RWZRUTny?nkL zkh7Xg2%V0TsJGLmf>M7QtLK{m!P3+aHEW2Rp$T0SpQ=W5jgj0 zY{*!{S~@Q*J>=E@leNQwTz%hOqf_-RTpArviHsPcD zwRPqftU|>6ma(E6}u@?2w=bLtwENEzZx#fF#KElPJ1llC} ztj>-`5z4Cciay}Jc5H$t z%w;GBf*HzMv+IKn*{GlT`7OKMhd4Iz@ac2-fYgfq-sAS6&Jy|kY^7B+^wLB)wx~iP zI&`@}7JDO>0cVje81#ugwp2%)KZo({yGe1xMLJa0lWRv@ip9Cl z{Aziue!^EqudjpZp8ukEbg+A>XL$JB@YG1p#Sz-4 z>{-D5Ta=9mNt5*S7q}`thD-CTGZM6Q31j%tZ?b>TiJBz`YEqAKLH$FYs9C!S9=hhC zZh~JsNCUZ9&iD2>4$_$GO+C5PE|I_uo6Y{kf>(;uY1~{ENA94si?d<0xnyp?X5{)&FM!Q7y3BQ>*dM`s33}7WUlluuFB5gMeD6<5+9I3| zF*SfpgJ`K7^zF!T&c>8nQQs8FWg8n3IAcG9qzY4!cnbP9)p!g}uw=43hdb;O#gSZp zx=?J=rnq|~{L;(e&P*nE6Q*#I4+YN8(MHBm>=SVXk4PERBN!}8LwA5HfeA>-8brPh z*$*;K5wWki2yF&6m;oWxkNUIoq4n?l-p*?Ep0l;OwPb=JAo*f!%D(1j-r{8m`k>pY zRqO|=Yd0J|oW+$YQFZ5^YzS3S^Qz)PXfIb4zYG#Byo6+J`Z8=>D}yrFsrXMnSG8A# zU*EhDIg@S&jvFl}Jv5sMEkPNeiJ5`+%dSw9STe##6Tw~8b1B|!1CJBQQIMF~3|zy` z&%`~hZhspGF)apXXNYby&24D5D=)C6@=A-Ca)Py@;J8!Fo~8LtJlnVzBP_k8$~=2m z#xKYBE**=q&}-0Dj`2BZ6EYm8af9D2+C7*8?<292Xs6D(IS2u(3So3ghA2fFmwA94 zP#2HI^-j3SPZW+;{vx$Q@2j30brBxRtcv|^6d{p*eHzQ8e@dwm<4ILG1nZ<8utyY{b$J|gdGg{IV7I~PlWZR zLOn$r=O*P<#9T&knfyuO5UQJP0v5=F6wb+0_9&p$*@(+wm^q|q&SRBJdDJH_V}&5a ziupy)ixk$b&&EbLs4x%T$fc8rU;^OT!-vTs)kI*_HBuAlNH(=lY;0XBEXie{g<(t$KZQbEp}i zM|tim&&|`Qq~+!6pPPUmws!>I`Ob5ec$ z_bZ%GERQw8$!bE))Kp=P=%U{L%POaezY>Ym{rtYr9@^G{m5Y1d4YtzgJbE&m4!@`> ze!bQ?bLbEa84odTI2PfXX`Gs(_8L7O^JE$@3X(Nt0^PHttN`{v&QXMw7Xl2@n6sIq zfPPkD4mI?pZ6So15{3%GDFskiVD?zV=Mcdg`tbQDN7Zy6IenA0u%H|usrT6HO>U6* zju_wtkEhj(_v)+F`CI$etH1hIX#KO?VmkaXqPKK=O<{^Q6Q)uhzt>Q+_f0uZh6L#X zb^6dDz)cMGLb&d3%YP54Ba;UKI!gu@il z(f*P8CiRDfn%_GRD=cOc1F6{@{A@%(fk&7klb@eT#1LVv!oRz|>8bV;9Y=|T-~{#h z|Ep?rh$ZBR%v1v2^HegGn&YC|+FPT?TXb1YlYUDL6)Sf=({|$6ak|NyYEsAQ-MY=Y z+@r@^+wssyH^Ou*m>P3)>y8)e^zrVz|V>t0DvyFk?wn&}~IB zxmePB>EcjCVcL32KfSkzC!ND7FzdBE@CyL%v$(dr6I-l)5B@{HAmxi^Z>9l59=Lu9 zMx)gV|Mp*Fdu2Ygq$~R=lv7JI%Gagno7pi^a$pOx24ZvUAqBea)a1y??9;p#KbQLM?JTe zIwDmi|Nd?GJ~clHS}Cm4kRzEcAlb3{=nIw3-7WuZOE+-|)JPBqT1!yer))IvSuKnl z*CF`mAnZc*71aCx^nmjW{hHD`6MtE0hAO61=Z|a(?Vw_lQ|Ze-QG^tGKw4{)mMs|VN^l9v2`JPp4>7ib=w)+wE|!lW-60ZZk~>%~ z0r3X1iRTaD(Rn)xb zJxeV&1|JSHg=lD+RNbF#u2pll8Xfh~dlinV7~8!4MNeDg=d<0I>*BG*OaZ*3ztPkV zoRp9xHHF;fQ!#b_%?*3hk#`TQWBhuRrdojKsVSL({I*~!SVg#y^;^&UC&P8tL&6F) z;>ib9e4^N>KK^mc^Xp|c*7Ok0t4ziIUFxll>dH#eGU}txRqRxM z@+&o)`j#Wmq^XQaiI5wag*GYG|GpM(YEt*#sXU;5E4O(!H{7(^hMUw!UutYoul~rE z_3G7z4eOtqYMG+ly)eiJ0{O-gJ%_QRe(n7JI+gvgE!!_anhlf%eoGcw;E8WRO~ufd z^$seEEJj#TQ!zQKW4*ll#y9rvE3v8wC~a3^*xItXvwQ#c!ya>zK59(ez^-^HEBfqS zq9a;PlCB8o2=$eBwp8zck_aCTx0F#7zp}1oTq{WGP~%zaLQ73dG9)0M-?`BmCHhP& zy=1Q%`pc)BjgL#69i)c*&VhesB)K&OhXfAGjaw=@9NOi|Q#^{y<-BQ&w42t6qQL0^ zDRDhbgWmFOIcD>FZvv$~MMur>?BUhhN7lZLyoT9yq0kV(p8DwJ12|wn6NOi=q#6xS z6xbK9tgm$a?rpO&N(NsYY4}o*jvV1Q33T9@me_@cWuH$aQn>d~f-*??!Ru=MlR2Yd z3T}V%lt}!}&+dOpy|-ummgWafDn6(Te+{9XG)yl}!owhruc)HlD>P<_PK^R_OUr1;d!X43FLVW4+1!=(`P zlD*bXNPLNjgX#W)U)U(c%-6p@1m7&osdUiHMS{Y$nKZr77!RJq}Tx}`i z8nLHt2}L-5Lbnd8ul(lb?c_s3JdB1Lj3#5nB9IbnV2ruU4TML?CO9%H08P9X?=c$c z%RW282Fb4U5Ta?yB=Aa8_fi5Yal*_Us05^q6J${+}KUsc)XGuG&=2g!?dh zaCbLN)+u9Pk}q~umfkQ35q1M=*;gu z>JlA1endIU=zIkHcVSl|8TE1TS8tQdQNmJK>$=E(IzE_*VLi)W4>ZB8wo zZJoGy_Ev1XW4`Zt?pA;I+1c3mLI&T{mo5$-i_Z?s$Fc)yJiirh8(X~8I(8x6+7YGq zed(L&L~BP&Vssxb>L$;)1L=zwZl>e2y~T-(1L<>_ViJuN zFJ0`q85=*ArHXym3+?A_J>G3v)x!-mXM+pdIf| zC3^-62{$^{HFPm^>KtASwauOCKizT)FK-RqqDq6&p~ai|p&3)Dr**h(_*8%IVAs&t zK;aTPxpZLxdQZ_qJZryz?+HMNzg;7yVo#Dg4wlcL{7ivH2B6XDU~Xv9bT03>^F;>m zyl$V{y>MZ{cu)&@G`|S;H2sH}83ii$3FnDxWMhMbqy+ZsoQk=lMaq~VWqH!O|V+OGt1LZzoG zfUQ&Uo>8X#h>UcgM5F_#XTA|kx@g2wAoi%+rn`Awh+ebww$FSRH7P9_As)IRe+P+wvQ&N|I@CTvOxil#gZZC;BdMV_PNlRq1(tnH=#GxI$EiZg zP(hFA7bfCW%7#N!o zse|r8|7;i#eK2E*m@$1uigN@tW-g-ZsbSj+qUm}WvSi*rma)z3i&e8!){|P`%m_nKBz|{3~t@sYjM$&UhIC-Z3 z45Ql9dW4Bfw@B`L@h(GTxPFecC7E^FLUKJw0Ej&?fHpx*rsW!q0+kxQ@=Ple0iI^a zwzHm*Vv%>+kXM&yCUmv>H0D*ghPCX9XmMp3Mb6iBVz~J4#&X&K^|YYo3sF92NNQl* z^p3f#@klcPB|P0Sty_GlG)tlk#7`L2#u_Ueo_@7eBs@?uS5UoP)~0R4mNo_b zm(h9wbsFSq>44R#XuF#*(-&#<1CSO{#{*zYt>rZKtcmDW5sGK<67!Hd8s!Qj-8?dw zOj1yHSfZAR1OrAJqLG1Hu=k-SpcS>{9Gtks_Sf{*fM`AfurxpD`JW%MNEu5NSV0H9 zBU+_0kTAoDMZUMzehC|`b5!O%!ml{^ezUAR(4|l8z$7;s+rJYxDv_G zBMMkFdgMzPn9)6OYxq47P2(+gin!`8%vrJCji z!JZf_^2{{`h0I)xw#3X(VIn#V1(WO%X~1Nn*9Lmz%QI&$Bx$TCAkNYT*^~mHCsDwF zixm%z)>4VA5uvqU?`ajvV$;GJu-B7$j|cqKQz;LCoV|l&l8NYAixzK@W9TnjuPqc$ zlMRmycK4qd!!o+JMd&x!3IG-e3kfVz(ZMN02IvNj6<^e#DfKK$4DPM}@C=f}gLD10 zo~DszAPXRo@ma&|G`S2JD@QNIHQ<2}G9QSnzhUMU%UJEjis&rae}jg$41i1+o;l6) z`06GanW(xK*nYSK>xUGP5ofJAOZ7`Y{+BXMo1TKr`rfmMSv1AcX~Fajj4Wep+JrXy0`z-1j_Za!pst;U0i4*awMao zgi<}DJWY=Y$zX!pqV5J93MC^Etq3&sl5wI{a*25+N-8)%SiB<>7SJx85~c!DLiQig zDSQ;?QKeQR)cG zacKme0W&?IdfDO~PkQF}1lpJg8Y%4Y8UXopKM=fLbY?pu3!W1yF|n5U8EfG*j~$8JWhrHj+^ zarlVybfT1U%plL>k!*S&^giXuqp=&@)#dIZ5BsRg8=t%d`c4(x`fDT=8OOJ)$Z;Gfu?MLM%0 zKG?n(y8Lwigb7A~f7C=XdHb;hhlDElF=ZSAVsBjO7#9K8iwlF_SXKPshFbN?;mUPS z;<2jxRh&n~zR#Tc_*)^z%|)<*ckX8PJf5WT#YIXNHYZ^xcyy7Qx(Yqr_Ql5W%+KU29&UH;ih=OE%Lec!cT z5=i%doUFe4;Vau8-32|7J)4=hIG5?4ox5ebn@49mZX~l2UhL?7lylA)F%TJMq^U7QdPF$tu$lS%0Gs$nqbYlS?K3(_~f@jZIe z7~5L41SH>9H%6Mt1f?}_Kr67oj<-N7ur?{H=xHt`6GR%-(6TZWZC&upjbJ0!F=8yV zq+wh6o@*uFHWqW*p;NAmnaFiNZjsly(D1CAJSSQJ>VN{)3o~t6h*4F>QDtZAZE8wmwu45GoSg5vtpM39J4h>gQ_j_9p&q@iY|Zd+KiQ1r zcd!)w2HjfAPctcai2~O{kc5H(xI6oYqB+`bAk$J$H5Te+ALNp*Ow&kii0$J+I9p&9 z5c5JR1o*QZcRT;kscet7wW*fS6Jsj8r?PS#Z%wIpzgD@6gT2)ot(8she@14?9-Rcq25z{+2~8E z?i-jJ?*DL2VlB{JQZxJw40LaQ#6WkBwcc-U(^|#}2OvD|P;1wOT6?CC-Ma~SHC7LS zz%io$>u*L-b-Tnp@xUlH9Ro9Az9m7`6l6d_5LOIypB)3OgUW|FG!~`)`b9uTWrR9d z`u0PFK)V#-fFlSJS1%|iA5L5@0Q$ipW(aoSyp+oYFTc24^fD3cdlFaa3hp9SD2iqn zJ2Y_Bag|8Xiv?7=kZMF66^<$x0VJaztDGbPVG_k~7V%U!QqAFbW`0{Lp3Z{=orfsG zjA|BC>`xnT$u`V)X(NIN!7TmM2UhH-ylOBiK*s`>gnFV`q-`$3B7`Qv`O>fm z)@Fj3R!%HU>duesuX)NEn|l9!glwPx?dr+{T#sQ~Ay`Gm;7@OGHsf#%a&zf*z54z4D)yf6ORdzl31giUVMAD1>FI~~ zpV!ndXTrX!+EAmBAjOStrtq`fFUhl|>f2wp+cp6PZvXsbrh1|+Gkl3% zXK%#e^FD{rF)N@9i|@I3U;5~Lf7{^VrNxe0sqtgi`?JHh`Z6x9(vMBY$H%x32a=8V z-b|d%%ulo-m@M7*;J`7xeo2zQe*`;I^qUr3V%l4AU<{?i2 zys+c7aF#ZY5I!Xp$+d}H=)ejture=+@zU>T^8uSowof+T?c_kTm>-CwT@2(CJmH$q zmZb|`fwDkQGLZI$VF{3d6*&P(A$B~d2L+;W@EEUE8A>Y>&EJW@UQEz6AS-vhKn8FK z9xy;!PGb1$#pNKI${?jUn*DlX(IIRe$>_A(RQurrUYLN3fHsF)DS}O0sziV6WWY5r z*k_y~dMD$$ke0~OQ?d~)1E6v)d`h%un`TCnjs8;{gM*jY7SrKV)`$gQYzmii9a!aj z@3wA3Mjyl^Z62FVosx#_f)X@FA#s{f0UQ8dmQhW)G7``ZjPaI=V95Y2&itQST0XG$h)IE5HjfU)Ud?$fs`BxL-8K8 z=R@%xB)0g?+)uwn8VDf5hD%|uBmoEr;W!KWU8II7%7jP0*a2=Yr(E!CEN4WMv}GVv zHn2y7EgF!3HySMxV@uY>=&-pP+<68a#}d3VNn4*uR?%bFy~2pv;F;CHXt5L-57J&g z6D(=|DaQ}}w0Y?5+xn0V-qfz%QhtCpt`|WdB6lwH zf>}7W1|d!yiv>TUJ&JPSQQqt(%*q>#6cmEaqL+B2zS~*EQUeY?p%^|P%_s#A1>>%~ zhFMlMKm{;mV1!0|Kn^|8m|ZO}FWh$s$I}xUkDkM?z)KR-g?JI(ZiAB^^FN_QZ)@a5&2W@2m;EOk+JQHcu)5c0zL!r zp2OJL)(oXP(OfSb8^xq~fp|@VNF|(dz@-QUd09RhL02SxkZsl^m`;yg*V9|1W^RD) zK;uwUh|vm!*36VJD*@`x6iT9ui0+`N(2YbUg%0%ywe}O{)TWoFvpg#&F`A4}!=t42 z1ZWd<0QonOrI>;RbtbsOvh7Oa`oP6wv_T>>pgp08{Rnd`z(a(MH{fFi5GK$_0tli1 zOX9MEXe7fTs-X^q*?W<0CJ@Zj!+@ZSL@bF}M`%-72Byt4ku2W(NANHofsm~tV8AjU zN~A%H99K3|t<2#%YN-SeO^SfprDxEr)-yLCdVz4**rSERt{e>;6yIsm{{ejtSq&%- zFdjlAy?re~E87T{j1*X-@kpuLur%L=1?UmomkBPyo)m7uGJY`gn>Nlp7Z?|w#Yir!Tcjpb?BDHhBIp%~ugRU|wIdD+F3APam1#u9dK~Ad zPOySgaC~$PYyI2Rx5J#D_D%d)zNU*)xj2XjluDgyKl2G)IE#D~@$1d>x*3NMGXe+s zCx9YUARzILMn8!%myII@&v*szzoFKBc*0a4C1zty7(6#%;O19egVG9vrZ)e)rKj<{Qdgk{x*6hy4;Lq#_pA~V%DWF zUwvkSnrm~AF{1W~kotcgZrZ4xxfQBz)0fKvLPF_mYyl7x)*C55KJIM86PzeCTLt*l zRINIWIz2Aoy^hLzm(10f5DjjHxJ;4*A@R9ahF&2zIZ{OtPlU^K<=vM}D6Q6TW$199 z0U|?qQ~&y?6M6ziIsflbXOH^evG6_l@fotfR!)Jh3fklrSU7|M5pIFx8<*<`u^3APLCCsdHIY*N8cKH7IW zoW1H_9d|b0?fQvYPkZ?nCwLSg^x*)opI`|Yu=)*Fg*N>Jj!%?+PS|AABs|+6AO?gK zg~Emc)vZJ!@$!}o9wSF@00AS&r)Qa2=;v+q)>rH6n@dacD>{pu0!N6peE}8cQ`NV@ zzrR?yqs{PdV5Bx3m|p?|Rv%p7?>ujJ6)0a<=l}FUYg?xL10h_N7QzSR$k7=jM`w^6 zon^?;iQBe4(Ev42CXBq6L3gidCZ>l?At*_y3 z4lnHn3ZIi&E!TK`*~V!V4B@_ z&S~GxJrz=!tKdUl8#NG5tI2cDPDiAH=t%M)+^60;=R}^?y_r#{|1#lRTn6&+l!pB6 z7d7O~9^{mS&p>Y4@^vgH8KVRbq35+dQx-S4Yh3O%Y@!rL>i%EUJ4bc-8ES$$FnkFN zmFY(^NIguig{j*;qRh|g{173Rx3W>tYG(lOw z)PY~!@N`gz*xh;1l7y;ed4e|aVq=X_$o7&(HG^%!Q2sG#Cz9ratZ|rVHUP%lX60vbn5Nt?@dgNWnA>ru*=l4FHK= zKsNJ8J%Y+HTx#taW0xP~uh|<33ZsdYR z->POi-Qz6RnES+l)Cavr6b1dEY1){D2ESB9nl?{hk!oO?rDvI-%tL|@jlB@2)!uwD zor!4lQBTcb7xulL*j9p=%Q7LFL(CA=uf7Tz3DtW51M5Gf1oiVEqoF{ zEet!G_7nb1H8UKGPlzWP)Vp7-+ToV+QlOOZ6X`t^IFJe`lTz=0V@GJO3@v~SJkorv zwqCBP@lm0%N(ejz*~PU{B)}++{-Ig%zfELXVB2H&AV@sPWL&vMrXG zf^{FUoK71QmaJC*U>=g_BmA9Lof#k_f>#m4Z z%y8|>G9Ne5aTj(W8OkwX(bdaVSI5PrVo`=71qI-8ZC;ZkUuy10chq$g?ActhQ~{d) zby+bWs4VdS21-?AK~jxrwbMDayrE=34+?f!%LUj#QaTbLMvpdI2tQy5dW`&V-1$xa zk(LB?ugk&xZ(dy#<2JaUjRoOzYlY;mWw6LN1i1lv58E=)Bye!sQX7rq3pY(@juN?{-cwUdRyBHEqI`(2ZzoL+YXEVKHbUPkrHPXp_49n-!Z~yKRAH zc`W!4)8GR&jYf{lXA9Hmt3@`xN(veF@$$)`1=n)`8j}(1O?m23H?ZK;!Yj_4vNjf^ z0wf3sui%JKSZ70P06~pOEl9d~eeE+_O&BfOD_74@R`a^(rJzfP6!-5W^0$@2V}9%si<8qsoQ<6J5=Q*KOD^SP%iQ&auPMXhqmh^>!VoYo^{ z$_Sx?UN&{gX!(zSjj1yKT&p3@Lb;iLdy|2}5RNp=A zY*z1_ah_3M{X12gmRZ%zAs?RlFoVVPQ@>pMR4srggCe$Z8myTCP!P1lgtFvk1<9P- zq<;DJXKRjQqk??_{34kfEodvXRIO`|fffff*yrrw0l~4bOZ{-4)4r48Dd$*Fv2#vH z{m(w{;hPA2Aw9g2pu=)aYNDo;7pfalqlBCCQ9}8c_f8tWzK8Ni;lM z94uu#+p^g~%tEUiG*82&1dRc9fEFh(FlV5IhEE$#Mx&Z`xbDkbTzW%|;KmNwIcR+@ z?_wiEqrd=0rZy~6bg#90$$Qdp781DA02)aB2@ZTUX46A!>n3WymUdG74%qX9_Ep6d z#~BDz@)R}cf|Dqt{{;%kqMTbUZCJhW10ej7D^8Va=y!gO`30V=0rjo$_Nqow0~!v| zFT|^aW&f9$NW@|?_h_h>o7YNTuga&v!zwc(?E%$o>e&|)yzqn|ROWTNvXPJb15QnV z2Yqh;&X`l%1%2rbaxBrYrFEnsZhVL6YTTW`AR$>ItW z)i~%hs3*U)ajQBXs;lW_{ibaMwl1)bhq3Wv+v?#5+UB91MqUQc9+7(cZ*SaQ8O4sT zdVdS_OzwX?xAop@L(bQqR9zRHJ@;Bho&W0G`+CONUU4s!bAIRv)%VT1(C2HqpTTD< zKHKiqbcgP*f3oe^QPufO-5G7s@yUfqDtjZ6otvGSL*CffwbWD=`Rrx4VUBmJ;f`rA zE-!uB!K;%=Uri+z6PeUhA(2ndVXCE#ydskO^1{e2KGJhxWa|8dp3zh126lIzhrl(^ zqzRjzI7=VCfPYGT^zN2WCuVvdI=gD;d6A>pTyh?lb?Ee;Xbn~E4P+Jja_zx&?H$M4 zo7DTizP`5d7{05D>U}%6@w5>*Ypy=r|3tm&{Mv?4owq}8`EI>uBo*pAf4pt)4)2k8 z({4^L%0Kn4vvsFi-)$Wm_liPOzA;Zpk+Id8y4g_AlN}Qs2#n=r@*`wmCNx@%e$sEm z3qZHvRv_Hz<27jQl!lj}@Y#}Dz>l_ev7$;9c|yW=KCg-}#i*gL)i}GYwUS5>w3~J< zs=wN@ZqL&Mnt7vJaVlA z?kEx07j(m5hFHLV!i79#rmh$QP)i>_6OT{ zgclpjP#@bc%vgE@t4@747h2cIeQ?jrKll&Wwl~)4DlTj^sdxVk&Tu{XN4rAfnMIbk@v|>mQ)& zN#H>3Be+XOuMFg(Doos{r6Ywzx;_+vXF%z4a24S4D1lQ9AHo55 z$U#G-J*a1+<1|L7L4Hq+5dfGZ)xc|nH1hBuGwbna9vx&Y8zMk58V~Ji>t9sVwvstZ zLt!32bV&c=qQEKbBC(aD$q7_6v3+vykNZLsJ1SdSP8?V7|2g!0-_slRj~scv4k>4@ zrVhuEI3<;jga`UY!u{z)DqBcJ!o8_HqSeBk@!b5(G}6>xPfdqkH0g0r94{le{Iw&< z2$L=3=JScv%ZM~n{~#VZtbQXNIzqeT_MF0p0=UA94kp>_ja7@(XV2l6i$)@Y-mu|cZvH0TYi zQ6A!gK1q{K9BVSBcSRUh(DVWbB#;KU)_)A~&tFr2l?;WqYF?M(=JD<=RM9W5BKfM_ zu9Wd-Q)odm2-q@EIk+53F2-VXX$XAS;O?vWBa^b2SuI+pdN7 zbGzNacFVO%WX~bygADuhgJBPn zUjPq~-tLb0`vG0Py6P@5Fd7ZDX`_ve`_FgAL-;uO)ZkN#&vtxv;Ik8-UHI(AXAeGm z@p%@X=kN*RQ+Ka3Uf=ZPd&jEwwN-q+<*9x6?8oN-J_qq>z^4(PCVZa9=g_^Dr<%X< zFB;Ry7s4X7eMyA+KF|M-gsZBm$k~;`TXtYH-#h$oo4;7`LT@H^4Rcyb*TMA!d`>o% zw5w_@APoRiyiMI?Dv{&qo}zC3o*NMwirp5>hCVQNhbluek?bsa z-x{U)rG=_=zjLwTG)jQ&d3( diff --git a/dist/licenses.txt b/dist/licenses.txt index 6f985e361e8ef15c5d449521b7c538f04e41f364..a97fb17c1c8cbf3deef7c313185932afb4426030 100644 GIT binary patch delta 47 zcmV+~0MP%3g$keZ2Y|Ez9W=K!IsxIII|73Qx0^%) F>^;7C5~BbB delta 6544 zcmeHM-D@0G6z3+X(LuDe3RY=21<@wm-E7h}(%9B)H%U!slIBCS2-dqZcX#i0=HBVO zGrQfYOhwv41*I%Ff)CmU@kzv{vVx+0QJ;jg|A2yjfTBJW#p0RSe3(?LOQg&uN})X}yrjn+7H*m$ZHcb!3D_@( z8uwvHn5hI%(9~u+FO|tsrgQ*bE)~_#o*{?A@5jk#c;6+`7ry%}X$^m$AU#bfBiwL_ zYz)7gAfN5%fKkT1B2$1D5Y%BH^Gmi&fRJiIa3VZ?nY4%JFO&V@Z!Z=l$P;^EYti%E-p-`qw*ZKlD7; zUaC-IWN7MIaob^^;#9zJ3O_I*!c3MNBoLm>lF@a*1sJt0>n4a%8*j^meczCK@#DF+ z$7=`E4@5T&AFpSxoFwS|pU5HnvZXn?c6A?)7P^afmMTYdQfV5V*hZ4~_rN3-mf}J} zKZg-?C8xDlT1M*^Pmv4F9Y(35S4YoQn>!ri8eT1shmB!b6!4U^H8a07b9AyH=9;|0{9%wU2=d4#*cqcC9c1@R~y)tnVm(sMdY6}bj2^InB2hLVNm z+S3t?$}+Hh;Zd}3-WW`D4Gy&!HqF@#s0VY-Dg=maKNq2)vk{5eH^Z1hxaXy9%L*3-u(`>E#%EpE z=1hYpf!a2>R5dK|7TL&-nauToYQviKB?ckKaIap&*n@wDagZs8Yh63jvNwchNTz=E zFge~FG!_@297S6(n|ioG3~r4|DdZo=MN3SHZi<{*p%@qo%A7(rn@%A#qIDx)N9S8C z&oRAFp;&7zeI&!i(-zmRO{=(AL01F_(}?F>CDB-n5Pq4rA~u?)(;GJ{0s_qqRgzKQc)R#yuxY{IjFHhbF$3PJ;p4g zxiD?tVoO=*x`+;L0;E@h=-?(mdL@VsW*O~Iz`bEeuLRM(%ZD`9p8ab`#!l!qM6%9F zX)`L86ld(Qx|4Y6fhpw7ep!+Wg*p(8l8hW_;X;1CfX`ONe=5u#c5vxkjop`1p|{;Y ziC&btFE-EhBv?O%#|qe?F7EfP%V0Nwz}9+_wVq_HC%H8}i59+-y9UwMBQg=JE|JNO ze}C5aTOz}B!h>S2guUc{NM=FfIKCYEz5(`*jw*kBzzU)h)=Jv36?S6*7Qezu+Og$# zWAOp2cB*CHT1$4DwqzP-AEK}X&9^y`Nnx@j7T@Y-EIv&Jt2ZEu=_^>h0Z~j}!Rif& zqLVPMz0tC3jmZ8tM3!0cl&JnvnXGTV+g5(kVUFZDC5xxpgFP@jHaP%;0~4c}(f%=* z7#qoq4hhA00yQX@&PF`(kO*a0k63Oq_IEdpqts#?>{*fZJc!?FGq5AX-n?7!? KfA}f+anB!Jy&H}I diff --git a/package-lock.json b/package-lock.json index b617ad8..f7c7908 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,15 +1,15 @@ { "name": "actions/attest-build-provenance", - "version": "1.1.0", + "version": "1.1.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "actions/attest-build-provenance", - "version": "1.1.0", + "version": "1.1.1", "license": "MIT", "dependencies": { - "@actions/attest": "^1.3.0", + "@actions/attest": "^1.3.1", "@actions/core": "^1.10.1" }, "devDependencies": { @@ -45,9 +45,9 @@ } }, "node_modules/@actions/attest": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.3.0.tgz", - "integrity": "sha512-Xmv+HIefU8PMx3q+BwGmL28MLyQ2FF05ROZjH+iuoQ9q43qzmbJmmzou3NBOSspUa1N2nVtirPq7jPj9g8AMEg==", + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.3.1.tgz", + "integrity": "sha512-4q09+4QvNROKHsjpusyRhtmUz8kHpFg45n5LqJAYrMQh8mU5O5t9shpGU3Z44rtUebgBTH8Ge0lTzLxfUOVvHw==", "dependencies": { "@actions/core": "^1.10.1", "@actions/github": "^6.0.0", @@ -55,8 +55,7 @@ "@octokit/plugin-retry": "^6.0.1", "@sigstore/bundle": "^2.3.2", "@sigstore/sign": "^2.3.2", - "jsonwebtoken": "^9.0.2", - "jwks-rsa": "^3.1.0" + "jose": "^5.2.3" } }, "node_modules/@actions/core": { @@ -1601,23 +1600,6 @@ "@babel/types": "^7.20.7" } }, - "node_modules/@types/body-parser": { - "version": "1.19.5", - "resolved": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.5.tgz", - "integrity": "sha512-fB3Zu92ucau0iQ0JMCFQE7b/dv8Ot07NI3KaZIkIUNXq82k4eBAqUaneXfleGY9JWskeS9y+u0nXMyspcuQrCg==", - "dependencies": { - "@types/connect": "*", - "@types/node": "*" - } - }, - "node_modules/@types/connect": { - "version": "3.4.38", - "resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz", - "integrity": "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==", - "dependencies": { - "@types/node": "*" - } - }, "node_modules/@types/eslint": { "version": "8.44.2", "dev": true, @@ -1636,28 +1618,6 @@ "optional": true, "peer": true }, - "node_modules/@types/express": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.21.tgz", - "integrity": "sha512-ejlPM315qwLpaQlQDTjPdsUFSc6ZsP4AN6AlWnogPjQ7CVi7PYF3YVz+CY3jE2pwYf7E/7HlDAN0rV2GxTG0HQ==", - "dependencies": { - "@types/body-parser": "*", - "@types/express-serve-static-core": "^4.17.33", - "@types/qs": "*", - "@types/serve-static": "*" - } - }, - "node_modules/@types/express-serve-static-core": { - "version": "4.17.43", - "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.17.43.tgz", - "integrity": "sha512-oaYtiBirUOPQGSWNGPWnzyAFJ0BP3cwvN4oWZQY+zUBwpVIGsKUkpBpSztp74drYcjavs7SKFZ4DX1V2QeN8rg==", - "dependencies": { - "@types/node": "*", - "@types/qs": "*", - "@types/range-parser": "*", - "@types/send": "*" - } - }, "node_modules/@types/graceful-fs": { "version": "4.1.6", "dev": true, @@ -1666,11 +1626,6 @@ "@types/node": "*" } }, - "node_modules/@types/http-errors": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.4.tgz", - "integrity": "sha512-D0CFMMtydbJAegzOyHjtiKPLlvnm3iTZyZRSZoLq2mRhDdmLfIWOCYPfQJ4cu2erKghU++QvjcUjp/5h7hESpA==" - }, "node_modules/@types/istanbul-lib-coverage": { "version": "2.0.4", "dev": true, @@ -1715,56 +1670,15 @@ "integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==", "dev": true }, - "node_modules/@types/jsonwebtoken": { - "version": "9.0.6", - "resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.6.tgz", - "integrity": "sha512-/5hndP5dCjloafCXns6SZyESp3Ldq7YjH3zwzwczYnjxIT0Fqzk5ROSYVGfFyczIue7IUEj8hkvLbPoLQ18vQw==", - "dependencies": { - "@types/node": "*" - } - }, - "node_modules/@types/mime": { - "version": "1.3.5", - "resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz", - "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==" - }, "node_modules/@types/node": { "version": "22.0.0", "resolved": "https://registry.npmjs.org/@types/node/-/node-22.0.0.tgz", "integrity": "sha512-VT7KSYudcPOzP5Q0wfbowyNLaVR8QWUdw+088uFWwfvpY6uCWaXpqV6ieLAu9WBcnTa7H4Z5RLK8I5t2FuOcqw==", + "dev": true, "dependencies": { "undici-types": "~6.11.1" } }, - "node_modules/@types/qs": { - "version": "6.9.14", - "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.9.14.tgz", - "integrity": "sha512-5khscbd3SwWMhFqylJBLQ0zIu7c1K6Vz0uBIt915BI3zV0q1nfjRQD3RqSBcPaO6PHEF4ov/t9y89fSiyThlPA==" - }, - "node_modules/@types/range-parser": { - "version": "1.2.7", - "resolved": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz", - "integrity": "sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==" - }, - "node_modules/@types/send": { - "version": "0.17.4", - "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.4.tgz", - "integrity": "sha512-x2EM6TJOybec7c52BX0ZspPodMsQUd5L6PRwOunVyVUhXiBSKf3AezDL8Dgvgt5o0UfKNfuA0eMLr2wLT4AiBA==", - "dependencies": { - "@types/mime": "^1", - "@types/node": "*" - } - }, - "node_modules/@types/serve-static": { - "version": "1.15.5", - "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.5.tgz", - "integrity": "sha512-PDRk21MnK70hja/YF8AHfC7yIsiQHn1rcXx7ijCFBX/k+XQJhQT/gw3xekXKJvx+5SXaMMS8oqQy09Mzvz2TuQ==", - "dependencies": { - "@types/http-errors": "*", - "@types/mime": "*", - "@types/node": "*" - } - }, "node_modules/@types/stack-utils": { "version": "2.0.1", "dev": true, @@ -2519,11 +2433,6 @@ "node-int64": "^0.4.0" } }, - "node_modules/buffer-equal-constant-time": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz", - "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==" - }, "node_modules/buffer-from": { "version": "1.1.2", "dev": true, @@ -2964,14 +2873,6 @@ "version": "0.2.0", "license": "MIT" }, - "node_modules/ecdsa-sig-formatter": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz", - "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==", - "dependencies": { - "safe-buffer": "^5.0.1" - } - }, "node_modules/ejs": { "version": "3.1.10", "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", @@ -5469,7 +5370,6 @@ "version": "5.6.3", "resolved": "https://registry.npmjs.org/jose/-/jose-5.6.3.tgz", "integrity": "sha512-1Jh//hEEwMhNYPDDLwXHa2ePWgWiFNNUadVmguAAw2IJ6sj9mNxV5tGXJNqlMkJAybF6Lgw1mISDxTePP/187g==", - "dev": true, "funding": { "url": "https://github.com/sponsors/panva" } @@ -5575,27 +5475,6 @@ "node": ">=0.10.0" } }, - "node_modules/jsonwebtoken": { - "version": "9.0.2", - "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz", - "integrity": "sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ==", - "dependencies": { - "jws": "^3.2.2", - "lodash.includes": "^4.3.0", - "lodash.isboolean": "^3.0.3", - "lodash.isinteger": "^4.0.4", - "lodash.isnumber": "^3.0.3", - "lodash.isplainobject": "^4.0.6", - "lodash.isstring": "^4.0.1", - "lodash.once": "^4.0.0", - "ms": "^2.1.1", - "semver": "^7.5.4" - }, - "engines": { - "node": ">=12", - "npm": ">=6" - } - }, "node_modules/jsx-ast-utils": { "version": "3.3.5", "resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz", @@ -5611,49 +5490,6 @@ "node": ">=4.0" } }, - "node_modules/jwa": { - "version": "1.4.1", - "resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz", - "integrity": "sha512-qiLX/xhEEFKUAJ6FiBMbes3w9ATzyk5W7Hvzpa/SLYdxNtng+gcurvrI7TbACjIXlsJyr05/S1oUhZrc63evQA==", - "dependencies": { - "buffer-equal-constant-time": "1.0.1", - "ecdsa-sig-formatter": "1.0.11", - "safe-buffer": "^5.0.1" - } - }, - "node_modules/jwks-rsa": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/jwks-rsa/-/jwks-rsa-3.1.0.tgz", - "integrity": "sha512-v7nqlfezb9YfHHzYII3ef2a2j1XnGeSE/bK3WfumaYCqONAIstJbrEGapz4kadScZzEt7zYCN7bucj8C0Mv/Rg==", - "dependencies": { - "@types/express": "^4.17.17", - "@types/jsonwebtoken": "^9.0.2", - "debug": "^4.3.4", - "jose": "^4.14.6", - "limiter": "^1.1.5", - "lru-memoizer": "^2.2.0" - }, - "engines": { - "node": ">=14" - } - }, - "node_modules/jwks-rsa/node_modules/jose": { - "version": "4.15.5", - "resolved": "https://registry.npmjs.org/jose/-/jose-4.15.5.tgz", - "integrity": "sha512-jc7BFxgKPKi94uOvEmzlSWFFe2+vASyXaKUpdQKatWAESU2MWjDfFf0fdfc83CDKcA5QecabZeNLyfhe3yKNkg==", - "funding": { - "url": "https://github.com/sponsors/panva" - } - }, - "node_modules/jws": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/jws/-/jws-3.2.2.tgz", - "integrity": "sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==", - "dependencies": { - "jwa": "^1.4.1", - "safe-buffer": "^5.0.1" - } - }, "node_modules/keyv": { "version": "4.5.3", "dev": true, @@ -5708,11 +5544,6 @@ "node": ">= 0.8.0" } }, - "node_modules/limiter": { - "version": "1.1.5", - "resolved": "https://registry.npmjs.org/limiter/-/limiter-1.1.5.tgz", - "integrity": "sha512-FWWMIEOxz3GwUI4Ts/IvgVy6LPvoMPgjMdQ185nN6psJyBJ4yOpzqm695/h5umdLJg2vW3GR5iG11MAkR2AzJA==" - }, "node_modules/lines-and-columns": { "version": "1.2.4", "dev": true, @@ -5752,41 +5583,6 @@ "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==", "dev": true }, - "node_modules/lodash.clonedeep": { - "version": "4.5.0", - "resolved": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz", - "integrity": "sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==" - }, - "node_modules/lodash.includes": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz", - "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==" - }, - "node_modules/lodash.isboolean": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz", - "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==" - }, - "node_modules/lodash.isinteger": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz", - "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==" - }, - "node_modules/lodash.isnumber": { - "version": "3.0.3", - "resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz", - "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==" - }, - "node_modules/lodash.isplainobject": { - "version": "4.0.6", - "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz", - "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==" - }, - "node_modules/lodash.isstring": { - "version": "4.0.1", - "resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz", - "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==" - }, "node_modules/lodash.kebabcase": { "version": "4.1.1", "resolved": "https://registry.npmjs.org/lodash.kebabcase/-/lodash.kebabcase-4.1.1.tgz", @@ -5803,11 +5599,6 @@ "dev": true, "license": "MIT" }, - "node_modules/lodash.once": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz", - "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==" - }, "node_modules/lodash.snakecase": { "version": "4.1.1", "resolved": "https://registry.npmjs.org/lodash.snakecase/-/lodash.snakecase-4.1.1.tgz", @@ -5907,29 +5698,6 @@ "yallist": "^3.0.2" } }, - "node_modules/lru-memoizer": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/lru-memoizer/-/lru-memoizer-2.2.0.tgz", - "integrity": "sha512-QfOZ6jNkxCcM/BkIPnFsqDhtrazLRsghi9mBwFAzol5GCvj4EkFT899Za3+QwikCg5sRX8JstioBDwOxEyzaNw==", - "dependencies": { - "lodash.clonedeep": "^4.5.0", - "lru-cache": "~4.0.0" - } - }, - "node_modules/lru-memoizer/node_modules/lru-cache": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.0.2.tgz", - "integrity": "sha512-uQw9OqphAGiZhkuPlpFGmdTU2tEuhxTourM/19qGJrxBPHAr/f8BT1a0i/lOclESnGatdJG/UCkP9kZB/Lh1iw==", - "dependencies": { - "pseudomap": "^1.0.1", - "yallist": "^2.0.0" - } - }, - "node_modules/lru-memoizer/node_modules/yallist": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz", - "integrity": "sha512-ncTzHV7NvsQZkYe1DW7cbDLm0YpzHmZF5r/iyP3ZnQtMiJ+pjzisCiMNI+Sj+xQF5pXhSHxSB3uDbsBTzY/c2A==" - }, "node_modules/make-dir": { "version": "4.0.0", "dev": true, @@ -6990,11 +6758,6 @@ "node": ">= 8" } }, - "node_modules/pseudomap": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz", - "integrity": "sha512-b/YwNhb8lk1Zz2+bXXpS/LK9OisiZZ1SNsSLxN1x2OXVEhW2Ckr/7mWE5vrC1ZTiJlD9g19jWszTmJsB+oEpFQ==" - }, "node_modules/punycode": { "version": "2.3.1", "dev": true, @@ -7246,25 +7009,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/safe-buffer": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", - "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ] - }, "node_modules/safe-regex-test": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.0.3.tgz", @@ -8034,7 +7778,8 @@ "node_modules/undici-types": { "version": "6.11.1", "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.11.1.tgz", - "integrity": "sha512-mIDEX2ek50x0OlRgxryxsenE5XaQD4on5U2inY7RApK3SOJpofyw7uW2AyfMKkhAxXIceo2DeWGVGwyvng1GNQ==" + "integrity": "sha512-mIDEX2ek50x0OlRgxryxsenE5XaQD4on5U2inY7RApK3SOJpofyw7uW2AyfMKkhAxXIceo2DeWGVGwyvng1GNQ==", + "dev": true }, "node_modules/unique-filename": { "version": "3.0.0", diff --git a/package.json b/package.json index e6ddb8b..faadce4 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "actions/attest-build-provenance", "description": "Generate signed build provenance attestations", - "version": "1.1.0", + "version": "1.1.1", "author": "", "private": true, "homepage": "https://github.com/actions/attest-build-provenance", @@ -70,7 +70,7 @@ ] }, "dependencies": { - "@actions/attest": "^1.3.0", + "@actions/attest": "^1.3.1", "@actions/core": "^1.10.1" }, "devDependencies": { From 1cb5f7640f675b28478e1c42e8dff3764f1218b0 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Tue, 30 Jul 2024 12:41:18 -0700 Subject: [PATCH 04/28] bump predicate action from 1.1.0 to 1.1.1 (#182) Signed-off-by: Brian DeHamer --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 30f96bc..0a29c50 100644 --- a/action.yml +++ b/action.yml @@ -44,7 +44,7 @@ outputs: runs: using: 'composite' steps: - - uses: actions/attest-build-provenance/predicate@46e4ff8b824dc6ae13c8f92c8ba69907e2d39b4e # predicate@1.1.0 + - uses: actions/attest-build-provenance/predicate@9ff3713ef183e028b07415e8a740b634c054a663 # predicate@1.1.1 id: generate-build-provenance-predicate - uses: actions/attest@7305951e905fb742188aa16c1d23409b13565e26 # v1.3.3 id: attest From 210c1913531870065f03ce1f9440dd87bc0938cd Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Tue, 30 Jul 2024 12:55:08 -0700 Subject: [PATCH 05/28] bump actions/attest from 1.3.3 to 1.4.0 (#183) Signed-off-by: Brian DeHamer --- README.md | 4 ++++ action.yml | 9 ++++++++- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 0cf097a..d8a513c 100644 --- a/README.md +++ b/README.md @@ -77,6 +77,10 @@ See [action.yml](action.yml) # the "subject-digest" parameter be specified. Defaults to false. push-to-registry: + # Whether to attach a list of generated attestations to the workflow run + # summary page. Defaults to true. + show-summary: + # The GitHub token used to make authenticated API requests. Default is # ${{ github.token }} github-token: diff --git a/action.yml b/action.yml index 0a29c50..3744751 100644 --- a/action.yml +++ b/action.yml @@ -30,6 +30,12 @@ inputs: and that the "subject-digest" parameter be specified. Defaults to false. default: false required: false + show-summary: + description: > + Whether to attach a list of generated attestations to the workflow run + summary page. Defaults to true. + default: true + required: false github-token: description: > The GitHub token used to make authenticated API requests. @@ -46,7 +52,7 @@ runs: steps: - uses: actions/attest-build-provenance/predicate@9ff3713ef183e028b07415e8a740b634c054a663 # predicate@1.1.1 id: generate-build-provenance-predicate - - uses: actions/attest@7305951e905fb742188aa16c1d23409b13565e26 # v1.3.3 + - uses: actions/attest@2da0b136720d14f01f4dbeeafd1d5a4d76cbe21d # v1.4.0 id: attest with: subject-path: ${{ inputs.subject-path }} @@ -55,4 +61,5 @@ runs: predicate-type: ${{ steps.generate-build-provenance-predicate.outputs.predicate-type }} predicate: ${{ steps.generate-build-provenance-predicate.outputs.predicate }} push-to-registry: ${{ inputs.push-to-registry }} + show-summary: ${{ inputs.show-summary }} github-token: ${{ inputs.github-token }} From 48f71d5e11c42311d8038c1ca50c57ea26928e03 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Tue, 6 Aug 2024 09:08:02 -0700 Subject: [PATCH 06/28] disable typescript-standard super linter (#191) Signed-off-by: Brian DeHamer --- .github/workflows/linter.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index 7b72f4b..dec2bea 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -46,4 +46,5 @@ jobs: TYPESCRIPT_DEFAULT_STYLE: prettier VALIDATE_ALL_CODEBASE: true VALIDATE_JAVASCRIPT_STANDARD: false + VALIDATE_TYPESCRIPT_STANDARD: false VALIDATE_JSCPD: false From 588eda318e1f2cc69d46f02738e803a75182b63f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2024 09:13:42 -0700 Subject: [PATCH 07/28] Bump the npm-development group with 3 updates (#187) Bumps the npm-development group with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) and [ts-jest](https://github.com/kulshekhar/ts-jest). Updates `@types/node` from 22.0.0 to 22.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-jest` from 28.6.0 to 28.7.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.6.0...v28.7.0) Updates `ts-jest` from 29.2.3 to 29.2.4 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.3...v29.2.4) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 36 ++++++++++++++++++------------------ package.json | 6 +++--- 2 files changed, 21 insertions(+), 21 deletions(-) diff --git a/package-lock.json b/package-lock.json index f7c7908..1e64dbf 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,13 +14,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.0.0", + "@types/node": "^22.1.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.6.0", + "eslint-plugin-jest": "^28.7.0", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", @@ -29,7 +29,7 @@ "nock": "^13.5.4", "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", - "ts-jest": "^29.2.3", + "ts-jest": "^29.2.4", "typescript": "^5.5.4" }, "engines": { @@ -1671,12 +1671,12 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.0.0", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.0.0.tgz", - "integrity": "sha512-VT7KSYudcPOzP5Q0wfbowyNLaVR8QWUdw+088uFWwfvpY6uCWaXpqV6ieLAu9WBcnTa7H4Z5RLK8I5t2FuOcqw==", + "version": "22.1.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.1.0.tgz", + "integrity": "sha512-AOmuRF0R2/5j1knA3c6G3HOk523Ga+l+ZXltX8SF1+5oqcXijjfTd8fY3XRZqSihEu9XhtQnKYLmkFaoxgsJHw==", "dev": true, "dependencies": { - "undici-types": "~6.11.1" + "undici-types": "~6.13.0" } }, "node_modules/@types/stack-utils": { @@ -3392,18 +3392,18 @@ } }, "node_modules/eslint-plugin-jest": { - "version": "28.6.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.6.0.tgz", - "integrity": "sha512-YG28E1/MIKwnz+e2H7VwYPzHUYU4aMa19w0yGcwXnnmJH6EfgHahTJ2un3IyraUxNfnz/KUhJAFXNNwWPo12tg==", + "version": "28.7.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.7.0.tgz", + "integrity": "sha512-fzPGN7awL2ftVRQh/bsCi+16ArUZWujZnD1b8EGJqy8nr4//7tZ3BIdc/9edcJBtB3hpci3GtdMNFVDwHU0Eag==", "dev": true, "dependencies": { - "@typescript-eslint/utils": "^6.0.0 || ^7.0.0" + "@typescript-eslint/utils": "^6.0.0 || ^7.0.0 || ^8.0.0" }, "engines": { "node": "^16.10.0 || ^18.12.0 || >=20.0.0" }, "peerDependencies": { - "@typescript-eslint/eslint-plugin": "^6.0.0 || ^7.0.0", + "@typescript-eslint/eslint-plugin": "^6.0.0 || ^7.0.0 || ^8.0.0", "eslint": "^7.0.0 || ^8.0.0 || ^9.0.0", "jest": "*" }, @@ -7535,9 +7535,9 @@ } }, "node_modules/ts-jest": { - "version": "29.2.3", - "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.2.3.tgz", - "integrity": "sha512-yCcfVdiBFngVz9/keHin9EnsrQtQtEu3nRykNy9RVp+FiPFFbPJ3Sg6Qg4+TkmH0vMP5qsTKgXSsk80HRwvdgQ==", + "version": "29.2.4", + "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.2.4.tgz", + "integrity": "sha512-3d6tgDyhCI29HlpwIq87sNuI+3Q6GLTTCeYRHCs7vDz+/3GCMwEtV9jezLyl4ZtnBgx00I7hm8PCP8cTksMGrw==", "dev": true, "dependencies": { "bs-logger": "0.x", @@ -7776,9 +7776,9 @@ } }, "node_modules/undici-types": { - "version": "6.11.1", - "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.11.1.tgz", - "integrity": "sha512-mIDEX2ek50x0OlRgxryxsenE5XaQD4on5U2inY7RApK3SOJpofyw7uW2AyfMKkhAxXIceo2DeWGVGwyvng1GNQ==", + "version": "6.13.0", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.13.0.tgz", + "integrity": "sha512-xtFJHudx8S2DSoujjMd1WeWvn7KKWFRESZTMeL1RptAYERu29D6jphMjjY+vn96jvN3kVPDNxU/E13VTaXj6jg==", "dev": true }, "node_modules/unique-filename": { diff --git a/package.json b/package.json index faadce4..302b043 100644 --- a/package.json +++ b/package.json @@ -75,13 +75,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.0.0", + "@types/node": "^22.1.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.17.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.6.0", + "eslint-plugin-jest": "^28.7.0", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", @@ -90,7 +90,7 @@ "nock": "^13.5.4", "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", - "ts-jest": "^29.2.3", + "ts-jest": "^29.2.4", "typescript": "^5.5.4" } } From f9d4126c514e627ea90224028f503b992aa422b0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2024 09:30:32 -0700 Subject: [PATCH 08/28] Bump @typescript-eslint/parser from 7.17.0 to 7.18.0 (#188) Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 7.17.0 to 7.18.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.18.0/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 115 ++++++++++++++++++++++++++++++++++++++++++---- package.json | 2 +- 2 files changed, 108 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 1e64dbf..8a36bb0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@types/jest": "^29.5.12", "@types/node": "^22.1.0", "@typescript-eslint/eslint-plugin": "^7.17.0", - "@typescript-eslint/parser": "^7.17.0", + "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", @@ -1731,15 +1731,15 @@ } }, "node_modules/@typescript-eslint/parser": { - "version": "7.17.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-7.17.0.tgz", - "integrity": "sha512-puiYfGeg5Ydop8eusb/Hy1k7QmOU6X3nvsqCgzrB2K4qMavK//21+PzNE8qeECgNOIoertJPUC1SpegHDI515A==", + "version": "7.18.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-7.18.0.tgz", + "integrity": "sha512-4Z+L8I2OqhZV8qA132M4wNL30ypZGYOQVBfMgxDH/K5UX0PNqTu1c6za9ST5r9+tavvHiTWmBnKzpCJ/GlVFtg==", "dev": true, "dependencies": { - "@typescript-eslint/scope-manager": "7.17.0", - "@typescript-eslint/types": "7.17.0", - "@typescript-eslint/typescript-estree": "7.17.0", - "@typescript-eslint/visitor-keys": "7.17.0", + "@typescript-eslint/scope-manager": "7.18.0", + "@typescript-eslint/types": "7.18.0", + "@typescript-eslint/typescript-estree": "7.18.0", + "@typescript-eslint/visitor-keys": "7.18.0", "debug": "^4.3.4" }, "engines": { @@ -1758,6 +1758,105 @@ } } }, + "node_modules/@typescript-eslint/parser/node_modules/@typescript-eslint/scope-manager": { + "version": "7.18.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-7.18.0.tgz", + "integrity": "sha512-jjhdIE/FPF2B7Z1uzc6i3oWKbGcHb87Qw7AWj6jmEqNOfDFbJWtjt/XfwCpvNkpGWlcJaog5vTR+VV8+w9JflA==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "7.18.0", + "@typescript-eslint/visitor-keys": "7.18.0" + }, + "engines": { + "node": "^18.18.0 || >=20.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/@typescript-eslint/parser/node_modules/@typescript-eslint/types": { + "version": "7.18.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-7.18.0.tgz", + "integrity": "sha512-iZqi+Ds1y4EDYUtlOOC+aUmxnE9xS/yCigkjA7XpTKV6nCBd3Hp/PRGGmdwnfkV2ThMyYldP1wRpm/id99spTQ==", + "dev": true, + "engines": { + "node": "^18.18.0 || >=20.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/@typescript-eslint/parser/node_modules/@typescript-eslint/typescript-estree": { + "version": "7.18.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-7.18.0.tgz", + "integrity": "sha512-aP1v/BSPnnyhMHts8cf1qQ6Q1IFwwRvAQGRvBFkWlo3/lH29OXA3Pts+c10nxRxIBrDnoMqzhgdwVe5f2D6OzA==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "7.18.0", + "@typescript-eslint/visitor-keys": "7.18.0", + "debug": "^4.3.4", + "globby": "^11.1.0", + "is-glob": "^4.0.3", + "minimatch": "^9.0.4", + "semver": "^7.6.0", + "ts-api-utils": "^1.3.0" + }, + "engines": { + "node": "^18.18.0 || >=20.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependenciesMeta": { + "typescript": { + "optional": true + } + } + }, + "node_modules/@typescript-eslint/parser/node_modules/@typescript-eslint/visitor-keys": { + "version": "7.18.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-7.18.0.tgz", + "integrity": "sha512-cDF0/Gf81QpY3xYyJKDV14Zwdmid5+uuENhjH2EqFaF0ni+yAyq/LzMaIJdhNJXZI7uLzwIlA+V7oWoyn6Curg==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "7.18.0", + "eslint-visitor-keys": "^3.4.3" + }, + "engines": { + "node": "^18.18.0 || >=20.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/@typescript-eslint/parser/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/@typescript-eslint/parser/node_modules/minimatch": { + "version": "9.0.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz", + "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==", + "dev": true, + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/@typescript-eslint/scope-manager": { "version": "7.17.0", "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-7.17.0.tgz", diff --git a/package.json b/package.json index 302b043..e797311 100644 --- a/package.json +++ b/package.json @@ -77,7 +77,7 @@ "@types/jest": "^29.5.12", "@types/node": "^22.1.0", "@typescript-eslint/eslint-plugin": "^7.17.0", - "@typescript-eslint/parser": "^7.17.0", + "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", From d58ddf9f241cd8163408934540d01c3335864d64 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Fri, 9 Aug 2024 07:42:36 -0700 Subject: [PATCH 09/28] dynamic construction of oidc issuer (#195) Signed-off-by: Brian DeHamer --- __tests__/__snapshots__/main.test.ts.snap | 41 ++++- __tests__/main.test.ts | 181 +++++++++++++++------- dist/index.js | Bin 2938659 -> 2939337 bytes package-lock.json | 4 +- package.json | 2 +- src/main.ts | 27 +++- 6 files changed, 194 insertions(+), 61 deletions(-) diff --git a/__tests__/__snapshots__/main.test.ts.snap b/__tests__/__snapshots__/main.test.ts.snap index bf3722e..545ffc9 100644 --- a/__tests__/__snapshots__/main.test.ts.snap +++ b/__tests__/__snapshots__/main.test.ts.snap @@ -1,6 +1,45 @@ // Jest Snapshot v1, https://goo.gl/fbAQLP -exports[`main successfully run main 1`] = ` +exports[`main when a non-default OIDC issuer is used successfully run main 1`] = ` +{ + "buildDefinition": { + "buildType": "https://actions.github.io/buildtypes/workflow/v1", + "externalParameters": { + "workflow": { + "path": ".github/workflows/main.yml", + "ref": "main", + "repository": "https://example-01.ghe.com/owner/repo", + }, + }, + "internalParameters": { + "github": { + "event_name": "push", + "repository_id": "repo-id", + "repository_owner_id": "owner-id", + "runner_environment": "github-hosted", + }, + }, + "resolvedDependencies": [ + { + "digest": { + "gitCommit": "babca52ab0c93ae16539e5923cb0d7403b9a093b", + }, + "uri": "git+https://example-01.ghe.com/owner/repo@refs/heads/main", + }, + ], + }, + "runDetails": { + "builder": { + "id": "https://example-01.ghe.com/owner/shared/.github/workflows/build.yml@main", + }, + "metadata": { + "invocationId": "https://example-01.ghe.com/owner/repo/actions/runs/run-id/attempts/run-attempt", + }, + }, +} +`; + +exports[`main when the default OIDC issuer is used successfully run main 1`] = ` { "buildDefinition": { "buildType": "https://actions.github.io/buildtypes/workflow/v1", diff --git a/__tests__/main.test.ts b/__tests__/main.test.ts index b9e7ee0..e437044 100644 --- a/__tests__/main.test.ts +++ b/__tests__/main.test.ts @@ -13,61 +13,13 @@ setFailedMock.mockImplementation(() => {}) describe('main', () => { let outputs = {} as Record const originalEnv = process.env - const issuer = 'https://token.actions.githubusercontent.com' - const audience = 'nobody' - const jwksPath = '/.well-known/jwks.json' - const tokenPath = '/token' - const claims = { - iss: issuer, - aud: 'nobody', - repository: 'owner/repo', - ref: 'refs/heads/main', - sha: 'babca52ab0c93ae16539e5923cb0d7403b9a093b', - workflow_ref: 'owner/repo/.github/workflows/main.yml@main', - job_workflow_ref: 'owner/shared/.github/workflows/build.yml@main', - event_name: 'push', - repository_id: 'repo-id', - repository_owner_id: 'owner-id', - run_id: 'run-id', - run_attempt: 'run-attempt', - runner_environment: 'github-hosted' - } - - beforeEach(async () => { + beforeEach(() => { jest.resetAllMocks() setOutputMock.mockImplementation((key, value) => { outputs[key] = value }) - - process.env = { - ...originalEnv, - ACTIONS_ID_TOKEN_REQUEST_URL: `${issuer}${tokenPath}?`, - ACTIONS_ID_TOKEN_REQUEST_TOKEN: 'token', - GITHUB_SERVER_URL: 'https://github.com', - GITHUB_REPOSITORY: claims.repository - } - - // Generate JWT signing key - const key = await jose.generateKeyPair('PS256') - - // Create JWK, JWKS, and JWT - const kid = '12345' - const jwk = await jose.exportJWK(key.publicKey) - const jwks = { keys: [{ ...jwk, kid }] } - const jwt = await new jose.SignJWT(claims) - .setProtectedHeader({ alg: 'PS256', kid }) - .sign(key.privateKey) - - // Mock OpenID configuration and JWKS endpoints - nock(issuer) - .get('/.well-known/openid-configuration') - .reply(200, { jwks_uri: `${issuer}${jwksPath}` }) - nock(issuer).get(jwksPath).reply(200, jwks) - - // Mock OIDC token endpoint for populating the provenance - nock(issuer).get(tokenPath).query({ audience }).reply(200, { value: jwt }) }) afterEach(() => { @@ -75,14 +27,131 @@ describe('main', () => { process.env = originalEnv }) - it('successfully run main', async () => { - // Run the main function - await main.run() + describe('when the default OIDC issuer is used', () => { + const issuer = 'https://token.actions.githubusercontent.com' + const audience = 'nobody' + const jwksPath = '/.well-known/jwks.json' + const tokenPath = '/token' - // Verify that outputs were set correctly - expect(setOutputMock).toHaveBeenCalledTimes(2) + const claims = { + iss: issuer, + aud: 'nobody', + repository: 'owner/repo', + ref: 'refs/heads/main', + sha: 'babca52ab0c93ae16539e5923cb0d7403b9a093b', + workflow_ref: 'owner/repo/.github/workflows/main.yml@main', + job_workflow_ref: 'owner/shared/.github/workflows/build.yml@main', + event_name: 'push', + repository_id: 'repo-id', + repository_owner_id: 'owner-id', + run_id: 'run-id', + run_attempt: 'run-attempt', + runner_environment: 'github-hosted' + } - expect(outputs['predicate']).toMatchSnapshot() - expect(outputs['predicate-type']).toBe('https://slsa.dev/provenance/v1') + beforeEach(async () => { + process.env = { + ...originalEnv, + ACTIONS_ID_TOKEN_REQUEST_URL: `${issuer}${tokenPath}?`, + ACTIONS_ID_TOKEN_REQUEST_TOKEN: 'token', + GITHUB_SERVER_URL: 'https://github.com', + GITHUB_REPOSITORY: claims.repository + } + + // Generate JWT signing key + const key = await jose.generateKeyPair('PS256') + + // Create JWK, JWKS, and JWT + const kid = '12345' + const jwk = await jose.exportJWK(key.publicKey) + const jwks = { keys: [{ ...jwk, kid }] } + const jwt = await new jose.SignJWT(claims) + .setProtectedHeader({ alg: 'PS256', kid }) + .sign(key.privateKey) + + // Mock OpenID configuration and JWKS endpoints + nock(issuer) + .get('/.well-known/openid-configuration') + .reply(200, { jwks_uri: `${issuer}${jwksPath}` }) + nock(issuer).get(jwksPath).reply(200, jwks) + + // Mock OIDC token endpoint for populating the provenance + nock(issuer).get(tokenPath).query({ audience }).reply(200, { value: jwt }) + }) + + it('successfully run main', async () => { + // Run the main function + await main.run() + + // Verify that outputs were set correctly + expect(setOutputMock).toHaveBeenCalledTimes(2) + + expect(outputs['predicate']).toMatchSnapshot() + expect(outputs['predicate-type']).toBe('https://slsa.dev/provenance/v1') + }) + }) + + describe('when a non-default OIDC issuer is used', () => { + const issuer = 'https://token.actions.example-01.ghe.com' + const audience = 'nobody' + const jwksPath = '/.well-known/jwks.json' + const tokenPath = '/token' + + const claims = { + iss: issuer, + aud: 'nobody', + repository: 'owner/repo', + ref: 'refs/heads/main', + sha: 'babca52ab0c93ae16539e5923cb0d7403b9a093b', + workflow_ref: 'owner/repo/.github/workflows/main.yml@main', + job_workflow_ref: 'owner/shared/.github/workflows/build.yml@main', + event_name: 'push', + repository_id: 'repo-id', + repository_owner_id: 'owner-id', + run_id: 'run-id', + run_attempt: 'run-attempt', + runner_environment: 'github-hosted' + } + + beforeEach(async () => { + process.env = { + ...originalEnv, + ACTIONS_ID_TOKEN_REQUEST_URL: `${issuer}${tokenPath}?`, + ACTIONS_ID_TOKEN_REQUEST_TOKEN: 'token', + GITHUB_SERVER_URL: 'https://example-01.ghe.com', + GITHUB_REPOSITORY: claims.repository + } + + // Generate JWT signing key + const key = await jose.generateKeyPair('PS256') + + // Create JWK, JWKS, and JWT + const kid = '12345' + const jwk = await jose.exportJWK(key.publicKey) + const jwks = { keys: [{ ...jwk, kid }] } + const jwt = await new jose.SignJWT(claims) + .setProtectedHeader({ alg: 'PS256', kid }) + .sign(key.privateKey) + + // Mock OpenID configuration and JWKS endpoints + nock(issuer) + .get('/.well-known/openid-configuration') + .reply(200, { jwks_uri: `${issuer}${jwksPath}` }) + nock(issuer).get(jwksPath).reply(200, jwks) + + // Mock OIDC token endpoint for populating the provenance + nock(issuer).get(tokenPath).query({ audience }).reply(200, { value: jwt }) + }) + + it('successfully run main', async () => { + // Run the main function + await main.run() + + // Verify that outputs were set correctly + expect(setOutputMock).toHaveBeenCalledTimes(2) + + expect(outputs['predicate']).toMatchSnapshot() + expect(outputs['predicate-type']).toBe('https://slsa.dev/provenance/v1') + }) }) }) diff --git a/dist/index.js b/dist/index.js index 811e50bb6951ce0d53a12fadaaefe1fcfaf44936..3e3c0d6949a0a463c752cedc7f4f1cbb77c7780c 100644 GIT binary patch delta 575 zcmZXQUu)A~6voL~YmM%ot?P7JPfaw5TU%ue+(relMGF<7W4qaAo2KuY$eNVoO_hzp zE)IC*Rg}Ok+=aKYn_lcQc<;v;`v6{fNTCh;1IcpY!xBu?Qp&fqNG#1y9S7S3S?=kYe)!3DgF_b`k15io}jzDTF<4afF4 zY`v&e%Z-gneXCM$Y}RWVP=aj{=u=G2d)`{H*s-|jw+e>SRhA;fW*?x=I+c$-ReATf zYFp1AJjt)-cNced3LTTtpB%EHiMwBaNXHAKILq^V=2Aw7@oIEdwe_$hNS_lUDHJ9o z`RqcFQbMg*gferjJ_BwtFnrf#Hix&>@=Lhv)6zZG2FH#HJm&VPHw_`~`L@9=djA&_ zd|P=I{LW;<%rHLXj7zB#=+M{qtv0-}_-nrfV=%*)}ydNkeYAL_$1K2IE@>vJ$(8mo)Vft qZ+R{$ADWKG2hA{dlE{2Y$0R}~9ukiTg-{8NcuXvwrDIFezy1JI>bL{| delta 143 zcmWN=OAf(M6oBEJYP~7yS+8=vnOlpQfrS|Si491uxp^md(4;#s7wd7pwpC!V} Resolves when the action is complete. */ export async function run(): Promise { try { + const issuer = getIssuer() + // Calculate subject from inputs and generate provenance - const predicate = await buildSLSAProvenancePredicate() + const predicate = await buildSLSAProvenancePredicate(issuer) core.setOutput('predicate', predicate.params) core.setOutput('predicate-type', predicate.type) @@ -18,3 +25,21 @@ export async function run(): Promise { core.setFailed(error.message) } } + +// Derive the current OIDC issuer based on the server URL +function getIssuer(): string { + const serverURL = process.env.GITHUB_SERVER_URL || 'https://github.com' + + // Ensure the server URL is a valid GitHub server URL + if (!VALID_SERVER_URLS.some(valid_url => serverURL.match(valid_url))) { + throw new Error(`Invalid server URL: ${serverURL}`) + } + + let host = new URL(serverURL).hostname + + if (host === 'github.com') { + host = 'githubusercontent.com' + } + + return `https://token.actions.${host}` +} From 310b0a4a3b0b78ef57ecda988ee04b132db73ef8 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Fri, 9 Aug 2024 09:10:48 -0700 Subject: [PATCH 10/28] update predicate action to 1.1.2 (#197) Signed-off-by: Brian DeHamer --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 3744751..fdbf8aa 100644 --- a/action.yml +++ b/action.yml @@ -50,7 +50,7 @@ outputs: runs: using: 'composite' steps: - - uses: actions/attest-build-provenance/predicate@9ff3713ef183e028b07415e8a740b634c054a663 # predicate@1.1.1 + - uses: actions/attest-build-provenance/predicate@d58ddf9f241cd8163408934540d01c3335864d64 # predicate@1.1.2 id: generate-build-provenance-predicate - uses: actions/attest@2da0b136720d14f01f4dbeeafd1d5a4d76cbe21d # v1.4.0 id: attest From 9f606661f05673132e900d9b9017a00865b6bc9f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Aug 2024 06:44:38 -0700 Subject: [PATCH 11/28] Bump the npm-development group with 2 updates (#199) Bumps the npm-development group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest). Updates `@types/node` from 22.1.0 to 22.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-jest` from 28.7.0 to 28.8.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.7.0...v28.8.0) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 16 ++++++++-------- package.json | 4 ++-- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index ee2cd8c..bb5315a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,13 +14,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.1.0", + "@types/node": "^22.2.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.7.0", + "eslint-plugin-jest": "^28.8.0", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", @@ -1671,9 +1671,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.1.0", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.1.0.tgz", - "integrity": "sha512-AOmuRF0R2/5j1knA3c6G3HOk523Ga+l+ZXltX8SF1+5oqcXijjfTd8fY3XRZqSihEu9XhtQnKYLmkFaoxgsJHw==", + "version": "22.2.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.2.0.tgz", + "integrity": "sha512-bm6EG6/pCpkxDf/0gDNDdtDILMOHgaQBVOJGdwsqClnxA3xL6jtMv76rLBc006RVMWbmaf0xbmom4Z/5o2nRkQ==", "dev": true, "dependencies": { "undici-types": "~6.13.0" @@ -3491,9 +3491,9 @@ } }, "node_modules/eslint-plugin-jest": { - "version": "28.7.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.7.0.tgz", - "integrity": "sha512-fzPGN7awL2ftVRQh/bsCi+16ArUZWujZnD1b8EGJqy8nr4//7tZ3BIdc/9edcJBtB3hpci3GtdMNFVDwHU0Eag==", + "version": "28.8.0", + "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.0.tgz", + "integrity": "sha512-Tubj1hooFxCl52G4qQu0edzV/+EZzPUeN8p2NnW5uu4fbDs+Yo7+qDVDc4/oG3FbCqEBmu/OC3LSsyiU22oghw==", "dev": true, "dependencies": { "@typescript-eslint/utils": "^6.0.0 || ^7.0.0 || ^8.0.0" diff --git a/package.json b/package.json index 97761bf..0c3663b 100644 --- a/package.json +++ b/package.json @@ -75,13 +75,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.1.0", + "@types/node": "^22.2.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.7.0", + "eslint-plugin-jest": "^28.8.0", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", From 399bb1773848c2be739fa67b4c4a953b2ed891d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Aug 2024 12:16:49 -0700 Subject: [PATCH 12/28] Bump @types/node from 22.2.0 to 22.4.0 in the npm-development group (#203) Bumps the npm-development group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/node` from 22.2.0 to 22.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index bb5315a..16cf754 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,7 +14,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.2.0", + "@types/node": "^22.4.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", @@ -1671,12 +1671,12 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.2.0", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.2.0.tgz", - "integrity": "sha512-bm6EG6/pCpkxDf/0gDNDdtDILMOHgaQBVOJGdwsqClnxA3xL6jtMv76rLBc006RVMWbmaf0xbmom4Z/5o2nRkQ==", + "version": "22.4.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.4.0.tgz", + "integrity": "sha512-49AbMDwYUz7EXxKU/r7mXOsxwFr4BYbvB7tWYxVuLdb2ibd30ijjXINSMAHiEEZk5PCRBmW1gUeisn2VMKt3cQ==", "dev": true, "dependencies": { - "undici-types": "~6.13.0" + "undici-types": "~6.19.2" } }, "node_modules/@types/stack-utils": { @@ -7875,9 +7875,9 @@ } }, "node_modules/undici-types": { - "version": "6.13.0", - "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.13.0.tgz", - "integrity": "sha512-xtFJHudx8S2DSoujjMd1WeWvn7KKWFRESZTMeL1RptAYERu29D6jphMjjY+vn96jvN3kVPDNxU/E13VTaXj6jg==", + "version": "6.19.6", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.6.tgz", + "integrity": "sha512-e/vggGopEfTKSvj4ihnOLTsqhrKRN3LeO6qSN/GxohhuRv8qH9bNQ4B8W7e/vFL+0XTnmHPB4/kegunZGA4Org==", "dev": true }, "node_modules/unique-filename": { diff --git a/package.json b/package.json index 0c3663b..23efaa8 100644 --- a/package.json +++ b/package.json @@ -75,7 +75,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.2.0", + "@types/node": "^22.4.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", From 3eb3242bd75d68179b1daa927b4b54dd729d583c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 20 Aug 2024 13:10:51 -0500 Subject: [PATCH 13/28] Bump super-linter/super-linter from 6 to 7 (#205) * Bump super-linter/super-linter from 6 to 7 Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 6 to 7. - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](https://github.com/super-linter/super-linter/compare/v6...v7) --- updated-dependencies: - dependency-name: super-linter/super-linter dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] * disable YAML_PRETTIER in super-linter Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- .github/dependabot.yml | 2 +- .github/workflows/ci.yml | 1 - .github/workflows/linter.yml | 3 ++- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7bbed17..1d9d7ed 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,7 +10,7 @@ updates: - minor - patch ignore: - - dependency-name: "actions/attest-build-provenance" + - dependency-name: 'actions/attest-build-provenance' - package-ecosystem: npm directory: / diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5d9ab55..8af153c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -69,4 +69,3 @@ jobs: github-token: ${{ secrets.GITHUB_TOKEN }} - name: Dump output run: jq < ${{ steps.attest-provenance.outputs.bundle-path }} - diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index dec2bea..1d9f2d3 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -38,7 +38,7 @@ jobs: - name: Lint Codebase id: super-linter - uses: super-linter/super-linter/slim@v6 + uses: super-linter/super-linter/slim@v7 env: DEFAULT_BRANCH: main FILTER_REGEX_EXCLUDE: dist/**/* @@ -48,3 +48,4 @@ jobs: VALIDATE_JAVASCRIPT_STANDARD: false VALIDATE_TYPESCRIPT_STANDARD: false VALIDATE_JSCPD: false + VALIDATE_YAML_PRETTIER: false From 6149ea5740be74af77f260b9db67e633f6b0a9a1 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 22 Aug 2024 12:06:47 -0700 Subject: [PATCH 14/28] bump actions/attest from 1.4.0 to 1.4.1 (#209) Signed-off-by: Brian DeHamer --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index fdbf8aa..3d71ba6 100644 --- a/action.yml +++ b/action.yml @@ -52,7 +52,7 @@ runs: steps: - uses: actions/attest-build-provenance/predicate@d58ddf9f241cd8163408934540d01c3335864d64 # predicate@1.1.2 id: generate-build-provenance-predicate - - uses: actions/attest@2da0b136720d14f01f4dbeeafd1d5a4d76cbe21d # v1.4.0 + - uses: actions/attest@67422f5511b7ff725f4dbd6fb9bd2cd925c65a8d # v1.4.1 id: attest with: subject-path: ${{ inputs.subject-path }} From 814a77831567c96580f4f1973278a53094929736 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 12:57:05 -0700 Subject: [PATCH 15/28] Bump the npm-development group with 3 updates (#206) * Bump the npm-development group with 3 updates Bumps the npm-development group with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [jose](https://github.com/panva/jose) and [nock](https://github.com/nock/nock). Updates `@types/node` from 22.4.0 to 22.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jose` from 5.6.3 to 5.7.0 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v5.6.3...v5.7.0) Updates `nock` from 13.5.4 to 13.5.5 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](https://github.com/nock/nock/compare/v13.5.4...v13.5.5) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: jose dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: nock dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] * rebuild dist Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- dist/index.js | Bin 2939337 -> 2939498 bytes package-lock.json | 24 ++++++++++++------------ package.json | 6 +++--- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/dist/index.js b/dist/index.js index 3e3c0d6949a0a463c752cedc7f4f1cbb77c7780c..3bfd86d442a484fec4501b49554ffb5d1ec385bf 100644 GIT binary patch delta 300 zcmYkzJxfAi7{+mqZ)u*pOiPb1$6kCdl@!6r$wl0pT#X1KCus;lqTzNA$wV$QrDDilg2*J z(@Xcces}-)@YNfZ#iT&`|0GJUj-31{Q0zmD6a_`cq^zvXsc*Aai??F7po;umP}3<| ziW+-iFO>|4rJ{t~D)Q^%Q&D_Zd-p#B3ced_f+IKvADn<60&ogvu=|C;fG|WL3NbJt d4(D(Imv99MNJ0wIkbx}Z;2LhEvCe3w delta 251 zcmXBJISv6~7>Du9F!tBJGxnWm$dn{1XK(_EIDm@cO*EqY62~x-PeL*cg>sIdPD=k%r z(I1GJMMJT&DI*USjkIqj#q&nvf3@#q{7TO6BzC4eHQ Date: Mon, 26 Aug 2024 09:33:17 -0700 Subject: [PATCH 16/28] Bump the npm-development group with 2 updates (#211) * Bump the npm-development group with 2 updates Bumps the npm-development group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [ts-jest](https://github.com/kulshekhar/ts-jest). Updates `@types/node` from 22.4.1 to 22.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `ts-jest` from 29.2.4 to 29.2.5 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.4...v29.2.5) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] * rebuild dist Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- dist/index.js | Bin 2939498 -> 2923670 bytes dist/licenses.txt | Bin 129439 -> 128670 bytes package-lock.json | 51 ++++++++++++++++------------------------------ package.json | 4 ++-- 4 files changed, 19 insertions(+), 36 deletions(-) diff --git a/dist/index.js b/dist/index.js index 3bfd86d442a484fec4501b49554ffb5d1ec385bf..a445e25a9b4375816e535bc7f7d6ddb52f98477e 100644 GIT binary patch delta 1256 zcmZ8gT~8Bf6i(R|Xl)DS9ZI1r9$2t5OH)eJMB>-7h*^|f4M^NXjXQSU)(P#jb_PUb zH-5Z{H$>Ts<=pxMxImX=VoVHbcK1pXFZKs`Yc`Sn0h{cZj~b!L)5)Cooaa2}Iq!Vf z`aQ7z>}lYR2#6-}g$Rm}XcjG^RfI)E>=RKD6LHZd+C@TiY_W^WxVb2`q|T2|OkSP% zZhU5Z;=<(2EF6cC%jWP%$(~zgJxy&E*C@1LXuPN!T(fViFg-Akv+8<9R&sS-E2{-A z&+cK#f*t;aO$W#Jlt%!5j?iC;TToYx5(im<+Y|uMiy&Lqbu(A2)+?%oFd0j;&jKD( zCWF8JGmysTk60g8=c28cn39qSuf|CkJ`S0cl?a#~#M| zMh_o6IHp7jRl~HPpcbxk5^nIDFg-ITE4Z`7j@a+l*yVJ5WCSjpJ9Q4OE$C(KBp%yf z7j4{NQ(Yl9Vt;te3THzuAHMw9k%|?{s%bhr6GV%F#~lpUf_<$=UEeC|5;Ypl=ku<2 zeyrv<|6Z-hN<+D`R(YP^qMhRSUqOafM+ZZ(idxIjiF**i?a{$ryt5q*;~Op6g7LAT zFs`1FB!g7X@Je-&ldBwv1&Z}*#eE?LPz?=KO#|HmtLjF%;aKMU8k%w%r;T#2)1D(* zzZ1{GqFP?y3U0pY>5eyqdv&<^W0Qondx@Z$b42fEb1yEjxDz&L{LAYt#mjfT7gx~d z<*rcYQuX^uxT80B;kM|F?5Dw}ivC7*6N(Gvau&QaXHIhBIehSxeG`mT6(cnuKJzNufI^REEZqct*@clR4ogHqAUDn~h zT2jKbRTjkQ)BQ>O>AVE?4{g$0c<`bw5jqJ;LKh)L=qB_K(u7{ZmxMmTeu7iePZ%J4 ZMHnOu5e^VC1eu@^z9tOYFY4Ki(*OP$oOl2L delta 15795 zcmdU0U2GiJbp~bGl4)BJxg;e@7JVtz;;u=qDLJWA$&#{>6x%H&SwEIlsEWMW9g<@X zXEw95qG(H~&%JZ^Pg0a1Kn;vJdw`nq`o{Hp*Y8{3 zw7z-${`JB22i6~4e`tNn`p4F{t`Dsbf2Z)m%QvsRT-d&0pqRaWV7QQ-{Ql6^Y~tM3 zLiWv-!ecjoe!Va_@X(;*|H?`1uVCCC7aqQ^{8HqH#hZ`)VPSq__Lc7y9{Frs4HrFi zNF_^tv)uF&GijyTC>CqcN~2j)hYl-#)3c}4R7tN{Dw)x|?9}z^Q?`XSEoFbYUYN+P zH3}0qzrJ2*JT(2uefxgrw@ZVyC~PLGR;?}3-l4au=FdD|d_}EPuN_eP=H}+qjZ*f} zwZbQFdS5F1!OrZxZxqgNoKeY@n|r@mcy`;(6aQ2=HE{Foe=bb??#-PeBR^CdY2obE ziLncn#~)V}75L$@SH~Z0lSFFS^BO9NtF>hnEvVS5d0`T)&9<6eeKz!(O(E#_s{v+Y z`#vaaPoJFIzkjYYC_N`C7eMIQwUsMTP@Dpp;8Zg)fBfXr=bmvo120@mmOA<`AFa$E zeSW@j?$nvCp+~Dhtrb+0D7KR-^XdGl7cQSYSD8QVj0btq>e-|kcy=TRyIgtN9R%Vk zi}`?K&z^nm)LC~x-ETIcWF7#-8YPlac_#BK|9U7mmT zEDx2DLEM^$xb2Xmm7~wN+p@N8@AJHP>rG{)R-;}`6AxUR3ZLdpMb=@} zzv|7id_iN8k-2Yh5E_@wmETlVwZ>{p)asHKdqB3Qmb_}6`sjTvY60@igr@n4w=$!u zVV!%Dsvnq9X%y5ksI0h$aRhy1M5tGJ#^(j1D=&Gq1e@wsz$*5=W|`JL4s)dVJ#z^XJk%ibDZBAQ8@yIToW<-uA|Z8pjLjMiYY%PA(j!|orBNgC(WMR@I;5t;*2)!+5Uah6?NegKrs2jQkMI{%aZ=iP%yCA^ zpfYf*_U={1WUb-BXro4ncjxv=hXQr|Iy&>dr_@|l`ExkM_ddPl!4!+EwBQ7;co2RV zg)sNUY62LkHU=P}-}306P5JBCH!#71GQ!eEg3y4s5#@b3n9iF#Pb&9rY~xj zv2+$%VJ-2Wio&UqI^wRQ4yd4(FIJhip2j7$2``hq`)9+2CmiBok)#r<5i4}+aCDOW z@Y?W1svVIleit&#iFhw}W0?is=W-&&Ke^+?i{)cF-B^0g9p3K8NVE&ppy}n)yBv}` zn>-Vk=?|PA@-wx9`Ul1{If(5XQMIIR~AJL=+O}0{tnvm?x17o8*0p1Ij z3_nC-e)wdK?>;*6307bSdL}3HQ9M^Knm6*=doH@u+&x73#gz(6V#`X!l?21;vohwF zk^r4EEQN{|3`ImeI0uZGz$?T&&oRW2Li_4dn`?fIcPh85zZe{4{x$|j)nxYG*M>$@ zydeB9Vipo3tOcg5aQ8S)b5}YQ)}EOxCNE>6hqP zh&r2i4TkxQBI@)wL!}J0Bw%`~=aV#;xnC!5mNg2+`mh!OdWrzacu$HM4={&q=tx@b0FvjeT#=$MY|^jC)pDTm=??UZF9 zOa!pu%n*z&Q8YsVa8q4bLx!}*WbmSvOPMBtqn^sKu$}6MDvIj>FD;Q8ul1xv zE9`G*XR#i40g6p&RS>|qtG8Aften(go>Zb8l8DQ1awa4IM;FC8e5fPB$$i%H0po^d ztemgvHtnTstEXGTXjM%smggZkYhb)c1+|;Kf#lcXWWf&-FD@<-RF>@NPxQ~ntxguO z0JBGjX^~YWZc^`JtXuZPk^5JR*|@ClZ_Dkm1wP;hdQ!6ywFj zG5s}6eYv`4MHDb497}O(x z19jMPb}8>vh`0mMs=Evv`F(nw?DhR)(`kr=3G{Xh;So%R@sb2_!ZGDnOsl3+5f~+i zB=8alk@Kl2^pGsT_2DNnu+`X4{BTiL#FSj+QdtXAv}|Y{CGA9a847c?(H3sfCUkmd^XDfD zsm32$H@m6hNTb(i?u@2thP=iMF*PGrAy9)pNZJ%=Lvxag!v_RV5R|ka33IiTM97Q% z8hX}ru14CRNCgWoo=BE@L$On3j&6Erh6Pv}%;wHaJd$$1wwCrtXNg6myUiI;ZiUSy ze<2}?v{t!a?1wT7mPN-TI!R@;8_%*}v$w~0ZB41E?OXsF3p;Vp}xjJ#D z7_Eve8AT!to9y(+8G(4W>PKDaE+=OYzHJB5~3)%#iPwpiOOJoqC%v7w# zu^|-r&R$9MSV?g zj=hLF9ih`+#Dpw&I6M7sh0*Pu8yjboef!Y%9oaj7bpNIujktyL!vfVoOZMUGTgTI$ z7}xlLHE7Xd41`*2dcndB#bq<99zEamxY|i^je!cIpGI92M?s5YJS|7WGtR~G^_-gO`=C1$1;f;WceeAKo%Bo z_~dPDWd}6FW>c<%%1D-k=_uv=(ea9{n<*savZW;_NBLp9t_`>-a%oRSJ7mqdC{snH zDpEuDVnm>1l4*~06&~ybPc1_Vuwc}vSG_5OSJf+I`3Ru^FfXA>84BA7zjQ$!)wxJ^ z#q?F0MqZBd!oaIqUl*)V-cct*fj0?)6mi&$YDVfMlzsCB79&;VTL3EdQv?oWgB~3W z7@O*wQ0FF~xioNfvu8=3sfgjg4l{GeX^WJSN*@#LXQ3>56AGIB+Zwe~OxtomiIdv& zHtW<~bTq=<;zYDE^jfBLqo>+rqIi{zQcRFRWlb6$o5;+{;b&Fpw8Hp&ac?wjW_8}?|0xOwnHug>Dt4i~#? z)h~o)3T8Q~YB)K+t+~MjV5@HwHjHJzD2(j7=Mzut&))pO?y2mdw>AxD-}vhG!4b*o zwWF6G*;_x|G4bUu9WGq#_6saiw|ryEIBj*B{NPygJtS1xMyyMQb!6}VU}(p^e8HOS zD{MHQZFy_c&9u!45ftZoma<3$rM@CeCi;u zz@-Lm-jEi^SbNBktVpdWkw{lw%cnk$Dro@9a9EU^*qgLBS#Zu#j_FST7+fvMGj#fC z>Z{q0-ru@yBU3y1cbf{kDE!EU$9ptd&7~r@XQzKLFuJ)KFSb^2$(ViXPd1KZ=l}YF zE%zWd%Kl}2Y{#Pql|Mb*YrdJ(yy#!bhQ6?4>@=-SCx`Hg(qWWDbgP4y)R;E7wW4)G z3FEcO%$O-mXO#zr##5e*gqKfnxNIL6p!EoMkzqs^a6yDFxO?{VG@UOGISII0jkRYN z(~^Q6HH%LsX>u6v+R3E1 zPMu)sHcD+{KYQI9-^o=L*0o_PCqKuE#s`S8$`s?Uk~1s{@zidbgln3CCej$a%62JV z-Lv9J_~Z&?7rS)c&bH3&Bz8lvZO8{w8JL^32BxQb3l7$|f9WK{;+D3Mi;ecpel)ss zEN!zBL&}}WPB3HXHiGIQJAnty5ZMXma+QL13-?ah$u=U>Ty~E1wU9)YR`_=!yX-Ii zYxi(Auw&1Nbx@DBIVkpQ#3G_SacbnB=yba=n7#Jl$jHOJm7>v{P5x~6NVaLmp4 zwykd}D!1HXy!RH3sF8i|quskUi!cYX&;8ZrZK(w}@?K!c>c<{!wxz9?bYzqRetY`} zt0isdHqMbQ` zf>4BBaiWAC+i1{k8?5>EV=k$t>?Y-Sy&L8vl7ocuQ>)`jj_9EXXsNPz~L@= z>%kfUTeHSW3cQr!aU`p#26c0qmxb=0Q?UY$y}KD*+~6hIPk$^XjS$=l%7UniFv>Z7 zd=(M4**$VasH^xK3_*NV)z)f({s6@8reF3LSQ8Kl+Q0za z!8%zkZtb`29Ni~$S|jPlo|lLYZ^0z#<7gzV}QPYs<>+Mp(^RHl>w`H9ip>vh&bN{`2Bo)N;JPY)$3tn$k-d=`X7c%CW^q#C%NizLJCA_9*L8 z6xrErG-d7M4m2en3ADLH$4FxO?1wy_{^SItBYo7g6H40nnlnIh@!ahO+>nHBY<&9W zLY!J&MYCFx9-9WE@Mh2#$Gy=fJoQ4~Em^xG&iKl-kB7TE)~vd2&sj6@VODL*T8JZj z8=gd(Gt@2MOd|6&hNwzR2<`Yf(|9oa!l!Kx7%_?>30jbLpg&TIB(KK5G5x%m&ka3S z&<6$=AUi5m>>h~^Qd7w%zk-=f{ z9pTc%X|#D;sMZ&W5LHV1bV1xKl|;Odv%Ldm!yLe@0|Dt{6VUmk#RJClMtTZB^l`Jl z5m>yKn&njd<#Tc&2x=Tc#t*g%N22tec*AJZGe|@wigi4B1WKh z0gz|%lbF5(>hKsSFUJXPYxz2hKO>z{P#}%sp*TlMr%=vtNi*p34qXv&N^(1DSFB+*D zrS+sQ)9@W+?{T~%?aRrB3?4MMPntYW*UEGu0Sg;=G7+LAGg72Npf*j6vEGwKZe}D; z#{c+300~o2;6{tc&kl5DNEx${V15tf5@)4D-I_-Z)*vC46OAQvB&zw7iIi=rjZY!f zF3Ysab(&j>x2lyYZXe2Ixem$H6h-!qcB$m$x;+u?uu=)?-3g%&bRybs!R7>`zxvTKg? z&gjD+S_DI6HR?fQN`KMXU0Id^w)QHk6E{YA^ezbOSX~U6{`6ej^tX=j#VOav@NFmC zC6(&%6&6@&wi*qp+0ntJ|BY=KD2wTz#L~aV1cgmpdJd{Dzq)^H7jCkjEET1Oh!0@! zi5ULHBR)8zukNyU|8?WGFaG4?BX~yfjNzf*+wqL!*@0&#o`>=5!ZU&A5j+adB%a-P f_Tc#~Jdfhpi)RW?5l;!vV|b=-{^a8`f4TU7GR|3W diff --git a/dist/licenses.txt b/dist/licenses.txt index a97fb17c1c8cbf3deef7c313185932afb4426030..673f0e34f4eb1a6cfb6bb24349f6972a80c05212 100644 GIT binary patch delta 28 kcmbRLnSI_{_J%EtYsy%R3=9pn^LsHqW7^(R$;eR)0I4<#g#Z8m delta 39 vcmbRDmVN$b_J%EtYs$7C_{?~ZY5SB)My^^;F0RVNoSe+!lI@P&j7-b`X^9WQ diff --git a/package-lock.json b/package-lock.json index d35946a..b442192 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,7 +14,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.4.1", + "@types/node": "^22.5.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", @@ -29,7 +29,7 @@ "nock": "^13.5.5", "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", - "ts-jest": "^29.2.4", + "ts-jest": "^29.2.5", "typescript": "^5.5.4" }, "engines": { @@ -1671,9 +1671,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.4.1", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.4.1.tgz", - "integrity": "sha512-1tbpb9325+gPnKK0dMm+/LMriX0vKxf6RnB0SZUqfyVkQ4fMgUSySqhxE/y8Jvs4NyF1yHzTfG9KlnkIODxPKg==", + "version": "22.5.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.0.tgz", + "integrity": "sha512-DkFrJOe+rfdHTqqMg0bSNlGlQ85hSoh2TPzZyhHsXnMtligRWpxUySiyw8FY14ITt24HVCiQPWxS3KO/QlGmWg==", "dev": true, "dependencies": { "undici-types": "~6.19.2" @@ -7132,12 +7132,9 @@ "optional": true }, "node_modules/semver": { - "version": "7.6.0", - "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.0.tgz", - "integrity": "sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==", - "dependencies": { - "lru-cache": "^6.0.0" - }, + "version": "7.6.3", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz", + "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==", "bin": { "semver": "bin/semver.js" }, @@ -7145,20 +7142,6 @@ "node": ">=10" } }, - "node_modules/semver/node_modules/lru-cache": { - "version": "6.0.0", - "license": "ISC", - "dependencies": { - "yallist": "^4.0.0" - }, - "engines": { - "node": ">=10" - } - }, - "node_modules/semver/node_modules/yallist": { - "version": "4.0.0", - "license": "ISC" - }, "node_modules/set-function-length": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz", @@ -7634,20 +7617,20 @@ } }, "node_modules/ts-jest": { - "version": "29.2.4", - "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.2.4.tgz", - "integrity": "sha512-3d6tgDyhCI29HlpwIq87sNuI+3Q6GLTTCeYRHCs7vDz+/3GCMwEtV9jezLyl4ZtnBgx00I7hm8PCP8cTksMGrw==", + "version": "29.2.5", + "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.2.5.tgz", + "integrity": "sha512-KD8zB2aAZrcKIdGk4OwpJggeLcH1FgrICqDSROWqlnJXGCXK4Mn6FcdK2B6670Xr73lHMG1kHw8R87A0ecZ+vA==", "dev": true, "dependencies": { - "bs-logger": "0.x", + "bs-logger": "^0.2.6", "ejs": "^3.1.10", - "fast-json-stable-stringify": "2.x", + "fast-json-stable-stringify": "^2.1.0", "jest-util": "^29.0.0", "json5": "^2.2.3", - "lodash.memoize": "4.x", - "make-error": "1.x", - "semver": "^7.5.3", - "yargs-parser": "^21.0.1" + "lodash.memoize": "^4.1.2", + "make-error": "^1.3.6", + "semver": "^7.6.3", + "yargs-parser": "^21.1.1" }, "bin": { "ts-jest": "cli.js" diff --git a/package.json b/package.json index c65c94f..0f0cab6 100644 --- a/package.json +++ b/package.json @@ -75,7 +75,7 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.4.1", + "@types/node": "^22.5.0", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", @@ -90,7 +90,7 @@ "nock": "^13.5.5", "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", - "ts-jest": "^29.2.4", + "ts-jest": "^29.2.5", "typescript": "^5.5.4" } } From 13f0f0dbc538ab425876cb63ebfe4b7f3d080cbd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Aug 2024 09:33:43 -0700 Subject: [PATCH 17/28] Bump @actions/attest from 1.3.1 to 1.4.1 (#212) * Bump @actions/attest from 1.3.1 to 1.4.1 Bumps [@actions/attest](https://github.com/actions/toolkit/tree/HEAD/packages/attest) from 1.3.1 to 1.4.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/attest/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/attest) --- updated-dependencies: - dependency-name: "@actions/attest" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * rebuild dist Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- dist/index.js | Bin 2923670 -> 2924740 bytes package-lock.json | 16 ++++++++-------- package.json | 2 +- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/dist/index.js b/dist/index.js index a445e25a9b4375816e535bc7f7d6ddb52f98477e..90301abdfd741a9fc8a44cca430d43a922ce7798 100644 GIT binary patch delta 684 zcmZ|L!B5jr90%|`qy?(7Rv0L3_}svCZuUaFXiN;?!Nh}sEFMW+U!j4mv#(W?vBToQ zm}oonB_pjk3;&eHyF~l7 zlqsA|JlTHQn(Poye-x(Fese#o^U=8aYH^#u0GxwCkU)kZ7={s0;5=M_i!cf)P(g!B vFb3n0h6$L2%WwszU>Y)zg&8=`rf>~%kcU~AgX>TL9g1)RO3~tWd1d%7e|qs) delta 344 zcmY++%}N4M7{+nlny;q(m~_Uev`&^ElWru4h=hVH0vFLJxHG6-P)O2ZAPHKu%oys} zrd1ap9%yP41VtO~r8|h8mMwmpKM&8x`+)9W2h^8!-X4Zb-aRHwZ0KG}Wb;+xU$;_N zJUP!Y|BUM~aZ!4Z?8DQOvo_nRY;V@9wdStt)+_t0%yRs4n6~_6$rjei8yQIdH-4nB z=J$6L|2yG`@@kavp959B@*08Hpjw7^&S^O)cIe39{DvNb^)9_A{BF-QuUkEW5f}vt zWKci_4aPu+ahQM*gdqY^Fklj55Qo1{3ld<%6imYmBq0T}Fb53gAq@+#2pPyi4)Wl@ L5)^_~ujp#O=*@yA diff --git a/package-lock.json b/package-lock.json index b442192..095b327 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "1.1.2", "license": "MIT", "dependencies": { - "@actions/attest": "^1.3.1", + "@actions/attest": "^1.4.1", "@actions/core": "^1.10.1" }, "devDependencies": { @@ -45,13 +45,13 @@ } }, "node_modules/@actions/attest": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.3.1.tgz", - "integrity": "sha512-4q09+4QvNROKHsjpusyRhtmUz8kHpFg45n5LqJAYrMQh8mU5O5t9shpGU3Z44rtUebgBTH8Ge0lTzLxfUOVvHw==", + "version": "1.4.1", + "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.4.1.tgz", + "integrity": "sha512-IEwE9SxHUGZUogp7s9nb8KCcj+83VQ62TR7r6J/HUh94KN+nU+V9AvqnEg1sGCKmFo9BUVX8lV7D+M2tdfVxaw==", "dependencies": { "@actions/core": "^1.10.1", "@actions/github": "^6.0.0", - "@actions/http-client": "^2.2.1", + "@actions/http-client": "^2.2.3", "@octokit/plugin-retry": "^6.0.1", "@sigstore/bundle": "^2.3.2", "@sigstore/sign": "^2.3.2", @@ -77,9 +77,9 @@ } }, "node_modules/@actions/http-client": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.1.tgz", - "integrity": "sha512-KhC/cZsq7f8I4LfZSJKgCvEwfkE8o1538VoBeoGzokVLLnbFDEAdFD3UhoMklxo2un9NJVBdANOresx7vTHlHw==", + "version": "2.2.3", + "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz", + "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==", "dependencies": { "tunnel": "^0.0.6", "undici": "^5.25.4" diff --git a/package.json b/package.json index 0f0cab6..8c9bb84 100644 --- a/package.json +++ b/package.json @@ -70,7 +70,7 @@ ] }, "dependencies": { - "@actions/attest": "^1.3.1", + "@actions/attest": "^1.4.1", "@actions/core": "^1.10.1" }, "devDependencies": { From 8f30a5c8b75bd4463fbb4ccc1d08acacb5d90ae8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Sep 2024 13:52:13 -0700 Subject: [PATCH 18/28] Bump the npm-development group with 3 updates (#218) * Bump the npm-development group with 3 updates Bumps the npm-development group with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) and [jose](https://github.com/panva/jose). Updates `@types/node` from 22.5.0 to 22.5.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-jest` from 28.8.0 to 28.8.1 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.8.0...v28.8.1) Updates `jose` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v5.7.0...v5.8.0) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: jose dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] * rebuild dist Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- dist/index.js | Bin 2924740 -> 2924980 bytes package-lock.json | 24 ++++++++++++------------ package.json | 6 +++--- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/dist/index.js b/dist/index.js index 90301abdfd741a9fc8a44cca430d43a922ce7798..6d1cf4d4b620fb51a952399d6f59c4413c138df8 100644 GIT binary patch delta 365 zcmZw9J4ixd7zSXD>B%nNe=@b~W+%Iv1ci{Np~0b{rLoo292CRS5P}Ag4_&LFe~8BB zNQ{4|MRaXwI8#9l?F~V5Z*4`xGrgBitD!a94Xwf&JGhIT>|&j}+08xN%YEG6r01l( zi<3A{QIz(J*>dtQlPDeSr3&)kih_E~vR0#E*@{y{ZKo)pN%t!m>M~6p!}qJ7FC}uN z#EQBtQpNb^%Jp+4PmgI$WvcWTF#gQd`UQP@)#f#MNWN?czdF084_&kBwKl0*TWo2L zm?du>#F9L*%^g`zlhDhB?5?>i^Jxmnx2n@uw>tt17yu6pf)~CsKMcVz1YiV4VGPD$ d0)j9JCQLyHreOwVVGibD0m87T>`vtU=?e%Konrt1 delta 320 zcmYkvJxfAS7zc1psrP0*=T@3mdsDBySoZ@oHPmR)BGeEGDsHBs61YX2a0#Iy9wKmS zX($lkEJ1|crKwtrranLrH1{7He#5WV?~1`wSDYxJhSad~DZdIRLz!ws1=Xk;>(NJ^ zA00CJ%9E16&McdAH{|m3205I|NU2)|3JR`!GGb(#hlOf6t=mOPS$yHiuzssi-Qs;A zU4Ge>etmaJuTi5^Db|`t4c)$`-w=N$$<)X96em8v^qH~kYB68V>}_RBjl_E5-}qot z+WPi^ega~x)#;P&^yQ9d4Lk`JjKc&>LI}bz1re|z3Ne_58JLARn1?tdAPEknU;!3k Q36>!ZE3m2up8Ng&2QSo%J^%m! diff --git a/package-lock.json b/package-lock.json index 095b327..3ec3b46 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,17 +14,17 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.5.0", + "@types/node": "^22.5.2", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.8.0", + "eslint-plugin-jest": "^28.8.1", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.7.0", + "jose": "^5.8.0", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3", @@ -1671,9 +1671,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.5.0", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.0.tgz", - "integrity": "sha512-DkFrJOe+rfdHTqqMg0bSNlGlQ85hSoh2TPzZyhHsXnMtligRWpxUySiyw8FY14ITt24HVCiQPWxS3KO/QlGmWg==", + "version": "22.5.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.2.tgz", + "integrity": "sha512-acJsPTEqYqulZS/Yp/S3GgeE6GZ0qYODUR8aVr/DkhHQ8l9nd4j5x1/ZJy9/gHrRlFMqkO6i0I3E27Alu4jjPg==", "dev": true, "dependencies": { "undici-types": "~6.19.2" @@ -3491,9 +3491,9 @@ } }, "node_modules/eslint-plugin-jest": { - "version": "28.8.0", - "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.0.tgz", - "integrity": "sha512-Tubj1hooFxCl52G4qQu0edzV/+EZzPUeN8p2NnW5uu4fbDs+Yo7+qDVDc4/oG3FbCqEBmu/OC3LSsyiU22oghw==", + "version": "28.8.1", + "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.1.tgz", + "integrity": "sha512-G46XMyYu6PtSNJUkQ0hsPjzXYpzq/O4vpCciMizTKRJG8kNsRreGoMRDG6H9FIB/xVgfFuclVnuX4XRvFUzrZQ==", "dev": true, "dependencies": { "@typescript-eslint/utils": "^6.0.0 || ^7.0.0 || ^8.0.0" @@ -5466,9 +5466,9 @@ } }, "node_modules/jose": { - "version": "5.7.0", - "resolved": "https://registry.npmjs.org/jose/-/jose-5.7.0.tgz", - "integrity": "sha512-3P9qfTYDVnNn642LCAqIKbTGb9a1TBxZ9ti5zEVEr48aDdflgRjhspWFb6WM4PzAfFbGMJYC4+803v8riCRAKw==", + "version": "5.8.0", + "resolved": "https://registry.npmjs.org/jose/-/jose-5.8.0.tgz", + "integrity": "sha512-E7CqYpL/t7MMnfGnK/eg416OsFCVUrU/Y3Vwe7QjKhu/BkS1Ms455+2xsqZQVN57/U2MHMBvEb5SrmAZWAIntA==", "funding": { "url": "https://github.com/sponsors/panva" } diff --git a/package.json b/package.json index 8c9bb84..a972305 100644 --- a/package.json +++ b/package.json @@ -75,17 +75,17 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.5.0", + "@types/node": "^22.5.2", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.8.0", + "eslint-plugin-jest": "^28.8.1", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.7.0", + "jose": "^5.8.0", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3", From d438876305805f716474ac39821bb8e0fc2bbcf3 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 5 Sep 2024 06:54:45 -0700 Subject: [PATCH 19/28] add sigstore prober (#224) Signed-off-by: Brian DeHamer --- .github/workflows/prober-github.yml | 17 +++++ .github/workflows/prober-public-good.yml | 17 +++++ .github/workflows/prober.yml | 84 ++++++++++++++++++++++++ 3 files changed, 118 insertions(+) create mode 100644 .github/workflows/prober-github.yml create mode 100644 .github/workflows/prober-public-good.yml create mode 100644 .github/workflows/prober.yml diff --git a/.github/workflows/prober-github.yml b/.github/workflows/prober-github.yml new file mode 100644 index 0000000..ce57f21 --- /dev/null +++ b/.github/workflows/prober-github.yml @@ -0,0 +1,17 @@ +name: GitHub Sigstore Prober + +on: + workflow_dispatch: + schedule: + # run every 5 minutes, as often as Github Actions allows + - cron: '*/5 * * * *' + +jobs: + prober: + permissions: + attestations: write + id-token: write + secrets: inherit + uses: ./.github/workflows/prober.yml + with: + sigstore: github diff --git a/.github/workflows/prober-public-good.yml b/.github/workflows/prober-public-good.yml new file mode 100644 index 0000000..56d8690 --- /dev/null +++ b/.github/workflows/prober-public-good.yml @@ -0,0 +1,17 @@ +name: Public-Good Sigstore Prober + +on: + workflow_dispatch: + schedule: + # run every 5 minutes, as often as Github Actions allows + - cron: '*/5 * * * *' + +jobs: + prober: + permissions: + attestations: write + id-token: write + secrets: inherit + uses: ./.github/workflows/prober.yml + with: + sigstore: public-good diff --git a/.github/workflows/prober.yml b/.github/workflows/prober.yml new file mode 100644 index 0000000..455ff51 --- /dev/null +++ b/.github/workflows/prober.yml @@ -0,0 +1,84 @@ +name: Prober Workflow + +on: + workflow_call: + inputs: + sigstore: + description: 'Which Sigstore instance to use for signing' + required: true + type: string + +jobs: + probe: + runs-on: ubuntu-latest + permissions: + attestations: write + id-token: write + + steps: + - name: Request OIDC Token + run: | + curl "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=nobody" \ + -H "Authorization: bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" \ + -H "Accept: application/json; api-version=2.0" \ + -H "Content-Type: application/json" \ + --silent | jq -r '.value' | jq -R 'split(".") | .[0],.[1] | @base64d | fromjson' + + - name: Create artifact + run: | + date > artifact + + - name: Attest build provenance + uses: actions/attest-build-provenance@v1 + env: + INPUT_PRIVATE-SIGNING: ${{ inputs.sigstore == 'github' && 'true' || 'false' }} + with: + subject-path: artifact + + - name: Verify build artifact + env: + GH_TOKEN: ${{ github.token }} + run: | + gh attestation verify ./artifact --owner "$GITHUB_REPOSITORY_OWNER" + + - name: Upload build artifact + uses: actions/upload-artifact@v4 + with: + path: "artifact" + + - name: Report attestation prober success + if: ${{ success() }} + uses: masci/datadog@a5d283e78e33a688ed08a96ba64440505e645a8c # v1.7.1 + with: + api-key: "${{ secrets.DATADOG_API_KEY }}" + service-checks: | + - check: "attestation-integration.actions.prober" + status: 0 + host_name: github.com + tags: + - "catalog_service:${{ secrets.CATALOG_SERVICE }}" + - "service:${{ secrets.CATALOG_SERVICE }}" + - "deployed_to:production" + - "env:production" + - "repo:${{ github.repository }}" + - "team:${{ secrets.TEAM }}" + - "sigstore:${{ inputs.sigstore }}" + + - name: Report attestation prober failure + if: ${{ failure() }} + uses: masci/datadog@a5d283e78e33a688ed08a96ba64440505e645a8c # v1.7.1 + with: + api-key: "${{ secrets.DATADOG_API_KEY }}" + service-checks: | + - check: "attestation-integration.actions.prober" + message: "${{ github.repository_owner }} failed prober check" + status: 2 + host_name: github.com + tags: + - "catalog_service:${{ secrets.CATALOG_SERVICE }}" + - "service:${{ secrets.CATALOG_SERVICE }}" + - "deployed_to:production" + - "env:production" + - "repo:${{ github.repository }}" + - "team:${{ secrets.TEAM }}" + - "sigstore:${{ inputs.sigstore }}" From f1185f1959cdaeda41a7f5a7b43cbe6b58a7a793 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 5 Sep 2024 10:04:26 -0700 Subject: [PATCH 20/28] bump @actions/attest from 1.4.1 to 1.4.2 (#225) Signed-off-by: Brian DeHamer --- dist/index.js | Bin 2924980 -> 2924631 bytes package-lock.json | 12 ++++++------ package.json | 4 ++-- src/main.ts | 27 +-------------------------- 4 files changed, 9 insertions(+), 34 deletions(-) diff --git a/dist/index.js b/dist/index.js index 6d1cf4d4b620fb51a952399d6f59c4413c138df8..72119d868ce9a53793a33a167ce6780a6894c9d3 100644 GIT binary patch delta 500 zcmZwC&o2W(6bJAWMO#|c*3YWfRa)9|lyGt*xM-zUlkJpAw%cZRRy5K$ApH}@!NtK{ zMA9qaLi8r_ceps>s~j9m@|pKC^D^_^&Hc6O_4e9z^_iaV5>|b7xgAA`Qt>LQ85LHX z7q+e5-hI(XaucaAcS%FkNH>@$C)LMCWJuK)-JTUN+6KY(xG?;<}Ov4N$AqBHA*Su_{1212xlc*^G delta 283 zcmXZWKW_nX0LJnBPM!MKqe_+H`qP#xm)JUpT_XBHCh-nPvgNj}4qXL+_iGcjMx#B^VX7k&CU&2G0>?;LC2C=V@jWSIgAT)2Q6Dm=J^ z7e4qAKoD2Z5JDK&h~NfM#Bhr^?vOwd_edd)40Jp=mMI65k9n?T|1IUGT~jnQdU~o? z^hW*t?f5!xl} Resolves when the action is complete. */ export async function run(): Promise { try { - const issuer = getIssuer() - // Calculate subject from inputs and generate provenance - const predicate = await buildSLSAProvenancePredicate(issuer) + const predicate = await buildSLSAProvenancePredicate() core.setOutput('predicate', predicate.params) core.setOutput('predicate-type', predicate.type) @@ -25,21 +18,3 @@ export async function run(): Promise { core.setFailed(error.message) } } - -// Derive the current OIDC issuer based on the server URL -function getIssuer(): string { - const serverURL = process.env.GITHUB_SERVER_URL || 'https://github.com' - - // Ensure the server URL is a valid GitHub server URL - if (!VALID_SERVER_URLS.some(valid_url => serverURL.match(valid_url))) { - throw new Error(`Invalid server URL: ${serverURL}`) - } - - let host = new URL(serverURL).hostname - - if (host === 'github.com') { - host = 'githubusercontent.com' - } - - return `https://token.actions.${host}` -} From 1c608d11d69870c2092266b3f9a6f3abbf17002c Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 5 Sep 2024 10:18:01 -0700 Subject: [PATCH 21/28] bump predicate from 1.1.2 to 1.1.3 (#226) Signed-off-by: Brian DeHamer --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 3d71ba6..a91b6c2 100644 --- a/action.yml +++ b/action.yml @@ -50,7 +50,7 @@ outputs: runs: using: 'composite' steps: - - uses: actions/attest-build-provenance/predicate@d58ddf9f241cd8163408934540d01c3335864d64 # predicate@1.1.2 + - uses: actions/attest-build-provenance/predicate@f1185f1959cdaeda41a7f5a7b43cbe6b58a7a793 # predicate@1.1.3 id: generate-build-provenance-predicate - uses: actions/attest@67422f5511b7ff725f4dbd6fb9bd2cd925c65a8d # v1.4.1 id: attest From 43c221e61f131534d050525ed805ef0762eac33b Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 5 Sep 2024 16:25:38 -0700 Subject: [PATCH 22/28] add stamp tag to prober (#227) Signed-off-by: Brian DeHamer --- .github/workflows/prober.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/prober.yml b/.github/workflows/prober.yml index 455ff51..f2cfa4f 100644 --- a/.github/workflows/prober.yml +++ b/.github/workflows/prober.yml @@ -58,7 +58,7 @@ jobs: tags: - "catalog_service:${{ secrets.CATALOG_SERVICE }}" - "service:${{ secrets.CATALOG_SERVICE }}" - - "deployed_to:production" + - "stamp:${{ secrets.STAMP }}" - "env:production" - "repo:${{ github.repository }}" - "team:${{ secrets.TEAM }}" @@ -77,7 +77,7 @@ jobs: tags: - "catalog_service:${{ secrets.CATALOG_SERVICE }}" - "service:${{ secrets.CATALOG_SERVICE }}" - - "deployed_to:production" + - "stamp:${{ secrets.STAMP }}" - "env:production" - "repo:${{ github.repository }}" - "team:${{ secrets.TEAM }}" From dc98cd55e1c2a841b01a89135a16c2b623f0bb7e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Sep 2024 19:31:43 -0700 Subject: [PATCH 23/28] Bump the npm-development group with 2 updates (#229) Bumps the npm-development group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest). Updates `@types/node` from 22.5.2 to 22.5.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-jest` from 28.8.1 to 28.8.3 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.8.1...v28.8.3) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 16 ++++++++-------- package.json | 4 ++-- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index ec69cc8..b5b4162 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14,13 +14,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.5.2", + "@types/node": "^22.5.4", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.8.1", + "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", @@ -1671,9 +1671,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.5.2", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.2.tgz", - "integrity": "sha512-acJsPTEqYqulZS/Yp/S3GgeE6GZ0qYODUR8aVr/DkhHQ8l9nd4j5x1/ZJy9/gHrRlFMqkO6i0I3E27Alu4jjPg==", + "version": "22.5.4", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.4.tgz", + "integrity": "sha512-FDuKUJQm/ju9fT/SeX/6+gBzoPzlVCzfzmGkwKvRHQVxi4BntVbyIwf6a4Xn62mrvndLiml6z/UBXIdEVjQLXg==", "dev": true, "dependencies": { "undici-types": "~6.19.2" @@ -3491,9 +3491,9 @@ } }, "node_modules/eslint-plugin-jest": { - "version": "28.8.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.1.tgz", - "integrity": "sha512-G46XMyYu6PtSNJUkQ0hsPjzXYpzq/O4vpCciMizTKRJG8kNsRreGoMRDG6H9FIB/xVgfFuclVnuX4XRvFUzrZQ==", + "version": "28.8.3", + "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-28.8.3.tgz", + "integrity": "sha512-HIQ3t9hASLKm2IhIOqnu+ifw7uLZkIlR7RYNv7fMcEi/p0CIiJmfriStQS2LDkgtY4nyLbIZAD+JL347Yc2ETQ==", "dev": true, "dependencies": { "@typescript-eslint/utils": "^6.0.0 || ^7.0.0 || ^8.0.0" diff --git a/package.json b/package.json index f62d148..101005b 100644 --- a/package.json +++ b/package.json @@ -75,13 +75,13 @@ }, "devDependencies": { "@types/jest": "^29.5.12", - "@types/node": "^22.5.2", + "@types/node": "^22.5.4", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", "eslint-plugin-github": "^5.0.1", - "eslint-plugin-jest": "^28.8.1", + "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", From 2de3600266b412e2eaeb1a3cb136be05ccd34297 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 16 Sep 2024 11:58:51 -0700 Subject: [PATCH 24/28] bump jose from 5.8.0 to 5.9.2 (#239) Signed-off-by: Brian DeHamer --- dist/index.js | Bin 2924631 -> 2929357 bytes package-lock.json | 8 ++++---- package.json | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dist/index.js b/dist/index.js index 72119d868ce9a53793a33a167ce6780a6894c9d3..bd8a78a6677e0dfacf9418b6a2a47d2263802cd2 100644 GIT binary patch delta 3611 zcmb_fdu&_P8J82sP8{EJ>e$Ys3CU>^*D-bP()5wiBu&GhYn!qrbfu+%BscbTa)}?Q z?{z{HnY6_Sn6{P@X`i}DsO=tr){ZqySfD+UsT2KUj7~^HD+3K_jCH75kv2f168p}* zekExUf6UUC>+5sQ_xrxz_d0odVczt{2lJ+*DO0K_Rh%-XN>Y}THC37_OW9K8Df=&k zzh5f8OKeMDyCgi->`diZz@yxx5ed?O9-dY-nMOBR{Dww(m zE7`iSz1;`WIiU^ab_><%Kiv>^mcxN-LftL(^xPC`>luEO5Nl~^^`oAlN2bPy9#Mxj zh>E)BV6P7r+%`9~{Ydb_@d4_DzkF`DL#tw@@ZdF}`nFo2)| zFbP#ly$p(h!bITV|K#Y-hl57%$JtD+JOgcCto?G{@Ssx&J5bW|;#0Mj;71%1P$ z9N1N22m1hZjjh1Ws4?&}x>)m!t|~cvOG~8isE(0{2IY_vm4j^UTE}6BPSlurN;f8RIRL3xDr%F{rHNW+0KX;NmWi#3jG(~YbJ7Z@)EACr$Hq%hNBtT7hQ8krOg zGHoooH?#8rDV)HqnKZ}|4UR!_wlVKA>t^0UXfNBwqKR-A<_F2;jrn~BHMxYjJuz_h zve{+k!~#8St}6xTcDQ24osAwywfoSE#_gAcNy& zb7fkP$+vszHN;Wzkp2`yN?4QQEqBLaVOfg$I?~Vngq*h&WABFkx6JG2*gq2eikhn; zJeM^^QTwvdTKa1)la~C<%O=-kPn{DslN_shbBCXGVedNgvQRh6tCU+83+X)uYmIg3 zZB>ga(NS-QEt%s(KZ<(wXNRpo%jTf zrTAHLjK=fT;pN#Jd@d1|`CLeRK^T_c=R$T1e4VXaL&Wwc<~T+&x|guQ7r%sz9E{F| z{sw3Fkec-N3*_J3#ff-0-FBT^E5$^Lz!%ra2GD*?D&gr*h|>|4H5Q2l6XArqSB{Qq zV{^~=T;SP7w?NYt>Hyn4w3c>@OSZtpki`q$EmUYj#JdxrkQ^67@mPerBS!tqJ0hv_ zmQ4uk^@$_Xnrx_Mot4)3(l#`@*Xj4yEp`u`(T!j8Df3TFmr87y2S7Pvk}gV<-5&I=!0{1;iB zKE0csvs5B0%LWDKX>QHmTyW-hW;49kMqLo;qqb^a%M1&};t@&P#=K~;S09WlY0T)W zZL}Ir^wEZ5mh{2CR}kRMKKcO8?L+j%1|CUCosL9gEYU!((ael14POGsJ%}><5VhF& zt5K|cs8_?*U9<@*4%3RFE(WWHsM}^7<5S!?#*(6=$a6sVvK> zfai{o`uw?4{oJNaTMZNPrxuMu*G`f}cN(#rey_^j(;E8t>k}J}+3{`54(~EPOsd!+PY>81Pd?eB%>vdWZ%f zy4PL~pG}$^u;CExEaf5QA5ad_9Z>w=GQ7GziUhuNUT{PGtHLT+*hnpKx*XAbak3@- z_%OX}GPLX;p{t89Hy0zs3ujc)023F4JD|G(y{Lbe+*iiSPR}#=_(O~P7K!a=q9|rK z;EEn9ayDgOyRkduS2J~h*Dwql{QMTgp}8eQr2$(rN{Etkm*k zb&8^_LUEu}pg2)nC~lNWlq!^Jlp2)PD77ecD0iULqcor}lr<=gC`~BMC?1rxC|;Bn R6d%f+DC^SIDSvm}{{UDXsYn0- delta 915 zcmYk)OH5o<7zgmodj^>Eb%0?&UZ+ypg5v~YObCKJ($rdLhNMJengY|yWhyhn3^1rj zNU6DLOEoYFm494l28`*3M{P6*SQr=rec4srRL zkZ8qfpZEx8G&+o?AldOq6N`v<3(6F(qdG{hsfDm;u;gm-f#IaoF6vsOO&{$XP3V{l ziM&j6Hp(O7J9y^pCCH763V6Jnmp(6Sw%t~w<5r)#9~IYI)RiT1)2^Z`;&GGGo``KH zQco+pG4T!w{9~eg-`+Z7G8XS0iH;1n>jUBBMLCX3W-7*VnC$8$3nfmeJ8iUNp6Pfm z3pKS=r*eYyy%md2aw%&kdCjxGihlgECcNsxn>24P?SD5?B^zIrV_A})Aw4-VG$4=j zXrNa%p|*?4&9WYzKLu~Ri}D=xl54!|qZAdZ%`SSw;p{kjRyJ|~CI_h*KMqoZX&hyJ z^d&y=Q7M8a$bpwn3lAzHRE|)Xyx7smjh+ZiVslnFuyIYe;cBK|?Ox2^G5XNFxA1=8 z)@}@q$%sDcmw`YabBJ-&4pHpC9L3$rw711Xl8SBqOgrYPMFA!%sR6fs6CGH3i+pNp zgzgq0dxyXI!VRj;{DMiRJ{r8xuWL!Pr|9#8H}!jp)+`6T@a(twWp5}Ms(K|0%kK-H z(mp1a$+cgs!o+8M(A2cU26@?OzdAKb>=5&?T$ac3nU@tXA1h=<>^WAc9b1s$5|DtW-q9zS$|W>zxIVqga7~l diff --git a/package-lock.json b/package-lock.json index b5b4162..28b9b1c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -24,7 +24,7 @@ "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.8.0", + "jose": "^5.9.2", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3", @@ -5466,9 +5466,9 @@ } }, "node_modules/jose": { - "version": "5.8.0", - "resolved": "https://registry.npmjs.org/jose/-/jose-5.8.0.tgz", - "integrity": "sha512-E7CqYpL/t7MMnfGnK/eg416OsFCVUrU/Y3Vwe7QjKhu/BkS1Ms455+2xsqZQVN57/U2MHMBvEb5SrmAZWAIntA==", + "version": "5.9.2", + "resolved": "https://registry.npmjs.org/jose/-/jose-5.9.2.tgz", + "integrity": "sha512-ILI2xx/I57b20sd7rHZvgiiQrmp2mcotwsAH+5ajbpFQbrYVQdNHYlQhoA5cFb78CgtBOxtC05TeA+mcgkuCqQ==", "funding": { "url": "https://github.com/sponsors/panva" } diff --git a/package.json b/package.json index 101005b..19bfc86 100644 --- a/package.json +++ b/package.json @@ -85,7 +85,7 @@ "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.8.0", + "jose": "^5.9.2", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3", From 4c42c37b1b0eb90e60edd64780eb4281b7573969 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Sep 2024 12:04:17 -0700 Subject: [PATCH 25/28] Bump the npm-development group across 1 directory with 4 updates (#240) Bumps the npm-development group with 4 updates in the / directory: [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [eslint-plugin-github](https://github.com/github/eslint-plugin-github) and [typescript](https://github.com/microsoft/TypeScript). Updates `@types/jest` from 29.5.12 to 29.5.13 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `@types/node` from 22.5.4 to 22.5.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-github` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/github/eslint-plugin-github/releases) - [Commits](https://github.com/github/eslint-plugin-github/compare/v5.0.1...v5.0.2) Updates `typescript` from 5.5.4 to 5.6.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.5.4...v5.6.2) --- updated-dependencies: - dependency-name: "@types/jest" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint-plugin-github dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 246 ++++++++++++++++++++++++++++++++++++++++++---- package.json | 8 +- 2 files changed, 231 insertions(+), 23 deletions(-) diff --git a/package-lock.json b/package-lock.json index 28b9b1c..2a49143 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13,13 +13,13 @@ "@actions/core": "^1.10.1" }, "devDependencies": { - "@types/jest": "^29.5.12", - "@types/node": "^22.5.4", + "@types/jest": "^29.5.13", + "@types/node": "^22.5.5", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", - "eslint-plugin-github": "^5.0.1", + "eslint-plugin-github": "^5.0.2", "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", @@ -30,7 +30,7 @@ "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", "ts-jest": "^29.2.5", - "typescript": "^5.5.4" + "typescript": "^5.6.2" }, "engines": { "node": ">=20" @@ -1648,9 +1648,10 @@ } }, "node_modules/@types/jest": { - "version": "29.5.12", + "version": "29.5.13", + "resolved": "https://registry.npmjs.org/@types/jest/-/jest-29.5.13.tgz", + "integrity": "sha512-wd+MVEZCHt23V0/L642O5APvspWply/rGY5BcW4SUETo2UzPU3Z26qr8jC2qxpimI2jjx9h7+2cj2FwIr01bXg==", "dev": true, - "license": "MIT", "dependencies": { "expect": "^29.0.0", "pretty-format": "^29.0.0" @@ -1671,9 +1672,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.5.4", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.4.tgz", - "integrity": "sha512-FDuKUJQm/ju9fT/SeX/6+gBzoPzlVCzfzmGkwKvRHQVxi4BntVbyIwf6a4Xn62mrvndLiml6z/UBXIdEVjQLXg==", + "version": "22.5.5", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.5.5.tgz", + "integrity": "sha512-Xjs4y5UPO/CLdzpgR6GirZJx36yScjh73+2NlLlkFRSoQN8B0DpfXPdZGnvVmLRLOsqDpOfTNv7D9trgGhmOIA==", "dev": true, "dependencies": { "undici-types": "~6.19.2" @@ -3390,14 +3391,14 @@ } }, "node_modules/eslint-plugin-github": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-5.0.1.tgz", - "integrity": "sha512-qbXG3wL5Uh2JB92EKeX2hPtO9c/t75qVxQjVLYuTFfhHifLZzv9CBvLCvoaBhLrAC/xTMVht7DK/NofYK8X4Dg==", + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/eslint-plugin-github/-/eslint-plugin-github-5.0.2.tgz", + "integrity": "sha512-nMdzWJQ5CimjQDY6SFeJ0KIXuNFf0dgDWEd4eP3UWfuTuP/dXcZJDg7MQRvAFt743T1zUi4+/HdOihfu8xJkLA==", "dev": true, "dependencies": { "@github/browserslist-config": "^1.0.0", - "@typescript-eslint/eslint-plugin": "^7.0.1", - "@typescript-eslint/parser": "^7.0.1", + "@typescript-eslint/eslint-plugin": "^8.0.0", + "@typescript-eslint/parser": "^8.0.0", "aria-query": "^5.3.0", "eslint-config-prettier": ">=8.0.0", "eslint-plugin-escompat": "^3.3.3", @@ -3420,6 +3421,212 @@ "eslint": "^8.0.1" } }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/eslint-plugin": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.6.0.tgz", + "integrity": "sha512-UOaz/wFowmoh2G6Mr9gw60B1mm0MzUtm6Ic8G2yM1Le6gyj5Loi/N+O5mocugRGY+8OeeKmkMmbxNqUCq3B4Sg==", + "dev": true, + "dependencies": { + "@eslint-community/regexpp": "^4.10.0", + "@typescript-eslint/scope-manager": "8.6.0", + "@typescript-eslint/type-utils": "8.6.0", + "@typescript-eslint/utils": "8.6.0", + "@typescript-eslint/visitor-keys": "8.6.0", + "graphemer": "^1.4.0", + "ignore": "^5.3.1", + "natural-compare": "^1.4.0", + "ts-api-utils": "^1.3.0" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependencies": { + "@typescript-eslint/parser": "^8.0.0 || ^8.0.0-alpha.0", + "eslint": "^8.57.0 || ^9.0.0" + }, + "peerDependenciesMeta": { + "typescript": { + "optional": true + } + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/parser": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.6.0.tgz", + "integrity": "sha512-eQcbCuA2Vmw45iGfcyG4y6rS7BhWfz9MQuk409WD47qMM+bKCGQWXxvoOs1DUp+T7UBMTtRTVT+kXr7Sh4O9Ow==", + "dev": true, + "dependencies": { + "@typescript-eslint/scope-manager": "8.6.0", + "@typescript-eslint/types": "8.6.0", + "@typescript-eslint/typescript-estree": "8.6.0", + "@typescript-eslint/visitor-keys": "8.6.0", + "debug": "^4.3.4" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependencies": { + "eslint": "^8.57.0 || ^9.0.0" + }, + "peerDependenciesMeta": { + "typescript": { + "optional": true + } + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/scope-manager": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.6.0.tgz", + "integrity": "sha512-ZuoutoS5y9UOxKvpc/GkvF4cuEmpokda4wRg64JEia27wX+PysIE9q+lzDtlHHgblwUWwo5/Qn+/WyTUvDwBHw==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "8.6.0", + "@typescript-eslint/visitor-keys": "8.6.0" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/type-utils": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.6.0.tgz", + "integrity": "sha512-dtePl4gsuenXVwC7dVNlb4mGDcKjDT/Ropsk4za/ouMBPplCLyznIaR+W65mvCvsyS97dymoBRrioEXI7k0XIg==", + "dev": true, + "dependencies": { + "@typescript-eslint/typescript-estree": "8.6.0", + "@typescript-eslint/utils": "8.6.0", + "debug": "^4.3.4", + "ts-api-utils": "^1.3.0" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependenciesMeta": { + "typescript": { + "optional": true + } + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/types": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.6.0.tgz", + "integrity": "sha512-rojqFZGd4MQxw33SrOy09qIDS8WEldM8JWtKQLAjf/X5mGSeEFh5ixQlxssMNyPslVIk9yzWqXCsV2eFhYrYUw==", + "dev": true, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/typescript-estree": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.6.0.tgz", + "integrity": "sha512-MOVAzsKJIPIlLK239l5s06YXjNqpKTVhBVDnqUumQJja5+Y94V3+4VUFRA0G60y2jNnTVwRCkhyGQpavfsbq/g==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "8.6.0", + "@typescript-eslint/visitor-keys": "8.6.0", + "debug": "^4.3.4", + "fast-glob": "^3.3.2", + "is-glob": "^4.0.3", + "minimatch": "^9.0.4", + "semver": "^7.6.0", + "ts-api-utils": "^1.3.0" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependenciesMeta": { + "typescript": { + "optional": true + } + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/utils": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.6.0.tgz", + "integrity": "sha512-eNp9cWnYf36NaOVjkEUznf6fEgVy1TWpE0o52e4wtojjBx7D1UV2WAWGzR+8Y5lVFtpMLPwNbC67T83DWSph4A==", + "dev": true, + "dependencies": { + "@eslint-community/eslint-utils": "^4.4.0", + "@typescript-eslint/scope-manager": "8.6.0", + "@typescript-eslint/types": "8.6.0", + "@typescript-eslint/typescript-estree": "8.6.0" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + }, + "peerDependencies": { + "eslint": "^8.57.0 || ^9.0.0" + } + }, + "node_modules/eslint-plugin-github/node_modules/@typescript-eslint/visitor-keys": { + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.6.0.tgz", + "integrity": "sha512-wapVFfZg9H0qOYh4grNVQiMklJGluQrOUiOhYRrQWhx7BY/+I1IYb8BczWNbbUpO+pqy0rDciv3lQH5E1bCLrg==", + "dev": true, + "dependencies": { + "@typescript-eslint/types": "8.6.0", + "eslint-visitor-keys": "^3.4.3" + }, + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/typescript-eslint" + } + }, + "node_modules/eslint-plugin-github/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/eslint-plugin-github/node_modules/minimatch": { + "version": "9.0.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz", + "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==", + "dev": true, + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/eslint-plugin-i18n-text": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/eslint-plugin-i18n-text/-/eslint-plugin-i18n-text-1.0.1.tgz", @@ -3775,9 +3982,10 @@ "license": "Apache-2.0" }, "node_modules/fast-glob": { - "version": "3.3.1", + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.2.tgz", + "integrity": "sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==", "dev": true, - "license": "MIT", "dependencies": { "@nodelib/fs.stat": "^2.0.2", "@nodelib/fs.walk": "^1.2.3", @@ -7813,9 +8021,9 @@ } }, "node_modules/typescript": { - "version": "5.5.4", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.5.4.tgz", - "integrity": "sha512-Mtq29sKDAEYP7aljRgtPOpTvOfbwRWlS6dPRzwjdE+C0R4brX/GUyhHSecbHMFLNBLcJIPt9nl9yG5TZ1weH+Q==", + "version": "5.6.2", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.2.tgz", + "integrity": "sha512-NW8ByodCSNCwZeghjN3o+JX5OFH0Ojg6sadjEKY4huZ52TqbJTJnDo5+Tw98lSy63NZvi4n+ez5m2u5d4PkZyw==", "dev": true, "bin": { "tsc": "bin/tsc", diff --git a/package.json b/package.json index 19bfc86..92b1d96 100644 --- a/package.json +++ b/package.json @@ -74,13 +74,13 @@ "@actions/core": "^1.10.1" }, "devDependencies": { - "@types/jest": "^29.5.12", - "@types/node": "^22.5.4", + "@types/jest": "^29.5.13", + "@types/node": "^22.5.5", "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", "eslint": "^8.57.0", - "eslint-plugin-github": "^5.0.1", + "eslint-plugin-github": "^5.0.2", "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", @@ -91,6 +91,6 @@ "prettier": "^3.3.3", "prettier-eslint": "^16.3.0", "ts-jest": "^29.2.5", - "typescript": "^5.5.4" + "typescript": "^5.6.2" } } From 40fae36c9184a47d8a80a7318a4ac67ba3b54232 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 08:35:47 -0700 Subject: [PATCH 26/28] Bump eslint from 8.57.0 to 8.57.1 (#246) Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 8.57.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v8.57.0...v8.57.1) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 32 +++++++++++++++++++------------- package.json | 2 +- 2 files changed, 20 insertions(+), 14 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2a49143..43450eb 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,7 +18,7 @@ "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", - "eslint": "^8.57.0", + "eslint": "^8.57.1", "eslint-plugin-github": "^5.0.2", "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", @@ -755,9 +755,10 @@ } }, "node_modules/@eslint/js": { - "version": "8.57.0", + "version": "8.57.1", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.57.1.tgz", + "integrity": "sha512-d9zaMRSTIKDLhctzH12MtXvJKSSUhaHcjV+2Z+GK+EEY7XKpP5yR4x+N3TAcHTcu963nIr+TMcCb4DBCYX1z6Q==", "dev": true, - "license": "MIT", "engines": { "node": "^12.22.0 || ^14.17.0 || >=16.0.0" } @@ -776,11 +777,13 @@ "dev": true }, "node_modules/@humanwhocodes/config-array": { - "version": "0.11.14", + "version": "0.13.0", + "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz", + "integrity": "sha512-DZLEEqFWQFiyK6h5YIeynKx7JlvCYWL0cImfSRXZ9l4Sg2efkFGTuFf6vzXjK1cq6IYkU+Eg/JizXw+TD2vRNw==", + "deprecated": "Use @eslint/config-array instead", "dev": true, - "license": "Apache-2.0", "dependencies": { - "@humanwhocodes/object-schema": "^2.0.2", + "@humanwhocodes/object-schema": "^2.0.3", "debug": "^4.3.1", "minimatch": "^3.0.5" }, @@ -801,9 +804,11 @@ } }, "node_modules/@humanwhocodes/object-schema": { - "version": "2.0.2", - "dev": true, - "license": "BSD-3-Clause" + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz", + "integrity": "sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA==", + "deprecated": "Use @eslint/object-schema instead", + "dev": true }, "node_modules/@isaacs/cliui": { "version": "8.0.2", @@ -3210,15 +3215,16 @@ } }, "node_modules/eslint": { - "version": "8.57.0", + "version": "8.57.1", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.57.1.tgz", + "integrity": "sha512-ypowyDxpVSYpkXr9WPv2PAZCtNip1Mv5KTW0SCurXv/9iOpcrH9PaqUElksqEB6pChqHGDRCFTyrZlGhnLNGiA==", "dev": true, - "license": "MIT", "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.6.1", "@eslint/eslintrc": "^2.1.4", - "@eslint/js": "8.57.0", - "@humanwhocodes/config-array": "^0.11.14", + "@eslint/js": "8.57.1", + "@humanwhocodes/config-array": "^0.13.0", "@humanwhocodes/module-importer": "^1.0.1", "@nodelib/fs.walk": "^1.2.8", "@ungap/structured-clone": "^1.2.0", diff --git a/package.json b/package.json index 92b1d96..acdf3ce 100644 --- a/package.json +++ b/package.json @@ -79,7 +79,7 @@ "@typescript-eslint/eslint-plugin": "^7.17.0", "@typescript-eslint/parser": "^7.18.0", "@vercel/ncc": "^0.38.1", - "eslint": "^8.57.0", + "eslint": "^8.57.1", "eslint-plugin-github": "^5.0.2", "eslint-plugin-jest": "^28.8.3", "eslint-plugin-jsonc": "^2.16.0", From 0202c8c4b72f0f87d612ca4c516c854dc62289fc Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 23 Sep 2024 08:36:16 -0700 Subject: [PATCH 27/28] add prober badges to readme (#242) Signed-off-by: Brian DeHamer --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index d8a513c..0faac02 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,8 @@ # `actions/attest-build-provenance` +[![Public-Good Sigstore Prober](https://github.com/actions/attest-build-provenance/actions/workflows/prober-public-good.yml/badge.svg)](https://github.com/actions/attest-build-provenance/actions/workflows/prober-public-good.yml) +[![GitHub Sigstore Prober](https://github.com/actions/attest-build-provenance/actions/workflows/prober-github.yml/badge.svg)](https://github.com/actions/attest-build-provenance/actions/workflows/prober-github.yml) + Generate signed build provenance attestations for workflow artifacts. Internally powered by the [@actions/attest][1] package. From ac6bfa4677d0fda2a0f1ecd1d3fb41464ae2b3c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 10:43:31 -0700 Subject: [PATCH 28/28] Bump jose from 5.9.2 to 5.9.3 in the npm-development group (#244) * Bump jose from 5.9.2 to 5.9.3 in the npm-development group Bumps the npm-development group with 1 update: [jose](https://github.com/panva/jose). Updates `jose` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v5.9.2...v5.9.3) --- updated-dependencies: - dependency-name: jose dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] * rebuild dist Signed-off-by: Brian DeHamer --------- Signed-off-by: dependabot[bot] Signed-off-by: Brian DeHamer Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer --- dist/index.js | Bin 2929357 -> 2929365 bytes package-lock.json | 8 ++++---- package.json | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dist/index.js b/dist/index.js index bd8a78a6677e0dfacf9418b6a2a47d2263802cd2..3af80d994720a49d87b06d36bce3a17a54b9d058 100644 GIT binary patch delta 180 zcmXBD$qB+x07X&0V~i#m=hwuUhu$qzVGJ6tBeXN zs-&_is>)GKuIg$$ypJ{KIJaJ!TmNPpH~fo}%x9A=25hs#E_>{Az#&H*bHXWSoO8jD VORgAk%?-EQanA#fX_B2T-yb^nQeyxB delta 171 zcmWN=Sqg$s0ESU+*_@UQHjg$~y+sT3;Rn~@4k7|KaPh6jmJlSgh`s~o{dt%dV;PlH zmZOTQs;RDqnrf;2bidYIlft@LVZFOa(%fT*UHa^?&jE)FIO3QSPC4V83og0hnj3Bz Sa>qRnJTl^m=Pb=Hx8EO2p;BM~ diff --git a/package-lock.json b/package-lock.json index 43450eb..b2f30f6 100644 --- a/package-lock.json +++ b/package-lock.json @@ -24,7 +24,7 @@ "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.9.2", + "jose": "^5.9.3", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3", @@ -5680,9 +5680,9 @@ } }, "node_modules/jose": { - "version": "5.9.2", - "resolved": "https://registry.npmjs.org/jose/-/jose-5.9.2.tgz", - "integrity": "sha512-ILI2xx/I57b20sd7rHZvgiiQrmp2mcotwsAH+5ajbpFQbrYVQdNHYlQhoA5cFb78CgtBOxtC05TeA+mcgkuCqQ==", + "version": "5.9.3", + "resolved": "https://registry.npmjs.org/jose/-/jose-5.9.3.tgz", + "integrity": "sha512-egLIoYSpcd+QUF+UHgobt5YzI2Pkw/H39ou9suW687MY6PmCwPmkNV/4TNjn1p2tX5xO3j0d0sq5hiYE24bSlg==", "funding": { "url": "https://github.com/sponsors/panva" } diff --git a/package.json b/package.json index acdf3ce..88a5dac 100644 --- a/package.json +++ b/package.json @@ -85,7 +85,7 @@ "eslint-plugin-jsonc": "^2.16.0", "eslint-plugin-prettier": "^5.2.1", "jest": "^29.7.0", - "jose": "^5.9.2", + "jose": "^5.9.3", "markdownlint-cli": "^0.41.0", "nock": "^13.5.5", "prettier": "^3.3.3",