Support Nodejs.24 - Merge pull request #2110 from actions/salmanmkc/node24

Support Node.js 24

package.json

@@ -35,24 +35,24 @@
     "url": "https://github.com/actions/toolkit/issues"
   },
   "devDependencies": {
-    "@sigstore/mock": "^0.8.0",
+    "@sigstore/mock": "^0.10.0",
     "@sigstore/rekor-types": "^3.0.0",
     "@types/jsonwebtoken": "^9.0.6",
     "nock": "^13.5.1",
-    "undici": "^5.28.5"
+    "undici": "^6.20.0"
   },
   "dependencies": {
     "@actions/core": "^1.11.1",
     "@actions/github": "^6.0.0",
     "@actions/http-client": "^2.2.3",
     "@octokit/plugin-retry": "^6.0.1",
-    "@sigstore/bundle": "^3.0.0",
-    "@sigstore/sign": "^3.0.0",
-    "jose": "^5.2.3"
+    "@sigstore/bundle": "^3.1.0",
+    "@sigstore/sign": "^3.1.0",
+    "jose": "^5.10.0"
   },
   "overrides": {
     "@octokit/plugin-retry": {
       "@octokit/core": "^5.2.0"
     }
   }
-}
+}

src/attest.ts

@@ -102,7 +102,8 @@ function toAttestation(bundle: Bundle, attestationID?: string): Attestation {
       throw new Error('Bundle must contain an x509 certificate')
   }
 
-  const signingCert = new X509Certificate(certBytes)
+  // Convert Buffer to Uint8Array for Node.js 24 compatibility
+  const signingCert = new X509Certificate(new Uint8Array(certBytes))
 
   // Collect transparency log ID if available
   const tlogEntries = bundle.verificationMaterial.tlogEntries

src/store.ts

@@ -29,7 +29,11 @@ export const writeAttestation = async (
       owner: github.context.repo.owner,
       repo: github.context.repo.repo,
       headers: options.headers,
-      data: {bundle: attestation}
+      bundle: attestation as {
+        mediaType?: string
+        verificationMaterial?: {[key: string]: unknown}
+        dsseEnvelope?: {[key: string]: unknown}
+      }
     })
 
     const data =