deps updates

DEPENDENCIES.md

@@ -257,8 +257,6 @@ graph LR;
 ```mermaid
 graph LR;
   agent-base-->debug;
-  aggregate-error-->clean-stack;
-  aggregate-error-->indent-string;
   bin-links-->cmd-shim;
   bin-links-->npm-normalize-package-bin;
   bin-links-->proc-log;
@@ -317,6 +315,7 @@ graph LR;
   isaacs-cliui-->strip-ansi;
   isaacs-cliui-->wrap-ansi-cjs;
   isaacs-cliui-->wrap-ansi;
+  isaacs-fs-minipass-->minipass;
   jackspeak-->isaacs-cliui["@isaacs/cliui"];
   jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
   libnpmaccess-->npm-package-arg;
@@ -409,7 +408,6 @@ graph LR;
   libnpmversion-->tap;
   make-fetch-happen-->cacache;
   make-fetch-happen-->http-cache-semantics;
-  make-fetch-happen-->is-lambda;
   make-fetch-happen-->minipass-fetch;
   make-fetch-happen-->minipass-flush;
   make-fetch-happen-->minipass-pipeline;
@@ -431,7 +429,6 @@ graph LR;
   minipass-sized-->minipass;
   minizlib-->minipass;
   minizlib-->rimraf;
-  minizlib-->yallist;
   node-gyp-->env-paths;
   node-gyp-->exponential-backoff;
   node-gyp-->glob;
@@ -683,7 +680,6 @@ graph LR;
   npmcli-smoke-tests-->proxy;
   npmcli-smoke-tests-->tap;
   npmcli-smoke-tests-->which;
-  p-map-->aggregate-error;
   pacote-->cacache;
   pacote-->fs-minipass;
   pacote-->minipass;
@@ -751,6 +747,7 @@ graph LR;
   strip-ansi-->ansi-regex;
   tar-->chownr;
   tar-->fs-minipass;
+  tar-->isaacs-fs-minipass["@isaacs/fs-minipass"];
   tar-->minipass;
   tar-->minizlib;
   tar-->mkdirp;

lib/utils/verify-signatures.js

@@ -2,7 +2,6 @@ const fetch = require('npm-registry-fetch')
 const localeCompare = require('@isaacs/string-locale-compare')('en')
 const npa = require('npm-package-arg')
 const pacote = require('pacote')
-const pMap = require('p-map')
 const tufClient = require('@sigstore/tuf')
 const { log, output } = require('proc-log')
 
@@ -26,6 +25,7 @@ class VerifySignatures {
 
   async run () {
     const start = process.hrtime.bigint()
+    const { default: pMap } = await import('p-map')
 
     // Find all deps in tree
     const { edges, registries } = this.getEdgesOut(this.tree.inventory.values(), this.filterSet)

node_modules/.gitignore

@@ -46,7 +46,6 @@
 !/@tufjs/models
 !/abbrev
 !/agent-base
-!/aggregate-error
 !/ansi-regex
 !/ansi-styles
 !/aproba
@@ -61,14 +60,12 @@
 !/cacache/node_modules/chownr
 !/cacache/node_modules/minizlib
 !/cacache/node_modules/mkdirp
-!/cacache/node_modules/p-map
 !/cacache/node_modules/tar
 !/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
 !/cidr-regex
-!/clean-stack
 !/cli-columns
 !/cmd-shim
 !/color-convert
@@ -99,14 +96,12 @@
 !/iconv-lite
 !/ignore-walk
 !/imurmurhash
-!/indent-string
 !/ini
 !/init-package-json
 !/ip-address
 !/ip-regex
 !/is-cidr
 !/is-fullwidth-code-point
-!/is-lambda
 !/isexe
 !/jackspeak
 !/jsbn
@@ -146,25 +141,14 @@
 !/mkdirp
 !/ms
 !/mute-stream
-!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
-!/node-gyp/node_modules/@npmcli/
-/node-gyp/node_modules/@npmcli/*
-!/node-gyp/node_modules/@npmcli/agent
-!/node-gyp/node_modules/@npmcli/fs
-!/node-gyp/node_modules/abbrev
-!/node-gyp/node_modules/cacache
-!/node-gyp/node_modules/isexe
-!/node-gyp/node_modules/make-fetch-happen
-!/node-gyp/node_modules/minipass-fetch
-!/node-gyp/node_modules/nopt
-!/node-gyp/node_modules/proc-log
-!/node-gyp/node_modules/ssri
-!/node-gyp/node_modules/unique-filename
-!/node-gyp/node_modules/unique-slug
-!/node-gyp/node_modules/which
+!/node-gyp/node_modules/chownr
+!/node-gyp/node_modules/minizlib
+!/node-gyp/node_modules/mkdirp
+!/node-gyp/node_modules/tar
+!/node-gyp/node_modules/yallist
 !/nopt
 !/nopt/node_modules/
 /nopt/node_modules/*

node_modules/@npmcli/run-script/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/run-script",
-  "version": "9.0.1",
+  "version": "9.0.2",
   "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
   "author": "GitHub Inc.",
   "license": "ISC",
@@ -16,15 +16,15 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^5.0.0",
-    "@npmcli/template-oss": "4.23.3",
+    "@npmcli/template-oss": "4.23.4",
     "spawk": "^1.8.1",
     "tap": "^16.0.1"
   },
   "dependencies": {
     "@npmcli/node-gyp": "^4.0.0",
     "@npmcli/package-json": "^6.0.0",
     "@npmcli/promise-spawn": "^8.0.0",
-    "node-gyp": "^10.0.0",
+    "node-gyp": "^11.0.0",
     "proc-log": "^5.0.0",
     "which": "^5.0.0"
   },
@@ -42,7 +42,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.23.3",
+    "version": "4.23.4",
     "publish": "true"
   },
   "tap": {

node_modules/binary-extensions/index.js

@@ -1 +1,3 @@
-module.exports = require('./binary-extensions.json');
+import binaryExtensions from './binary-extensions.json' with {type: 'json'};
+
+export default binaryExtensions;

node_modules/binary-extensions/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "binary-extensions",
-	"version": "2.3.0",
+	"version": "3.0.0",
 	"description": "List of binary file extensions",
 	"license": "MIT",
 	"repository": "sindresorhus/binary-extensions",
@@ -10,18 +10,23 @@
 		"email": "[email protected]",
 		"url": "https://sindresorhus.com"
 	},
+	"type": "module",
+	"exports": {
+		"types": "./index.d.ts",
+		"default": "./index.js"
+	},
 	"sideEffects": false,
 	"engines": {
-		"node": ">=8"
+		"node": ">=18.20"
 	},
 	"scripts": {
-		"test": "xo && ava && tsd"
+		"//test": "xo && ava && tsd",
+		"test": "ava && tsd"
 	},
 	"files": [
 		"index.js",
 		"index.d.ts",
-		"binary-extensions.json",
-		"binary-extensions.json.d.ts"
+		"binary-extensions.json"
 	],
 	"keywords": [
 		"binary",
@@ -33,8 +38,8 @@
 		"array"
 	],
 	"devDependencies": {
-		"ava": "^1.4.1",
-		"tsd": "^0.7.2",
-		"xo": "^0.24.0"
+		"ava": "^6.1.2",
+		"tsd": "^0.31.0",
+		"xo": "^0.58.0"
 	}
 }