Merge pull request #575 from crazy-max/fix-yarn-preapprove-actions-toolkit

chore: allow actions-toolkit to bypass yarn age gate

.github/workflows/update-dist.yml

@@ -50,7 +50,7 @@ jobs:
               git config user.name "github-actions[bot]"
               git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
               git add dist
-              git commit -m "chore: update generated content"
+              git commit -m "[dependabot skip] chore: update generated content"
               git push
             )
           else

.yarnrc.yml

@@ -14,6 +14,9 @@ logFilters:
   - code: YN0086
     level: discard
 
+npmPreapprovedPackages:
+  - "@docker/actions-toolkit"
+
 compressionLevel: mixed
 enableGlobalCache: false
 enableHardenedMode: true

dist/licenses.txt

@@ -4,6 +4,7 @@ https://www.npmjs.com/package/generate-license-file
 The following npm packages may be included in this product:
 
  - @sigstore/bundle@4.0.0
+ - @sigstore/core@3.2.0
  - @sigstore/core@3.2.1
  - @sigstore/protobuf-specs@0.5.0
  - @sigstore/sign@4.1.1

yarn.lock

@@ -1640,7 +1640,21 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@sigstore/core@npm:^3.1.0, @sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
+"@sigstore/core@npm:^3.1.0":
+  version: 3.1.0
+  resolution: "@sigstore/core@npm:3.1.0"
+  checksum: 10/c7a2e2d32f52494b40d9c469bc2241cc5d14d5f93fa028f099dcfe403443713f90ef3178684ee11c32e078a4b9fad79500746dfef10f10044c7fa00c909f3760
+  languageName: node
+  linkType: hard
+
+"@sigstore/core@npm:^3.2.0":
+  version: 3.2.0
+  resolution: "@sigstore/core@npm:3.2.0"
+  checksum: 10/2425d20297d57a5f5a62f0e6c2f4280818015ea00b3defebdac63f13c7d01db988602c316c16e374ba091c3649dd9a22ae8c9ba3ac165f736b0503164c5da5f5
+  languageName: node
+  linkType: hard
+
+"@sigstore/core@npm:^3.2.1":
   version: 3.2.1
   resolution: "@sigstore/core@npm:3.2.1"
   checksum: 10/2f6c1ced55f8ed3f7fc705a668eb95db9471511dfb1f054927822bf97a051dd62228ecf6a9f1932d240c2c4ae69a3b5066550789e5ad8f4257839a4370e5a120