aws-delivlib 14.4.2 → 14.4.3

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/node/sign.js

@@ -1,21 +1,24 @@
 import { createHmac } from "crypto";
 import { Algorithm } from "../types";
 import { VERSION } from "../version";
-export async function sign(options, payload) {
-    const { secret, algorithm } = typeof options === "object"
-        ? {
-            secret: options.secret,
-            algorithm: options.algorithm || Algorithm.SHA256,
-        }
-        : { secret: options, algorithm: Algorithm.SHA256 };
-    if (!secret || !payload) {
-        throw new TypeError("[@octokit/webhooks-methods] secret & payload required for sign()");
-    }
-    if (!Object.values(Algorithm).includes(algorithm)) {
-        throw new TypeError(`[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`);
-    }
-    return `${algorithm}=${createHmac(algorithm, secret)
-        .update(payload)
-        .digest("hex")}`;
+async function sign(options, payload) {
+  const { secret, algorithm } = typeof options === "object" ? {
+    secret: options.secret,
+    algorithm: options.algorithm || Algorithm.SHA256
+  } : { secret: options, algorithm: Algorithm.SHA256 };
+  if (!secret || !payload) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret & payload required for sign()"
+    );
+  }
+  if (!Object.values(Algorithm).includes(algorithm)) {
+    throw new TypeError(
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+    );
+  }
+  return `${algorithm}=${createHmac(algorithm, secret).update(payload).digest("hex")}`;
 }
 sign.VERSION = VERSION;
+export {
+  sign
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/node/verify.js

@@ -3,19 +3,23 @@ import { Buffer } from "buffer";
 import { sign } from "./sign";
 import { VERSION } from "../version";
 import { getAlgorithm } from "../utils";
-export async function verify(secret, eventPayload, signature) {
-    if (!secret || !eventPayload || !signature) {
-        throw new TypeError("[@octokit/webhooks-methods] secret, eventPayload & signature required");
-    }
-    const signatureBuffer = Buffer.from(signature);
-    const algorithm = getAlgorithm(signature);
-    const verificationBuffer = Buffer.from(await sign({ secret, algorithm }, eventPayload));
-    if (signatureBuffer.length !== verificationBuffer.length) {
-        return false;
-    }
-    // constant time comparison to prevent timing attachs
-    // https://stackoverflow.com/a/31096242/206879
-    // https://en.wikipedia.org/wiki/Timing_attack
-    return timingSafeEqual(signatureBuffer, verificationBuffer);
+async function verify(secret, eventPayload, signature) {
+  if (!secret || !eventPayload || !signature) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret, eventPayload & signature required"
+    );
+  }
+  const signatureBuffer = Buffer.from(signature);
+  const algorithm = getAlgorithm(signature);
+  const verificationBuffer = Buffer.from(
+    await sign({ secret, algorithm }, eventPayload)
+  );
+  if (signatureBuffer.length !== verificationBuffer.length) {
+    return false;
+  }
+  return timingSafeEqual(signatureBuffer, verificationBuffer);
 }
 verify.VERSION = VERSION;
+export {
+  verify
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/types.js

@@ -1,5 +1,8 @@
-export var Algorithm;
-(function (Algorithm) {
-    Algorithm["SHA1"] = "sha1";
-    Algorithm["SHA256"] = "sha256";
-})(Algorithm || (Algorithm = {}));
+var Algorithm = /* @__PURE__ */ ((Algorithm2) => {
+  Algorithm2["SHA1"] = "sha1";
+  Algorithm2["SHA256"] = "sha256";
+  return Algorithm2;
+})(Algorithm || {});
+export {
+  Algorithm
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/utils.js

@@ -1,3 +1,6 @@
-export const getAlgorithm = (signature) => {
-    return signature.startsWith("sha256=") ? "sha256" : "sha1";
+const getAlgorithm = (signature) => {
+  return signature.startsWith("sha256=") ? "sha256" : "sha1";
+};
+export {
+  getAlgorithm
 };

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/version.js

@@ -1 +1,4 @@
-export const VERSION = "3.0.1";
+const VERSION = "3.0.3";
+export {
+  VERSION
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-src/web.js

@@ -2,56 +2,74 @@ import { Algorithm } from "./types";
 import { getAlgorithm } from "./utils";
 const enc = new TextEncoder();
 function hexToUInt8Array(string) {
-    // convert string to pairs of 2 characters
-    const pairs = string.match(/[\dA-F]{2}/gi);
-    // convert the octets to integers
-    const integers = pairs.map(function (s) {
-        return parseInt(s, 16);
-    });
-    return new Uint8Array(integers);
+  const pairs = string.match(/[\dA-F]{2}/gi);
+  const integers = pairs.map(function(s) {
+    return parseInt(s, 16);
+  });
+  return new Uint8Array(integers);
 }
 function UInt8ArrayToHex(signature) {
-    return Array.prototype.map
-        .call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, "0"))
-        .join("");
+  return Array.prototype.map.call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, "0")).join("");
 }
 function getHMACHashName(algorithm) {
-    return {
-        [Algorithm.SHA1]: "SHA-1",
-        [Algorithm.SHA256]: "SHA-256",
-    }[algorithm];
+  return {
+    [Algorithm.SHA1]: "SHA-1",
+    [Algorithm.SHA256]: "SHA-256"
+  }[algorithm];
 }
 async function importKey(secret, algorithm) {
-    // ref: https://developer.mozilla.org/en-US/docs/Web/API/HmacImportParams
-    return crypto.subtle.importKey("raw", // raw format of the key - should be Uint8Array
-    enc.encode(secret), {
-        // algorithm details
-        name: "HMAC",
-        hash: { name: getHMACHashName(algorithm) },
-    }, false, // export = false
-    ["sign", "verify"] // what this key can do
-    );
+  return crypto.subtle.importKey(
+    "raw",
+    // raw format of the key - should be Uint8Array
+    enc.encode(secret),
+    {
+      // algorithm details
+      name: "HMAC",
+      hash: { name: getHMACHashName(algorithm) }
+    },
+    false,
+    // export = false
+    ["sign", "verify"]
+    // what this key can do
+  );
 }
-export async function sign(options, payload) {
-    const { secret, algorithm } = typeof options === "object"
-        ? {
-            secret: options.secret,
-            algorithm: options.algorithm || Algorithm.SHA256,
-        }
-        : { secret: options, algorithm: Algorithm.SHA256 };
-    if (!secret || !payload) {
-        throw new TypeError("[@octokit/webhooks-methods] secret & payload required for sign()");
-    }
-    if (!Object.values(Algorithm).includes(algorithm)) {
-        throw new TypeError(`[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`);
-    }
-    const signature = await crypto.subtle.sign("HMAC", await importKey(secret, algorithm), enc.encode(payload));
-    return `${algorithm}=${UInt8ArrayToHex(signature)}`;
+async function sign(options, payload) {
+  const { secret, algorithm } = typeof options === "object" ? {
+    secret: options.secret,
+    algorithm: options.algorithm || Algorithm.SHA256
+  } : { secret: options, algorithm: Algorithm.SHA256 };
+  if (!secret || !payload) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret & payload required for sign()"
+    );
+  }
+  if (!Object.values(Algorithm).includes(algorithm)) {
+    throw new TypeError(
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+    );
+  }
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    await importKey(secret, algorithm),
+    enc.encode(payload)
+  );
+  return `${algorithm}=${UInt8ArrayToHex(signature)}`;
 }
-export async function verify(secret, eventPayload, signature) {
-    if (!secret || !eventPayload || !signature) {
-        throw new TypeError("[@octokit/webhooks-methods] secret, eventPayload & signature required");
-    }
-    const algorithm = getAlgorithm(signature);
-    return await crypto.subtle.verify("HMAC", await importKey(secret, algorithm), hexToUInt8Array(signature.replace(`${algorithm}=`, "")), enc.encode(eventPayload));
+async function verify(secret, eventPayload, signature) {
+  if (!secret || !eventPayload || !signature) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret, eventPayload & signature required"
+    );
+  }
+  const algorithm = getAlgorithm(signature);
+  return await crypto.subtle.verify(
+    "HMAC",
+    await importKey(secret, algorithm),
+    hexToUInt8Array(signature.replace(`${algorithm}=`, "")),
+    enc.encode(eventPayload)
+  );
 }
+export {
+  sign,
+  verify
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-types/index.d.ts

@@ -1,2 +1,4 @@
 export { sign } from "./node/sign";
-export { verify } from "./node/verify";
+import { verify } from "./node/verify";
+export { verify };
+export declare function verifyWithFallback(secret: string, payload: string, signature: string, additionalSecrets: undefined | string[]): Promise<any>;

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-types/node/sign.d.ts

@@ -1,4 +1,4 @@
-import { SignOptions } from "../types";
+import { type SignOptions } from "../types";
 export declare function sign(options: SignOptions | string, payload: string): Promise<string>;
 export declare namespace sign {
     var VERSION: string;

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-types/types.d.ts

@@ -2,8 +2,8 @@ export declare enum Algorithm {
     SHA1 = "sha1",
     SHA256 = "sha256"
 }
-export declare type AlgorithmLike = Algorithm | "sha1" | "sha256";
-export declare type SignOptions = {
+export type AlgorithmLike = Algorithm | "sha1" | "sha256";
+export type SignOptions = {
     secret: string;
     algorithm?: AlgorithmLike;
 };

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-types/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "3.0.1";
+export declare const VERSION = "3.0.3";

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-types/web.d.ts

@@ -1,3 +1,3 @@
-import { SignOptions } from "./types";
+import { type SignOptions } from "./types";
 export declare function sign(options: SignOptions | string, payload: string): Promise<string>;
 export declare function verify(secret: string, eventPayload: string, signature: string): Promise<boolean>;

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-web/index.js

@@ -1,68 +1,86 @@
-var Algorithm;
-(function (Algorithm) {
-    Algorithm["SHA1"] = "sha1";
-    Algorithm["SHA256"] = "sha256";
-})(Algorithm || (Algorithm = {}));
+// pkg/dist-src/types.js
+var Algorithm = /* @__PURE__ */ ((Algorithm2) => {
+  Algorithm2["SHA1"] = "sha1";
+  Algorithm2["SHA256"] = "sha256";
+  return Algorithm2;
+})(Algorithm || {});
 
-const getAlgorithm = (signature) => {
-    return signature.startsWith("sha256=") ? "sha256" : "sha1";
+// pkg/dist-src/utils.js
+var getAlgorithm = (signature) => {
+  return signature.startsWith("sha256=") ? "sha256" : "sha1";
 };
 
-const enc = new TextEncoder();
+// pkg/dist-src/web.js
+var enc = new TextEncoder();
 function hexToUInt8Array(string) {
-    // convert string to pairs of 2 characters
-    const pairs = string.match(/[\dA-F]{2}/gi);
-    // convert the octets to integers
-    const integers = pairs.map(function (s) {
-        return parseInt(s, 16);
-    });
-    return new Uint8Array(integers);
+  const pairs = string.match(/[\dA-F]{2}/gi);
+  const integers = pairs.map(function(s) {
+    return parseInt(s, 16);
+  });
+  return new Uint8Array(integers);
 }
 function UInt8ArrayToHex(signature) {
-    return Array.prototype.map
-        .call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, "0"))
-        .join("");
+  return Array.prototype.map.call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, "0")).join("");
 }
 function getHMACHashName(algorithm) {
-    return {
-        [Algorithm.SHA1]: "SHA-1",
-        [Algorithm.SHA256]: "SHA-256",
-    }[algorithm];
+  return {
+    [Algorithm.SHA1]: "SHA-1",
+    [Algorithm.SHA256]: "SHA-256"
+  }[algorithm];
 }
 async function importKey(secret, algorithm) {
-    // ref: https://developer.mozilla.org/en-US/docs/Web/API/HmacImportParams
-    return crypto.subtle.importKey("raw", // raw format of the key - should be Uint8Array
-    enc.encode(secret), {
-        // algorithm details
-        name: "HMAC",
-        hash: { name: getHMACHashName(algorithm) },
-    }, false, // export = false
-    ["sign", "verify"] // what this key can do
-    );
+  return crypto.subtle.importKey(
+    "raw",
+    // raw format of the key - should be Uint8Array
+    enc.encode(secret),
+    {
+      // algorithm details
+      name: "HMAC",
+      hash: { name: getHMACHashName(algorithm) }
+    },
+    false,
+    // export = false
+    ["sign", "verify"]
+    // what this key can do
+  );
 }
 async function sign(options, payload) {
-    const { secret, algorithm } = typeof options === "object"
-        ? {
-            secret: options.secret,
-            algorithm: options.algorithm || Algorithm.SHA256,
-        }
-        : { secret: options, algorithm: Algorithm.SHA256 };
-    if (!secret || !payload) {
-        throw new TypeError("[@octokit/webhooks-methods] secret & payload required for sign()");
-    }
-    if (!Object.values(Algorithm).includes(algorithm)) {
-        throw new TypeError(`[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`);
-    }
-    const signature = await crypto.subtle.sign("HMAC", await importKey(secret, algorithm), enc.encode(payload));
-    return `${algorithm}=${UInt8ArrayToHex(signature)}`;
+  const { secret, algorithm } = typeof options === "object" ? {
+    secret: options.secret,
+    algorithm: options.algorithm || Algorithm.SHA256
+  } : { secret: options, algorithm: Algorithm.SHA256 };
+  if (!secret || !payload) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret & payload required for sign()"
+    );
+  }
+  if (!Object.values(Algorithm).includes(algorithm)) {
+    throw new TypeError(
+      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`
+    );
+  }
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    await importKey(secret, algorithm),
+    enc.encode(payload)
+  );
+  return `${algorithm}=${UInt8ArrayToHex(signature)}`;
 }
 async function verify(secret, eventPayload, signature) {
-    if (!secret || !eventPayload || !signature) {
-        throw new TypeError("[@octokit/webhooks-methods] secret, eventPayload & signature required");
-    }
-    const algorithm = getAlgorithm(signature);
-    return await crypto.subtle.verify("HMAC", await importKey(secret, algorithm), hexToUInt8Array(signature.replace(`${algorithm}=`, "")), enc.encode(eventPayload));
+  if (!secret || !eventPayload || !signature) {
+    throw new TypeError(
+      "[@octokit/webhooks-methods] secret, eventPayload & signature required"
+    );
+  }
+  const algorithm = getAlgorithm(signature);
+  return await crypto.subtle.verify(
+    "HMAC",
+    await importKey(secret, algorithm),
+    hexToUInt8Array(signature.replace(`${algorithm}=`, "")),
+    enc.encode(eventPayload)
+  );
 }
-
-export { sign, verify };
-//# sourceMappingURL=index.js.map
+export {
+  sign,
+  verify
+};

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/dist-web/index.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"index.js","sources":["../dist-src/types.js","../dist-src/utils.js","../dist-src/web.js"],"sourcesContent":["export var Algorithm;\n(function (Algorithm) {\n    Algorithm[\"SHA1\"] = \"sha1\";\n    Algorithm[\"SHA256\"] = \"sha256\";\n})(Algorithm || (Algorithm = {}));\n","export const getAlgorithm = (signature) => {\n    return signature.startsWith(\"sha256=\") ? \"sha256\" : \"sha1\";\n};\n","import { Algorithm } from \"./types\";\nimport { getAlgorithm } from \"./utils\";\nconst enc = new TextEncoder();\nfunction hexToUInt8Array(string) {\n    // convert string to pairs of 2 characters\n    const pairs = string.match(/[\\dA-F]{2}/gi);\n    // convert the octets to integers\n    const integers = pairs.map(function (s) {\n        return parseInt(s, 16);\n    });\n    return new Uint8Array(integers);\n}\nfunction UInt8ArrayToHex(signature) {\n    return Array.prototype.map\n        .call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, \"0\"))\n        .join(\"\");\n}\nfunction getHMACHashName(algorithm) {\n    return {\n        [Algorithm.SHA1]: \"SHA-1\",\n        [Algorithm.SHA256]: \"SHA-256\",\n    }[algorithm];\n}\nasync function importKey(secret, algorithm) {\n    // ref: https://developer.mozilla.org/en-US/docs/Web/API/HmacImportParams\n    return crypto.subtle.importKey(\"raw\", // raw format of the key - should be Uint8Array\n    enc.encode(secret), {\n        // algorithm details\n        name: \"HMAC\",\n        hash: { name: getHMACHashName(algorithm) },\n    }, false, // export = false\n    [\"sign\", \"verify\"] // what this key can do\n    );\n}\nexport async function sign(options, payload) {\n    const { secret, algorithm } = typeof options === \"object\"\n        ? {\n            secret: options.secret,\n            algorithm: options.algorithm || Algorithm.SHA256,\n        }\n        : { secret: options, algorithm: Algorithm.SHA256 };\n    if (!secret || !payload) {\n        throw new TypeError(\"[@octokit/webhooks-methods] secret & payload required for sign()\");\n    }\n    if (!Object.values(Algorithm).includes(algorithm)) {\n        throw new TypeError(`[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`);\n    }\n    const signature = await crypto.subtle.sign(\"HMAC\", await importKey(secret, algorithm), enc.encode(payload));\n    return `${algorithm}=${UInt8ArrayToHex(signature)}`;\n}\nexport async function verify(secret, eventPayload, signature) {\n    if (!secret || !eventPayload || !signature) {\n        throw new TypeError(\"[@octokit/webhooks-methods] secret, eventPayload & signature required\");\n    }\n    const algorithm = getAlgorithm(signature);\n    return await crypto.subtle.verify(\"HMAC\", await importKey(secret, algorithm), hexToUInt8Array(signature.replace(`${algorithm}=`, \"\")), enc.encode(eventPayload));\n}\n"],"names":[],"mappings":"AAAO,IAAI,SAAS,CAAC;AACrB,CAAC,UAAU,SAAS,EAAE;AACtB,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAC/B,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;AACnC,CAAC,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE,CAAC,CAAC;;ACJ1B,MAAM,YAAY,GAAG,CAAC,SAAS,KAAK;AAC3C,IAAI,OAAO,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC/D,CAAC,CAAC;;ACAF,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC;AACA,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAC/C;AACA,IAAI,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;AAC5C,QAAQ,OAAO,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,KAAK,CAAC,CAAC;AACP,IAAI,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,eAAe,CAAC,SAAS,EAAE;AACpC,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,GAAG;AAC9B,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChF,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AACD,SAAS,eAAe,CAAC,SAAS,EAAE;AACpC,IAAI,OAAO;AACX,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,OAAO;AACjC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS;AACrC,KAAK,CAAC,SAAS,CAAC,CAAC;AACjB,CAAC;AACD,eAAe,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE;AAC5C;AACA,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK;AACxC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;AACxB;AACA,QAAQ,IAAI,EAAE,MAAM;AACpB,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE;AAClD,KAAK,EAAE,KAAK;AACZ,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;AACtB,KAAK,CAAC;AACN,CAAC;AACD,AAAO,eAAe,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;AAC7C,IAAI,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,OAAO,KAAK,QAAQ;AAC7D,UAAU;AACV,YAAY,MAAM,EAAE,OAAO,CAAC,MAAM;AAClC,YAAY,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM;AAC5D,SAAS;AACT,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AAC3D,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE;AAC7B,QAAQ,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;AAChG,KAAK;AACL,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;AACvD,QAAQ,MAAM,IAAI,SAAS,CAAC,CAAC,8BAA8B,EAAE,SAAS,CAAC,8CAA8C,CAAC,CAAC,CAAC;AACxH,KAAK;AACL,IAAI,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAChH,IAAI,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AACD,AAAO,eAAe,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE;AAC9D,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE;AAChD,QAAQ,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;AACrG,KAAK;AACL,IAAI,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAC9C,IAAI,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AACrK,CAAC;;;;"}
+{
+  "version": 3,
+  "sources": ["../dist-src/types.js", "../dist-src/utils.js", "../dist-src/web.js"],
+  "sourcesContent": ["var Algorithm = /* @__PURE__ */ ((Algorithm2) => {\n  Algorithm2[\"SHA1\"] = \"sha1\";\n  Algorithm2[\"SHA256\"] = \"sha256\";\n  return Algorithm2;\n})(Algorithm || {});\nexport {\n  Algorithm\n};\n", "const getAlgorithm = (signature) => {\n  return signature.startsWith(\"sha256=\") ? \"sha256\" : \"sha1\";\n};\nexport {\n  getAlgorithm\n};\n", "import { Algorithm } from \"./types\";\nimport { getAlgorithm } from \"./utils\";\nconst enc = new TextEncoder();\nfunction hexToUInt8Array(string) {\n  const pairs = string.match(/[\\dA-F]{2}/gi);\n  const integers = pairs.map(function(s) {\n    return parseInt(s, 16);\n  });\n  return new Uint8Array(integers);\n}\nfunction UInt8ArrayToHex(signature) {\n  return Array.prototype.map.call(new Uint8Array(signature), (x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction getHMACHashName(algorithm) {\n  return {\n    [Algorithm.SHA1]: \"SHA-1\",\n    [Algorithm.SHA256]: \"SHA-256\"\n  }[algorithm];\n}\nasync function importKey(secret, algorithm) {\n  return crypto.subtle.importKey(\n    \"raw\",\n    // raw format of the key - should be Uint8Array\n    enc.encode(secret),\n    {\n      // algorithm details\n      name: \"HMAC\",\n      hash: { name: getHMACHashName(algorithm) }\n    },\n    false,\n    // export = false\n    [\"sign\", \"verify\"]\n    // what this key can do\n  );\n}\nasync function sign(options, payload) {\n  const { secret, algorithm } = typeof options === \"object\" ? {\n    secret: options.secret,\n    algorithm: options.algorithm || Algorithm.SHA256\n  } : { secret: options, algorithm: Algorithm.SHA256 };\n  if (!secret || !payload) {\n    throw new TypeError(\n      \"[@octokit/webhooks-methods] secret & payload required for sign()\"\n    );\n  }\n  if (!Object.values(Algorithm).includes(algorithm)) {\n    throw new TypeError(\n      `[@octokit/webhooks] Algorithm ${algorithm} is not supported. Must be  'sha1' or 'sha256'`\n    );\n  }\n  const signature = await crypto.subtle.sign(\n    \"HMAC\",\n    await importKey(secret, algorithm),\n    enc.encode(payload)\n  );\n  return `${algorithm}=${UInt8ArrayToHex(signature)}`;\n}\nasync function verify(secret, eventPayload, signature) {\n  if (!secret || !eventPayload || !signature) {\n    throw new TypeError(\n      \"[@octokit/webhooks-methods] secret, eventPayload & signature required\"\n    );\n  }\n  const algorithm = getAlgorithm(signature);\n  return await crypto.subtle.verify(\n    \"HMAC\",\n    await importKey(secret, algorithm),\n    hexToUInt8Array(signature.replace(`${algorithm}=`, \"\")),\n    enc.encode(eventPayload)\n  );\n}\nexport {\n  sign,\n  verify\n};\n"],
+  "mappings": ";AAAA,IAAI,YAA6B,kBAAC,eAAe;AAC/C,aAAW,MAAM,IAAI;AACrB,aAAW,QAAQ,IAAI;AACvB,SAAO;AACT,GAAG,aAAa,CAAC,CAAC;;;ACJlB,IAAM,eAAe,CAAC,cAAc;AAClC,SAAO,UAAU,WAAW,SAAS,IAAI,WAAW;AACtD;;;ACAA,IAAM,MAAM,IAAI,YAAY;AAC5B,SAAS,gBAAgB,QAAQ;AAC/B,QAAM,QAAQ,OAAO,MAAM,cAAc;AACzC,QAAM,WAAW,MAAM,IAAI,SAAS,GAAG;AACrC,WAAO,SAAS,GAAG,EAAE;AAAA,EACvB,CAAC;AACD,SAAO,IAAI,WAAW,QAAQ;AAChC;AACA,SAAS,gBAAgB,WAAW;AAClC,SAAO,MAAM,UAAU,IAAI,KAAK,IAAI,WAAW,SAAS,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC5G;AACA,SAAS,gBAAgB,WAAW;AAClC,SAAO;AAAA,IACL,CAAC,UAAU,IAAI,GAAG;AAAA,IAClB,CAAC,UAAU,MAAM,GAAG;AAAA,EACtB,EAAE,SAAS;AACb;AACA,eAAe,UAAU,QAAQ,WAAW;AAC1C,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA;AAAA,IAEA,IAAI,OAAO,MAAM;AAAA,IACjB;AAAA;AAAA,MAEE,MAAM;AAAA,MACN,MAAM,EAAE,MAAM,gBAAgB,SAAS,EAAE;AAAA,IAC3C;AAAA,IACA;AAAA;AAAA,IAEA,CAAC,QAAQ,QAAQ;AAAA;AAAA,EAEnB;AACF;AACA,eAAe,KAAK,SAAS,SAAS;AACpC,QAAM,EAAE,QAAQ,UAAU,IAAI,OAAO,YAAY,WAAW;AAAA,IAC1D,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ,aAAa,UAAU;AAAA,EAC5C,IAAI,EAAE,QAAQ,SAAS,WAAW,UAAU,OAAO;AACnD,MAAI,CAAC,UAAU,CAAC,SAAS;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,OAAO,SAAS,EAAE,SAAS,SAAS,GAAG;AACjD,UAAM,IAAI;AAAA,MACR,iCAAiC;AAAA,IACnC;AAAA,EACF;AACA,QAAM,YAAY,MAAM,OAAO,OAAO;AAAA,IACpC;AAAA,IACA,MAAM,UAAU,QAAQ,SAAS;AAAA,IACjC,IAAI,OAAO,OAAO;AAAA,EACpB;AACA,SAAO,GAAG,aAAa,gBAAgB,SAAS;AAClD;AACA,eAAe,OAAO,QAAQ,cAAc,WAAW;AACrD,MAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW;AAC1C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,aAAa,SAAS;AACxC,SAAO,MAAM,OAAO,OAAO;AAAA,IACzB;AAAA,IACA,MAAM,UAAU,QAAQ,SAAS;AAAA,IACjC,gBAAgB,UAAU,QAAQ,GAAG,cAAc,EAAE,CAAC;AAAA,IACtD,IAAI,OAAO,YAAY;AAAA,EACzB;AACF;",
+  "names": []
+}

package/lib/publishing/github/node_modules/@octokit/webhooks-methods/package.json

@@ -1,47 +1,58 @@
 {
   "name": "@octokit/webhooks-methods",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "3.0.3",
   "description": "Methods to handle GitHub Webhook requests",
-  "version": "3.0.1",
-  "license": "MIT",
-  "files": [
-    "dist-*/",
-    "bin/"
-  ],
-  "pika": true,
-  "sideEffects": false,
+  "repository": "github:octokit/webhooks-methods.js",
   "keywords": [
     "github",
     "api",
     "sdk",
     "toolkit"
   ],
-  "repository": "github:octokit/webhooks-methods.js",
-  "dependencies": {},
-  "peerDependencies": {},
+  "author": "Gregor Martynus (https://dev.to/gr2m)",
+  "license": "MIT",
   "devDependencies": {
-    "@gr2m/pika-plugin-build-web": "^0.6.0-issue-84.2",
     "@octokit/tsconfig": "^1.0.2",
-    "@pika/pack": "^0.5.0",
-    "@pika/plugin-build-node": "^0.9.2",
     "@pika/plugin-ts-standard-pkg": "^0.9.2",
     "@types/jest": "^29.0.0",
-    "@types/node": "^16.0.0",
+    "@types/node": "^18.0.0",
+    "esbuild": "^0.17.19",
+    "glob": "^10.2.6",
     "jest": "^29.0.0",
-    "prettier": "2.7.1",
-    "puppeteer": "^18.0.0",
-    "semantic-release": "^19.0.0",
+    "prettier": "2.8.8",
+    "puppeteer": "^20.0.0",
+    "semantic-release": "^21.0.0",
     "semantic-release-plugin-update-version-in-files": "^1.1.0",
     "ts-jest": "^29.0.0",
-    "typescript": "^4.2.4"
+    "typescript": "^5.0.0"
+  },
+  "jest": {
+    "preset": "ts-jest",
+    "coverageThreshold": {
+      "global": {
+        "statements": 100,
+        "branches": 100,
+        "functions": 100,
+        "lines": 100
+      }
+    },
+    "testPathIgnorePatterns": [
+      "<rootDir>/node_modules/",
+      "<rootDir>/test/deno/"
+    ]
   },
   "engines": {
     "node": ">= 14"
   },
-  "publishConfig": {
-    "access": "public"
-  },
-  "source": "dist-src/index.js",
-  "types": "dist-types/index.d.ts",
+  "files": [
+    "dist-*/**"
+  ],
   "main": "dist-node/index.js",
-  "module": "dist-web/index.js"
+  "browser": "dist-web/index.js",
+  "types": "dist-types/index.d.ts",
+  "module": "dist-src/index.js",
+  "sideEffects": false
 }

package/lib/publishing/github/node_modules/@octokit/webhooks-types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octokit/webhooks-types",
-  "version": "6.6.0",
+  "version": "6.11.0",
   "description": "Generated TypeScript definitions based on community contributed JSON Schemas",
   "keywords": [],
   "repository": "github:octokit/webhooks",