Skip to content

dependabot: bump @types/jasmine from 5.1.8 to 6.0.0 - #14

Open
dependabot[bot] wants to merge 6 commits into
gcp-validation-ci-cdfrom
dependabot/npm_and_yarn/types/jasmine-6.0.0
Open

dependabot: bump @types/jasmine from 5.1.8 to 6.0.0#14
dependabot[bot] wants to merge 6 commits into
gcp-validation-ci-cdfrom
dependabot/npm_and_yarn/types/jasmine-6.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps @types/jasmine from 5.1.8 to 6.0.0.

Commits

vipulwalunj and others added 3 commits May 11, 2026 10:45
- Route /key and /unwrapKey to GCP validation path when attestationType=gcp
- GcpAttestationValidation uses snp_attestation.verifySnpAttestation (real
  SNP binary verification, same CCF built-in as Azure) against a separate
  gcpKeyReleasePolicyMap so Azure and GCP governance are fully independent
- Add GCP_VCPU_MEASUREMENTS (13 vCPU-count → SHA-384 measurement entries)
  and GCP_VALID_MEASUREMENTS to VtpmAttestation.ts for use in governance
  proposals (set_gcp_key_release_policy x-ms-sevsnpvm-launchmeasurement)
- Add set_gcp_key_release_policy.js CCF governance action mirroring the
  Azure action but writing to public:policies.gcp_key_release
- 25 unit tests (64 total passing): measurement table format/uniqueness,
  policy validation via KeyReleasePolicy, routing path confirmation
- Update docs/gcp_attestation_changes.md with full architecture, measurement
  table, governance proposal examples, and updated TODO list

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 22, 2026
prathmeshj1729 and others added 3 commits July 21, 2026 14:13
- For JWT validation Policy now it adds google service account in allowlist
- Key is released only if service account is there in allowlist
- #TODO- Add image digest in key release policy
Bumps [@types/jasmine](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jasmine) from 5.1.8 to 6.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jasmine)

---
updated-dependencies:
- dependency-name: "@types/jasmine"
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from main to gcp-validation-ci-cd July 21, 2026 09:30
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/types/jasmine-6.0.0 branch from 59709b8 to 8b0e239 Compare July 21, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants