Drop Node 20 (#1670)

* "feat!: drop support for Node 20"

BREAKING CHANGE: drop support for Node 20

Signed-off-by: Michael Smith <owlstronaut@github.com>

* deps: make-fetch-happen@16

Signed-off-by: Michael Smith <owlstronaut@github.com>

* deps: proc-log@7

Signed-off-by: Michael Smith <owlstronaut@github.com>

* fix(test): transform ESM-only proxy-agent deps in Jest

make-fetch-happen@16 pulls in @npmcli/agent@5, which depends on
ESM-only http-proxy-agent@9, https-proxy-agent@9, socks-proxy-agent@10,
and agent-base@7. Jest's CommonJS runtime can't require() them, so any
test importing make-fetch-happen failed with 'Cannot use import
statement outside a module'.

Extend @swc/jest to .js files and add a transformIgnorePatterns
override so those packages are transformed instead of skipped under
node_modules/.

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* bump tuf-js packages

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: Michael Smith <owlstronaut@github.com>
Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: Michael Smith <owlstronaut@github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: 3 people

.changeset/clean-beers-grow.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/mock-server': patch
+---
+
+Bump `@tuf-js\repo-mock` from 4.0.1 to 5.0.0

.changeset/drop-node-20-internal.md

@@ -0,0 +1,9 @@
+---
+'@sigstore/conformance': minor
+'@sigstore/mock-server': minor
+'@sigstore/mock': minor
+'@sigstore/cli': minor
+'@sigstore/oci': minor
+---
+
+Drop support for Node 20

.changeset/drop-node-20.md

@@ -0,0 +1,11 @@
+---
+'@sigstore/rekor-types': major
+'@sigstore/bundle': major
+'sigstore': major
+'@sigstore/verify': major
+'@sigstore/core': major
+'@sigstore/sign': major
+'@sigstore/tuf': major
+---
+
+Drop support for Node 20

.changeset/loud-moments-tan.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': patch
+---
+
+Bump `tuf-js` from 5.0.1 to 6.0.0

.changeset/mfh-16-oci.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/oci': minor
+---
+
+Bump make-fetch-happen from 15.x to 16.x

.changeset/mfh-16-sign.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/sign': major
+---
+
+Bump make-fetch-happen from 15.x to 16.x

.changeset/proc-log-7.md

@@ -0,0 +1,6 @@
+---
+'@sigstore/sign': major
+'@sigstore/oci': minor
+---
+
+Bump proc-log from 6.x to 7.x

.github/workflows/ci.yml

@@ -36,10 +36,11 @@ jobs:
       fail-fast: false
       matrix:
         node-version:
-          - 20.17.0
-          - 20.x
-          - 22.9.0
+          - 22.22.2
           - 22.x
+          - 24.15.0
+          - 24.x
+          - 26.x
         platform:
           - os: ubuntu-latest
             shell: bash

.github/workflows/compatibility-check.yml

@@ -23,7 +23,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v3
       with:
-        node-version: 20
+        node-version: 22
         cache: npm
     - name: Install CLI
       run: npm install -g @sigstore/cli

.github/workflows/smoke-test.yml

@@ -23,7 +23,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
-        node-version: 20
+        node-version: 22
         cache: npm
     - name: Install dependencies
       run: npm ci
@@ -61,7 +61,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
-        node-version: 20
+        node-version: 22
         cache: npm
     - name: Install dependencies
       run: npm ci
@@ -114,7 +114,7 @@ jobs:
     - name: Setup node
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
-        node-version: 20
+        node-version: 22
         cache: npm
     - name: Install dependencies
       run: npm ci