fix: restore nightly provenance updater

.github/workflows/provenance-nightly.yml

@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: stella/.github/.github/workflows/provenance-update.yml@6631cf09bd4cae1e86a8b049e7a51973cda031cb
+    uses: stella/.github/.github/workflows/provenance-update.yml@cbcba03b6492bbc8a29da0bf2416b01431c4d90a
     secrets: inherit
     with:
       install-command: bun install --frozen-lockfile

bunfig.toml

@@ -2,3 +2,10 @@
 # 5-day quarantine: reject package versions published
 # less than 5 days ago to mitigate supply chain attacks.
 minimumReleaseAge = 432_000
+minimumReleaseAgeExcludes = [
+  "@stll/aho-corasick-darwin-x64",
+  "@stll/aho-corasick-darwin-arm64",
+  "@stll/aho-corasick-linux-x64-gnu",
+  "@stll/aho-corasick-linux-arm64-gnu",
+  "@stll/aho-corasick-wasm32-wasi",
+]

provenance/THIRD-PARTY-NOTICES.txt

@@ -7,7 +7,6 @@ This file is a generated inventory of detected third-party components and declar
 Some licenses may require additional attribution text or redistribution steps.
 
 Project: root
-- @napi-rs/wasm-runtime 1.1.1 — MIT
 - aho-corasick 1.1.4 — MIT OR Unlicense
 - bitflags 2.11.0 — Apache-2.0 OR MIT
 - cfg-if 1.0.4 — Apache-2.0 OR MIT

provenance/report.json

@@ -11,7 +11,7 @@
       ],
       "sbom": "sbom.cdx.json",
       "notice": "THIRD-PARTY-NOTICES.txt",
-      "dependencies_with_licenses": 44
+      "dependencies_with_licenses": 43
     }
   ],
   "containers": []

provenance/sbom.cdx.json

@@ -1990,75 +1990,6 @@
       "type": "library",
       "version": "1.0.21"
     },
-    {
-      "authors": [
-        {
-          "name": "LongYinan (https://github.com/Brooooooklyn)"
-        }
-      ],
-      "bom-ref": "pkg:npm/@napi-rs/wasm-runtime@1.1.1",
-      "description": "Runtime and polyfill for wasm targets",
-      "evidence": {
-        "identity": [
-          {
-            "concludedValue": "node_modules/@napi-rs/wasm-runtime/package.json",
-            "confidence": 0.7,
-            "field": "purl",
-            "methods": [
-              {
-                "confidence": 0.7,
-                "technique": "manifest-analysis",
-                "value": "node_modules/@napi-rs/wasm-runtime/package.json"
-              }
-            ]
-          }
-        ],
-        "occurrences": [
-          {
-            "location": "npm/wasm32-wasi/wasi-worker-browser.mjs#1"
-          },
-          {
-            "location": "npm/wasm32-wasi/wasi-worker.mjs#9"
-          },
-          {
-            "location": "wasi-worker-browser.mjs#1"
-          },
-          {
-            "location": "wasi-worker.mjs#9"
-          }
-        ]
-      },
-      "externalReferences": [
-        {
-          "type": "website",
-          "url": "https://napi.rs/"
-        },
-        {
-          "type": "vcs",
-          "url": "git+https://github.com/napi-rs/napi-rs.git"
-        }
-      ],
-      "group": "@napi-rs",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT",
-            "url": "https://opensource.org/licenses/MIT"
-          }
-        }
-      ],
-      "name": "wasm-runtime",
-      "properties": [
-        {
-          "name": "SrcFile",
-          "value": "node_modules/@napi-rs/wasm-runtime/package.json"
-        }
-      ],
-      "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.1.1",
-      "scope": "required",
-      "type": "library",
-      "version": "1.1.1"
-    },
     {
       "authors": [
         {