chore(deps): bump pacote from 15.2.0 to 17.0.4

[dependabot[bot]]

Bumps pacote from 15.2.0 to 17.0.4.

Release notes

Sourced from pacote's releases.

v17.0.4

17.0.4 (2023-08-30)

Dependencies

• ba8f790 #309 bump @​npmcli/promise-spawn from 6.0.2 to 7.0.0
• 2c0d3ae #308 bump @​npmcli/run-script from 6.0.2 to 7.0.0

v17.0.3

17.0.3 (2023-08-24)

Dependencies

• ace7c28 #305 bump npm-packlist from 7.0.4 to 8.0.0

v17.0.2

17.0.2 (2023-08-18)

Dependencies

• c3b892d #303 bump sigstore from 1.3.0 to 2.0.0

v17.0.1

17.0.1 (2023-08-15)

Dependencies

• 6ddae13 #302 bump npm-registry-fetch from 15.0.0 to 16.0.0
• 42bf787 #300 bump npm-pick-manifest from 8.0.2 to 9.0.0

v17.0.0

17.0.0 (2023-08-15)

⚠️ BREAKING CHANGES

• support for node <=16.13 has been removed

Bug Fixes

• 2db2fb5 #296 drop node 16.13.x support (@​lukekarrys)

Dependencies

• e9e964b #299 bump read-package-json from 6.0.4 to 7.0.0
• 5d26500 #298 bump npm-package-arg from 10.1.0 to 11.0.0
• d13bb9c #294 bump @​npmcli/git from 4.1.0 to 5.0.0
• 7a25e39 #293 bump cacache from 17.1.4 to 18.0.0

v16.0.0

16.0.0 (2023-07-28)

... (truncated)

Changelog

Sourced from pacote's changelog.

17.0.4 (2023-08-30)

Dependencies

• ba8f790 #309 bump @​npmcli/promise-spawn from 6.0.2 to 7.0.0
• 2c0d3ae #308 bump @​npmcli/run-script from 6.0.2 to 7.0.0

17.0.3 (2023-08-24)

Dependencies

• ace7c28 #305 bump npm-packlist from 7.0.4 to 8.0.0

17.0.2 (2023-08-18)

Dependencies

• c3b892d #303 bump sigstore from 1.3.0 to 2.0.0

17.0.1 (2023-08-15)

Dependencies

• 6ddae13 #302 bump npm-registry-fetch from 15.0.0 to 16.0.0
• 42bf787 #300 bump npm-pick-manifest from 8.0.2 to 9.0.0

17.0.0 (2023-08-15)

⚠️ BREAKING CHANGES

• support for node <=16.13 has been removed

Bug Fixes

• 2db2fb5 #296 drop node 16.13.x support (@​lukekarrys)

Dependencies

• e9e964b #299 bump read-package-json from 6.0.4 to 7.0.0
• 5d26500 #298 bump npm-package-arg from 10.1.0 to 11.0.0
• d13bb9c #294 bump @​npmcli/git from 4.1.0 to 5.0.0
• 7a25e39 #293 bump cacache from 17.1.4 to 18.0.0

16.0.0 (2023-07-28)

⚠️ BREAKING CHANGES

• the underlying fetch module now uses @npmcli/agent. Backwards compatibility should be fully implemented but due to the scope of this change it was made a breaking change out of an abundance of caution.
• support for node 14 has been removed

... (truncated)

Commits

• 18e760f chore: release 17.0.4
• ba8f790 deps: bump @​npmcli/promise-spawn from 6.0.2 to 7.0.0
• 2c0d3ae deps: bump @​npmcli/run-script from 6.0.2 to 7.0.0
• 7aa2062 chore: release 17.0.3
• ace7c28 deps: bump npm-packlist from 7.0.4 to 8.0.0
• f1efd0c chore: release 17.0.2
• c3b892d deps: bump sigstore from 1.3.0 to 2.0.0
• c75d7d5 chore: release 17.0.1
• 6ddae13 deps: bump npm-registry-fetch from 15.0.0 to 16.0.0
• 42bf787 deps: bump npm-pick-manifest from 8.0.2 to 9.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)