custom user agent header for TUF calls

Signed-off-by: Brian DeHamer <[email protected]>

Author: bdehamer

.changeset/fuzzy-cobras-unite.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/tuf': patch
+---
+
+Include a custom User-Agent header with fetch calls made to TUF repository

package-lock.json

@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "@sigstore/protobuf-specs": "^0.5.0",
-    "tuf-js": "^4.0.0"
+    "tuf-js": "^4.1.0"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"

packages/tuf/package.json

@@ -17,6 +17,7 @@ import fs from 'fs';
 import path from 'path';
 import { Config, Updater } from 'tuf-js';
 import { TUFError } from '.';
+import { name as packageName, version } from '../package.json';
 import { readTarget } from './target';
 
 import type { MakeFetchHappenOptions } from 'make-fetch-happen';
@@ -162,6 +163,7 @@ function initClient(
   const config: Partial<Config> = {
     fetchTimeout: options.timeout,
     fetchRetry: options.retry,
+    userAgent: `${encodeURIComponent(packageName)}/${version}`,
   };
 
   return new Updater({