build: update slsa-framework/slsa-github-generator action to v1.9.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
slsa-framework/slsa-github-generator	action	minor	v1.6.0 -> v1.9.0

---

Release Notes

slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)

v1.9.0

Compare Source

Release [v1.9.0] includes bug fixes and new features.

See the full change list.

v1.9.0: BYOB framework (beta)

• New: A new framework to turn GitHub Actions into SLSA compliant builders.

v1.9.0: Maven builder (beta)

• New: A Maven builder to build Java projects and publish to Maven central.

v1.9.0: Gradle builder (beta)

• New: A Gradle builder to build Java projects and publish to Maven central.

v1.9.0: JReleaser builder

• New: A JReleaser builder that wraps the official JReleaser Action.

v1.8.0

Compare Source

Release [v1.8.0] includes bug fixes and new features.

See the full change list.

v1.8.0: Generic Generator

• Added: A new
  base64-subjects-as-file
  was added to allow for specifying a large subject list.

v1.8.0: Node.js Builder (beta)

• Fixed: Publishing for non-scoped packages was fixed (See
  #​2359)
• Fixed: Documentation was updated to clarify that the GitHub Actions
  deployment event is not supported.
• Changed: The file extension for the generated provenance file was changed
  from .sigstore to .build.slsa in order to make it easier to identify
  provenance files regardless of file format.
• Fixed: The publish action was fixed to address an issue with the package
  name when using Node 16.

v1.7.0

Compare Source

This release includes the first beta release of the
Container-based builder.
The Container-based builder provides a GitHub Actions reusable workflow that can
be used to invoke a container image with a user-specified command to generate an
artifact and SLSA Build L3 compliant provenance.

v1.7.0: Go builder

• Added: A new
  go-version-file
  input was added. This allows you to specify a go.mod file in order to track
  which version of Go is used for your project.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.