chore(deps): update slsa-framework/slsa-verifier action to v2.6.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
slsa-framework/slsa-verifier	action	minor	v2.4.1 -> v2.6.0

---

Release Notes

slsa-framework/slsa-verifier (slsa-framework/slsa-verifier)

v2.6.0

Compare Source

What's Changed

• chore: Update doc and digests for v2.5.1 by @​laurentsimon in https://github.com/slsa-framework/slsa-verifier/pull/748
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/743
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.6 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/718
• chore: Update @​actions/github v6 by @​laurentsimon in https://github.com/slsa-framework/slsa-verifier/pull/749
• fix: use sigstore/pkg/fulcioroots to lessen deps by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/746
• feat: add ramonpetgrave64 as CODEOWNER by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/750
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 1a8ece8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/701
• chore(deps): update github-actions (major) by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/719
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/751
• chore(deps): update npm dev (major) by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/753
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.11.0 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/752
• feat: fixes #​547: add npm sigstore-tuf suport by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/731
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/723
• chore(deps): update golang:1.21 docker digest to 81811f8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/693
• chore: slsa-framework/[email protected]: add testdata by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/758
• chore(deps): update golang:1.21 docker digest to d83472f by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/764
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 53745e9 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/763
• feat: workflow to update actions dist by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/760
• fix(deps): update dependency @​actions/core to v1.10.1 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/717
• chore: fix pr-title-checker by @​ianlewis in https://github.com/slsa-framework/slsa-verifier/pull/770
• chore: Update Renovate config by @​ianlewis in https://github.com/slsa-framework/slsa-verifier/pull/769
• fix: use pr_number as env variable by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/771
• fix: signoff commit by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/767
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/781
• chore(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/782
• chore(deps): bump undici from 5.28.3 to 5.28.4 in /actions/installer by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/779
• chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /actions/installer by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/780
• chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/784
• fix(deps): update golang.org/x/exp digest to 7f521ea by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/775
• fix: make download-artifacts.sh more flexible by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/761
• chore(deps): update golang:1.21 docker digest to b405b62 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/774
• chore(deps): update npm dev by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/650
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/787
• chore(deps): update github-actions by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/786
• feat: vsa support by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/777
• fix: use tag for the builder in the release workflow by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/788

Full Changelog: slsa-framework/slsa-verifier@v2.5.1...v2.6.0

v2.5.1

Compare Source

What's Changed

• feat: Add cosign registry opts for provenance registry by @​saisatishkarra in https://github.com/slsa-framework/slsa-verifier/pull/729 and https://github.com/slsa-framework/slsa-verifier/pull/736
• feat: Add support for DSSE Rekor type by @​haydentherapper in https://github.com/slsa-framework/slsa-verifier/pull/742

New Contributors

• @​saisatishkarra made their first contribution in https://github.com/slsa-framework/slsa-verifier/pull/729
• @​ramonpetgrave64 made their first contribution in https://github.com/slsa-framework/slsa-verifier/pull/737
• @​haydentherapper made their first contribution in https://github.com/slsa-framework/slsa-verifier/pull/742

Full Changelog: slsa-framework/slsa-verifier@v2.4.1...v2.5.1