Bump slsa-framework/slsa-github-generator from 1.9.0 to 1.9.1

[dependabot[bot]]

Bumps slsa-framework/slsa-github-generator from 1.9.0 to 1.9.1.

Release notes

Sourced from slsa-framework/slsa-github-generator's releases.

v1.9.1

This is an un-finalized release.

See the CHANGELOG for details.

v1.9.1-rc.0

See the CHANGELOG for details.

Changelog

Sourced from slsa-framework/slsa-github-generator's changelog.

CHANGELOG

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

• Unreleased
  • Unreleased: Breaking Change: attestation-name Workflow Input and Output
  • Unreleased: Gradle Builder
  • Unreleased: Go Builder
  • Unreleased: Container Generator
• v1.9.0
  • v1.9.0: BYOB framework (https://github.com/slsa-framework/slsa-github-generator/blob/main/beta)
  • v1.9.0: Maven builder (https://github.com/slsa-framework/slsa-github-generator/blob/main/beta)
  • v1.9.0: Gradle builder (https://github.com/slsa-framework/slsa-github-generator/blob/main/beta)
  • v1.9.0: JReleaser builder
• v1.8.0
  • v1.8.0: Generic Generator
  • v1.8.0: Node.js Builder (https://github.com/slsa-framework/slsa-github-generator/blob/main/beta)
• v1.7.0
  • v1.7.0: Go builder
• v1.6.0
  • Summary of changes
    • Go builder
      • New Features
    • Generic generator
      • New Features
    • Container generator
  • Changelog since v1.5.0
• v1.5.0
  • Summary of changes
    • Go builder
      • New Features
    • Generic generator
      • New Features
    • Container generator
      • New Features
  • Changelog since v1.4.0
• v1.4.0
  • What's Changed
    • Generic Generator
      • Bug fixes
    • Go Builder
      • Bug fixes
  • New Contributors

... (truncated)

Commits

• a2540a1 chore: Update changelog for #3350 (#3401)
• 90f2eb1 chore: Revert "fix: upload-artifact and download-artifact v4" (#3398)
• 1fee7c6 fix: Bump Cosign to latest v2.2.3 (#3355)
• b595e06 fix: upload-artifact and download-artifact v4 (#3312)
• e64a212 fix: remove attestation-name input and output (#3313)
• a66d8c0 feat: Create pull_request_template.md (#3268)
• 5f89252 docs: Update changelog with unreleased changes (#3263)
• 52372c6 chore: Upgrade TypeScript actions to Node 20 (#3264)
• b097318 fix: gradle builds (#3250)
• a39709d docs: Add guide for multiple operating systems (#3257)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)