chore(deps): update dependency slsa-framework/slsa-verifier to v2.6.0

[renovate]

This PR contains the following updates:

Package	Update	Change
slsa-framework/slsa-verifier	minor	v2.5.1 -> v2.6.0

---

Release Notes

slsa-framework/slsa-verifier (slsa-framework/slsa-verifier)

v2.6.0

Compare Source

What's Changed

• chore: Update doc and digests for v2.5.1 by @​laurentsimon in https://github.com/slsa-framework/slsa-verifier/pull/748
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/743
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.6 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/718
• chore: Update @​actions/github v6 by @​laurentsimon in https://github.com/slsa-framework/slsa-verifier/pull/749
• fix: use sigstore/pkg/fulcioroots to lessen deps by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/746
• feat: add ramonpetgrave64 as CODEOWNER by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/750
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 1a8ece8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/701
• chore(deps): update github-actions (major) by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/719
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/751
• chore(deps): update npm dev (major) by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/753
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.11.0 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/752
• feat: fixes #​547: add npm sigstore-tuf suport by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/731
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/723
• chore(deps): update golang:1.21 docker digest to 81811f8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/693
• chore: slsa-framework/slsa-github-generator@v2.0.0: add testdata by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/758
• chore(deps): update golang:1.21 docker digest to d83472f by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/764
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 53745e9 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/763
• feat: workflow to update actions dist by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/760
• fix(deps): update dependency @​actions/core to v1.10.1 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/717
• chore: fix pr-title-checker by @​ianlewis in https://github.com/slsa-framework/slsa-verifier/pull/770
• chore: Update Renovate config by @​ianlewis in https://github.com/slsa-framework/slsa-verifier/pull/769
• fix: use pr_number as env variable by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/771
• fix: signoff commit by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/767
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/781
• chore(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/782
• chore(deps): bump undici from 5.28.3 to 5.28.4 in /actions/installer by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/779
• chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /actions/installer by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/780
• chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/784
• fix(deps): update golang.org/x/exp digest to 7f521ea by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/775
• fix: make download-artifacts.sh more flexible by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/761
• chore(deps): update golang:1.21 docker digest to b405b62 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/774
• chore(deps): update npm dev by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/650
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.8 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/787
• chore(deps): update github-actions by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/786
• feat: vsa support by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/777
• fix: use tag for the builder in the release workflow by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/788

Full Changelog: slsa-framework/slsa-verifier@v2.5.1...v2.6.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.