chore(deps): update slsa-framework/slsa-github-generator action to v1.4.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
slsa-framework/slsa-github-generator	action	minor	v1.2.2 -> v1.4.0

---

Release Notes

slsa-framework/slsa-github-generator

v1.4.0

Compare Source

What's Changed

🥳 This release is the first Generally Available version of the Container Generator workflow. The Container Generator workflow is now considered stable and can be included in your production GitHub Actions workflows 🥳

🎉 This is also the first release (technically the second) with support for the generally available version of sigstore!! 🎉
We hope to have fewer issues with sigstore infrastructure moving forward.

Generic Generator

Bug fixes

1. Allow users of the Generic Generator to generate provenance for artifacts created in a project subdirectory (#​1225)

Go Builder

Bug fixes

1. Allow environment variables to contain '=' characters in the Go builder (#​1231)

New Contributors

• @​cfergeau made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/1232
• @​DanAlbert made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/1239
• @​gal-legit made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/1252

Full Changelog

• Update references to main after v1.2.2 release by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1228
• [generic] fix attestation file creation when subject names are in subdirectories by @​asraa in https://github.com/slsa-framework/slsa-github-generator/pull/1226
• Update docs to use v1.2.2 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1229
• Update RELEASE docs by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1227
• chore(deps): update npm dev to v5.43.0 by @​renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/1230
• builder: go: Allow equal signs in env vars by @​cfergeau in https://github.com/slsa-framework/slsa-github-generator/pull/1232
• Ko example by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/951
• docs(generic-generator): clarify that created provenance is encapsulated by @​diogoteles08 in https://github.com/slsa-framework/slsa-github-generator/pull/1235
• Fix semver regex in actions pre-submit by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1233
• Fix typo in doc. by @​DanAlbert in https://github.com/slsa-framework/slsa-github-generator/pull/1239
• Fix reference Gradle workflow. by @​DanAlbert in https://github.com/slsa-framework/slsa-github-generator/pull/1240
• Start code freeze for v1.3.0 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1248
• Undo the v1.3.0 freeze by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1260
• Badges and README updates by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1263
• Fix docs for goreleaser with the generic generator to include docker di… by @​gal-legit in https://github.com/slsa-framework/slsa-github-generator/pull/1252
• Fix grep by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1249
• Exclude go from renovate PR grouping by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1268
• chore(deps): update npm dev by @​renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/1243
• Fix permissions in doc by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1247
• chore(deps): update github-actions by @​renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/1242
• Update GHA token permissions for generic container workflow by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1258
• fix(deps): update go by @​renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/1205
• Update references check to support pre-release by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1270
• Restore compile-builder pre-submit by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1272
• Code freeze v1.4.0 rc.0 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1271
• undo freeze by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1284
• Revert package perms by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1283
• Code freeze for v1.4.0-rc.1 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1285
• Undo freeze for v1.4.0-rc.1 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1288
• Update generate-builder tag check to support pre-releases by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1287
• refactor: Update refs to v1.4.0-rc.2 by @​ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/1290

v1.3.0

Compare Source

🚨 ⚠️ This is a release and tag that was created as a pre-release for testing purposes and is not supported. DO NOT UPGRADE. If you have already upgraded please downgrade to v1.2.2 ⚠️ 🚨

See: #​1250

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Prague, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information