Update golang digest to 9349ed8

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
golang	stage	digest	a452d62 -> 9349ed8

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox. ⚠ Warning: custom changes will be lost.

---

This PR has been generated by Mend Renovate. View repository job log here.

[naveensrinivasan]

Updating the Dockerfile to a version different from the GitHub action that tests run could have discrepancies.

To be consistent, both GitHub actions and the Docker build must have the same Go version.

In this PR it will upgrade the Docker container but the Action that runs the tests aren't upgraded.

[laurentsimon]

we need to update the container first and then updates the calls to ./actions/detect-workflow. It's described in https://github.com/slsa-framework/slsa-github-generator/blob/main/.github/actions/README.md

Renovatebot will ask us to bump the detect-workflow hash this week end.

@naveensrinivasan is there something specific you wanted to address in this PR?

[naveensrinivasan]

we need to update the container first and then updates the calls to ./actions/detect-workflow. It's described in https://github.com/slsa-framework/slsa-github-generator/blob/main/.github/actions/README.md

Renovatebot will ask us to bump the detect-workflow hash this week end.

@naveensrinivasan is there something specific you wanted to address in this PR?

👍

[ianlewis]

@rarkins BTW, is it possible for the renovate bot to maintain # tag=x.x comments in Dockerfiles too? Maybe with a comment on the proceding line of a FROM?

[ianlewis]

Also, just a reminder that we should make sure to check the digest is documented here before merging. See #592

I verified that this is the sha for 1.18.4