SLSA GitHub Generator Files

What's Changed

• chore: v2.0.0: update tags to v2.0.0 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3584
• fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3572
• docs: fix broken links by @suzuki-shunsuke in https://github.com/slsa-framework/slsa-github-generator/pull/3605
• chore(setup-go): update actions/setup-go to resolve the warning by @suzuki-shunsuke in https://github.com/slsa-framework/slsa-github-generator/pull/3604
• fix: Update release docs by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3589
• docs: Add Atsign-Foundation NoPorts to the Hall of Fame by @cpswan in https://github.com/slsa-framework/slsa-github-generator/pull/3616
• docs: Add v2.0.0 to SECURITY.md by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3630
• docs: Add links to CHANGELOG by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3631
• ci: fix PR title checker by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3632
• ci: Add issue reopener by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3629
• fix: update softprops/action-gh-release to v2.0.5 by @suzuki-shunsuke in https://github.com/slsa-framework/slsa-github-generator/pull/3619
• chore(renovate): use cron syntax for schedule by @rarkins in https://github.com/slsa-framework/slsa-github-generator/pull/3638
• chore: Fix Renovate config by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3635
• feat: workflow to update actions dist by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3653
• fix(deps): update dependency @sigstore/rekor-types to v2 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3650
• chore(deps): update github-actions (major) by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3648
• fix(deps): update dependency org.json:json to v20231013 [security] by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3641
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3640
• chore(deps): update dependency pathspec to v0.12.1 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3644
• fix(deps): update dependency @actions/github to v6 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3649
• fix(deps): update module golang.org/x/oauth2 to v0.20.0 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3646
• fix(deps): update npm by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3647
• chore: formatting by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3655
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3642
• docs: Add openfga as another user of slsa-github-generator via Github Actions by @aaguiarz in https://github.com/slsa-framework/slsa-github-generator/pull/2950
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3645
• chore: allow Renovate to create new config warning issues by @HonkingGoose in https://github.com/slsa-framework/slsa-github-generator/pull/3662
• chore: Fix markdown issues by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3658
• chore(deps): update npm dev by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3643
• feat: Record vars in SLSA generators by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3633
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3679
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.7 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3680
• docs: Remove expected GA for Node.js builder by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3659
• ci: Add formatting pre-submit check by @ianlewis in https://github.com/slsa-framework/slsa-github-generator/pull/3654
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.8 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3712
• chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/3714
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3711
• chore(deps): bump the go_modules group with 2 updates by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/3715
• chore: slsa-verifier v2.6.0: Update action.yml by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3736
• fix: Update maven helper plugin build by @loosebazooka in https://github.com/slsa-framework/slsa-github-generator/pull/3746
• fix: maven e2e: remove verify job by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3748
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3753
• chore(deps): bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible in the go_modules group by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/3760
• chore(config): migrate renovate config by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3774
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.10.1 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3758
• chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.3 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3820
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.5 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3757
• fix(deps): update npm by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3754
• chore: go1.23.1 golangci lint 1.6.1 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3940
• feat: produce sigstore Bundles for generic generator and go builder workflows by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3777
• revert: "feat: produce sigstore Bundles for generic generator and go builder workflows" by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/3985
• fix(deps): update go by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3930
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.15.1 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3929
• chore(deps): update dependency yamllint to v1.35.1 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3838
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.9 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4013
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.9 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4012
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3991
• chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.15.1 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3821
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/3996
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/4022
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3992
• fix: revert softprops/action-gh-release to v2.1.0 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4036
• chore(deps): update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4040
• chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4039
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.2 by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4038
• fix: update pre-submit to ubuntu24 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4080
• chore(deps): update github-actions by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4041
• fix: use node 22 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4081
• chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in the go_modules group by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/4082
• chore(deps): bump the npm_and_yarn group across 1 directory with 1 update by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/3873
• chore(deps): bump the npm_and_yarn group across 8 directories with 3 updates by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/4083
• chore(deps): update npm dev by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/3839
• chore(deps): bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group across 1 directory by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/4085
• chore: update to slsa-verifier v2.7.0 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4089
• feat: add bundle support by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4088
• chore(deps): update npm dev by @renovate-bot in https://github.com/slsa-framework/slsa-github-generator/pull/4113
• chore(deps): bump the npm_and_yarn group across 8 directories with 2 updates by @dependabot in https://github.com/slsa-framework/slsa-github-generator/pull/4112
• chore: update octokit deps by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4114
• chore: Update CODEOWNERS by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4115
• chore: braces and ejs vulns by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4116
• chore: use builder tag v2.1.0-rc.0 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4118
• chore: update refs to v2.1.0-rc.1 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4120
• chore: update refs to v2.1.0-rc.3 by @ramonpetgrave64 in https://github.com/slsa-framework/slsa-github-generator/pull/4123

New Contributors

• @cpswan made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/3616
• @aaguiarz made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/2950
• @HonkingGoose made their first contribution in https://github.com/slsa-framework/slsa-github-generator/pull/3662

Full Changelog: https://github.com/slsa-framework/slsa-github-generator/compare/v2.0.0...v2.1.0