Merge pull request #1091 from pypa/dependabot/github_actions/slsa-framework/slsa-github-generator-2.0.0

build(deps): bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0

Author: sigmavirus24

.github/workflows/release.yml

@@ -53,7 +53,7 @@ jobs:
       actions: read
       contents: write
       id-token: write # Needed to access the workflow's OIDC identity.
-    uses: "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0"
+    uses: "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0"
     with:
       base64-subjects: "${{ needs.build.outputs.hashes }}"
       upload-assets: true