Merge pull request #1056 from pypa/dependabot/github_actions/slsa-framework/slsa-github-generator-1.9.0

Bump slsa-framework/slsa-github-generator from 1.5.0 to 1.9.0

Author: sigmavirus24

.github/workflows/release.yml

@@ -53,7 +53,7 @@ jobs:
       actions: read
       contents: write
       id-token: write # Needed to access the workflow's OIDC identity.
-    uses: "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.5.0"
+    uses: "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.9.0"
     with:
       base64-subjects: "${{ needs.build.outputs.hashes }}"
       upload-assets: true