Bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0 (#3385)

* Bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0

Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.10.0 to 2.0.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](slsa-framework/slsa-github-generator@v1.10.0...v2.0.0)

---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update rest of workflow

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Quentin Pradet <[email protected]>

.github/workflows/publish.yml

@@ -43,7 +43,7 @@ jobs:
  cd dist && echo "hashes=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
 
  - name: "Upload dists"
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: "dist"
  path: "dist/"
@@ -56,11 +56,10 @@ jobs:
  actions: read
  contents: write
  id-token: write # Needed to access the workflow's OIDC identity.
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
+ uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
  with:
  base64-subjects: "${{ needs.build.outputs.hashes }}"
  upload-assets: true
- compile-generator: true # Workaround for https://github.com/slsa-framework/slsa-github-generator/issues/1163
 
  publish-to-pypi-and-github:
  name: "Publish to PyPI"
@@ -75,7 +74,7 @@ jobs:
 
  steps:
  - name: "Download dists"
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+ uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
  with:
  name: "dist"
  path: "dist/"