fix: Update slsa-verifier version (#689)

<!-- markdownlint-disable first-line-h1 -->

**Description:**

Updates the `slsa-verifier` version used to verify the `todos` release.


**Related Issues:**

Fixes #688 

**Checklist:**

- [x] Review the [CONTRIBUTING.md](../blob/main/CONTRIBUTING.md)
documentation.
- [x] Add a reference to a related issue in the repository.
- [x] Add a description of the changes proposed in the pull request.
- [x] Add unit tests if applicable.
- [x] Update documentation if applicable.
- [x] Add a note in the [CHANGELOG.md](../blob/main/CHANGELOG.md) if
applicable.
- [x] Sign the [Google
CLA](https://cla.developers.google.com/about/google-corporate).

---------

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## X.Y.Z
+
+### Fixed in X.Y.Z
+
+- Fixed the "error updating to TUF remote mirror: invalid key" error
+  ([#688](https://github.com/ianlewis/todo-issue-reopener/issues/688)).
+
 ## [1.2.0] - 2024-02-21
 
 ### Fixed in 1.2.0

dist/index.js

@@ -266,8 +266,9 @@ const github = __importStar(__nccwpck_require__(5438));
 const verifier = __importStar(__nccwpck_require__(5854));
 const process_1 = __nccwpck_require__(7282);
 const TODOS_VERSION = "v0.8.0";
-const SLSA_VERIFIER_VERSION = "v2.3.0";
-const SLSA_VERIFIER_SHA256SUM = "ea687149d658efecda64d69da999efb84bb695a3212f29548d4897994027172d";
+const SLSA_VERIFIER_VERSION = "v2.5.1";
+// See: https://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md
+const SLSA_VERIFIER_SHA256SUM = "54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8";
 class ReopenError extends Error {
     constructor(message) {
         super(message);

src/reopener.ts

@@ -24,9 +24,10 @@ import * as config from "./config";
 import { env } from "process";
 
 const TODOS_VERSION = "v0.8.0";
-const SLSA_VERIFIER_VERSION = "v2.3.0";
+const SLSA_VERIFIER_VERSION = "v2.5.1";
+// See: https://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md
 const SLSA_VERIFIER_SHA256SUM =
-  "ea687149d658efecda64d69da999efb84bb695a3212f29548d4897994027172d";
+  "54e4f40bf120bce1cef1ff123fef3456e8c526f315c47e22ed6acfe02a06b9a8";
 
 export class ReopenError extends Error {
   constructor(message: string) {