deps: bump ssri from 9.0.1 to 10.0.0

Bumps [ssri](https://github.com/npm/ssri) from 9.0.1 to 10.0.0.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md)
- [Commits](npm/ssri@v9.0.1...v10.0.0)

---
updated-dependencies:
- dependency-name: ssri
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

package.json

@@ -56,7 +56,7 @@
     "minipass-pipeline": "^1.2.4",
     "p-map": "^4.0.0",
     "promise-inflight": "^1.0.1",
-    "ssri": "^9.0.0",
+    "ssri": "^10.0.0",
     "tar": "^6.1.11",
     "unique-filename": "^2.0.0"
   },