sops/3.9.4 package update (#40524)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>

---------

Signed-off-by: wolfi-bot <[email protected]>
Signed-off-by: kranurag7 <[email protected]>
Co-authored-by: wolfi-bot <[email protected]>
Co-authored-by: kranurag7 <[email protected]>

sops.yaml

@@ -1,39 +1,25 @@
 package:
   name: sops
-  version: 3.9.3
-  epoch: 1
+  version: "3.9.4"
+  epoch: 0
   description: Simple and flexible tool for managing secrets
   copyright:
     - license: MPL-2.0
 
-environment:
-  contents:
-    packages:
-      - busybox
-      - ca-certificates-bundle
-      - go
-
 pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/getsops/sops
       tag: v${{package.version}}
-      expected-commit: 3721355cbdb77d80e0686b151d8d4a60f4a56c15
-
-  # 3.9.3 update requires a tidy for some reason, we may be able to remove this in a later version.
-  # https://github.com/wolfi-dev/os/pull/35658
-  - runs: |
-      cd cmd/sops
-      go mod tidy
+      expected-commit: e794c79e2fda8b4932cf74aded946868295e291b
 
   - uses: go/build
     with:
       modroot: .
+      tidy: true
       packages: ./cmd/sops
       output: sops
 
-  - uses: strip
-
 update:
   enabled: true
   github:
@@ -51,7 +37,7 @@ test:
       with:
         repository: https://github.com/getsops/sops
         tag: v${{package.version}}
-        expected-commit: 3721355cbdb77d80e0686b151d8d4a60f4a56c15
+        expected-commit: e794c79e2fda8b4932cf74aded946868295e291b
     - name: version check
       runs: |
         sops --version