ci: bump actions/attest-build-provenance from 4.1.0 to 4.1.1

[dependabot]

Bumps actions/attest-build-provenance from 4.1.0 to 4.1.1.

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in actions/attest-build-provenance#858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

Commits

• 0f67c3f Bump actions/checkout from 6.0.3 to 7.0.0 (#857)
• 21b787d Update actions/attest to v4.1.1 (#858)
• f14352a add dependabot cooldown (#851)
• 2c04a00 Bump actions/checkout from 6.0.2 to 6.0.3 in the actions-minor group (#850)
• 10334b5 remove badges from README (#840)
• c5efebd remove prober workflows (#837)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the release workflow to use a newer pinned version of the build provenance attestation action.
  • This keeps the release process aligned with the latest approved workflow revision.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e83b3f44-c179-4bd1-a821-32eaebe3658b

📥 Commits

Reviewing files that changed from the base of the PR and between 0c036d9 and 68f85f8.

📒 Files selected for processing (1)

• .github/workflows/release.yml

---

📝 Walkthrough

Walkthrough

The release workflow updates the pinned commit SHA for the actions/attest-build-provenance action (still tagged # v2) in the "Attest build provenance" step.

Changes

Release Workflow Action Pin

Layer / File(s)	Summary
Update attest-build-provenance SHA .github/workflows/release.yml	Bumps the pinned commit SHA for actions/attest-build-provenance to a new revision while keeping the # v2 annotation.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

A tiny SHA swap, nothing more,
The rabbit hops past the workflow door.
Same v2 tag, new commit in place,
Provenance attested with bunny grace! 🐇✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the dependency version bump for actions/attest-build-provenance.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/actions/attest-build-provenance-4.1.1

---

_{Comment @coderabbitai help to get the list of available commands.}