chore(deps): bump actions/attest-build-provenance from 2.4.0 to 4.1.1

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.4.0 to 4.1.1.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@e8998f9...0f67c3f)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/container.yml

@@ -39,7 +39,7 @@ jobs:
           docker pull "$image"
           test "$(docker run --rm --network none --entrypoint id "$image" -u)" = 10001
           docker run --rm --network none "$image" --version
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.build.outputs.digest }}

.github/workflows/giab.yml

@@ -106,7 +106,7 @@ jobs:
           code=$?
           set -e
           echo "exit_code=$code" >> "$GITHUB_OUTPUT"
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         if: always() && steps.benchmark.outputs.exit_code != ''
         with:
           subject-path: benchmarks/giab/data/results/latest.json

.github/workflows/happy-image.yml

@@ -81,7 +81,7 @@ jobs:
           image: ${{ steps.meta.outputs.tag }}@${{ steps.build.outputs.digest }}
           format: spdx-json
           output-file: happy-image.spdx.json
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-name: ghcr.io/logannye/rosalind-happy
           subject-digest: ${{ steps.build.outputs.digest }}

.github/workflows/rc.yml

@@ -209,7 +209,7 @@ jobs:
         with:
           path: release-assets
           merge-multiple: true
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: release-assets/*
       - name: Create immutable RC tag and prerelease

.github/workflows/release.yml

@@ -197,7 +197,7 @@ jobs:
           pattern: stable-*
           path: release-assets
           merge-multiple: true
-      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+      - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: release-assets/*.tar.gz
       - name: Create stable tag and GitHub Release last