676: update to latest attestation lib

Also removes http params assertion because that is an implementation detail of
the library, not something PIE needs to assert any more

Author: asgrim

composer.json

@@ -37,7 +37,7 @@
         "symfony/console": "^6.4.42",
         "symfony/event-dispatcher": "^6.4.37",
         "symfony/process": "^6.4.41",
-        "thephpf/attestation": "^0.0.6",
+        "thephpf/attestation": "^0.0.7",
         "webmozart/assert": "^1.12.1"
     },
     "require-dev": {

composer.lock

@@ -147,16 +147,7 @@ private function mockAttestationResponse(string $digestInUrl, string $dsseEnvelo
         $url = self::TEST_GITHUB_URL . '/orgs/php/attestations/sha256:' . $digestInUrl . '?predicate_type=provenance';
         $this->httpDownloader->expects(self::once())
             ->method('get')
-            ->with(
-                $url,
-                [
-                    'retry-auth-failure' => true,
-                    'http' => [
-                        'method' => 'GET',
-                        'header' => [],
-                    ],
-                ],
-            )
+            ->with($url)
             ->willReturn(
                 new Response(
                     ['url' => $url],