Migrate to actions/attest

[martincostello]

Migrate from now-deprecated attestation action to actions/attest.

[Copilot]

Pull request overview

Migrates the repository’s GitHub Actions artifact attestation step from the deprecated actions/attest-build-provenance action to the consolidated actions/attest action, and updates the Dependabot auto-approval allowlist accordingly.

Changes:

• Update build workflow to use actions/attest for artifact attestations.
• Update Dependabot approval workflow allowlist to recognize actions/attest updates.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/dependabot-approve.yml	Updates the Dependabot dependency-name allowlist entry to actions/attest.
.github/workflows/build.yml	Switches the attestation step to actions/attest while keeping the same subject-path inputs and required permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.15%. Comparing base (24d12d2) to head (6b72c05).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2952   +/-   ##
=======================================
  Coverage   96.15%   96.15%           
=======================================
  Files         309      309           
  Lines        7128     7128           
  Branches     1005     1005           
=======================================
  Hits         6854     6854           
  Misses        221      221           
  Partials       53       53           

Flag	Coverage Δ
linux	96.15% <ø> (ø)
macos	96.15% <ø> (ø)
windows	96.14% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.