github-actions: bump actions/attest-build-provenance from 4.1.0 to 4.1.1

[dependabot]

Bumps actions/attest-build-provenance from 4.1.0 to 4.1.1.

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in actions/attest-build-provenance#858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

Commits

• 0f67c3f Bump actions/checkout from 6.0.3 to 7.0.0 (#857)
• 21b787d Update actions/attest to v4.1.1 (#858)
• f14352a add dependabot cooldown (#851)
• 2c04a00 Bump actions/checkout from 6.0.2 to 6.0.3 in the actions-minor group (#850)
• 10334b5 remove badges from README (#840)
• c5efebd remove prober workflows (#837)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[bgentry]

🤖 Codex review: Approved after dependency security and compatibility review.

Upgrade

• actions/attest-build-provenance: 4.1.0 → 4.1.1
• Reviewed head: d5394f001efa500a1e28ac2aaab19d441d2dbd23

Security review

• Confirmed security update: bundled @sigstore/oci 0.6.0 → 0.7.1 fixes critical CVE-2026-59891 / GHSA-pf56-329r-95rw, which could leak Docker registry credentials through substring-based registry matching.
• The reviewed wrapper releases resolve to signed commits a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 and 0f67c3f4856b2e3261c31976d6725780e5e4c373; their nested actions/attest releases are also signed and immutable.
• Runtime TypeScript source and action metadata are byte-identical. The regenerated dependency graph introduces no install hooks, bins, non-registry sources, weak hashes, or same-version integrity rewrites.
• Static review found no new process spawning, secret reads, endpoint, or filesystem behavior beyond expected OIDC, attestation, registry, and temporary-bundle operations.

Compatibility verification

• The higher-risk push-to-registry: true path executed successfully in both public riverui architecture builds, and their manifest merge passed.
• Exact-head Go/JS CI, Go lint, and release checks passed.
• git diff --check — passed.
• The riverproui workflow fails before build/attestation because Dependabot cannot assume the AWS OIDC role; its push-to-registry: false invocation was therefore not exercised on this head.

Residual risk

• Current bundled advisories remain in @sigstore/core, tar, undici, and brace-expansion. The reviewed constant subjects, digest inputs, trusted endpoints, and non-WebSocket/non-archive workflow paths do not expose their material preconditions.
• Follow up by migrating the deprecated wrapper to current actions/attest and consider full-SHA pinning. The generated bundle was not independently reproduced.