Merge pull request cli#13935 from cli/dependabot/github_actions/actions/attest-4.2.0

chore(deps): bump actions/attest from 4.1.1 to 4.2.0

Author: babakks

.github/workflows/deployment.yml

@@ -388,7 +388,7 @@ jobs:
           rpmsign --addsign dist/*.rpm
       - name: Attest release artifacts
         if: inputs.environment == 'production' && !inputs.dry_run
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
         with:
           subject-path: "dist/gh_*"
           create-storage-record: false # (default: true)