github-actions: bump actions/attest-build-provenance from 2 to 4.1.0 (#609)

Author: dependabot[bot]

.github/workflows/docker-riverproui.yaml

@@ -302,7 +302,7 @@ jobs:
 
       - name: Generate build provenance attestation (not pushed)
         id: attest
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           push-to-registry: false
           subject-digest: ${{ steps.manifest_digest.outputs.digest }}

.github/workflows/docker-riverui.yaml

@@ -88,7 +88,7 @@ jobs:
           outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true,annotation-index.org.opencontainers.image.description=River UI
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           push-to-registry: true
           subject-digest: ${{ steps.build.outputs.digest }}