Bump actions/attest-build-provenance from 2 to 3 (#1603)

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2 to 3. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/attest-build-provenance from 2 to 3 (#1603)
1f316f8f · dependabot[bot] · GitHub · 2806be4f · 1f316f8f
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -75,7 +75,7 @@ jobs:
        run: pipx run build --sdist

      - name: Attest GitHub build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v3
        # Don't attest from forks
        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
        with:
@@ -130,7 +130,7 @@ jobs:
        uses: pypa/cibuildwheel@faf86a6ed7efa889faf6996aa23820831055001a # v2.23.3

      - name: Attest GitHub build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v3
        # Don't attest from forks
        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
        with:
@@ -171,7 +171,7 @@ jobs:
          PYODIDE=1 python setup.py bdist_wheel --universal

      - name: Attest GitHub build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v3
        # Don't attest from forks
        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
        with: