Bump actions/attest-build-provenance from 1.3.3 to 1.4.0

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.3.3 to 1.4.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@5e9cb68...210c191)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/dotnet.yaml

@@ -204,7 +204,7 @@ jobs:
  name: nuget-package
  path: packed
  - name: Attest Build Provenance
- uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3
+ uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
  with:
  subject-path: "packed/WoofWare.DotnetRuntimeLocator.*.nupkg"
 
@@ -246,7 +246,7 @@ jobs:
  run: 'bash ./.github/workflows/assert-contents.sh'
  - name: Attest Build Provenance
  if: steps.publish-success.outputs.result == 'published'
- uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3
+ uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
  with:
  subject-path: "from-nuget.nupkg"