build: bump actions/attest-build-provenance from 1.3.3 to 1.4.0 in the github-actions group (#3750)

Bumps the github-actions group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `actions/attest-build-provenance` from 1.3.3 to 1.4.0 - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@5e9cb68...210c191)

Author: dependabot[bot]

.github/workflows/release-step-3.yml

@@ -105,7 +105,7 @@ jobs:
  run: tar xvf ${{ env.TARBALL_FILE }}
 
  - name: generate build provenance
- uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3
+ uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
  with:
  subject-path: "${{ github.workspace }}/**/target/*.jar"
 

.github/workflows/snapshot.yml

@@ -69,7 +69,7 @@ jobs:
  run: tar xvf ${{ env.TARBALL_FILE }}
 
  - name: generate build provenance
- uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3
+ uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0
  with:
  subject-path: "${{ github.workspace }}/**/target/*.jar"