Bump actions versions

[j178]

No description provided.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.71%. Comparing base (73a55a4) to head (f7eb469).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1752      +/-   ##
==========================================
+ Coverage   91.38%   91.71%   +0.33%     
==========================================
  Files          98       98              
  Lines       19641    19641              
==========================================
+ Hits        17948    18014      +66     
+ Misses       1693     1627      -66     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Updates commit-pinned GitHub Actions used in the cargo-dist release pipeline, aligning generated config and workflows with newer action revisions.

Changes:

• Bumped pinned SHAs for actions/checkout, actions/upload-artifact, actions/download-artifact, and actions/attest-build-provenance in dist-workspace.toml.
• Updated the cargo-dist generated release.yml workflow to use the new action SHAs.
• Tweaked CI job display name for MSRV and switched Docker workflow attestation action to actions/attest.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
dist-workspace.toml	Updates cargo-dist’s centralized action SHA pins.
.github/workflows/release.yml	Applies updated action pins throughout the cargo-dist release workflow.
.github/workflows/ci.yml	Renames the MSRV job label for clearer UI output.
.github/workflows/build-docker.yml	Switches attestation action used during Docker publishing.

Comments suppressed due to low confidence (1)

.github/workflows/build-docker.yml:185

• This workflow now uses actions/attest@..., but it still pins actions/upload-artifact and actions/download-artifact to older SHAs elsewhere in the same file (upload: b7c566…, download: 37930b…). If the goal of this PR is to bump GitHub Actions versions (and dist-workspace.toml/release.yml already moved to newer upload/download SHAs), consider updating the artifact action pins here too to keep the cargo-dist release pipeline consistent.

        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
        with:
          subject-name: ${{ env.PREK_BASE_IMG }}
          subject-digest: ${{ steps.manifest-digest.outputs.digest }}

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.