chore(deps): bump the github-actions group across 1 directory with 2 …

…updates (#22)

Bumps the github-actions group with 2 updates in the / directory: [cda-tum/mqt-workflows](https://github.com/cda-tum/mqt-workflows) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `cda-tum/mqt-workflows` from 1.3.2 to 1.4.0
- [Release notes](https://github.com/cda-tum/mqt-workflows/releases)
- [Commits](cda-tum/mqt-workflows@v1.3.2...v1.4.0)

Updates `actions/attest-build-provenance` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v1.4.2...v1.4.3)

---
updated-dependencies:
- dependency-name: cda-tum/mqt-workflows
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Damian Rovara <93778306+DRovara@users.noreply.github.com>

.github/workflows/cd.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   python-packaging:
     name: 🐍 Packaging
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-packaging.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-packaging.yml@v1.4.0
 
   deploy:
     if: github.event_name == 'release' && github.event.action == 'published'
@@ -31,7 +31,7 @@ jobs:
           path: dist
           merge-multiple: true
       - name: Generate artifact attestation for sdist and wheel(s)
-        uses: actions/attest-build-provenance@v1.4.2
+        uses: actions/attest-build-provenance@v1.4.3
         with:
           subject-path: "dist/*"
       - uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/ci.yml

@@ -14,13 +14,13 @@ concurrency:
 jobs:
   change-detection:
     name: 🔍 Change
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-change-detection.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-change-detection.yml@v1.4.0
 
   cpp-tests:
     name: 🇨‌ Test
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-tests)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-ci.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-ci.yml@v1.4.0
     permissions:
       id-token: write # Explicitly allows the `id-token: write` permission for this job
     with:
@@ -33,23 +33,23 @@ jobs:
     name: 🇨‌ Lint
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-linter)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-linter.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-linter.yml@v1.4.0
 
   python-tests:
     name: 🐍 Test
     needs: change-detection
     permissions:
       id-token: write # Explicitly allows the `id-token: write` permission for this job
     if: fromJSON(needs.change-detection.outputs.run-python-tests)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-ci.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-ci.yml@v1.4.0
     with:
       skip-testing-latest-python: true
 
   code-ql:
     name: 📝 CodeQL
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-code-ql)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-code-ql.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-code-ql.yml@v1.4.0
 
   required-checks-pass: # This job does nothing and is only used for branch protection
     name: 🚦 Check

.github/workflows/update-mqt-core.yml

@@ -21,6 +21,6 @@ concurrency:
 jobs:
   update-mqt-core:
     name: ⬆️ Update MQT Core
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-mqt-core-update.yml@v1.3.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-mqt-core-update.yml@v1.4.0
     with:
       update-to-head: ${{ github.event.inputs.update-to-head == 'true' }}