Bump actions/attest-build-provenance from 1.2.0 to 1.3.1 (#838)

* Bump actions/attest-build-provenance from 1.2.0 to 1.3.1

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.2.0 to 1.3.1.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@49df96e...534b352)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Auto-approve actions/attest-build-provenance

Add actions/attest-build-provenance to the list of auto-approved dependabot updates.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Martin Costello <martin@martincostello.com>

.github/workflows/build.yml

@@ -80,7 +80,7 @@ jobs:
         upload-release-assets: ${{ runner.os == 'Windows' }}
 
     - name: Attest artifacts
-      uses: actions/attest-build-provenance@49df96e17e918a15956db358890b08e61c704919 # v1.2.0
+      uses: actions/attest-build-provenance@534b352d658f90498fd148d231fdbf88f3886a3a # v1.3.1
       if: |
         runner.os == 'Windows' &&
         github.event.repository.fork == false &&

.github/workflows/dependabot-approve.yml

@@ -30,6 +30,7 @@ jobs:
       - name: Approve pull request and enable auto-merge
         shell: bash
         if: |
+          contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/attest-build-provenance') ||
           contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/cache') ||
           contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/checkout') ||
           contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/dependency-review-action') ||