Sync action pins

Author: kdeldycke

.github/workflows/_release-engine.yaml

@@ -340,7 +340,7 @@ jobs:
         if: >-
           github.ref == 'refs/heads/main'
           && fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: ${{ matrix.bin_name }}
       - name: Verify binary attestation
@@ -620,7 +620,7 @@ jobs:
       # Same provenance chain as the compiled binaries and the extra-assets job.
       - name: Generate tarball attestation
         id: attest-manpages
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: >-
             ${{
@@ -711,7 +711,7 @@ jobs:
           done
       - name: Generate assets attestation
         id: attest-assets
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: release-assets/*
       - name: Verify assets attestation