chore(deps): bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [cda-tum/mqt-workflows](https://github.com/cda-tum/mqt-workflows) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `cda-tum/mqt-workflows` from 1.5.2 to 1.7.0
- [Release notes](https://github.com/cda-tum/mqt-workflows/releases)
- [Commits](munich-quantum-toolkit/workflows@v1.5.2...v1.7.0)

Updates `actions/attest-build-provenance` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: cda-tum/mqt-workflows
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/cd.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   python-packaging:
     name: 🐍 Packaging
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-packaging.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-packaging.yml@v1.7.0
 
   deploy:
     if: github.event_name == 'release' && github.event.action == 'published'
@@ -31,7 +31,7 @@ jobs:
           path: dist
           merge-multiple: true
       - name: Generate artifact attestation for sdist and wheel(s)
-        uses: actions/attest-build-provenance@v2.1.0
+        uses: actions/attest-build-provenance@v2.2.0
         with:
           subject-path: "dist/*"
       - uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/ci.yml

@@ -15,13 +15,13 @@ concurrency:
 jobs:
   change-detection:
     name: 🔍 Change
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-change-detection.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-change-detection.yml@v1.7.0
 
   cpp-tests:
     name: 🇨‌ Test
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-tests)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-ci.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-ci.yml@v1.7.0
     permissions:
       id-token: write # Explicitly allows the `id-token: write` permission for this job
       contents: read
@@ -35,7 +35,7 @@ jobs:
     name: 🇨‌ Lint
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cpp-linter)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-linter.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-cpp-linter.yml@v1.7.0
 
   python-tests:
     name: 🐍 Test
@@ -44,13 +44,13 @@ jobs:
       id-token: write # Explicitly allows the `id-token: write` permission for this job
       contents: read
     if: fromJSON(needs.change-detection.outputs.run-python-tests)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-ci.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-python-ci.yml@v1.7.0
 
   code-ql:
     name: 📝 CodeQL
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-code-ql)
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-code-ql.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-code-ql.yml@v1.7.0
 
   required-checks-pass: # This job does nothing and is only used for branch protection
     name: 🚦 Check

.github/workflows/update-mqt-core.yml

@@ -21,6 +21,6 @@ concurrency:
 jobs:
   update-mqt-core:
     name: ⬆️ Update MQT Core
-    uses: cda-tum/mqt-workflows/.github/workflows/reusable-mqt-core-update.yml@v1.5.2
+    uses: cda-tum/mqt-workflows/.github/workflows/reusable-mqt-core-update.yml@v1.7.0
     with:
       update-to-head: ${{ github.event.inputs.update-to-head == 'true' }}