Revert attestation from test.yml and add changelog

.github/workflows/test.yml

@@ -29,19 +29,13 @@ permissions: {}
 jobs:
   package:
     runs-on: ubuntu-latest
-    # Required by attest-build-provenance-github.
-    permissions:
-      id-token: write
-      attestations: write
     steps:
     - uses: actions/checkout@v4
       with:
         fetch-depth: 0
         persist-credentials: false
     - name: Build and Check Package
-      uses: hynek/build-and-inspect-python-package@v2.5.0
-      with:
-        attest-build-provenance-github: 'true'
+      uses: hynek/build-and-inspect-python-package@v2.4.0
 
   build:
     needs: [package]

changelog/12333.trivial.rst

@@ -0,0 +1 @@
+pytest releases are now attested using the recent `Artifact Attestation <https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/>` support from GitHub, allowing users to attest the package provenance.