file(DOWNLOAD): 3.26.0-rc{1,2} fails https verification on macOS

Suspected CMake regression:

pybind11 GHA macos-latest FindCatch.cmake "Could not download" error

The error below started appearing with CMake 3.26.0-rc1 as obtained with:

      - name: Update CMake
        uses: jwlawson/actions-setup-cmake@v1.13

Error in GHA logs, macos-latest only (ubuntu and Windows are fine):

CMake Error at tools/FindCatch.cmake:42 (message):
-- Configuring incomplete, errors occurred!
  Could not download
  https://github.com/philsquared/Catch/releases/download/v2.13.9/catch.hpp
Call Stack (most recent call first):
  tools/FindCatch.cmake:61 (_download_catch)
  tests/test_embed/CMakeLists.txt:10 (find_package)

We are working around it by pinning CMake 3.25.2 (https://github.com/pybind/pybind11/pull/4496).

We also have a draft PR to undo the workaround and show the errors again: https://github.com/pybind/pybind11/pull/4503

Direct link to full example log: https://github.com/pybind/pybind11/actions/runs/4121785612/jobs/7117823063