From 32d95c2aab91ae5c025faae89fdb303280404e70 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 19 Nov 2024 08:29:08 +0000
Subject: [PATCH 1/2] chore(deps): bump docker/build-push-action from 4 to 6

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v4...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/test_publish.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test_publish.yml b/.github/workflows/test_publish.yml
index dba1d4ec7..7bacf0ee7 100644
--- a/.github/workflows/test_publish.yml
+++ b/.github/workflows/test_publish.yml
@@ -264,7 +264,7 @@ jobs:
           username: ${{ secrets.RENKU_DOCKER_USERNAME }}
           password: ${{ secrets.RENKU_DOCKER_PASSWORD }}
       - name: Build and push data services
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./projects/renku_data_service/Dockerfile
@@ -289,7 +289,7 @@ jobs:
             type=semver,pattern={{major}}.{{minor}}
             type=sha
       - name: Build and push background jobs
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./projects/background_jobs/Dockerfile
@@ -314,7 +314,7 @@ jobs:
             type=semver,pattern={{major}}.{{minor}}
             type=sha
       - name: Build and push secrets image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./projects/secrets_storage/Dockerfile

From 38910e3592372ff010f2b33c0f0eac9a569ee0ef Mon Sep 17 00:00:00 2001
From: Flora Thiebaut <flora.thiebaut@sdsc.ethz.ch>
Date: Tue, 14 Jan 2025 15:01:30 +0100
Subject: [PATCH 2/2] disable provenance

---
 .github/workflows/test_publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/test_publish.yml b/.github/workflows/test_publish.yml
index 7bacf0ee7..f30b4dd68 100644
--- a/.github/workflows/test_publish.yml
+++ b/.github/workflows/test_publish.yml
@@ -274,6 +274,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=renku/renku-data-service:buildcache
           cache-to: type=registry,ref=renku/renku-data-service:buildcache,mode=max
+          provenance: false
       - name: Docker meta background jobs
         id: meta-background-jobs
         uses: docker/metadata-action@v5
@@ -299,6 +300,7 @@ jobs:
           labels: ${{ steps.meta-background-jobs.outputs.labels }}
           cache-from: type=registry,ref=renku/data-service-background-jobs:buildcache
           cache-to: type=registry,ref=renku/data-service-background-jobs:buildcache,mode=max
+          provenance: false
       - name: Docker meta secrets
         id: meta-secrets-storage
         uses: docker/metadata-action@v5
@@ -324,3 +326,4 @@ jobs:
           labels: ${{ steps.meta-secrets-storage.outputs.labels }}
           cache-from: type=registry,ref=renku/secrets-storage:buildcache
           cache-to: type=registry,ref=renku/secrets-storage:buildcache,mode=max
+          provenance: false