Merge pull request #1593 from crazy-max/fix-e2e-gitlab

ci(e2e): fix GitLab e2e push attestations

.github/workflows/.e2e-run.yml

@@ -60,6 +60,14 @@ jobs:
           ID: ${{ inputs.id }}
         run: |
           cat ./.github/e2e/${ID}/env >> $GITHUB_ENV
+      -
+        # FIXME: Remove this once GitLab Registry accepts OCI artifact attestations
+        # whose subject points to a manifest pushed in the same build.
+        # https://github.com/docker/buildx/pull/3991
+        name: Set up GitLab env
+        if: inputs.provider == 'gitlab'
+        run: |
+          echo "BUILDX_NO_DEFAULT_OCI_ARTIFACT=true" >> "$GITHUB_ENV"
       -
         name: Set up BuildKit config
         env:

dist/licenses.txt

@@ -3289,7 +3289,7 @@ USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 The following npm packages may be included in this product:
 
- - brace-expansion@1.1.18
+ - brace-expansion@1.1.13
  - brace-expansion@2.0.2
 
 These packages each contain the following license:

yarn.lock

@@ -2426,12 +2426,12 @@ __metadata:
   linkType: hard
 
 "brace-expansion@npm:^1.1.7":
-  version: 1.1.18
-  resolution: "brace-expansion@npm:1.1.18"
+  version: 1.1.13
+  resolution: "brace-expansion@npm:1.1.13"
   dependencies:
     balanced-match: "npm:^1.0.0"
     concat-map: "npm:0.0.1"
-  checksum: 10/b55a3c03239b8d2127c7cbb3408c9ad3a556a8c303bf3064df78bfb7c093160fc8f6e0a32e42a850a78eba12f29ccf6ef997690b9acf945d242c56c61c4aa977
+  checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
   languageName: node
   linkType: hard