chore(deps): Bump docker/build-push-action from 3.3.0 to 4.0.0 (#3066)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: casperklein <casperklein@users.noreply.github.com>

.github/workflows/generic_build.yml

@@ -83,7 +83,7 @@ jobs:
 
       # NOTE: AMD64 can build within 2 minutes
       - name: 'Build images'
-        uses: docker/build-push-action@v3.3.0
+        uses: docker/build-push-action@v4.0.0
         with:
           context: .
           # Build at least the AMD64 image (which runs against the test suite).
@@ -96,6 +96,8 @@ jobs:
           # This job just builds the image and stores to cache, no other exporting required:
           # https://github.com/docker/build-push-action/issues/546#issuecomment-1122631106
           outputs: type=cacheonly
+          # Disable provenance attestation: https://docs.docker.com/build/attestations/slsa-provenance/
+          provenance: false
 
       # WORKAROUND: The `cache-to: type=local` input for `build-push-action` persists old-unused cache.
       # The workaround is to write the new build cache to a different location that replaces the

.github/workflows/generic_publish.yml

@@ -72,7 +72,7 @@ jobs:
         run: echo "version=$(<VERSION)" >>"${GITHUB_OUTPUT}"
 
       - name: 'Build and publish images'
-        uses: docker/build-push-action@v3.3.0
+        uses: docker/build-push-action@v4.0.0
         with:
           context: .
           build-args: |
@@ -82,3 +82,5 @@ jobs:
           push: true
           tags: ${{ steps.prep.outputs.tags }}
           cache-from: type=local,src=/tmp/.buildx-cache
+          # Disable provenance attestation: https://docs.docker.com/build/attestations/slsa-provenance/
+          provenance: false

.github/workflows/generic_test.yml

@@ -38,7 +38,7 @@ jobs:
       # Earlier `buildx` + `qemu` steps are not needed as no cache is exported,
       # and only a single platform (AMD64) is loaded:
       - name: 'Build AMD64 image from cache'
-        uses: docker/build-push-action@v3.3.0
+        uses: docker/build-push-action@v4.0.0
         with:
           context: .
           tags: mailserver-testing:ci
@@ -47,6 +47,8 @@ jobs:
           # Rebuilds the AMD64 image from the cache:
           platforms: linux/amd64
           cache-from: type=local,src=/tmp/.buildx-cache
+          # Disable provenance attestation: https://docs.docker.com/build/attestations/slsa-provenance/
+          provenance: false
 
       - name: 'Run tests'
         run: make generate-accounts tests/${{ matrix.part }}