chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.2

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7211b7c807...8aad20d150)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/.e2e-run.yml

@@ -10,9 +10,6 @@ on:
       type:
         required: true
         type: string
-      provider:
-        required: true
-        type: string
       name:
         required: true
         type: string
@@ -111,16 +108,9 @@ jobs:
           driver-opts: |
             image=${{ matrix.buildkit_image }}
             network=host
-      -
-        name: Configure AWS credentials
-        if: inputs.provider == 'aws'
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
-        with:
-          role-to-assume: arn:aws:iam::175142243308:role/official_gha_cicd
-          aws-region: us-east-1
       -
         name: Login to Registry
-        if: github.event_name != 'pull_request' && (inputs.type == 'remote' || inputs.provider == 'aws' || env.REGISTRY_USER != '')
+        if: github.event_name != 'pull_request' && (inputs.type == 'remote' || env.REGISTRY_USER != '')
         uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ${{ env.REGISTRY_FQDN || inputs.registry }}

.github/workflows/codeql.yml

@@ -35,12 +35,12 @@ jobs:
           node-version: ${{ env.NODE_VERSION }}
       -
         name: Initialize CodeQL
-        uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           languages: javascript-typescript
           build-mode: none
       -
         name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           category: "/language:javascript-typescript"

.github/workflows/e2e.yml

@@ -22,7 +22,6 @@ jobs:
     uses: ./.github/workflows/.e2e-run.yml
     permissions:
       contents: read
-      id-token: write # to get AWS credentials
       packages: write # to push image to GHCR
     strategy:
       fail-fast: false
@@ -31,100 +30,100 @@ jobs:
           -
             name: Distribution
             id: distribution
-            provider: none
+            auth: none
             type: local
           -
             name: Docker Hub
             registry: ''
-            slug: dockereng/build-push-action-test
-            provider: dockerhub
+            slug: ghactionstest/ghactionstest
+            auth: dockerhub
             type: remote
           -
             name: GitHub
             registry: ghcr.io
             slug: ghcr.io/docker/build-push-action-test
-            provider: ghcr
+            auth: ghcr
             type: remote
           -
             name: GitLab
             registry: registry.gitlab.com
             slug: registry.gitlab.com/test1716/test
-            provider: gitlab
+            auth: gitlab
             type: remote
           -
             name: AWS ECR
             registry: 175142243308.dkr.ecr.us-east-2.amazonaws.com
             slug: 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action
-            provider: aws
+            auth: aws
             type: remote
           -
             name: AWS ECR Public
             registry: public.ecr.aws
             slug: public.ecr.aws/q3b5f1u4/test-docker-action
-            provider: aws
+            auth: aws
             type: remote
           -
             name: Google Artifact Registry
             registry: us-east4-docker.pkg.dev
             slug: us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action
-            provider: gar
+            auth: gar
             type: remote
           -
             name: Azure Container Registry
             registry: officialgithubactions.azurecr.io
             slug: officialgithubactions.azurecr.io/test-docker-action
-            provider: acr
+            auth: acr
             type: remote
           -
             name: Quay
             registry: quay.io
             slug: quay.io/docker_build_team/ghactiontest
-            provider: quay
+            auth: quay
             type: remote
           -
             name: Artifactory
             registry: infradock.jfrog.io
             slug: infradock.jfrog.io/test-ghaction/build-push-action
-            provider: artifactory
+            auth: artifactory
             type: remote
           -
             name: Harbor
             id: harbor
-            provider: none
+            auth: none
             type: local
           -
             name: Nexus
             id: nexus
-            provider: none
+            auth: none
             type: local
     with:
       id: ${{ matrix.id }}
       type: ${{ matrix.type }}
-      provider: ${{ matrix.provider }}
       name: ${{ matrix.name }}
       registry: ${{ matrix.registry }}
       slug: ${{ matrix.slug }}
     secrets:
       # Pass only the registry-specific secrets needed by each matrix entry.
       # GHCR uses the called workflow's GITHUB_TOKEN fallback.
-      # AWS ECR uses OIDC to get credentials.
       registry_username: >-
         ${{
-          matrix.provider == 'dockerhub' && vars.DOCKERPUBLICBOT_USERNAME ||
-          matrix.provider == 'gitlab' && secrets.GITLAB_USERNAME ||
-          matrix.provider == 'gar' && secrets.GAR_USERNAME ||
-          matrix.provider == 'acr' && secrets.AZURE_CLIENT_ID ||
-          matrix.provider == 'quay' && secrets.QUAY_USERNAME ||
-          matrix.provider == 'artifactory' && secrets.ARTIFACTORY_USERNAME ||
+          matrix.auth == 'dockerhub' && secrets.DOCKERHUB_USERNAME ||
+          matrix.auth == 'gitlab' && secrets.GITLAB_USERNAME ||
+          matrix.auth == 'aws' && secrets.AWS_ACCESS_KEY_ID ||
+          matrix.auth == 'gar' && secrets.GAR_USERNAME ||
+          matrix.auth == 'acr' && secrets.AZURE_CLIENT_ID ||
+          matrix.auth == 'quay' && secrets.QUAY_USERNAME ||
+          matrix.auth == 'artifactory' && secrets.ARTIFACTORY_USERNAME ||
           ''
         }}
       registry_password: >-
         ${{
-          matrix.provider == 'dockerhub' && secrets.DOCKERPUBLICBOT_WRITE_PAT ||
-          matrix.provider == 'gitlab' && secrets.GITLAB_TOKEN ||
-          matrix.provider == 'gar' && secrets.GAR_JSON_KEY ||
-          matrix.provider == 'acr' && secrets.AZURE_CLIENT_SECRET ||
-          matrix.provider == 'quay' && secrets.QUAY_TOKEN ||
-          matrix.provider == 'artifactory' && secrets.ARTIFACTORY_TOKEN ||
+          matrix.auth == 'dockerhub' && secrets.DOCKERHUB_TOKEN ||
+          matrix.auth == 'gitlab' && secrets.GITLAB_TOKEN ||
+          matrix.auth == 'aws' && secrets.AWS_SECRET_ACCESS_KEY ||
+          matrix.auth == 'gar' && secrets.GAR_JSON_KEY ||
+          matrix.auth == 'acr' && secrets.AZURE_CLIENT_SECRET ||
+          matrix.auth == 'quay' && secrets.QUAY_TOKEN ||
+          matrix.auth == 'artifactory' && secrets.ARTIFACTORY_TOKEN ||
           ''
         }}