fix(renovate-bot): Change the order of precedence for deciding between Vault and Variable.

See merge request gitlab-com/gl-infra/common-ci-tasks!791

Issue: gitlab-com/gl-infra/common-ci-tasks#29

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.44.2

See merge request gitlab-com/gl-infra/common-ci-tasks!821

chore: Add integration test requirement for Ansible Galaxy major version updates

See merge request gitlab-com/gl-infra/common-ci-tasks!818

## [2.44.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-11-05)

### Fixes

* Add SBOM attestation to Docker build ([f509b7cf](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/f509b7cf55f9235a607482417b7cf96a25ad54c7))

### Dependencies

* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.44.0 ([b6be82d5](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/b6be82d5ff1b596b3f853655e9f10a8d1b852e8a))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.44.1 ([c7d10396](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/c7d103962f21930193c7879fd3a0d8efadbba03d))

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.44.1

See merge request gitlab-com/gl-infra/common-ci-tasks!820

fix: Add SBOM attestation to Docker build

See merge request gitlab-com/gl-infra/common-ci-tasks!819

- Added `--attest type=sbom` flag to the `docker buildx build` command in the Dockerfile.
- This flag enables SBOM (Software Bill of Materials) attestation during the Docker build process.
- The SBOM attestation helps to track and manage the dependencies and components used in the Docker
image, ensuring compliance and security.

- Added a new rule in the `renovate-versions-dedicated.json` Renovate preset file to
  require an integration test for Ansible-Galaxy major version updates.
- This rule is triggered when a major version update of an Ansible Galaxy dependency is detected.
- The rule adds a label to the pull request to indicate that an integration test is required.
- For non-major version updates, also includes a note in the pull request body to remind
  developers to perform a review app deployment to ensure that the upgrade works as expected.

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.44.0

See merge request gitlab-com/gl-infra/common-ci-tasks!817

## [2.44.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-11-05)

### Fixes

* remove 'v' prefix from truncated versions in Renovate ([b30fcf20](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/b30fcf20fab03de4ce755ab5faac8daa04da42e1))

fix: remove 'v' prefix from truncated versions in Renovate

See merge request gitlab-com/gl-infra/common-ci-tasks!816

## [2.44.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-10-31)

### Features

* **docker:** turn branch write caching off by default ([8700ca04](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/8700ca04e76306733fdc73256c99a85b3da6040e))

### Dependencies

* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.43.1 ([13e2a5d5](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/13e2a5d51ecabbae49e1546fd3ec2e8ad726b738))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.43.2 ([c5c56e28](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/c5c56e280247619168e2fac6ed35155e4ed2d898))

feat(docker): turn branch write caching off by default

See merge request gitlab-com/gl-infra/common-ci-tasks!813

It turns out that for many docker jobs, writing the branch write cache
takes many times longer than the docker build itself, so make it
optional.

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.43.2

See merge request gitlab-com/gl-infra/common-ci-tasks!812

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.43.1

See merge request gitlab-com/gl-infra/common-ci-tasks!810

## [2.43.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-10-29)

### Fixes

* skip renovate-validate on semantic release pushes ([af0b1b23](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/af0b1b23f2a52304a93f15962919e4f0fbc13a7b))

fix: skip renovate-validate on semantic release pushes

See merge request gitlab-com/gl-infra/common-ci-tasks!811

We're already made this change for `renovate_bot` jobs: we need to do
the same for `renovate_validate` jobs for the same reason: the image
doesn't exist until after the tag pipeline is run.

## [2.43.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-10-29)

### Fixes

* broken Docker tags builds ([fccc5d03](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/fccc5d032f8b6844520082c20bfc6c3ecca0449f))
* revert to working renovate image ([0b9b975b](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/0b9b975b6e723d4e869bcc68bac647fb0364f2b1))

fix: revert to working renovate image

See merge request gitlab-com/gl-infra/common-ci-tasks!809

So that we can cut a release, which will then upgrade it again.

fix: broken Docker tags builds

See merge request gitlab-com/gl-infra/common-ci-tasks!808

Also, stops renovate running when Semantic Releaser pushes directly to
main branch, as this has the affect of making it appear that the main
branch is broken, when it's not.

## [2.43.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2024-10-28)

### Features

* switch from GitLab caching to Registry caching for docker builds ([9a45fe19](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/9a45fe19a938f288746b382ccdbf665ffcb3cf06))

### Dependencies

* **deps:** update dependency gitlab-com/gl-infra/jsonnet-tool to v1.16.0 ([30824386](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/3082438625e63cbf0bbb6ae8dd4fffe7b0633171))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.42.1 ([3eec173a](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/3eec173a5a87b9535e8f039b6154047bb5f37146))

feat: switch from GitLab caching to Registry caching for docker builds

See merge request gitlab-com/gl-infra/common-ci-tasks!807

Looking for performance improvements.

chore(deps): update dependency gitlab-com/gl-infra/jsonnet-tool to v1.16.0

See merge request gitlab-com/gl-infra/common-ci-tasks!800

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.42.1

See merge request gitlab-com/gl-infra/common-ci-tasks!806