No more registry pushes for dependabot builds

[Bohreromir]

No description provided.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	51.08%	2498 / 4890
🔵	Statements	57.16%	3714 / 6497
🔵	Functions	65.83%	1031 / 1566
🔵	Branches	42.96%	1298 / 3021

File Coverage

No changed files found.

Generated in workflow #1048 for commit daa5223 by the Vitest Coverage Report Action

[StefanFl]

Claude found one gap:

finished only looks at openshift-preflight-check and publish-helm-chart. If build-container-image fails, both of those are skipped, so finished passes. For Dependabot PRs the build is now the only real check in this workflow, so a dependency bump that breaks the Docker build can merge with a green required check. The failing job only shows up as a non-required red check.

Fix in .github/workflows/build.yaml, job finished:

• add build-container-image and publish-index-manifest to needs
• replace the two-job comparison with contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') (pass the JSON in via env, not inline ${{ }} in the script)