chore(deps): update dependency oras-project/oras to v1.2.1 (#508)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [oras-project/oras](https://redirect.github.com/oras-project/oras) |
patch | `v1.2.0` -> `v1.2.1` |

---

### Release Notes

<details>
<summary>oras-project/oras (oras-project/oras)</summary>

###
[`v1.2.1`](https://redirect.github.com/oras-project/oras/releases/tag/v1.2.1)

[Compare
Source](https://redirect.github.com/oras-project/oras/compare/v1.2.0...v1.2.1)

#### Bug Fixes

- Fix
[#&#8203;1436](https://redirect.github.com/oras-project/oras/issues/1436):
`oras tag` creates referrers tags unexpectedly

#### Other Changes

-   Improve documentation
-   Update dependencies
-   Update to Golang `1.23.4`

#### Detailed Commits

- bump: golang version to fix CVE-2024-24790 and CVE-2024-34156 by
[@&#8203;qweeah](https://redirect.github.com/qweeah) in
[https://github.com/oras-project/oras/pull/1562](https://redirect.github.com/oras-project/oras/pull/1562)
- chore: bump golang and dependencies by
[@&#8203;qweeah](https://redirect.github.com/qweeah) in
[https://github.com/oras-project/oras/pull/1564](https://redirect.github.com/oras-project/oras/pull/1564)
- chore: backport main-branch fixes into release-1.2 branch by
[@&#8203;qweeah](https://redirect.github.com/qweeah) in
[https://github.com/oras-project/oras/pull/1567](https://redirect.github.com/oras-project/oras/pull/1567)
- docs: add experimental marks to examples by
[@&#8203;qweeah](https://redirect.github.com/qweeah) in
[https://github.com/oras-project/oras/pull/1570](https://redirect.github.com/oras-project/oras/pull/1570)

**Full Changelog**:
oras-project/oras@v1.2.0...v1.2.1

#### Notes

This release was signed with `46D3 369B 393F 6F82 71FD 1CE8 F86E C70D
2B0C 404F` ([@&#8203;qweeah](https://redirect.github.com/qweeah)'s GPG
key) which can be found [here](https://redirect.github.com/qweeah.gpg).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/artifacts).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS42OS4zIiwidXBkYXRlZEluVmVyIjoiMzkuNjkuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

dockerfiles/ci/release-build-base/Dockerfile

@@ -85,7 +85,7 @@ RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
 
 # oras tool
 # renovate: datasource=github-tags depName=oras-project/oras
-ARG ORAS_VERSION=v1.2.0
+ARG ORAS_VERSION=v1.2.1
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -LO "https://github.com/oras-project/oras/releases/download/${ORAS_VERSION}/oras_${ORAS_VERSION#?}_${OS}_${ARCH}.tar.gz" && \
     mkdir -p oras-install/ && \