generatebundlefile: update oras to 0.14.0.

This upgrades our oras cli to 0.14.0 which fixes a bug in the oras push
command. This is a second attempt, as we previously tried 0.13.0 (to get the
--password-stdin flag, but were blocked by the aforementioned push bug). The
0.14.0 release should include fixes that make this possible to use once again.

The push bug: oras-project/oras#456

The previous attempt: aws#398

generatebundlefile/Makefile

@@ -61,7 +61,7 @@ test:
 presubmit: build test # lint is run via github action
 
 ## ORAS Make commands
-ORAS_VERSION := "0.12.0"
+ORAS_VERSION := "0.14.0"
 ifeq ($(OS),Windows_NT)
         # no op
 else

generatebundlefile/hack/generate_bundle.sh

@@ -45,9 +45,13 @@ function generate () {
 function push () {
     local version=${1?:no version specified}
     cd "${BASE_DIRECTORY}/generatebundlefile/output"
-    awsAuth "$REPO" | "$ORAS_BIN" login "$REPO" --username AWS --password-stdin
-    "$ORAS_BIN" push "${REPO}:v${version}-${CODEBUILD_BUILD_NUMBER}" bundle.yaml
-    "$ORAS_BIN" push "${REPO}:v${version}-latest" bundle.yaml
+
+    local -a suffixes=($CODEBUILD_BUILD_NUMBER "latest")
+    local tag=""
+    for suffix in "${suffixes[@]}"; do
+	tag="v$version-$suffix"
+	awsAuth "$REPO" | "$ORAS_BIN" push "$REPO:$tag" bundle.yaml
+    done
 }
 
 for version in 1-20 1-21 1-22 1-23; do