When a tag (e.g. `latest`) is updated to a new SHA, a new Docker image is not deployed to the artifact registry