dependabot-docker 0.131.0 → 0.133.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6f4a2375b11e638e1d2ea3c5f0d47866abed3ea40fc0a0e50012c93271458f6e
4
- data.tar.gz: 989d740a926e1c13cdb70f07e34be56c798a82e6dc26b44bbdc0742ee18b680e
3
+ metadata.gz: 68f97beb79b19ccc443281a6f69652cf982648e0ad41dfba2e952e01e717287f
4
+ data.tar.gz: 4ce22bfe5f9b40a90c732daae60d81eac94f4bdb1d91f346cd8c038f79530dea
5
5
  SHA512:
6
- metadata.gz: 81be64e372c6c7e593f829ffa9a0c822247728a3a91172d4dbab248ce9eb15a7aa355c28e35db091dcee926b76b4585c29b2d464eacc8bb6ea5007230b0cf7dd
7
- data.tar.gz: 51d11b1af5107dabad372a4c0e5ab2b1157685b895982d783da65279e83af16b4ac730a30016158c3501328cb1d5aecd362249a8dfa170c4bd898f834b4854f6
6
+ metadata.gz: 00c391e632ade77df99c1761eb927850524658d10c0b02aa8ff0dbe04696c3f96bd91e280d347cafe52dd52a92efbbb022c0217ac5eea44277bed0f2b920854a
7
+ data.tar.gz: 1744c48343ce4e612581d954fd63efdf7c9500559e20f899e48beee1488c2a402b014c491a03aea5cca1015b0ca43a2aa39008532fed4ba4373e287f8a240fe2
@@ -9,6 +9,29 @@ require "dependabot/docker/version"
9
9
  require "dependabot/docker/requirement"
10
10
  require "dependabot/docker/utils/credentials_finder"
11
11
 
12
+ module DockerRegistry2
13
+ class Registry
14
+ private
15
+
16
+ # By default the Docker Registry client sets the Accept header to
17
+ # `application/vnd.docker.distribution.manifest.v2+json`
18
+ # This results in the digest of a specific platform to be returned, we
19
+ # want to override this header so we can fetch the generic digest
20
+ # associated with the given repo/tag.
21
+ def headers(payload: nil, bearer_token: nil)
22
+ headers = {}
23
+ headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
24
+ if payload.nil?
25
+ headers["Accept"] =
26
+ "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
27
+ end
28
+ headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
29
+
30
+ headers
31
+ end
32
+ end
33
+ end
34
+
12
35
  module Dependabot
13
36
  module Docker
14
37
  class UpdateChecker < Dependabot::UpdateCheckers::Base
@@ -24,7 +47,7 @@ module Dependabot
24
47
  #{VERSION_WITH_PFX}|
25
48
  #{VERSION_WITH_SFX}|
26
49
  #{VERSION_WITH_PFX_AND_SFX}
27
- /x.freeze
50
+ /x.freeze
28
51
 
29
52
  def latest_version
30
53
  @latest_version ||= fetch_latest_version
@@ -188,6 +211,7 @@ module Dependabot
188
211
  @tags_from_registry ||=
189
212
  begin
190
213
  client = docker_registry_client
214
+
191
215
  client.tags(docker_repo_name, auto_paginate: true).fetch("tags")
192
216
  rescue *transient_docker_errors
193
217
  attempt ||= 1
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-docker
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.131.0
4
+ version: 0.133.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-02-04 00:00:00.000000000 Z
11
+ date: 2021-02-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.131.0
19
+ version: 0.133.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.131.0
26
+ version: 0.133.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement