dependabot-docker 0.131.0 → 0.133.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/docker/update_checker.rb +25 -1
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 68f97beb79b19ccc443281a6f69652cf982648e0ad41dfba2e952e01e717287f
|
4
|
+
data.tar.gz: 4ce22bfe5f9b40a90c732daae60d81eac94f4bdb1d91f346cd8c038f79530dea
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 00c391e632ade77df99c1761eb927850524658d10c0b02aa8ff0dbe04696c3f96bd91e280d347cafe52dd52a92efbbb022c0217ac5eea44277bed0f2b920854a
|
7
|
+
data.tar.gz: 1744c48343ce4e612581d954fd63efdf7c9500559e20f899e48beee1488c2a402b014c491a03aea5cca1015b0ca43a2aa39008532fed4ba4373e287f8a240fe2
|
@@ -9,6 +9,29 @@ require "dependabot/docker/version"
|
|
9
9
|
require "dependabot/docker/requirement"
|
10
10
|
require "dependabot/docker/utils/credentials_finder"
|
11
11
|
|
12
|
+
module DockerRegistry2
|
13
|
+
class Registry
|
14
|
+
private
|
15
|
+
|
16
|
+
# By default the Docker Registry client sets the Accept header to
|
17
|
+
# `application/vnd.docker.distribution.manifest.v2+json`
|
18
|
+
# This results in the digest of a specific platform to be returned, we
|
19
|
+
# want to override this header so we can fetch the generic digest
|
20
|
+
# associated with the given repo/tag.
|
21
|
+
def headers(payload: nil, bearer_token: nil)
|
22
|
+
headers = {}
|
23
|
+
headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
|
24
|
+
if payload.nil?
|
25
|
+
headers["Accept"] =
|
26
|
+
"application/vnd.docker.distribution.manifest.list.v2+json, application/json"
|
27
|
+
end
|
28
|
+
headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
|
29
|
+
|
30
|
+
headers
|
31
|
+
end
|
32
|
+
end
|
33
|
+
end
|
34
|
+
|
12
35
|
module Dependabot
|
13
36
|
module Docker
|
14
37
|
class UpdateChecker < Dependabot::UpdateCheckers::Base
|
@@ -24,7 +47,7 @@ module Dependabot
|
|
24
47
|
#{VERSION_WITH_PFX}|
|
25
48
|
#{VERSION_WITH_SFX}|
|
26
49
|
#{VERSION_WITH_PFX_AND_SFX}
|
27
|
-
|
50
|
+
/x.freeze
|
28
51
|
|
29
52
|
def latest_version
|
30
53
|
@latest_version ||= fetch_latest_version
|
@@ -188,6 +211,7 @@ module Dependabot
|
|
188
211
|
@tags_from_registry ||=
|
189
212
|
begin
|
190
213
|
client = docker_registry_client
|
214
|
+
|
191
215
|
client.tags(docker_repo_name, auto_paginate: true).fetch("tags")
|
192
216
|
rescue *transient_docker_errors
|
193
217
|
attempt ||= 1
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-docker
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.133.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-02-
|
11
|
+
date: 2021-02-09 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.133.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.133.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|