dependabot-docker 0.131.2 → 0.133.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 809ac92837a99c7d815b35254a5b557e517e5bd21a77f38e9254c5607d9e4b08
-  data.tar.gz: 626aec282dfe1935227eceb698b13468d1f1491b85bc74aa19af9225aaa42bc1
+  metadata.gz: 897831d0b7c1e2a12f2f3ccac884faa5efa81dea7fdc952307a4b206e0a70c27
+  data.tar.gz: 5fd27339dd30a42fc9b4102f879286c5f0525fa02638f002005e32520ba09afa
 SHA512:
-  metadata.gz: fdffc332958de758eebfc374f79280263f241c79eb42ab64be71b4ac9d9bc138bf4c309bb8a8589fe0a4157d6a109c1257b57ebcec0b5b35e8f12cfc3d26367d
-  data.tar.gz: ae7e12b64be4d25ecefe7ee6d4d3fc751efeb51bfcd4b9bc5ca3bf9d17aa0a68d69dfe607e98f0e777d0f153efaf8f94a022c789515ed5a165281d850b6f4ac2
+  metadata.gz: 165960e7b54abe81266916d058d3f48065b7ca3ba3744fc8b4551433c20d612e773dd71fe654a49cc88d7839522bcb01c14f5bf74104a0e1ffdbdc6525372b99
+  data.tar.gz: 843c254440d5dfe07068435af389541383944713d107ae164e8834547b754144b3288e6108cc25e7794ed2d39ed9af69440e1af1ca974c21f9f7aebd1f7c9556

data/lib/dependabot/docker/update_checker.rb

@@ -14,16 +14,23 @@ module DockerRegistry2
     private
 
     # By default the Docker Registry client sets the Accept header to
-    # `application/vnd.docker.distribution.manifest.v2+json`
-    # This results in the digest of a specific platform to be returned, we
-    # want to override this header so we can fetch the generic digest
-    # associated with the given repo/tag.
+    # `application/vnd.docker.distribution.manifest.v2+json`. This is fine for
+    # most images, but for multi-architecture images, it fetches the digest of a
+    # specific architecture instead of the digest for the multi-architecture
+    # image. We override the header to tell the Docker API to vary its behavior
+    # depending on whether the image is a uses a traditional (non-list) manifest
+    # or a manifest list. If the image uses a traditional manifest, the API will
+    # return the manifest digest. If the image uses a manifest list, the API
+    # will return the manifest list digest.
     def headers(payload: nil, bearer_token: nil)
       headers = {}
       headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
       if payload.nil?
-        headers["Accept"] =
-          "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
+        headers["Accept"] = %w(
+          application/vnd.docker.distribution.manifest.v2+json
+          application/vnd.docker.distribution.manifest.list.v2+json
+          application/json"
+        ).join(",")
       end
       headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.131.2
+  version: 0.133.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-05 00:00:00.000000000 Z
+date: 2021-02-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.2
+        version: 0.133.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.2
+        version: 0.133.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement