dependabot-docker 0.131.3 → 0.133.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 23636f4c2890bdd8d8371ed3c07f477906207fb2f507cc4e3acb05f4ca783ec4
-  data.tar.gz: 7ef9db023b25111dd572c2b78b9c2307d622d64123b7e6b6f962fc2e946d3560
+  metadata.gz: d36e18043a2060974af2af4b63f9682c11c9bb4ba59177be92933e411282c161
+  data.tar.gz: 5d760e0137ab968e325b330c94b6a80ea2a4b8d65251b58425f8de17192f5ab6
 SHA512:
-  metadata.gz: 83e42d5a73fb32a737729d256ddca670a2889f0edd11c7a8a7e60f120d9b0569f23ef4ee172d63b00950fd859ada345196b55c5b6d70fb064c9cc1458b384920
-  data.tar.gz: cab52d67ceb291da841b5b33394e8d46994da965ffe00bbb0af2907b20417b3427b763ca9f61e45fc4d66f976329e62b4c6bebc247a55a639dbde6168bac7982
+  metadata.gz: 2a24e2e167fcab2fbf6255de9c68263d2f7872214a0c04cb60716cefb74b0ab53d00d6b22e0a693d23006bd81b68d9cd58566c313ca3c3af1ce6566552a89d34
+  data.tar.gz: 2cb3d81f2ae0fc47218aeef236e48e9cec4fc4d146aac5c51a0c12d8fc580c29cd9718c9de2a6ed4e54a419fd9703d6e08314ef2fb4334a51ea66aee80d6c6d2

data/lib/dependabot/docker/update_checker.rb

@@ -14,16 +14,23 @@ module DockerRegistry2
     private
 
     # By default the Docker Registry client sets the Accept header to
-    # `application/vnd.docker.distribution.manifest.v2+json`
-    # This results in the digest of a specific platform to be returned, we
-    # want to override this header so we can fetch the generic digest
-    # associated with the given repo/tag.
+    # `application/vnd.docker.distribution.manifest.v2+json`. This is fine for
+    # most images, but for multi-architecture images, it fetches the digest of a
+    # specific architecture instead of the digest for the multi-architecture
+    # image. We override the header to tell the Docker API to vary its behavior
+    # depending on whether the image is a uses a traditional (non-list) manifest
+    # or a manifest list. If the image uses a traditional manifest, the API will
+    # return the manifest digest. If the image uses a manifest list, the API
+    # will return the manifest list digest.
     def headers(payload: nil, bearer_token: nil)
       headers = {}
       headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
       if payload.nil?
-        headers["Accept"] =
-          "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
+        headers["Accept"] = %w(
+          application/vnd.docker.distribution.manifest.v2+json
+          application/vnd.docker.distribution.manifest.list.v2+json
+          application/json"
+        ).join(",")
       end
       headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.131.3
+  version: 0.133.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-08 00:00:00.000000000 Z
+date: 2021-02-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.3
+        version: 0.133.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.3
+        version: 0.133.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.9.1
+- !ruby/object:Gem::Dependency
+  name: stackprof
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.16
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.16
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement