dependabot-docker 0.133.0 → 0.133.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/docker/update_checker.rb +13 -6
  3. metadata +20 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 68f97beb79b19ccc443281a6f69652cf982648e0ad41dfba2e952e01e717287f
4
- data.tar.gz: 4ce22bfe5f9b40a90c732daae60d81eac94f4bdb1d91f346cd8c038f79530dea
3
+ metadata.gz: 22d5083914e536f519cf10b23651f3897f411d524ef760add3ef17e5fe0f5267
4
+ data.tar.gz: 6c1723c002b406ec1c9b7b5fd1f9746917d59c4f37e87b3bf9c43cbf2eb7149f
5
5
  SHA512:
6
- metadata.gz: 00c391e632ade77df99c1761eb927850524658d10c0b02aa8ff0dbe04696c3f96bd91e280d347cafe52dd52a92efbbb022c0217ac5eea44277bed0f2b920854a
7
- data.tar.gz: 1744c48343ce4e612581d954fd63efdf7c9500559e20f899e48beee1488c2a402b014c491a03aea5cca1015b0ca43a2aa39008532fed4ba4373e287f8a240fe2
6
+ metadata.gz: 6b00422a81626f90822a493b1abe5bbc400c5de2c1e0d2e39c3f3f9e535137df81664900f0eec3ba188e4b036c52114be34c495db08e293b3da281245de9b3fe
7
+ data.tar.gz: 608d6027ef9c895725e721a9e92f106ba3ab5ea3c07e47f31cb9f40dda208e585a80e099af193db1d17c9e9b95ab922deb750696055483136530087d842c824e
data/lib/dependabot/docker/update_checker.rb CHANGED
@@ -14,16 +14,23 @@ module DockerRegistry2
14
14
  private
15
15
 
16
16
  # By default the Docker Registry client sets the Accept header to
17
- # `application/vnd.docker.distribution.manifest.v2+json`
18
- # This results in the digest of a specific platform to be returned, we
19
- # want to override this header so we can fetch the generic digest
20
- # associated with the given repo/tag.
17
+ # `application/vnd.docker.distribution.manifest.v2+json`. This is fine for
18
+ # most images, but for multi-architecture images, it fetches the digest of a
19
+ # specific architecture instead of the digest for the multi-architecture
20
+ # image. We override the header to tell the Docker API to vary its behavior
21
+ # depending on whether the image is a uses a traditional (non-list) manifest
22
+ # or a manifest list. If the image uses a traditional manifest, the API will
23
+ # return the manifest digest. If the image uses a manifest list, the API
24
+ # will return the manifest list digest.
21
25
  def headers(payload: nil, bearer_token: nil)
22
26
  headers = {}
23
27
  headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
24
28
  if payload.nil?
25
- headers["Accept"] =
26
- "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
29
+ headers["Accept"] = %w(
30
+ application/vnd.docker.distribution.manifest.v2+json
31
+ application/vnd.docker.distribution.manifest.list.v2+json
32
+ application/json"
33
+ ).join(",")
27
34
  end
28
35
  headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
29
36
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-docker
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.133.0
4
+ version: 0.133.5
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-02-09 00:00:00.000000000 Z
11
+ date: 2021-02-19 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.133.0
19
+ version: 0.133.5
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.133.0
26
+ version: 0.133.5
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
100
100
  requirements:
101
101
  - - "~>"
102
102
  - !ruby/object:Gem::Version
103
- version: 1.9.0
103
+ version: 1.10.0
104
104
  type: :development
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
- version: 1.9.0
110
+ version: 1.10.0
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: simplecov
113
113
  requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
138
  version: 0.9.1
139
+ - !ruby/object:Gem::Dependency
140
+ name: stackprof
141
+ requirement: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - "~>"
144
+ - !ruby/object:Gem::Version
145
+ version: 0.2.16
146
+ type: :development
147
+ prerelease: false
148
+ version_requirements: !ruby/object:Gem::Requirement
149
+ requirements:
150
+ - - "~>"
151
+ - !ruby/object:Gem::Version
152
+ version: 0.2.16
139
153
  - !ruby/object:Gem::Dependency
140
154
  name: vcr
141
155
  requirement: !ruby/object:Gem::Requirement