dependabot-docker 0.226.0 → 0.228.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b32a9aefbcd623b4e2bf553b4aec6676f758f3d27f50f67f99156cc32d8206a0
-  data.tar.gz: f710312b8e2bed67dafabcea2b601be717292fab22301613e447a73153465703
+  metadata.gz: bc4b465413eb425a3e4109d3cc3aecd3935725144fec1e7b47aad3a3153c5657
+  data.tar.gz: 7e3c653e2d40cbc58ce01ea95ffc1c214188883d51311c989da5c4d47e5f11e4
 SHA512:
-  metadata.gz: aa265e080fb4afd058721b5ac0bada493708327f2b5d10d35e0652b15ef0ae3b560ab890fbdd84a20ddf0a8abc7aff34d4bab56423a4b157553dc363ebed285e
-  data.tar.gz: 7f15e687d41a354f1a36b1e22ec899354d4f16edae0ae909e0ab2f105c57aaf3e59de48349b7005a92a13ded2cfd48ab8596434789001c62e345163d227e3894
+  metadata.gz: d70f91963c075b27ef1547a5c5abce84f894216f0604bfc2a912db47427ef39230ef0059051aac0b8918a210e9dda02ddc26b73a73a420316f3c13ae4f675170
+  data.tar.gz: af5ed6b13e8bc49f4fcd88e402af618a08106f2011156f39a6ab8111a0e002e5d6fd4c9a75bf56c5078712114428dda4c48475c47cb05cbb25f2fccf54f8deef

data/lib/dependabot/docker/tag.rb

@@ -100,7 +100,7 @@ module Dependabot
         # candidate for "21-ea-32", since it's the only one that respects that
         # format.
         if version.match?(WORDS_WITH_BUILD)
-          return :"<version>#{version.match(WORDS_WITH_BUILD).to_s.gsub(/-[0-9]+/, "-<build_num>")}"
+          return :"<version>#{version.match(WORDS_WITH_BUILD).to_s.gsub(/-[0-9]+/, '-<build_num>')}"
         end
 
         :normal

data/lib/dependabot/docker/update_checker.rb

@@ -76,7 +76,7 @@ module Dependabot
 
       def version_tag_up_to_date?
         version = dependency.version
-        return unless version
+        return false unless version
 
         return true unless version_tag.comparable?
 
@@ -171,19 +171,14 @@ module Dependabot
         end
       end
 
-      def version_of_latest_tag
+      def latest_tag
         return unless latest_digest
 
-        candidate_tag =
-          tags_from_registry.
+        tags_from_registry.
           select(&:canonical?).
           sort_by { |t| comparable_version_from(t) }.
           reverse.
           find { |t| digest_of(t.name) == latest_digest }
-
-        return unless candidate_tag
-
-        comparable_version_from(candidate_tag)
       end
 
       def updated_digest
@@ -259,10 +254,16 @@ module Dependabot
         return true if tag.looks_like_prerelease?
 
         # Compare the numeric version against the version of the `latest` tag.
-        return false unless latest_digest
-        return false unless version_of_latest_tag
+        return false unless latest_tag
+
+        if comparable_version_from(tag) > comparable_version_from(latest_tag)
+          Dependabot.logger.info "Tag with non-prerelease version name #{tag.name} detected as prerelease, " \
+                                 "because it sorts higher than #{latest_tag.name}."
 
-        comparable_version_from(tag) > version_of_latest_tag
+          true
+        else
+          false
+        end
       end
 
       def comparable_version_from(tag)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.226.0
+  version: 0.228.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-11 00:00:00.000000000 Z
+date: 2023-08-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.228.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.228.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +202,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.226.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.228.0
 post_install_message: 
 rdoc_options: []
 require_paths: