dependabot-docker 0.230.0 → 0.232.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e7f9ec1567dc6f2465b0e00af81ac36a01ec8c17058c5d226d96951982e27abe
-  data.tar.gz: 2c79b115b7166fe15906392ed34c19e8c45af370fca4a65230b154b8895d469b
+  metadata.gz: f7ec65c65ca477422b595797fb972fe21b52c3682ff698eb288a390c202711fa
+  data.tar.gz: 19059ec95f6e3736c32e399baa981fa6383f0c89d3a479081a892b89fad97d75
 SHA512:
-  metadata.gz: 7ed5661fab2361174a4fb439bb7c25ac5ed15af7d58235898e594a929853478aec51bcaf96e00799121397d0861c451ca958e47a185a7a9ae133de03f4ec7b52
-  data.tar.gz: 919c3bd8aa5df43df618e8b439d1dde6aff253fc445cb4ad126e02a0820d6308a1a7eb8e6c330030c016f9cdb948c0dff31f14e5356684dee1ee243d1fb6eae7
+  metadata.gz: 15d29aefbd1242ef3cddbd26b4d6621b9291b21ca5eaef7e56753db4efec6bca471b164db686af3194618893d3c7a41f63c5183cc42bda1789245311d331f1ff
+  data.tar.gz: 249371addc50a8d769162c3cb9de62d7919da568a0221b6d438f18606deede62f5d6883f8351693ac6d11cc83eb5e7f19b1ee930f447114a6985d88d3e2840f3

data/lib/dependabot/docker/file_fetcher.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/docker/utils/helpers"
@@ -49,9 +50,9 @@ module Dependabot
 
       def dockerfiles
         @dockerfiles ||=
-          repo_contents(raise_errors: false).
-          select { |f| f.type == "file" && f.name.match?(DOCKER_REGEXP) }.
-          map { |f| fetch_file_from_host(f.name) }
+          repo_contents(raise_errors: false)
+          .select { |f| f.type == "file" && f.name.match?(DOCKER_REGEXP) }
+          .map { |f| fetch_file_from_host(f.name) }
       end
 
       def correctly_encoded_dockerfiles
@@ -64,9 +65,9 @@ module Dependabot
 
       def yamlfiles
         @yamlfiles ||=
-          repo_contents(raise_errors: false).
-          select { |f| f.type == "file" && f.name.match?(YAML_REGEXP) }.
-          map { |f| fetch_file_from_host(f.name) }
+          repo_contents(raise_errors: false)
+          .select { |f| f.type == "file" && f.name.match?(YAML_REGEXP) }
+          .map { |f| fetch_file_from_host(f.name) }
       end
 
       def likely_kubernetes_resource?(resource)

data/lib/dependabot/docker/file_parser.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "docker_registry2"

data/lib/dependabot/docker/file_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/docker/utils/helpers"
@@ -85,9 +86,9 @@ module Dependabot
         old_declaration_regex = /^#{FROM_REGEX}\s+.*@sha256:#{old_digest}/
 
         previous_content.gsub(old_declaration_regex) do |old_dec|
-          old_dec.
-            gsub("@sha256:#{old_digest}", "@sha256:#{new_digest}").
-            gsub(":#{old_tag}", ":#{new_tag}")
+          old_dec
+            .gsub("@sha256:#{old_digest}", "@sha256:#{new_digest}")
+            .gsub(":#{old_tag}", ":#{new_tag}")
         end
       end
 
@@ -116,13 +117,13 @@ module Dependabot
       end
 
       def new_tags(file)
-        requirements(file).
-          map { |r| r.fetch(:source)[:tag] }
+        requirements(file)
+          .map { |r| r.fetch(:source)[:tag] }
       end
 
       def old_tags(file)
-        previous_requirements(file).
-          map { |r| r.fetch(:source)[:tag] }
+        previous_requirements(file)
+          .map { |r| r.fetch(:source)[:tag] }
       end
 
       def private_registry_url(source)
@@ -207,13 +208,13 @@ module Dependabot
       end
 
       def requirements(file)
-        dependency.requirements.
-          select { |r| r[:file] == file.name }
+        dependency.requirements
+                  .select { |r| r[:file] == file.name }
       end
 
       def previous_requirements(file)
-        dependency.previous_requirements.
-          select { |r| r[:file] == file.name }
+        dependency.previous_requirements
+                  .select { |r| r[:file] == file.name }
       end
     end
   end

data/lib/dependabot/docker/metadata_finder.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/metadata_finders"
@@ -30,5 +31,5 @@ module Dependabot
   end
 end
 
-Dependabot::MetadataFinders.
-  register("docker", Dependabot::Docker::MetadataFinder)
+Dependabot::MetadataFinders
+  .register("docker", Dependabot::Docker::MetadataFinder)

data/lib/dependabot/docker/requirement.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/utils"
@@ -30,5 +31,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_requirement_class("docker", Dependabot::Docker::Requirement)
+Dependabot::Utils
+  .register_requirement_class("docker", Dependabot::Docker::Requirement)

data/lib/dependabot/docker/tag.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/docker/file_parser"

data/lib/dependabot/docker/update_checker.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "docker_registry2"
@@ -174,11 +175,11 @@ module Dependabot
       def latest_tag
         return unless latest_digest
 
-        tags_from_registry.
-          select(&:canonical?).
-          sort_by { |t| comparable_version_from(t) }.
-          reverse.
-          find { |t| digest_of(t.name) == latest_digest }
+        tags_from_registry
+          .select(&:canonical?)
+          .sort_by { |t| comparable_version_from(t) }
+          .reverse
+          .find { |t| digest_of(t.name) == latest_digest }
       end
 
       def updated_digest
@@ -324,8 +325,8 @@ module Dependabot
 
       def filter_ignored(candidate_tags)
         filtered =
-          candidate_tags.
-          reject do |tag|
+          candidate_tags
+          .reject do |tag|
             version = comparable_version_from(tag)
             ignore_requirements.any? { |r| r.satisfied_by?(version) }
           end

data/lib/dependabot/docker/utils/credentials_finder.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "aws-sdk-ecr"
@@ -18,9 +19,9 @@ module Dependabot
 
         def credentials_for_registry(registry_hostname)
           registry_details =
-            credentials.
-            select { |cred| cred["type"] == "docker_registry" }.
-            find { |cred| cred.fetch("registry") == registry_hostname }
+            credentials
+            .select { |cred| cred["type"] == "docker_registry" }
+            .find { |cred| cred.fetch("registry") == registry_hostname }
           return unless registry_details
           return registry_details unless registry_hostname.match?(AWS_ECR_URL)
 

data/lib/dependabot/docker/utils/helpers.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 module Dependabot

data/lib/dependabot/docker/version.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/version"
@@ -14,13 +15,21 @@ module Dependabot
       def initialize(version)
         release_part, update_part = version.split("_", 2)
 
-        @release_part = Dependabot::Version.new(release_part.tr("-", "."))
+        @release_part = Dependabot::Version.new(release_part.sub("v", "").tr("-", "."))
 
         @update_part = Dependabot::Version.new(update_part&.start_with?(/[0-9]/) ? update_part : 0)
+
+        super(@release_part)
       end
 
       def self.correct?(version)
-        super(new(version).to_semver)
+        return true if version.is_a?(Gem::Version)
+
+        # We can't call new here because Gem::Version calls self.correct? in its initialize method
+        # causing an infinite loop, so instead we check if the release_part of the version is correct
+        release_part, = version.split("_", 2)
+        release_part = release_part.sub("v", "").tr("-", ".")
+        super(release_part)
       rescue ArgumentError
         # if we can't instantiate a version, it can't be correct
         false
@@ -47,5 +56,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_version_class("docker", Dependabot::Docker::Version)
+Dependabot::Utils
+  .register_version_class("docker", Dependabot::Docker::Version)

data/lib/dependabot/docker.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 # These all need to be required so the various classes can be registered in a
@@ -11,8 +12,8 @@ require "dependabot/docker/requirement"
 require "dependabot/docker/version"
 
 require "dependabot/pull_request_creator/labeler"
-Dependabot::PullRequestCreator::Labeler.
-  register_label_details("docker", name: "docker", colour: "21ceff")
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("docker", name: "docker", colour: "21ceff")
 
 require "dependabot/dependency"
 Dependabot::Dependency.register_production_check("docker", ->(_) { true })

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.230.0
+  version: 0.232.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-08 00:00:00.000000000 Z
+date: 2023-09-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +216,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.230.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.232.0
 post_install_message: 
 rdoc_options: []
 require_paths: