dependabot-docker 0.239.0 → 0.240.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5419974e6fd18d18ee294c4b59ac0e81b7f55a662b9456d070f6c593e9f5cae5
-  data.tar.gz: f01df20473b9411c00c3d5f7e2b3cea8885c14f8ce8deddbae0d1ea5581728ce
+  metadata.gz: 2cde1450fa50370c68266de45f8ec3270737b09be9f77db757597903e30d103f
+  data.tar.gz: 654ce1fed988f44f83acdc52a73da78f6d8f90b37c41c3ee568f0e8218c4b3a1
 SHA512:
-  metadata.gz: 5444aedcbef055a6588d516cd4f098db18749d54081c9fefa830258d5b6b388c58dba2bab0f99bf26e12751c5100d50fdb15a299df8e6943a258b4c2eec88282
-  data.tar.gz: aaa252ac09bbbab0ce7d2b3bf58e72c78d8789f31e4ac37c57c5113453a41c926e03a8a668b877899638e04fd2beb2d0b0d033aec85b03396300eaa7d7029bbc
+  metadata.gz: fb973910b24d7a4b40c9b06204a3eebf9188d95373aec054bf943023d874fc66a915087f275ce31b437c58636fa415dac25e8072b1da51a4e2e8a968ca9569da
+  data.tar.gz: ff2ae8992fe69dae523e3504b1a9e3ded6d4c83299a7124d15b67886bf491331aa868f02865bcb98958c66d47ebc2468193a81799f7075e76b48bc2f09a5654d

data/lib/dependabot/docker/file_parser.rb

@@ -111,7 +111,9 @@ module Dependabot
 
           images.each do |string|
             # TODO: Support Docker references and path references
-            details = string.match(IMAGE_SPEC).named_captures
+            details = string.match(IMAGE_SPEC)&.named_captures
+            next if details.nil?
+
             details["registry"] = nil if details["registry"] == "docker.io"
 
             version = version_from(details)

data/lib/dependabot/docker/version.rb

@@ -41,7 +41,7 @@ module Dependabot
 
         release_part, = parsed_version[:version].split("_", 2)
         release_part = Tag.new(release_part.chomp(".").chomp("-").chomp("_")).numeric_version || parsed_version
-        super(release_part)
+        super(release_part.to_s)
       rescue ArgumentError
         # if we can't instantiate a version, it can't be correct
         false

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.239.0
+  version: 0.240.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-28 00:00:00.000000000 Z
+date: 2024-01-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.240.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.240.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -206,6 +206,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Docker provides support for bumping Docker image tags via
   Dependabot. If you want support for multiple package managers, you probably want
   the meta-gem dependabot-omnibus.
@@ -230,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.240.0
 post_install_message: 
 rdoc_options: []
 require_paths: