dependabot-docker 0.239.0 → 0.241.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5419974e6fd18d18ee294c4b59ac0e81b7f55a662b9456d070f6c593e9f5cae5
-  data.tar.gz: f01df20473b9411c00c3d5f7e2b3cea8885c14f8ce8deddbae0d1ea5581728ce
+  metadata.gz: 45c63512a728e3f7919e655a0db6f3631ba24835728e72fd2c8af5709c1c166c
+  data.tar.gz: 959aaf1469b148169d84f604b869e57dae8f94ec0589e0928405c8579fde6706
 SHA512:
-  metadata.gz: 5444aedcbef055a6588d516cd4f098db18749d54081c9fefa830258d5b6b388c58dba2bab0f99bf26e12751c5100d50fdb15a299df8e6943a258b4c2eec88282
-  data.tar.gz: aaa252ac09bbbab0ce7d2b3bf58e72c78d8789f31e4ac37c57c5113453a41c926e03a8a668b877899638e04fd2beb2d0b0d033aec85b03396300eaa7d7029bbc
+  metadata.gz: cabc652ee17078e2bd77bd3d24a0a786f5f1e03077f74c2127cf239c12d4b268048c8d9732dbaf7f5d62a87b91488789939799361904321270a8ab4fabc8d9cd
+  data.tar.gz: 6f0b11164025d9b7e10165db185ecab53e038b5e446918696ab5e18587d2b7c6adb45ee346fc6f6a07a422968b9a9da113d51ef117f6975e62c2fab5be496685

data/lib/dependabot/docker/file_parser.rb

@@ -111,7 +111,9 @@ module Dependabot
 
           images.each do |string|
             # TODO: Support Docker references and path references
-            details = string.match(IMAGE_SPEC).named_captures
+            details = string.match(IMAGE_SPEC)&.named_captures
+            next if details.nil?
+
             details["registry"] = nil if details["registry"] == "docker.io"
 
             version = version_from(details)
@@ -169,17 +171,19 @@ module Dependabot
       end
 
       def parse_helm(img_hash)
-        repo = img_hash.fetch("repository", nil)
         tag_value = img_hash.key?("tag") ? img_hash.fetch("tag", nil) : img_hash.fetch("version", nil)
-        registry = img_hash.fetch("registry", nil)
+        return [] unless tag_value
+
+        repo = img_hash.fetch("repository", nil)
+        return [] unless repo
 
         tag_details = tag_value.to_s.match(TAG_WITH_DIGEST).named_captures
         tag = tag_details["tag"]
-        digest = tag_details["digest"]
-
-        return [] unless repo
         return [repo] unless tag
 
+        registry = img_hash.fetch("registry", nil)
+        digest = tag_details["digest"]
+
         image = "#{repo}:#{tag}"
         image.prepend("#{registry}/") if registry
         image << "@sha256:#{digest}/" if digest

data/lib/dependabot/docker/metadata_finder.rb

@@ -13,7 +13,7 @@ module Dependabot
       def look_up_source
         return if dependency.requirements.empty?
 
-        new_source = dependency.requirements.first[:source]
+        new_source = dependency.requirements.first&.fetch(:source)
         return unless new_source && new_source[:registry] && new_source[:tag]
 
         image_ref = "#{new_source[:registry]}/#{dependency.name}:#{new_source[:tag]}"

data/lib/dependabot/docker/version.rb

@@ -41,7 +41,7 @@ module Dependabot
 
         release_part, = parsed_version[:version].split("_", 2)
         release_part = Tag.new(release_part.chomp(".").chomp("-").chomp("_")).numeric_version || parsed_version
-        super(release_part)
+        super(release_part.to_s)
       rescue ArgumentError
         # if we can't instantiate a version, it can't be correct
         false

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.239.0
+  version: 0.241.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-28 00:00:00.000000000 Z
+date: 2024-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -206,6 +206,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Docker provides support for bumping Docker image tags via
   Dependabot. If you want support for multiple package managers, you probably want
   the meta-gem dependabot-omnibus.
@@ -230,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
 post_install_message: 
 rdoc_options: []
 require_paths: