dependabot-docker 0.240.0 → 0.242.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2cde1450fa50370c68266de45f8ec3270737b09be9f77db757597903e30d103f
-  data.tar.gz: 654ce1fed988f44f83acdc52a73da78f6d8f90b37c41c3ee568f0e8218c4b3a1
+  metadata.gz: e97724c30b6f3ab80401a149b53a6fb8f6f25e606d0bea25e3d6500c63fc72ed
+  data.tar.gz: 272a0b771b8beebd7efe2e0c41e016556ca5b21aa2b498480cdd8fb8f7af01a2
 SHA512:
-  metadata.gz: fb973910b24d7a4b40c9b06204a3eebf9188d95373aec054bf943023d874fc66a915087f275ce31b437c58636fa415dac25e8072b1da51a4e2e8a968ca9569da
-  data.tar.gz: ff2ae8992fe69dae523e3504b1a9e3ded6d4c83299a7124d15b67886bf491331aa868f02865bcb98958c66d47ebc2468193a81799f7075e76b48bc2f09a5654d
+  metadata.gz: 19e3a05bd9ca056df159b4eadf8b2661c74ca9e0b42db188db35648309e6075af7027bc1a1e81847628e3e173e48ef91e60d58c1090bb95de78ec65af47997e1
+  data.tar.gz: e1871ed07928b26a79851aebb05e49975253747442cdbc310d432f3b2237045caebc4e59992595a7e7bcbdf7715b1e19a8d6deeb7dc684fc3083ff907844a0b2

data/lib/dependabot/docker/file_parser.rb

@@ -171,17 +171,19 @@ module Dependabot
       end
 
       def parse_helm(img_hash)
-        repo = img_hash.fetch("repository", nil)
         tag_value = img_hash.key?("tag") ? img_hash.fetch("tag", nil) : img_hash.fetch("version", nil)
-        registry = img_hash.fetch("registry", nil)
+        return [] unless tag_value
+
+        repo = img_hash.fetch("repository", nil)
+        return [] unless repo
 
         tag_details = tag_value.to_s.match(TAG_WITH_DIGEST).named_captures
         tag = tag_details["tag"]
-        digest = tag_details["digest"]
-
-        return [] unless repo
         return [repo] unless tag
 
+        registry = img_hash.fetch("registry", nil)
+        digest = tag_details["digest"]
+
         image = "#{repo}:#{tag}"
         image.prepend("#{registry}/") if registry
         image << "@sha256:#{digest}/" if digest

data/lib/dependabot/docker/metadata_finder.rb

@@ -13,7 +13,7 @@ module Dependabot
       def look_up_source
         return if dependency.requirements.empty?
 
-        new_source = dependency.requirements.first[:source]
+        new_source = dependency.requirements.first&.fetch(:source)
         return unless new_source && new_source[:registry] && new_source[:tag]
 
         image_ref = "#{new_source[:registry]}/#{dependency.name}:#{new_source[:tag]}"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.240.0
+  version: 0.242.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-01-12 00:00:00.000000000 Z
+date: 2024-01-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.240.0
+        version: 0.242.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.240.0
+        version: 0.242.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -244,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.240.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.242.0
 post_install_message: 
 rdoc_options: []
 require_paths: