dependabot-docker 0.294.0 → 0.295.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d28231b8253248a0800333873c903c033a7e0da0002e6341356625de65fb4053
-  data.tar.gz: 1547a095427ea9b2e667b43c3b81a1f37c2fa6bfba2b11abaa878b7af833a734
+  metadata.gz: 65df80cd815545e79e5a1fd377eeb5a6d6d96e8624378233d33662b638e32459
+  data.tar.gz: 7ffe73358a0560061b2a87b7ffc1c1bac17dd3dbcbfbe5e5011708db3485882a
 SHA512:
-  metadata.gz: 78fef77b077706bd18dfc28ad0335162d9b6085c392cf4dd5c10000c4d7034fd3a7cbc1f2b446a676f9e4185608789a8f6c86aaaafffd6568da1357a2810aede
-  data.tar.gz: b9a94d0af413f4998e2841502dacaedd50d403ecb917d84ddae02e64840f69e7bf325235030889e94079ee0e52980a0997a19938888f4f48ee41479089896cf3
+  metadata.gz: 8ff3a199e2797341f91e1a4fd3fea47e33dee60bbbf6c766cc2f702ac3760ce651495e402de08201dffb33e3b918910ffb1d96fe3a3df13201832d8038a082c7
+  data.tar.gz: 45027cd10b10efc6e71fb461a0aa7e73f6b369fbb4caf29993b91c4701ea989bb60395e22afe709ca272274ba414a9c2eccc3f89286fc472108e26b75b9b90b9

data/lib/dependabot/docker/update_checker.rb

@@ -300,17 +300,30 @@ module Dependabot
         "library/#{dependency.name}"
       end
 
+      # Defaults from https://github.com/deitch/docker_registry2/blob/bfde04144f0b7fd63c156a1aca83efe19ee78ffd/lib/registry/registry.rb#L26-L27
+      DEFAULT_DOCKER_OPEN_TIMEOUT_IN_SECONDS = 2
+      DEFAULT_DOCKER_READ_TIMEOUT_IN_SECONDS = 5
+
       def docker_registry_client
         @docker_registry_client ||=
           DockerRegistry2::Registry.new(
             "https://#{registry_hostname}",
             user: registry_credentials&.fetch("username", nil),
             password: registry_credentials&.fetch("password", nil),
-            read_timeout: 10,
+            read_timeout: docker_read_timeout_in_seconds,
+            open_timeout: docker_open_timeout_in_seconds,
             http_options: { proxy: ENV.fetch("HTTPS_PROXY", nil) }
           )
       end
 
+      def docker_open_timeout_in_seconds
+        ENV.fetch("DEPENDABOT_DOCKER_OPEN_TIMEOUT_IN_SECONDS", DEFAULT_DOCKER_OPEN_TIMEOUT_IN_SECONDS).to_i
+      end
+
+      def docker_read_timeout_in_seconds
+        ENV.fetch("DEPENDABOT_DOCKER_READ_TIMEOUT_IN_SECONDS", DEFAULT_DOCKER_READ_TIMEOUT_IN_SECONDS).to_i
+      end
+
       def sort_tags(candidate_tags, version_tag)
         candidate_tags.sort do |tag_a, tag_b|
           if comparable_version_from(tag_a) > comparable_version_from(tag_b)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.294.0
+  version: 0.295.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-23 00:00:00.000000000 Z
+date: 2025-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.294.0
+        version: 0.295.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.294.0
+        version: 0.295.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.294.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.295.0
 post_install_message:
 rdoc_options: []
 require_paths: