dependabot-docker 0.352.0 → 0.354.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e49e0172ebe852bbe7008022d64952eae92b47363d87e42fbba763d5efb10742
-  data.tar.gz: 98e77720a22bccdf2ca134613d95320697c8a174b6d2e6042b2de7771c469628
+  metadata.gz: e457b154c269925fb061d0fafa9b5ce0a6fd930db9acf435aa9591862132c423
+  data.tar.gz: 8fe185006bec485af04e7a67ac86b6cc23a1c95dfd7008cef3976a932778dd0d
 SHA512:
-  metadata.gz: a0b191cdf1046910aa369ce227d8b6562351a33a3ffe5495d2db2c2a5cb37125834b8e452fa7019d3a8408a4cf9a5dae8c3c933b76f41d4c1ebcfe3d55ecdd7f
-  data.tar.gz: a54a1622d6cbaf5e93d01129f44275dd82956a34771720c2e20e0f512193cd6fd3bdab0f9033d6c4c4f4c80eda7d1cd79cd7776faeb72ebaa28ac8fbbffdb446
+  metadata.gz: e8fa19d1a2de032e3197b82f46fed017fa850149230616304dc51e1d9d7e8ea84f204b4b056e3394ebd7b00c712cee2ba3ef7cc1f8b852cbda6c160eb2798108
+  data.tar.gz: 15482e7c60898d05a7491eb6ffe5593f421a7399682dc0784074d9e59d1e164a4924ebf0373f5bd92bec74ca37e1d5a57d04d20d9d9007db78aa7e315d94375d

data/lib/dependabot/docker/update_checker.rb

@@ -219,7 +219,7 @@ module Dependabot
           client.digest(docker_repo_name, tag.name)
         end
 
-        first_digest = digest_info.first&.fetch("digest")
+        first_digest = extract_digest_from_response(digest_info, tag)
         return nil unless first_digest
 
         blob_info = with_retries(max_attempts: 3, errors: transient_docker_errors) do
@@ -240,6 +240,34 @@ module Dependabot
         )
       end
 
+      sig do
+        params(
+          digest_info: T.untyped,
+          tag: Dependabot::Docker::Tag
+        ).returns(T.nilable(String))
+      end
+      def extract_digest_from_response(digest_info, tag)
+        # digest_info can be either a String or an Array depending on the registry response
+        case digest_info
+        when Array
+          if digest_info.empty?
+            Dependabot.logger.warn(
+              "Empty digest_info array for #{docker_repo_name}:#{tag.name}"
+            )
+            return nil
+          end
+          digest_info.first&.fetch("digest")
+        when String
+          digest_info
+        else
+          Dependabot.logger.warn(
+            "Unexpected digest_info type for #{docker_repo_name}:#{tag.name}: " \
+            "#{digest_info.class} (expected String or Array)"
+          )
+          nil
+        end
+      end
+
       sig do
         params(
           max_attempts: Integer,

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.352.0
+  version: 0.354.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.352.0
+        version: 0.354.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.352.0
+        version: 0.354.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -261,7 +261,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.352.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.354.0
 rdoc_options: []
 require_paths:
 - lib