dependabot-docker 0.400.0 → 0.402.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/docker/update_checker.rb +21 -5
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: ecf24df33e44c8d3f2d9e53184192de6fc71ca362ec6e943e83afdf9944cbe1f
|
|
4
|
+
data.tar.gz: 4341b63bd9a2e1f4ff7c00bc2a837981ed47ac98a0bb436987740e2cad55588f
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: baee04791b9d10b688f35fa9bfed6ccbb4e90f461548797a12c3f68bea4b59911e4fee3d3e02b50684bca4d2979687eef936043f31a7fef0a33d135c400134e2
|
|
7
|
+
data.tar.gz: 281b7c27917e4a91d837265785203566620e888e26f5687d4745b6a5b2d648ec2214ce8522076b1f8cb06930f28ae1d2c33a7fd4515caa270660c15931b2b346
|
|
@@ -688,13 +688,29 @@ module Dependabot
|
|
|
688
688
|
|
|
689
689
|
sig { returns(T.nilable(Dependabot::Docker::Tag)) }
|
|
690
690
|
def latest_tag
|
|
691
|
+
# Wrapped in an array so a nil result is cached too
|
|
692
|
+
@latest_tag ||= T.let([find_latest_tag], T.nilable(T::Array[T.nilable(Dependabot::Docker::Tag)]))
|
|
693
|
+
@latest_tag.first
|
|
694
|
+
end
|
|
695
|
+
|
|
696
|
+
sig { returns(T.nilable(Dependabot::Docker::Tag)) }
|
|
697
|
+
def find_latest_tag
|
|
691
698
|
return unless latest_digest
|
|
692
699
|
|
|
693
|
-
tags_from_registry
|
|
694
|
-
|
|
695
|
-
|
|
696
|
-
|
|
697
|
-
|
|
700
|
+
found = tags_from_registry
|
|
701
|
+
.select(&:canonical?)
|
|
702
|
+
.sort_by { |t| comparable_version_from(t) }
|
|
703
|
+
.reverse
|
|
704
|
+
.find { |t| digest_of(t.name) == latest_digest }
|
|
705
|
+
|
|
706
|
+
unless found
|
|
707
|
+
Dependabot.logger.info(
|
|
708
|
+
"No canonical tag matches the digest of `latest` for #{dependency.name}; " \
|
|
709
|
+
"pre-release detection based on `latest` is unavailable"
|
|
710
|
+
)
|
|
711
|
+
end
|
|
712
|
+
|
|
713
|
+
found
|
|
698
714
|
end
|
|
699
715
|
|
|
700
716
|
sig { returns(T.nilable(String)) }
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-docker
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.402.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.402.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.402.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: debug
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -266,7 +266,7 @@ licenses:
|
|
|
266
266
|
- MIT
|
|
267
267
|
metadata:
|
|
268
268
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
269
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
269
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.402.0
|
|
270
270
|
rdoc_options: []
|
|
271
271
|
require_paths:
|
|
272
272
|
- lib
|