dependabot-docker 0.131.0 → 0.131.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f4a2375b11e638e1d2ea3c5f0d47866abed3ea40fc0a0e50012c93271458f6e
-  data.tar.gz: 989d740a926e1c13cdb70f07e34be56c798a82e6dc26b44bbdc0742ee18b680e
+  metadata.gz: 20a27212cd27242c49771faaebe61bcec2fa253a8e08194910faccc6cf738279
+  data.tar.gz: 92fddba420fb3ecad1960450fb7eac5c6a416eba5f2d8a7d6357fe8d0d7b3bb1
 SHA512:
-  metadata.gz: 81be64e372c6c7e593f829ffa9a0c822247728a3a91172d4dbab248ce9eb15a7aa355c28e35db091dcee926b76b4585c29b2d464eacc8bb6ea5007230b0cf7dd
-  data.tar.gz: 51d11b1af5107dabad372a4c0e5ab2b1157685b895982d783da65279e83af16b4ac730a30016158c3501328cb1d5aecd362249a8dfa170c4bd898f834b4854f6
+  metadata.gz: 9d9baa506824298e1abd824bc13e53891fb60e5eb2e16eb082043b2eb8733890117d14923da260f36be4366d4edef2fc5671e3a21e87f6d6f8b4b59b3fa5b307
+  data.tar.gz: ed01150228c0f6493ea1674c9508136a040c115a7f3eb74d376c09c6bc59a2677b629f18ddd8b59726e47ffa75a5fb5fb327a494568bb28c8ba30b70b3b57ca1

data/lib/dependabot/docker/update_checker.rb

@@ -9,6 +9,29 @@ require "dependabot/docker/version"
 require "dependabot/docker/requirement"
 require "dependabot/docker/utils/credentials_finder"
 
+module DockerRegistry2
+  class Registry
+    private
+
+    # By default the Docker Registry client sets the Accept header to
+    # `application/vnd.docker.distribution.manifest.v2+json`
+    # This results in the digest of a specific platform to be returned, we
+    # want to override this header so we can fetch the generic digest
+    # associated with the given repo/tag.
+    def headers(payload: nil, bearer_token: nil)
+      headers = {}
+      headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
+      if payload.nil?
+        headers["Accept"] =
+          "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
+      end
+      headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
+
+      headers
+    end
+  end
+end
+
 module Dependabot
   module Docker
     class UpdateChecker < Dependabot::UpdateCheckers::Base
@@ -24,7 +47,7 @@ module Dependabot
           #{VERSION_WITH_PFX}|
           #{VERSION_WITH_SFX}|
           #{VERSION_WITH_PFX_AND_SFX}
-        /x.freeze
+      /x.freeze
 
       def latest_version
         @latest_version ||= fetch_latest_version
@@ -188,6 +211,7 @@ module Dependabot
         @tags_from_registry ||=
           begin
             client = docker_registry_client
+
             client.tags(docker_repo_name, auto_paginate: true).fetch("tags")
           rescue *transient_docker_errors
             attempt ||= 1

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.131.0
+  version: 0.131.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-04 00:00:00.000000000 Z
+date: 2021-02-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.0
+        version: 0.131.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.131.0
+        version: 0.131.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement