dependabot-docker 0.133.1 → 0.133.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f0dacbcd0b3868a51baae61b1ae4cf61a34377bf7e947ae6f6afa955b4ee4a1
-  data.tar.gz: b4b0b338a1b4a14a31dcda1616c3dd2af3fcd3c138dcb58abdbdb2aafa0a7f8d
+  metadata.gz: 897831d0b7c1e2a12f2f3ccac884faa5efa81dea7fdc952307a4b206e0a70c27
+  data.tar.gz: 5fd27339dd30a42fc9b4102f879286c5f0525fa02638f002005e32520ba09afa
 SHA512:
-  metadata.gz: 551add90780e2b58deb44c09009dde0206e9bb2dd3463993da91967de14c0d6696d1e305ab0472185c82261ee7b7d03af14817517bf22d84c8fb9c6c63284656
-  data.tar.gz: 833f356df9090cdb6bc58a66bfca9e4e13892af12784c8e51d8a4e9b0bde1deece90279e6fa2442ab73221f860771a96585af15d9d0e26a4cadfb8032f38b2e6
+  metadata.gz: 165960e7b54abe81266916d058d3f48065b7ca3ba3744fc8b4551433c20d612e773dd71fe654a49cc88d7839522bcb01c14f5bf74104a0e1ffdbdc6525372b99
+  data.tar.gz: 843c254440d5dfe07068435af389541383944713d107ae164e8834547b754144b3288e6108cc25e7794ed2d39ed9af69440e1af1ca974c21f9f7aebd1f7c9556

data/lib/dependabot/docker/update_checker.rb

@@ -14,16 +14,23 @@ module DockerRegistry2
     private
 
     # By default the Docker Registry client sets the Accept header to
-    # `application/vnd.docker.distribution.manifest.v2+json`
-    # This results in the digest of a specific platform to be returned, we
-    # want to override this header so we can fetch the generic digest
-    # associated with the given repo/tag.
+    # `application/vnd.docker.distribution.manifest.v2+json`. This is fine for
+    # most images, but for multi-architecture images, it fetches the digest of a
+    # specific architecture instead of the digest for the multi-architecture
+    # image. We override the header to tell the Docker API to vary its behavior
+    # depending on whether the image is a uses a traditional (non-list) manifest
+    # or a manifest list. If the image uses a traditional manifest, the API will
+    # return the manifest digest. If the image uses a manifest list, the API
+    # will return the manifest list digest.
     def headers(payload: nil, bearer_token: nil)
       headers = {}
       headers["Authorization"] = "Bearer #{bearer_token}" unless bearer_token.nil?
       if payload.nil?
-        headers["Accept"] =
-          "application/vnd.docker.distribution.manifest.list.v2+json, application/json"
+        headers["Accept"] = %w(
+          application/vnd.docker.distribution.manifest.v2+json
+          application/vnd.docker.distribution.manifest.list.v2+json
+          application/json"
+        ).join(",")
       end
       headers["Content-Type"] = "application/vnd.docker.distribution.manifest.v2+json" unless payload.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.133.1
+  version: 0.133.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-10 00:00:00.000000000 Z
+date: 2021-02-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.133.1
+        version: 0.133.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.133.1
+        version: 0.133.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement