dependabot-docker 0.226.0 → 0.227.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b32a9aefbcd623b4e2bf553b4aec6676f758f3d27f50f67f99156cc32d8206a0
-  data.tar.gz: f710312b8e2bed67dafabcea2b601be717292fab22301613e447a73153465703
+  metadata.gz: 81fe8e185f867be1dcd353520cacf3d605bf5f345b89f8707589fff41f8bb28d
+  data.tar.gz: b3b8b762d9b97cc90020a0e93eb25e3618159f6f5c5e5079723757b3176d0682
 SHA512:
-  metadata.gz: aa265e080fb4afd058721b5ac0bada493708327f2b5d10d35e0652b15ef0ae3b560ab890fbdd84a20ddf0a8abc7aff34d4bab56423a4b157553dc363ebed285e
-  data.tar.gz: 7f15e687d41a354f1a36b1e22ec899354d4f16edae0ae909e0ab2f105c57aaf3e59de48349b7005a92a13ded2cfd48ab8596434789001c62e345163d227e3894
+  metadata.gz: 1fc30d0ccb0da9a0541d2acc4f19533ae9a602c96c55c68f3890efa24880243e58b7dba01bfb497d737921c95ae6c4b584921451b6cd161daaebac0dbe39cf31
+  data.tar.gz: 50b8e85fbd2244f1a26d04abbfcff010c5b5bcc0b6dc0755cd31a58d2cd60163c9a05f5f3e0650a0f24094d53ec6be5d685e419c0c106cbfa2426031ca225645

data/lib/dependabot/docker/update_checker.rb

@@ -171,19 +171,14 @@ module Dependabot
         end
       end
 
-      def version_of_latest_tag
+      def latest_tag
         return unless latest_digest
 
-        candidate_tag =
-          tags_from_registry.
+        tags_from_registry.
           select(&:canonical?).
           sort_by { |t| comparable_version_from(t) }.
           reverse.
           find { |t| digest_of(t.name) == latest_digest }
-
-        return unless candidate_tag
-
-        comparable_version_from(candidate_tag)
       end
 
       def updated_digest
@@ -259,10 +254,16 @@ module Dependabot
         return true if tag.looks_like_prerelease?
 
         # Compare the numeric version against the version of the `latest` tag.
-        return false unless latest_digest
-        return false unless version_of_latest_tag
+        return false unless latest_tag
+
+        if comparable_version_from(tag) > comparable_version_from(latest_tag)
+          Dependabot.logger.info "Tag with non-prerelease version name #{tag.name} detected as prerelease, " \
+                                 "because it sorts higher than #{latest_tag.name}."
 
-        comparable_version_from(tag) > version_of_latest_tag
+          true
+        else
+          false
+        end
       end
 
       def comparable_version_from(tag)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.226.0
+  version: 0.227.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-11 00:00:00.000000000 Z
+date: 2023-08-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.227.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.227.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +202,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.226.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.227.0
 post_install_message: 
 rdoc_options: []
 require_paths: