dependabot-docker 0.240.0 → 0.241.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2cde1450fa50370c68266de45f8ec3270737b09be9f77db757597903e30d103f
-  data.tar.gz: 654ce1fed988f44f83acdc52a73da78f6d8f90b37c41c3ee568f0e8218c4b3a1
+  metadata.gz: 45c63512a728e3f7919e655a0db6f3631ba24835728e72fd2c8af5709c1c166c
+  data.tar.gz: 959aaf1469b148169d84f604b869e57dae8f94ec0589e0928405c8579fde6706
 SHA512:
-  metadata.gz: fb973910b24d7a4b40c9b06204a3eebf9188d95373aec054bf943023d874fc66a915087f275ce31b437c58636fa415dac25e8072b1da51a4e2e8a968ca9569da
-  data.tar.gz: ff2ae8992fe69dae523e3504b1a9e3ded6d4c83299a7124d15b67886bf491331aa868f02865bcb98958c66d47ebc2468193a81799f7075e76b48bc2f09a5654d
+  metadata.gz: cabc652ee17078e2bd77bd3d24a0a786f5f1e03077f74c2127cf239c12d4b268048c8d9732dbaf7f5d62a87b91488789939799361904321270a8ab4fabc8d9cd
+  data.tar.gz: 6f0b11164025d9b7e10165db185ecab53e038b5e446918696ab5e18587d2b7c6adb45ee346fc6f6a07a422968b9a9da113d51ef117f6975e62c2fab5be496685

data/lib/dependabot/docker/file_parser.rb

@@ -171,17 +171,19 @@ module Dependabot
       end
 
       def parse_helm(img_hash)
-        repo = img_hash.fetch("repository", nil)
         tag_value = img_hash.key?("tag") ? img_hash.fetch("tag", nil) : img_hash.fetch("version", nil)
-        registry = img_hash.fetch("registry", nil)
+        return [] unless tag_value
+
+        repo = img_hash.fetch("repository", nil)
+        return [] unless repo
 
         tag_details = tag_value.to_s.match(TAG_WITH_DIGEST).named_captures
         tag = tag_details["tag"]
-        digest = tag_details["digest"]
-
-        return [] unless repo
         return [repo] unless tag
 
+        registry = img_hash.fetch("registry", nil)
+        digest = tag_details["digest"]
+
         image = "#{repo}:#{tag}"
         image.prepend("#{registry}/") if registry
         image << "@sha256:#{digest}/" if digest

data/lib/dependabot/docker/metadata_finder.rb

@@ -13,7 +13,7 @@ module Dependabot
       def look_up_source
         return if dependency.requirements.empty?
 
-        new_source = dependency.requirements.first[:source]
+        new_source = dependency.requirements.first&.fetch(:source)
         return unless new_source && new_source[:registry] && new_source[:tag]
 
         image_ref = "#{new_source[:registry]}/#{dependency.name}:#{new_source[:tag]}"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-docker
 version: !ruby/object:Gem::Version
-  version: 0.240.0
+  version: 0.241.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-01-12 00:00:00.000000000 Z
+date: 2024-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.240.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.240.0
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -244,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.240.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
 post_install_message: 
 rdoc_options: []
 require_paths: