docker node digest update ignoring suffix

[maxuai]

What would you like help with?

I think I found a bug

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Gitlab, Renovate 37

Please tell us more about your question or problem

It seems to me the docker digest update is not taking the image version suffix into account. In specific we have a docker image reference to node:20.12.1-bullseye that should become node:20.12.2-bullseye@sha256:844b41cf784f66d7920fd673f7af54ca7b81e289985edc6cd864e7d05e0d133c. The version looks fine but the digest is not the one of the bullseye image which would be 127328164f9b593a2f23725a0525bafce697a6edce92fbf51a255dc6ae70af86 (link) but from node:20.12.2 (link)

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

To get started, please read our guide on creating a minimal reproduction.

Good luck,

The Renovate team

[maxuai]

The logs of the relevant run with DEBUG log level

logs_22846519743.zip

[rarkins]

This is the right digest, right? https://github.com/renovate-reproductions/28449/pull/1/files

It's the same digest as I get here:

$ docker pull node:20.12.1-bullseye
20.12.1-bullseye: Pulling from library/node
ac323bdaa10f: Pull complete
84811b2a563b: Pull complete
b3ff24b88ad3: Pull complete
c6f58f24df78: Pull complete
df8f64bc8f14: Pull complete
c8fa85ee2c83: Pull complete
eeffc3e7d5e1: Pull complete
c0738826efaa: Pull complete
Digest: sha256:9844aa122d98fc760074cb361d2db7b1b76ee87a3c12ef659c365ad5050b1089
Status: Downloaded newer image for node:20.12.1-bullseye
docker.io/library/node:20.12.1-bullseye

[rarkins]

And this: https://github.com/renovate-reproductions/28449/pull/2/files

Digest: sha256:127328164f9b593a2f23725a0525bafce697a6edce92fbf51a255dc6ae70af86
Status: Downloaded newer image for node:20.12.2-bullseye
docker.io/library/node:20.12.2-bullseye

[rarkins]

These are the same as in your reproduction repo. Why do you think they are wrong?

[maxuai]

@rarkins you are totally right, I will update the reproduction, maybe it depends on the file format, in our pipeline I see different results

[maxuai]

it seems we were using an outdated version of renovatebot and the issue could be fixed by updating, sorry for the hassle