Digest pinning Docker Compose Default Variables

[gaving]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

No response

Please tell us more about your question or problem

Hi! 👋

Spent a couple of hours on this at work and figured I'd ask - wondering if my understanding of #11891 is correct and I can't seem to reproduce what I think should be happening:-

Reproduction repo:-

https://github.com/gaving/renovate-test

Specifically:

services:
  traefik:
    image: docker.io/traefik:${TRAEFIK_TAG:-saintmarcelin}
    command:

Renovate logs:-

https://developer.mend.io/github/gaving/renovate-test/-/job/5488559f-ced3-4dac-afcf-0897a46e4330

I'd expect an open MR e.g. with

image: docker.io/traefik:${TRAEFIK_TAG:-saintmarcelin@sha256:6341b98aec5ec8969b99e9730f4c5b22cca3103d42b6bbe4b7a3c910758fe565}

Am I missing something?

Logs (if relevant)

Logs

docker-compose": [
      {
        "deps": [
          {
            "skipReason": "invalid-name",
            "replaceString": "docker.io/traefik:${TRAEFIK_TAG:-saintmarcelin}",
            "autoReplaceStringTemplate": "{{depName}}{{#if newValue}}:{{newValue}}{{/if}}{{#if newDigest}}@{{newDigest}}{{/if}}",
            "datasource": "docker",
            "updates": []
          }
        ],
        "packageFile": "docker-compose.yml"
      }

[rarkins]

This looks like an unimplemented feature. Specifically: digest pinning for default variables. Have you confirmed that Docker Compose supports the syntax?

[gaving]

Isn't this exactly what #11891 supposedly implements?

Yes, Docker Compose supports the syntax.

[rarkins]

No, it's not exactly

[gaving]

[github-actions[bot]]

Hi there,

A maintainer has flagged this discussion as giving off some bad vibes. Maintainers will no longer participate in this discussion unless/until such "vibes" are resolved.

This is typically when someone is overly critical of the product or the assistance they're receiving. Or being unreasonably demanding or lazy, such as refusing to provide logs, or other information, when asked.

Open Source means you're welcome to use the software with few limits applied. But you should not give maintainers a bad day or contribute to Open Source burnout.

If you feel this message is wrong or due to a misunderstanding, please let us know. If you see this message but don't take it as a sign to cool off or back off, we may close the discussion and block you from the repository.

If you want to get the discussion back on track, we would like you to:

• Remove, or edit, the bad vibes parts of your comments
• Say that you understand the problem (we don't need a lengthy apology)
• Stop giving off more bad vibes

Thanks, the Renovate team