{"id":34959853,"url":"https://github.com/mathieu-benoit/dependabot-core-issue-11215","last_synced_at":"2026-03-17T15:30:50.828Z","repository":{"id":330021790,"uuid":"1121339509","full_name":"mathieu-benoit/dependabot-core-issue-11215","owner":"mathieu-benoit","description":null,"archived":false,"fork":false,"pushed_at":"2026-01-22T21:31:13.000Z","size":63,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-01-23T09:18:45.187Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mathieu-benoit.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-12-22T20:38:18.000Z","updated_at":"2026-01-22T21:31:11.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/mathieu-benoit/dependabot-core-issue-11215","commit_stats":null,"previous_names":["mathieu-benoit/dependabot-core-issue-11215"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/mathieu-benoit/dependabot-core-issue-11215","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mathieu-benoit%2Fdependabot-core-issue-11215","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mathieu-benoit%2Fdependabot-core-issue-11215/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mathieu-benoit%2Fdependabot-core-issue-11215/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mathieu-benoit%2Fdependabot-core-issue-11215/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mathieu-benoit","download_url":"https://codeload.github.com/mathieu-benoit/dependabot-core-issue-11215/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mathieu-benoit%2Fdependabot-core-issue-11215/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30626814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-17T14:16:03.965Z","status":"ssl_error","status_checked_at":"2026-03-17T14:16:03.380Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-12-26T22:38:08.043Z","updated_at":"2026-03-17T15:30:50.820Z","avatar_url":"https://github.com/mathieu-benoit.png","language":"Dockerfile","funding_links":[],"categories":[],"sub_categories":[],"readme":"# dependabot-core-issue-11215\r\n\r\nPublic repository to reproduce this issue: https://github.com/dependabot/dependabot-core/issues/11215 --\u003e A fix is in progress there: https://github.com/dependabot/dependabot-core/pull/13842.\r\n\r\nSeems to be happening with a combination of:\r\n- Multi-stage build,\r\n- With same images but one with another suffix, example: `-dev`, `-chiseled` or `-nonroot`,\r\n- With digest.\r\n\r\nI'm able to consistently reproduce this issue here:\r\n- `dhi-node-digest-suffix/Dockerfile`\r\n  - `dhi.io/node:24-debian13-dev` and `dhi.io/node:24-debian13`\r\n  - [error logs](https://github.com/mathieu-benoit/dependabot-core-issue-11215/actions/runs/20470718319/job/58825196566)\r\n- `dotnet/Dockerfile`\r\n  - `mcr.microsoft.com/dotnet/aspnet:10.0.1-noble` and `mcr.microsoft.com/dotnet/aspnet:10.0.1-noble-chiseled`\r\n  - [error logs](https://github.com/mathieu-benoit/dependabot-core-issue-11215/actions/runs/20470718612/job/58825197398)\r\n- `distroless-different-image/Dockerfile`\r\n  - `gcr.io/distroless/static-debian13:debug` and `gcr.io/distroless/static-debian13:debug-nonroot`\r\n  - [error logs](https://github.com/mathieu-benoit/dependabot-core-issue-11215/actions/runs/20470718864/job/58825198248)\r\n\r\nExample of the logs:\r\n```none\r\nupdater | 2025/12/23 15:50:33 INFO \u003cjob_1189631726\u003e Updating the /dhi-node-digest directory.\r\nupdater | 2025/12/23 15:50:33 INFO \u003cjob_1189631726\u003e Checking if node 25-debian13 needs updating\r\n  proxy | 2025/12/23 15:50:34 [012] GET https://dhi.io:443/v2/node/tags/list\r\n2025/12/23 15:50:34 [012] * authenticating docker registry request (host: dhi.io)\r\n  proxy | 2025/12/23 15:50:34 [012] 200 https://dhi.io:443/v2/node/tags/list\r\nupdater | 2025/12/23 15:50:34 INFO \u003cjob_1189631726\u003e Original tag components: \r\nupdater | 2025/12/23 15:50:34 INFO \u003cjob_1189631726\u003e Latest version is 25-debian13\r\nupdater | 2025/12/23 15:50:34 INFO \u003cjob_1189631726\u003e Adding dependencies as handled: (node).\r\n  proxy | 2025/12/23 15:50:34 [016] HEAD https://dhi.io:443/v2/node/manifests/25-debian13\r\n2025/12/23 15:50:34 [016] * authenticating docker registry request (host: dhi.io)\r\n  proxy | 2025/12/23 15:50:35 [016] 200 https://dhi.io:443/v2/node/manifests/25-debian13\r\nupdater | 2025/12/23 15:50:35 INFO \u003cjob_1189631726\u003e Requirements to unlock own\r\nupdater | 2025/12/23 15:50:35 INFO \u003cjob_1189631726\u003e Requirements update strategy \r\nupdater | 2025/12/23 15:50:35 INFO \u003cjob_1189631726\u003e Original tag components: dev\r\n  proxy | 2025/12/23 15:50:35 [018] HEAD https://dhi.io:443/v2/node/manifests/25-debian13-dev\r\n2025/12/23 15:50:35 [018] * authenticating docker registry request (host: dhi.io)\r\n  proxy | 2025/12/23 15:50:36 [018] 200 https://dhi.io:443/v2/node/manifests/25-debian13-dev\r\nupdater | 2025/12/23 15:50:36 INFO \u003cjob_1189631726\u003e Creating dependency change for node (25-debian13) in group ci\r\nupdater | 2025/12/23 15:50:36 INFO \u003cjob_1189631726\u003e Updating node from 25-debian13 to 25-debian13\r\n  proxy | 2025/12/23 15:50:36 [020] POST /update_jobs/1189631726/record_update_job_unknown_error\r\n  proxy | 2025/12/23 15:50:36 [020] 204 /update_jobs/1189631726/record_update_job_unknown_error\r\n  proxy | 2025/12/23 15:50:36 [022] POST /update_jobs/1189631726/record_update_job_error\r\n  proxy | 2025/12/23 15:50:36 [022] 204 /update_jobs/1189631726/record_update_job_error\r\n  proxy | 2025/12/23 15:50:36 [024] POST /update_jobs/1189631726/increment_metric\r\n  proxy | 2025/12/23 15:50:36 [024] 204 /update_jobs/1189631726/increment_metric\r\n  proxy | 2025/12/23 15:50:36 [026] POST /update_jobs/1189631726/record_update_job_unknown_error\r\n  proxy | 2025/12/23 15:50:36 [026] 204 /update_jobs/1189631726/record_update_job_unknown_error\r\nupdater | 2025/12/23 15:50:36 ERROR \u003cjob_1189631726\u003e Error processing node (RuntimeError)\r\n2025/12/23 15:50:36 ERROR \u003cjob_1189631726\u003e No files changed!\r\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmathieu-benoit%2Fdependabot-core-issue-11215","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmathieu-benoit%2Fdependabot-core-issue-11215","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmathieu-benoit%2Fdependabot-core-issue-11215/lists"}