GeezerVison

Pull request overview

This PR improves OCI/Docker registry authentication robustness by adding retry logic around bearer-token acquisition, aiming to mitigate transient network/DNS failures and certain retryable HTTP responses, with accompanying regression tests.

Changes:

• Add bounded exponential backoff retries for token fetch on transient request failures and on 429 / 5xx responses.
• Refactor token response handling into helpers (decodeTokenResponse, tokenResponseError) and add retry decision helpers.
• Add tests covering temporary DNS failures (retry) and permanent auth failures (no retry).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Please add regression tests for the new 429/5xx response retries, the four-attempt limit, the 500ms, 1s, and 2s delay sequence through the injected waiter, and cancellation while waiting. Current coverage exercises temporary DNS errors and permanent failures. The HTTP-status and bounded-backoff paths remain untested.

The retry policy and production OCI authentication path look correct. The latest commit covers the requested status, attempt-limit, backoff, and cancellation cases.