dependabot-opentofu 0.384.0 → 0.385.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a82604c26d4a240e6651632638402c50c7ae24196dc3658a1b7d3d3e3229f1c
-  data.tar.gz: 01c7e7cbb510f2d31d4183010cef5ee5254926f3c1a1538ca76a3f277000d260
+  metadata.gz: 3bb80d0b504e093127b1fc9a74f482b8a8b73f99698c968bfd0e8b1c198dd026
+  data.tar.gz: fa2816fbf5b4108eb4bbe9e3acbe13efb6a7dee9aafc385af73ecb404233ed76
 SHA512:
-  metadata.gz: a30a2babda1cbb778c624303560a44811e06635f3625afb82e3b082146937a8bb698c6b8d53bb0903e3617faae21beb5b631932df255bde76c8049ef8e702158
-  data.tar.gz: a16f41398bf1f36d7ff4df3447de9cb2fe30ed0915b36677c6b58f47abe675e27145c7cf8e5402362cf9c801215211d54860f2daa2b2925a26bcb8e801e17918
+  metadata.gz: bb7b69e38138d4ea57b94df897078e63dbc9bab27ac79d8e6dd5c63528ddc4c1a890afeb18c97688e77d9bd4976304ba13b7cfffd4522c1c2c6b4b489f9a0b28
+  data.tar.gz: 8fa4575d341d81acbd5a242e800590f6b8326d84cb55c58bcf4b8d84a81c74d53c59425f7676ba2dd4a7c29dfbc7640ad99cbf9520a892b1ffbdf23940a76475

data/lib/dependabot/opentofu/registry_client.rb

@@ -185,7 +185,7 @@ module Dependabot
           return nil unless response.status == 204
 
           source_url = response.headers.fetch("X-OpenTofu-Get")
-          source_url = URI.join(download_url, source_url) if
+          source_url = URI.join(download_url, source_url).to_s if
             source_url.start_with?("/", "./", "../")
           source_url = RegistryClient.get_proxied_source(source_url) if source_url
         when "provider", "providers"

data/lib/dependabot/opentofu/requirements_updater.rb

@@ -99,7 +99,7 @@ module Dependabot
       sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       attr_reader :requirements
 
-      sig { returns(Dependabot::Opentofu::Version) }
+      sig { returns(T.nilable(Dependabot::Opentofu::Version)) }
       attr_reader :latest_version
 
       sig { returns(T.nilable(String)) }
@@ -133,12 +133,15 @@ module Dependabot
       def update_registry_requirement(req)
         return req if req.fetch(:requirement).nil?
 
+        latest = latest_version
+        return req if latest.nil?
+
         string_req = req.fetch(:requirement).strip
         ruby_req = requirement_class.new(string_req)
-        return req if ruby_req.satisfied_by?(latest_version)
+        return req if ruby_req.satisfied_by?(latest)
 
         new_req =
-          if ruby_req.exact? then latest_version.to_s
+          if ruby_req.exact? then latest.to_s
           elsif string_req.start_with?("~>")
             update_twiddle_version(string_req).to_s
           else
@@ -153,18 +156,19 @@ module Dependabot
       def update_twiddle_version(req_string)
         old_version = requirement_class.new(req_string)
                                        .requirements.first.last
-        updated_version = at_same_precision(latest_version, old_version)
+        updated_version = at_same_precision(T.must(latest_version), old_version)
         req_string.sub(old_version.to_s, updated_version)
       end
 
       sig { params(req_string: String).returns(T::Array[Dependabot::Opentofu::Requirement]) }
       def update_range(req_string)
+        latest = T.must(latest_version)
         requirement_class.new(req_string).requirements.flat_map do |r|
           ruby_req = requirement_class.new(r.join(" "))
-          next ruby_req if ruby_req.satisfied_by?(latest_version)
+          next ruby_req if ruby_req.satisfied_by?(latest)
 
           case op = ruby_req.requirements.first.first
-          when "<", "<=" then [update_greatest_version(ruby_req, latest_version)]
+          when "<", "<=" then [update_greatest_version(ruby_req, latest)]
           when "!=" then []
           else raise "Unexpected operation for unsatisfied req: #{op}"
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.384.0
+  version: 0.385.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.384.0
+        version: 0.385.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.384.0
+        version: 0.385.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.385.0
 rdoc_options: []
 require_paths:
 - lib