dependabot-opentofu 0.365.0 → 0.366.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d7f45082745132656a0abbc7194cdbb3b857a2f1f44c4170650edc05cd640aa4
-  data.tar.gz: 69c05cd4152a434badf3dff7b6b5f4bdfafdda9b0435431018a76211f0907d04
+  metadata.gz: 1cd9365b69d724368980be02ed0167f910e4307d89986cf72368c19bfb85c068
+  data.tar.gz: 9c244107e1d9e785bf4e7a787ca226faa00358aac5340319f9e79ef1d44a8c83
 SHA512:
-  metadata.gz: 2e1b143a2b3332c28f5b3658581a58dcc4045db1d0ea2d4bf212463b31059c2da8cd731e3b5ae2b75bf9f8b4ed1f6b0a8e6bf9a75603273d0802ff8331b8158c
-  data.tar.gz: a5fd572458fd9ad38640d0ced299cfb42dcc75baaf15082d66da416eeefea830fe0837b565b737c0f77de24c1d08b5d9f1f54eedd6e89b62452f85149d231d7a
+  metadata.gz: 6f75fbaa3b461dfcb9903c2adcb701f20764d6e06a72fa082b42f899453e9d17c0af297b48233d493770cd8bd0c144fe842528054087a0b9907993ba67d99e06
+  data.tar.gz: 26d0ea01b13a161243108a6bde3afc911b0569f9b70d2db5ed702e62f6732d09d50302ee8949403e3b481a891bf814e691930e9fb488673649b0e1e8389c71a5

data/lib/dependabot/opentofu/file_parser.rb

@@ -250,10 +250,13 @@ module Dependabot
         matches = source_address&.match(PROVIDER_SOURCE_ADDRESS)
         matches = {} if matches.nil?
 
+        # OpenTofu provider source addresses are case-insensitive, so we normalize
+        # to lowercase to avoid treating e.g. "Azure/azapi" and "azure/azapi" as
+        # different sources when merging dependencies across multiple files.
         [
-          matches[:hostname] || DEFAULT_REGISTRY,
-          matches[:namespace] || DEFAULT_NAMESPACE,
-          matches[:name] || name
+          (matches[:hostname] || DEFAULT_REGISTRY).downcase,
+          (matches[:namespace] || DEFAULT_NAMESPACE).downcase,
+          (matches[:name] || name).downcase
         ]
       end
 
@@ -261,17 +264,19 @@ module Dependabot
       def registry_source_details_from(source_string)
         parts = source_string.split("//").first.split("/")
 
+        # Registry module source addresses are case-insensitive, so we normalize
+        # to lowercase to avoid treating case-variant declarations as different sources.
         if parts.count == 3
           {
             type: "registry",
             registry_hostname: "registry.opentofu.org",
-            module_identifier: source_string.split("//").first
+            module_identifier: source_string.split("//").first.downcase
           }
         elsif parts.count == 4
           {
             type: "registry",
-            registry_hostname: parts.first,
-            module_identifier: parts[1..3].join("/")
+            registry_hostname: parts.first.downcase,
+            module_identifier: parts[1..3].join("/").downcase
           }
         else
           msg = "Invalid registry source specified: '#{source_string}'"

data/lib/dependabot/opentofu/file_updater.rb

@@ -372,11 +372,11 @@ module Dependabot
         regex_version_preceeds = %r{
           (((?<!required_)version\s=\s*["'].*["'])
           (\s*source\s*=\s*["'](#{registry_host}/)?#{name}["']|\s*#{name}\s*=\s*\{.*))
-        }mx
+        }mxi
         regex_source_preceeds = %r{
           ((source\s*=\s*["'](#{registry_host}/)?#{name}["']|\s*#{name}\s*=\s*\{.*)
           (?:(?!^\}).)+)
-        }mx
+        }mxi
 
         if updated_content.match(regex_version_preceeds)
           regex_version_preceeds
@@ -396,7 +396,7 @@ module Dependabot
             (//modules/\S+)?
             ["']
           (?:(?!^\}).)*
-        }mx
+        }mxi
       end
 
       sig { params(filename: String).returns(Regexp) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.365.0
+  version: 0.366.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.365.0
+        version: 0.366.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.365.0
+        version: 0.366.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.365.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.366.0
 rdoc_options: []
 require_paths:
 - lib