dependabot-opentofu 0.383.0 → 0.384.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fc4253cdce3171a37489fb046de7882875e655c15b56732bebf43a754546ab4a
-  data.tar.gz: ea6af31292e7683f9a0d5948efe78df36a4cdb1f77589bc86fb2f18e6a6bcb05
+  metadata.gz: 2a82604c26d4a240e6651632638402c50c7ae24196dc3658a1b7d3d3e3229f1c
+  data.tar.gz: 01c7e7cbb510f2d31d4183010cef5ee5254926f3c1a1538ca76a3f277000d260
 SHA512:
-  metadata.gz: 7d9d8a564be61e229656b4d3e86a0bd366e07aa2cffdda3e244f067db8f5d2b640c8301cee04362eb60189674a5affe9c148a0408370884771667cd9bd3a7bc7
-  data.tar.gz: 3250c78283dbe1f3f045bec1e1be132464038696c9ddf16feab9b5181310a1f8fee05070e33cc9fd8dea179b99baf2ec39ba8e5eae5d26bc46cb13a4a50a6163
+  metadata.gz: a30a2babda1cbb778c624303560a44811e06635f3625afb82e3b082146937a8bb698c6b8d53bb0903e3617faae21beb5b631932df255bde76c8049ef8e702158
+  data.tar.gz: a16f41398bf1f36d7ff4df3447de9cb2fe30ed0915b36677c6b58f47abe675e27145c7cf8e5402362cf9c801215211d54860f2daa2b2925a26bcb8e801e17918

data/lib/dependabot/opentofu/file_parser.rb

@@ -346,11 +346,11 @@ module Dependabot
         # sub-module path; only the bare repo is queryable for tags.
         artifact_identifier, subdirectory = uri_part.split(%r{(?<!:)//}, 2)
 
-        qs = CGI.parse(query_part)
+        qs = URI.decode_www_form(query_part).to_h
         # Treat `?tag=` or `?digest=` (empty value) the same as the param
         # being absent, so we don't propagate "" as a usable version.
-        tag = qs["tag"].first&.then { |v| v.empty? ? nil : v }
-        digest = qs["digest"].first&.then { |v| v.empty? ? nil : v }
+        tag = qs["tag"]&.then { |v| v.empty? ? nil : v }
+        digest = qs["digest"]&.then { |v| v.empty? ? nil : v }
 
         if tag && digest
           raise DependencyFileNotEvaluatable,

data/lib/dependabot/opentofu/package/package_details_fetcher.rb

@@ -3,7 +3,6 @@
 
 require "json"
 require "time"
-require "cgi"
 require "excon"
 require "sorbet-runtime"
 require "dependabot/swift"

data/lib/dependabot/opentofu/registry_client.rb

@@ -233,8 +233,8 @@ module Dependabot
         ).returns(Excon::Response)
       end
       def self.oci_get(url, host:, credentials:)
-        cred = credentials.find do |c|
-          c["type"] == "opentofu_registry" && (c["host"] == host || c["registry"] == host)
+        cred = credentials.reverse_each.find do |c|
+          ACCEPTED_CREDENTIAL_TYPES.include?(c["type"]) && (c["host"] == host || c["registry"] == host)
         end
 
         headers = {}
@@ -299,11 +299,7 @@ module Dependabot
 
       sig { returns(T::Hash[String, T::Hash[Symbol, T.untyped]]) }
       def self.oci_token_cache
-        @oci_token_cache = T.let(
-          @oci_token_cache,
-          T.nilable(T::Hash[String, T::Hash[Symbol, T.untyped]])
-        )
-        @oci_token_cache ||= {}
+        @oci_token_cache ||= T.let({}, T.nilable(T::Hash[String, T::Hash[Symbol, T.untyped]]))
       end
       private_class_method :oci_token_cache
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.383.0
+  version: 0.384.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.383.0
+        version: 0.384.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.383.0
+        version: 0.384.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
 rdoc_options: []
 require_paths:
 - lib
@@ -277,7 +277,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.3.0
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 4.0.14
 specification_version: 4
 summary: Provides Dependabot support for OpenTofu
 test_files: []