dependabot-opentofu 0.393.0 → 0.394.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c6e147fa2a593781db801bfee72640fe5fbaa5f38ba07b233d02f2fe09554675
-  data.tar.gz: 03557d3813d533552f932761de4ee39bb24feaf9067c880cfb0ec74d0dc25c41
+  metadata.gz: 4eedf0467315bdfb260571a6cd21726d29184b15b4db8525704c717eb29326eb
+  data.tar.gz: f215ee8993d52bc0e63fdc1d293e0c20220e202f88bf4b22f0a610d6cd79547f
 SHA512:
-  metadata.gz: 68dc1e5dec6c85c8a4c1b6323f4f658148d4a2087d72f95962fa7cbc091e85ad1f83f4b909a536ebe21ef3fea6e5a395fccaab39f1bcc05913a380a6fe459d03
-  data.tar.gz: adf18b49178496052fa158a36dc151bb57a88583a7795a1ea1b612b74719d0c1081b8f70338470391ec5b36fd991864f22566c71766ba58b15500f8e00dfdfa4
+  metadata.gz: 63affbbfcbb2ce7f986778c92b9057e420b07449910076d2c1c5e07596a06fb8e4bc36269b81bcde0b18f96122bae6bb10db8706594910f7b0bc4f685825cdcc
+  data.tar.gz: 06b7ae8912efbb0d2a5be3cbbff20722234f1e8940d8e4185c885b369ba15a2f0f51fbff75b6deebbef4f5841a915d754d98bb3ca6920732abef038d9f8a40b8

data/lib/dependabot/opentofu/file_parser.rb

@@ -167,9 +167,17 @@ module Dependabot
             next unless details["source"]
 
             source = source_from(details)
-            # Cannot update nil (interpolation sources) or local path modules, skip
+            # nil sources are unpinned; paths are local.
             next if source.nil? || source[:type] == "path"
 
+            # Cannot update modules using early evaluation yet
+            if source[:type] == "interpolation"
+              Dependabot.logger.warn(
+                "Cannot parse terragrunt module source with early evaluation in #{file.name}."
+              )
+              next
+            end
+
             dependency_set << build_terragrunt_dependency(file, source)
           end
         end
@@ -437,8 +445,8 @@ module Dependabot
       # rubocop:disable Metrics/CyclomaticComplexity
       sig { params(source_string: String).returns(Symbol) }
       def source_type(source_string)
-        return :oci if source_string.include?("oci://")
         return :interpolation if source_string.include?("${")
+        return :oci if source_string.include?("oci://")
         return :path if source_string.start_with?(".")
         return :github if source_string.start_with?("github.com/")
         return :bitbucket if source_string.start_with?("bitbucket.org/")

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.393.0
+  version: 0.394.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.393.0
+        version: 0.394.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.393.0
+        version: 0.394.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -169,14 +169,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.1'
 - !ruby/object:Gem::Dependency
   name: turbo_tests
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.394.0
 rdoc_options: []
 require_paths:
 - lib