dependabot-terraform 0.156.0 → 0.156.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 93874f4fa274efc129c5c7ff14ab4dfa46441ffc9049d4a81704606c7437d6e5
-  data.tar.gz: d2c9bb9d72834b18f28e4298e3d20ce77901d9886e1c1f24331f2d97779143c3
+  metadata.gz: bfca18aff09e0bb11f6bc9cb4917776b9f742898231369ed01ab35d291314109
+  data.tar.gz: 9916ca8590d03bb66d7d69703a188636db7e71505f305cb42a3c63f94a5bcbe7
 SHA512:
-  metadata.gz: 9fe963e3ac7cd4aa6a11ac5efef9378da062f3f2c00c717b304f99cfa1076c5ee32eab65a9aa82a2325f3371a3872f9dcd5ed10ced00855a9168c34e9650e35a
-  data.tar.gz: d74d15915a706e8e027a5753fa58bd1d7a8655af192d9619746bb06b0b330dd728302749d2b08efb98cd449116eb045aec47b527fcda02b4fb6f9315a7aa3f95
+  metadata.gz: 3de7241b3f18a606b712ea8ab0ad08e8f0fddc4afce182153cdbf0d1ee3cd7169a7aabcb42757364a7857f9b3f70684d39dac85c903a5c6004414790353109e3
+  data.tar.gz: 9b521f831db02183c922ec7e758ef856e82abd38dbe7e4757a3bfff7a9947915eea15b67bdc3a0b5001c559017b35ed88e357f768fdd8e2b4a1b1d6eb95a2c5a

data/lib/dependabot/terraform/file_updater.rb

@@ -11,6 +11,8 @@ module Dependabot
     class FileUpdater < Dependabot::FileUpdaters::Base
       include FileSelector
 
+      PRIVATE_MODULE_ERROR = /Could not download module.*code from\n.*\"(?<repo>\S+)\":/.freeze
+
       def self.updated_files_regex
         [/\.tf$/, /\.hcl$/]
       end
@@ -122,13 +124,28 @@ module Dependabot
           # NOTE: Modules need to be installed before terraform can update the
           # lockfile
           @retrying_lock = true
-          SharedHelpers.run_shell_command("terraform init")
+          run_terraform_init
           retry
         end
 
         content
       end
 
+      def run_terraform_init
+        SharedHelpers.with_git_configured(credentials: credentials) do
+          # -backend=false option used to ignore any backend configuration, as these won't be accessible
+          # -input=false option used to immediately fail if it needs user input
+          # -no-color option used to prevent any color characters being printed in the output
+          SharedHelpers.run_shell_command("terraform init -backend=false -input=false -no-color")
+        rescue SharedHelpers::HelperSubprocessFailed => e
+          output = e.message
+
+          if output.match?(PRIVATE_MODULE_ERROR)
+            raise PrivateSourceAuthenticationFailure, output.match(PRIVATE_MODULE_ERROR).named_captures.fetch("repo")
+          end
+        end
+      end
+
       def dependency
         # Terraform updates will only ever be updating a single dependency
         dependencies.first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.156.0
+  version: 0.156.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-07-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement