dependabot-terraform 0.169.1 → 0.169.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46dc9c246c2c7eb8c18c28344ddd886b0c08e54302895e1313ef2d36de74cd66
-  data.tar.gz: adc3ae5bea0a2337cb2fc23e2e74774a2a757baf29e472b30b66758e3f04db95
+  metadata.gz: 1f69a35014f8e88015a1a81f48124ebc71c24cef0e85e6a651cb6b59a84ad407
+  data.tar.gz: ea436520a5b0583ec6faee7d81f0c4bc026b2ef162626a43818d7a08058236a5
 SHA512:
-  metadata.gz: f72d1d1fcd12b716b84d81c09be625edd7bb4732fcef18c9589007c3b8502e1e5d0b638a61944e7d6270af784e29b38f6a81f360ec987c454cf3c619268ba3c0
-  data.tar.gz: a740bf24ecf22855aab413aaafed1c91eafe6e165365d3e6cdca12ffcced8ae4d7bddf56163a28a2d4f8c93fc2050f1dd5d88698331a764a9a06c26c025fa365
+  metadata.gz: e09be43757ce085c880f89be18b1386f1f6a9db53cc56e2a9b5975558cf922c6224ebea8b4eab6f5f73e6bbe1969509bb8eb4f229a3f60263a3ef30ff567c1f1
+  data.tar.gz: aa4a059bae15c3a0ead1f80ea4d726003f49f1ec38c0eaaf42a604cc1d673cf4b36854dded6eda2217fed52035e0625ad72b353395ebe06a3bb21b2417e34c36

data/lib/dependabot/terraform/file_parser.rb

@@ -28,10 +28,26 @@ module Dependabot
       def parse
         dependency_set = DependencySet.new
 
+        parse_terraform_files(dependency_set)
+
+        parse_terragrunt_files(dependency_set)
+
+        dependency_set.dependencies.sort_by(&:name)
+      end
+
+      private
+
+      def parse_terraform_files(dependency_set)
         terraform_files.each do |file|
           modules = parsed_file(file).fetch("module", {})
           modules.each do |name, details|
-            dependency_set << build_terraform_dependency(file, name, details)
+            details = details.first
+
+            source = source_from(details)
+            # Cannot update local path modules, skip
+            next if source[:type] == "path"
+
+            dependency_set << build_terraform_dependency(file, name, source, details)
           end
 
           parsed_file(file).fetch("terraform", []).each do |terraform|
@@ -43,7 +59,9 @@ module Dependabot
             end
           end
         end
+      end
 
+      def parse_terragrunt_files(dependency_set)
         terragrunt_files.each do |file|
           modules = parsed_file(file).fetch("terraform", [])
           modules.each do |details|
@@ -52,19 +70,15 @@ module Dependabot
             dependency_set << build_terragrunt_dependency(file, details)
           end
         end
-
-        dependency_set.dependencies.sort_by(&:name)
       end
 
-      private
-
-      def build_terraform_dependency(file, name, details)
-        details = details.first
-
-        source = source_from(details)
+      def build_terraform_dependency(file, name, source, details)
+        # dep_name should be unique for a source, using the info derived from
+        # the source or the source name provides this uniqueness
         dep_name = case source[:type]
                    when "registry" then source[:module_identifier]
                    when "provider" then details["source"]
+                   when "git" then git_dependency_name(name, source)
                    else name
                    end
         version_req = details["version"]&.strip
@@ -199,6 +213,15 @@ module Dependabot
         end
       end
 
+      def git_dependency_name(name, source)
+        git_source = Source.from_url(source[:url])
+        if source[:ref]
+          name + "::" + git_source.provider + "::" + git_source.repo + "::" + source[:ref]
+        else
+          name + "::" + git_source.provider + "::" + git_source.repo
+        end
+      end
+
       def git_source_details_from(source_string)
         git_url = source_string.strip.gsub(/^git::/, "")
         git_url = "https://" + git_url unless git_url.start_with?("git@") || git_url.include?("://")
@@ -266,7 +289,7 @@ module Dependabot
         return :path if source_string.start_with?(".")
         return :github if source_string.include?("github.com")
         return :bitbucket if source_string.start_with?("bitbucket.org/")
-        return :git if source_string.start_with?("git::")
+        return :git if source_string.start_with?("git::") || source_string.start_with?("git@")
         return :mercurial if source_string.start_with?("hg::")
         return :s3 if source_string.start_with?("s3::")
 

data/lib/dependabot/terraform/file_updater.rb

@@ -199,10 +199,11 @@ module Dependabot
         return /terraform\s*\{(?:(?!^\}).)*/m if terragrunt_file?(filename)
 
         # For modules we can do better - filter for module blocks that use the
-        # name of the dependency
+        # name of the module
+        module_name = dependency.name.split("::").first
         /
-          module\s+["']#{Regexp.escape(dependency.name)}["']\s*\{
-          (?:(?!^\}).)*
+         module\s+["']#{Regexp.escape(module_name)}["']\s*\{
+         (?:(?!^\}).)*
         /mx
       end
 

data/lib/dependabot/terraform/requirements_updater.rb

@@ -161,7 +161,8 @@ module Dependabot
             version_to_be_permitted.segments[index]
           elsif index == index_to_update
             version_to_be_permitted.segments[index] + 1
-          else 0
+          else
+            0
           end
         end
 

data/lib/dependabot/terraform.rb

@@ -20,3 +20,14 @@ Dependabot::Dependency.
 
 require "dependabot/utils"
 Dependabot::Utils.register_always_clone("terraform")
+
+Dependabot::Dependency.
+  register_display_name_builder(
+    "terraform",
+    lambda { |name|
+      # Only modify the name if it a git source dependency
+      next unless name.include? "::"
+
+      name.split("::").first + "::" + name.split("::")[2].split("/").last
+    }
+  )

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.169.1
+  version: 0.169.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-29 00:00:00.000000000 Z
+date: 2021-12-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.23.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.23.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -216,7 +216,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.2.22
+rubygems_version: 3.2.32
 signing_key: 
 specification_version: 4
 summary: Terraform support for dependabot