dependabot-terraform 0.238.0 → 0.240.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 296ec5b401cf6f0e649a20e85fb010c3d0bae32c8f65cd0afa2077192ce2f89d
-  data.tar.gz: e596e1d335efbbad163c1e8b24bf4e5822106be093d946247f136de0b41bddc5
+  metadata.gz: 23e8926ad019332c9648f29fd753e3057ea9d0b4ea8d568e70b70bd66cdbf5b0
+  data.tar.gz: 9395c2d2e3778fcb5c900e3da780907e3c4b0878838bf923a77dc38793136ce6
 SHA512:
-  metadata.gz: 5a459139a27afc3f10a5dd0fb9371129c47b088809432ff5c1f041d406f7587d1e884344bbc0bca3df4c7b2bfa61ceeb3bbbab48b76b2600edbddd205fb9ed24
-  data.tar.gz: 9c843a13b500f2be006741913fc512d7c892fa2b979209ce462e8f4a374ed9ac3ddb3307bb5e6ce61591c96469ef2bf48bf0a60a7b69c94cf0fd974f045825ee
+  metadata.gz: 9478606ea3538902c29f10a47406c302135707759844359943d07907f54df49ecbee46f09e764391b27dc8bf2df64673cdb5fa8aaa4e648f3334d7f460cee580
+  data.tar.gz: b8552c5f61f02c67a0bd9b7a25a15330089d75060d6fd1639da00910b5fee6ebebaa330725a5a4500e26810224cc8b8820cd034ff75e44e01a1ad21147af1a9b

data/helpers/build

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 set -e
 

data/lib/dependabot/terraform/file_fetcher.rb

@@ -31,14 +31,8 @@ module Dependabot
         fetched_files += terraform_files
         fetched_files += terragrunt_files
         fetched_files += local_path_module_files(terraform_files)
-        fetched_files += [lock_file] if lock_file
-
-        return fetched_files if fetched_files.any?
-
-        raise(
-          Dependabot::DependencyFileNotFound,
-          File.join(directory, "<anything>.tf")
-        )
+        fetched_files += [lockfile] if lockfile
+        fetched_files
       end
 
       private
@@ -86,10 +80,10 @@ module Dependabot
         end
       end
 
-      def lock_file
-        return @lock_file if defined?(@lock_file)
+      def lockfile
+        return @lockfile if defined?(@lockfile)
 
-        @lock_file = fetch_file_if_present(".terraform.lock.hcl")
+        @lockfile = fetch_file_if_present(".terraform.lock.hcl")
       end
     end
   end

data/lib/dependabot/terraform/file_parser.rb

@@ -359,17 +359,17 @@ module Dependabot
       def determine_version_for(hostname, namespace, name, constraint)
         return constraint if constraint&.match?(/\A\d/)
 
-        lock_file_content
+        lockfile_content
           .dig("provider", "#{hostname}/#{namespace}/#{name}", 0, "version")
       end
 
-      def lock_file_content
-        @lock_file_content ||=
+      def lockfile_content
+        @lockfile_content ||=
           begin
-            lock_file = dependency_files.find do |file|
+            lockfile = dependency_files.find do |file|
               file.name == ".terraform.lock.hcl"
             end
-            lock_file ? parsed_file(lock_file) : {}
+            lockfile ? parsed_file(lockfile) : {}
           end
       end
     end

data/lib/dependabot/terraform/file_selector.rb

@@ -13,14 +13,14 @@ module FileSelector
   end
 
   def terragrunt_file?(file_name)
-    !lock_file?(file_name) && file_name.end_with?(".hcl")
+    !lockfile?(file_name) && file_name.end_with?(".hcl")
   end
 
-  def lock_file?(filename)
+  def lockfile?(filename)
     filename == ".terraform.lock.hcl"
   end
 
-  def lock_file
-    dependency_files.find { |f| lock_file?(f.name) }
+  def lockfile
+    dependency_files.find { |f| lockfile?(f.name) }
   end
 end

data/lib/dependabot/terraform/file_updater.rb

@@ -36,8 +36,8 @@ module Dependabot
         end
         updated_lockfile_content = update_lockfile_declaration(updated_files)
 
-        if updated_lockfile_content && lock_file.content != updated_lockfile_content
-          updated_files << updated_file(file: lock_file, content: updated_lockfile_content)
+        if updated_lockfile_content && lockfile.content != updated_lockfile_content
+          updated_files << updated_file(file: lockfile, content: updated_lockfile_content)
         end
 
         updated_files.compact!
@@ -138,7 +138,7 @@ module Dependabot
       end
 
       def lockfile_details(new_req)
-        content = lock_file.content.dup
+        content = lockfile.content.dup
         provider_source = new_req[:source][:registry_hostname] + "/" + new_req[:source][:module_identifier]
         declaration_regex = lockfile_declaration_regex(provider_source)
 
@@ -217,7 +217,7 @@ module Dependabot
       end
 
       def update_lockfile_declaration(updated_manifest_files) # rubocop:disable Metrics/AbcSize, Metrics/PerceivedComplexity
-        return if lock_file.nil?
+        return if lockfile.nil?
 
         new_req = dependency.requirements.first
         # NOTE: Only providers are inlcuded in the lockfile, modules are not

data/lib/dependabot/terraform/requirement.rb

@@ -1,13 +1,16 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
+require "dependabot/requirement"
 require "dependabot/utils"
 require "dependabot/terraform/version"
 
 # Just ensures that Terraform requirements use Terraform versions
 module Dependabot
   module Terraform
-    class Requirement < Gem::Requirement
+    class Requirement < Dependabot::Requirement
       # Override regex PATTERN from Gem::Requirement to add support for the
       # optional 'v' prefix to release tag names, which Terraform supports.
       # https://www.terraform.io/docs/registry/modules/publish.html#requirements
@@ -25,12 +28,13 @@ module Dependabot
 
         return DefaultRequirement if matches[1] == ">=" && matches[2] == "0"
 
-        [matches[1] || "=", Terraform::Version.new(matches[2])]
+        [matches[1] || "=", Terraform::Version.new(T.must(matches[2]))]
       end
 
       # For consistency with other languages, we define a requirements array.
       # Terraform doesn't have an `OR` separator for requirements, so it
       # always contains a single element.
+      sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
       def self.requirements_array(requirement_string)
         [new(requirement_string)]
       end

data/lib/dependabot/terraform/version.rb

@@ -14,7 +14,20 @@ module Dependabot
     class Version < Dependabot::Version
       extend T::Sig
 
-      sig { override.params(version: T.any(String, Gem::Version)).void }
+      sig do
+        override
+          .overridable
+          .params(
+            version: T.any(
+              String,
+              Integer,
+              Float,
+              Gem::Version,
+              NilClass
+            )
+          )
+          .void
+      end
       def initialize(version)
         @version_string = T.let(version.to_s, String)
         super

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.238.0
+  version: 0.240.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-07 00:00:00.000000000 Z
+date: 2024-01-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.240.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.240.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -206,6 +206,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Terraform provides support for bumping Terraform modules via
   Dependabot. If you want support for multiple package managers, you probably want
   the meta-gem dependabot-omnibus.
@@ -231,7 +245,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.238.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.240.0
 post_install_message: 
 rdoc_options: []
 require_paths: