dependabot-terraform 0.267.0 → 0.270.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62a91f9b85e8cc81dd3d94bfb86d6b260fe56c274f26ead6a1a4c678ba378af7
-  data.tar.gz: 2cee8a2dcaf9d7a5d8ec492ad68cc05dea72baa6d12d1c92ac45067b877e050c
+  metadata.gz: ac53c7bf6ee0515650452bad8c56bcc74def66f943b697f4f8dd32557a6424a7
+  data.tar.gz: 5bba1f71a0de746074a31f7660afb4d8623475cb0ba68a7c9300c43838978024
 SHA512:
-  metadata.gz: 79ad9009afbda29b20a54b5ae03044320ed88fc3fe97e06349aa0591fbaaecc45638b651d16ca7a2797d9c30cf645fbb08f0452c15615d67035d5cf1862c4411
-  data.tar.gz: 0ac7d95c328fdabc405b63b6d0085eb9f28aae8bf687f2b61bbb37c7a216d0b9d8e4a8f1c6d284c25a0fd5609b2a59112aada3837414a5b8c531df395bb26f8d
+  metadata.gz: 35b21c838023f888961044c625a2c1480c68e4d56bf1670a4e088f54608ff50d3378a24f05f87d1ad580763cb6330d1126dc24bee4178090fded99a1decf0cc3
+  data.tar.gz: 07207646de78c06d269c7ee16ae0edd7cd87d538aa9ec3480529f0cdd9a0223cbe974432ba18c9fb27b2f73624753ae24b2b9ccc6046b46e321be9be7551ccc6

data/lib/dependabot/terraform/file_updater.rb

@@ -20,7 +20,7 @@ module Dependabot
       MODULE_NOT_INSTALLED_ERROR =  /Module not installed.*module\s*\"(?<mod>\S+)\"/m
       GIT_HTTPS_PREFIX = %r{^git::https://}
 
-      def self.updated_files_regex
+      def self.updated_files_regex(_ = false)
         [/\.tf$/, /\.hcl$/]
       end
 

data/lib/dependabot/terraform/update_checker.rb

@@ -1,6 +1,8 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/git_commit_checker"
@@ -12,8 +14,14 @@ require "dependabot/terraform/registry_client"
 module Dependabot
   module Terraform
     class UpdateChecker < Dependabot::UpdateCheckers::Base
-      ELIGIBLE_SOURCE_TYPES = %w(git provider registry).freeze
+      extend T::Sig
+
+      ELIGIBLE_SOURCE_TYPES = T.let(
+        %w(git provider registry).freeze,
+        T::Array[String]
+      )
 
+      sig { override.returns(T.nilable(T.any(String, Gem::Version))) }
       def latest_version
         return latest_version_for_git_dependency if git_dependency?
         return latest_version_for_registry_dependency if registry_dependency?
@@ -22,17 +30,20 @@ module Dependabot
         # Other sources (mercurial, path dependencies) just return `nil`
       end
 
+      sig { override.returns(T.nilable(T.any(String, Gem::Version))) }
       def latest_resolvable_version
         # No concept of resolvability for terraform modules (that we're aware
         # of - there may be in future).
         latest_version
       end
 
+      sig { override.returns(T.nilable(T.any(String, Dependabot::Version))) }
       def latest_resolvable_version_with_no_unlock
         # Irrelevant, since Terraform doesn't have a lockfile
         nil
       end
 
+      sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
       def updated_requirements
         RequirementsUpdater.new(
           requirements: dependency.requirements,
@@ -41,6 +52,7 @@ module Dependabot
         ).updated_requirements
       end
 
+      sig { returns(T::Boolean) }
       def requirements_unlocked_or_can_be?
         # If the requirement comes from a proxy URL then there's no way for
         # us to update it
@@ -49,15 +61,18 @@ module Dependabot
 
       private
 
+      sig { override.returns(T::Boolean) }
       def latest_version_resolvable_with_full_unlock?
         # Full unlock checks aren't relevant for Terraform files
         false
       end
 
+      sig { override.returns(T::Array[Dependabot::Dependency]) }
       def updated_dependencies_after_full_unlock
         raise NotImplementedError
       end
 
+      sig { returns(T.nilable(Dependabot::Terraform::Version)) }
       def latest_version_for_registry_dependency
         return unless registry_dependency?
 
@@ -67,26 +82,36 @@ module Dependabot
         versions.reject!(&:prerelease?) unless wants_prerelease?
         versions.reject! { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
 
-        @latest_version_for_registry_dependency = versions.max
+        @latest_version_for_registry_dependency = T.let(
+          versions.max,
+          T.nilable(Dependabot::Terraform::Version)
+        )
       end
 
+      sig { returns(T::Array[Dependabot::Terraform::Version]) }
       def all_module_versions
-        identifier = dependency_source_details.fetch(:module_identifier)
+        identifier = dependency_source_details&.fetch(:module_identifier)
         registry_client.all_module_versions(identifier: identifier)
       end
 
+      sig { returns(T::Array[Dependabot::Terraform::Version]) }
       def all_provider_versions
-        identifier = dependency_source_details.fetch(:module_identifier)
+        identifier = dependency_source_details&.fetch(:module_identifier)
         registry_client.all_provider_versions(identifier: identifier)
       end
 
+      sig { returns(Dependabot::Terraform::RegistryClient) }
       def registry_client
-        @registry_client ||= begin
-          hostname = dependency_source_details.fetch(:registry_hostname)
-          RegistryClient.new(hostname: hostname, credentials: credentials)
-        end
+        @registry_client ||= T.let(
+          begin
+            hostname = dependency_source_details&.fetch(:registry_hostname)
+            RegistryClient.new(hostname: hostname, credentials: credentials)
+          end,
+          T.nilable(Dependabot::Terraform::RegistryClient)
+        )
       end
 
+      sig { returns(T.nilable(Dependabot::Terraform::Version)) }
       def latest_version_for_provider_dependency
         return unless provider_dependency?
 
@@ -96,9 +121,13 @@ module Dependabot
         versions.reject!(&:prerelease?) unless wants_prerelease?
         versions.reject! { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
 
-        @latest_version_for_provider_dependency = versions.max
+        @latest_version_for_provider_dependency = T.let(
+          versions.max,
+          T.nilable(Dependabot::Terraform::Version)
+        )
       end
 
+      sig { returns(T::Boolean) }
       def wants_prerelease?
         current_version = dependency.version
         if current_version &&
@@ -112,6 +141,7 @@ module Dependabot
         end
       end
 
+      sig { returns(T.nilable(T.any(Dependabot::Version, String))) }
       def latest_version_for_git_dependency
         # If the module isn't pinned then there's nothing for us to update
         # (since there's no lockfile to update the version in). We still
@@ -138,6 +168,7 @@ module Dependabot
         nil
       end
 
+      sig { returns(T.nilable(String)) }
       def tag_for_latest_version
         return unless git_commit_checker.git_dependency?
         return unless git_commit_checker.pinned?
@@ -152,40 +183,48 @@ module Dependabot
         latest_tag
       end
 
+      sig { returns(T::Boolean) }
       def proxy_requirement?
         dependency.requirements.any? do |req|
           req.fetch(:source)&.fetch(:proxy_url, nil)
         end
       end
 
+      sig { returns(T::Boolean) }
       def registry_dependency?
         return false if dependency_source_details.nil?
 
-        dependency_source_details.fetch(:type) == "registry"
+        dependency_source_details&.fetch(:type) == "registry"
       end
 
+      sig { returns(T::Boolean) }
       def provider_dependency?
         return false if dependency_source_details.nil?
 
-        dependency_source_details.fetch(:type) == "provider"
+        dependency_source_details&.fetch(:type) == "provider"
       end
 
+      sig { returns(T.nilable(T::Hash[T.any(String, Symbol), T.untyped])) }
       def dependency_source_details
         dependency.source_details(allowed_types: ELIGIBLE_SOURCE_TYPES)
       end
 
+      sig { returns(T::Boolean) }
       def git_dependency?
         git_commit_checker.git_dependency?
       end
 
+      sig { returns(Dependabot::GitCommitChecker) }
       def git_commit_checker
-        @git_commit_checker ||=
+        @git_commit_checker ||= T.let(
           GitCommitChecker.new(
             dependency: dependency,
             credentials: credentials,
             ignored_versions: ignored_versions,
             raise_on_ignored: raise_on_ignored
-          )
+          ),
+          T.nilable(Dependabot::GitCommitChecker)
+        )
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.267.0
+  version: 0.270.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-07-25 00:00:00.000000000 Z
+date: 2024-08-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.267.0
+        version: 0.270.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.267.0
+        version: 0.270.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -260,7 +260,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.267.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.270.0
 post_install_message: 
 rdoc_options: []
 require_paths: