dependabot-terraform 0.318.0 → 0.319.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9aeadb67b3052b13cdaab12209c8be0e0c47aa7cc9077573fbe10396d2f63469
-  data.tar.gz: 340bfd127b2153d12aaa520abbae5d95bd86c5229aeaf73a316b4153af7fb6bb
+  metadata.gz: a0cf75baa9d2b436bcf9d061401358f324e58372dd95b3947ef620c3e827d63c
+  data.tar.gz: b52615d92c9ce12e9f0306a970aae0f96462454a9de3e4a32df29cd3f9f91905
 SHA512:
-  metadata.gz: 94807295eb7c44635117a07a30d6073f744d40768d8f1ac45815aa1ffa421149c3c7e7dea7921e22cda1528a1959a6af000dd42e69ae2a305b3972c151a3565c
-  data.tar.gz: da3966cf9b5003da0d1ed7b2a08db979e83cc4d27cd717f070c627c78648bd6ad4b25dcd9a83e46b0af738f1098a2f666685a8844621a1b10158170896add941
+  metadata.gz: 75daf394601cb363b328ed57f66e19ba07a466b3d3fdda3a7ca5616994c17c269a9e312cc428c699527153e46007da0875f98151cc6bf76da3539e428e4b36e7
+  data.tar.gz: 1f6e1eb3bd7108dc23088aa14c0fe1c1c0f6f0183da12e4086e48ec1bde1ffab59b63822822670537d30fdad0bf0975386c0f6a308026d707b2b1a1605381ef5

data/lib/dependabot/terraform/package/package_details_fetcher.rb

@@ -76,7 +76,9 @@ module Dependabot
         end
 
         sig { returns(T::Array[GitTagWithDetail]) }
-        def fetch_tag_and_release_date_from_provider
+        def fetch_tag_and_release_date_from_provider # rubocop:disable Metrics/AbcSize,Metrics/PerceivedComplexity
+          return [] unless dependency_source_details
+
           url = RELEASE_URL_FOR_PROVIDER + dependency_source_details&.fetch(:module_identifier) +
                 INCLUDE_FOR_PROVIDER
           Dependabot.logger.info("Fetching provider release details from URL: #{url}")
@@ -87,21 +89,28 @@ module Dependabot
           return result_lines unless response.status == 200
 
           # Parse the JSON response
-          releases = JSON.parse(response.body).fetch("provider_versions", [])
+          releases = JSON.parse(response.body).fetch("included", [])
+                         .select { |item| item["type"] == "provider-versions" }
+          releases = releases.map { |release| release.fetch("attributes", {}) }
+          # Check if releases is an array and not empty
+          return result_lines unless releases.is_a?(Array) && !releases.empty?
 
           # Extract version names and release dates into result_lines
           releases.each do |release|
             result_lines << GitTagWithDetail.new(
               tag: release["version"],
-              release_date: release["published_at"]
+              release_date: release["published-at"]
             )
           end
           # Sort the result lines by tag in descending order
           result_lines.sort_by(&:tag).reverse
         end
+        # RuboCop:enable Metrics/AbcSize, Metrics/MethodLength
 
         sig { returns(T::Array[GitTagWithDetail]) }
         def fetch_tag_and_release_date_from_module
+          return [] unless dependency_source_details
+
           url = RELEASE_URL_FOR_MODULE + dependency_source_details&.fetch(:module_identifier) +
                 INCLUDE_FOR_MODULE
           Dependabot.logger.info("Fetching provider release details from URL: #{url}")
@@ -112,13 +121,15 @@ module Dependabot
           return result_lines unless response.status == 200
 
           # Parse the JSON response
-          releases = JSON.parse(response.body).fetch("module-versions", [])
+          releases = JSON.parse(response.body).fetch("included", [])
+                         .select { |item| item["type"] == "module-versions" }
+          releases = releases.map { |release| release.fetch("attributes", {}) }
 
           # Extract version names and release dates into result_lines
           releases.each do |release|
             result_lines << GitTagWithDetail.new(
               tag: release["version"],
-              release_date: release["published_at"]
+              release_date: release["published-at"]
             )
           end
           # Sort the result lines by tag in descending order
@@ -127,6 +138,8 @@ module Dependabot
 
         sig { returns(T.nilable(T::Hash[T.any(String, Symbol), T.untyped])) }
         def dependency_source_details
+          return nil unless @dependency.source_details
+
           @dependency.source_details(allowed_types: ELIGIBLE_SOURCE_TYPES)
         end
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.318.0
+  version: 0.319.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.318.0
+        version: 0.319.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.318.0
+        version: 0.319.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.318.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.319.0
 rdoc_options: []
 require_paths:
 - lib