dependabot-terraform 0.334.0 → 0.336.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 29eafd633faba65ff0b619af4bcacbec7335ec2d43ba3b29b34aa5473cab80b4
-  data.tar.gz: d2124e37a675405c86a0461d21af1e77cd7bd625b72cd692468f159fe494b109
+  metadata.gz: 73e929a21af8de53a7ffa1ecb6da96834eaef227d9e2fd077c2881645de4ca48
+  data.tar.gz: ed489f86028e6262d476bacbd2a1edf58b00c8fb775b834ab6295bc55b443230
 SHA512:
-  metadata.gz: '0795b9cf31cb69f6f5b3820ac89e9329fac569174c70466523e00315d80afc932fdc161a0871b12b77b87326c1ad74d4f579f541831edeae156c9f1c036d6c49'
-  data.tar.gz: '09402a639e31a188ebf596c45065e85fb3c6d8511cf8aaeabc653cc17983f0e178c52e559e9a875cc888354e7312a104f664bd147d7eee9ea6204c854dfa3ca6'
+  metadata.gz: a5778c31d7b15aa2612200008720564602c898ee2fd545be8ec1985a7d7a9c3793d95eef88d7a5e888052bd4ebdbf46afc29e8b106f5b2409c462bf27e9de0ef
+  data.tar.gz: 56c6c7a0b1cc06179c4191e79ac5a4a003a0c4ae749aef19f43872c85a05cc71e12863098f8f65bbdd1d3aa5700c62055ee6178ef2c5c7cea84bd61585347c01

data/lib/dependabot/terraform/file_parser.rb

@@ -44,12 +44,15 @@ module Dependabot
 
       sig { returns(Ecosystem) }
       def ecosystem
-        @ecosystem ||= T.let(begin
-          Ecosystem.new(
-            name: ECOSYSTEM,
-            package_manager: package_manager
-          )
-        end, T.nilable(Dependabot::Ecosystem))
+        @ecosystem ||= T.let(
+          begin
+            Ecosystem.new(
+              name: ECOSYSTEM,
+              package_manager: package_manager
+            )
+          end,
+          T.nilable(Dependabot::Ecosystem)
+        )
       end
 
       private

data/lib/dependabot/terraform/file_selector.rb

@@ -44,10 +44,12 @@ module Dependabot
       end
 
       sig do
-        params(modules: T::Hash[String, T::Array[T::Hash[String, T.untyped]]],
-               base_modules: T::Hash[String,
-                                     T::Array[T::Hash[String,
-                                                      T.untyped]]])
+        params(
+          modules: T::Hash[String, T::Array[T::Hash[String, T.untyped]]],
+          base_modules: T::Hash[String,
+                                T::Array[T::Hash[String,
+                                                 T.untyped]]]
+        )
           .returns(T::Hash[String,
                            T::Array[T::Hash[String,
                                             T.untyped]]])

data/lib/dependabot/terraform/file_updater.rb

@@ -449,8 +449,9 @@ module Dependabot
           return
         end
 
-        raise Dependabot::DependencyFileNotResolvable, "Error while updating lockfile, " \
-                                                       "no matching constraints found."
+        raise Dependabot::DependencyFileNotResolvable,
+              "Error while updating lockfile, " \
+              "no matching constraints found."
       end
 
       sig { params(message: String).returns(String) }

data/lib/dependabot/terraform/registry_client.rb

@@ -176,7 +176,14 @@ module Dependabot
         @services ||= T.let(
           begin
             response = http_get(url_for("/.well-known/terraform.json"))
-            response.status == 200 ? JSON.parse(response.body) : {}
+            if response.status == 200 && !response.body.empty?
+              JSON.parse(response.body)
+            else
+              {}
+            end
+          rescue JSON::ParserError => e
+            Dependabot.logger.warn("Failed to parse Terraform registry services: #{e.message}")
+            {}
           end,
           T.nilable(T::Hash[String, String])
         )

data/lib/dependabot/terraform/update_checker/latest_version_resolver.rb

@@ -52,8 +52,10 @@ module Dependabot
                 end
               end
             end
-            Dependabot.logger.info("Allowed version tags after filtering versions in cooldown:
-              #{allowed_version_tags.map(&:name).join(', ')}")
+            Dependabot.logger.info(
+              "Allowed version tags after filtering versions in cooldown:
+              #{allowed_version_tags.map(&:name).join(', ')}"
+            )
             git_commit_checker.max_local_tag(allowed_version_tags)
           rescue StandardError => e
             Dependabot.logger.error("Error fetching latest version tag: #{e.message}")
@@ -77,8 +79,10 @@ module Dependabot
               version.to_s == tag_name
             end
           end
-          Dependabot.logger.info("Allowed version tags after filtering versions in cooldown:
-                #{versions.map(&:to_s).join(', ')}")
+          Dependabot.logger.info(
+            "Allowed version tags after filtering versions in cooldown:
+                #{versions.map(&:to_s).join(', ')}"
+          )
           versions
         rescue StandardError => e
           Dependabot.logger.error("Error filter_versions_in_cooldown_period_from_provider(versions): #{e.message}")
@@ -101,8 +105,10 @@ module Dependabot
               version.to_s == tag_name
             end
           end
-          Dependabot.logger.info("filter_versions_in_cooldown_period_from_module::
-              Allowed version tags after filtering versions in cooldown:#{versions.map(&:to_s).join(', ')}")
+          Dependabot.logger.info(
+            "filter_versions_in_cooldown_period_from_module::
+              Allowed version tags after filtering versions in cooldown:#{versions.map(&:to_s).join(', ')}"
+          )
           versions
         rescue StandardError => e
           Dependabot.logger.error("Error fetching latest version tag: #{e.message}")
@@ -184,7 +190,8 @@ module Dependabot
               dependency: dependency,
               credentials: credentials,
               git_commit_checker: git_commit_checker
-            ), T.nilable(Package::PackageDetailsFetcher)
+            ),
+            T.nilable(Package::PackageDetailsFetcher)
           )
         end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.334.0
+  version: 0.336.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.336.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.336.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.336.0
 rdoc_options: []
 require_paths:
 - lib