dependabot-terraform 0.238.0 → 0.239.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 296ec5b401cf6f0e649a20e85fb010c3d0bae32c8f65cd0afa2077192ce2f89d
-  data.tar.gz: e596e1d335efbbad163c1e8b24bf4e5822106be093d946247f136de0b41bddc5
+  metadata.gz: 0fc372ab0339341103308ddb84e56c94d147c1e7c1ff776722ab5b86d41a6a8c
+  data.tar.gz: 25bbf1dedb8b95cd8c13750da572437ae206e748afdd9cee948aaee6bca7a42a
 SHA512:
-  metadata.gz: 5a459139a27afc3f10a5dd0fb9371129c47b088809432ff5c1f041d406f7587d1e884344bbc0bca3df4c7b2bfa61ceeb3bbbab48b76b2600edbddd205fb9ed24
-  data.tar.gz: 9c843a13b500f2be006741913fc512d7c892fa2b979209ce462e8f4a374ed9ac3ddb3307bb5e6ce61591c96469ef2bf48bf0a60a7b69c94cf0fd974f045825ee
+  metadata.gz: cf73ed34fc35157ec759d747bbdd676250970e45139e751de4f79f23cd61abb982fa78db5bb83ca883dfd0003e918bdb28a75a98ea987cd6fc1bf037dd5098f1
+  data.tar.gz: 4de0c5e257d190b4fa97fd31ba791732697324b2c076e01009672b3b4dc1048719d6786b5e4937808fdc477c95a13a156a75e5d26f83cc9251b434b31cfc808e

data/helpers/build

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 set -e
 

data/lib/dependabot/terraform/file_fetcher.rb

@@ -31,7 +31,7 @@ module Dependabot
         fetched_files += terraform_files
         fetched_files += terragrunt_files
         fetched_files += local_path_module_files(terraform_files)
-        fetched_files += [lock_file] if lock_file
+        fetched_files += [lockfile] if lockfile
 
         return fetched_files if fetched_files.any?
 
@@ -86,10 +86,10 @@ module Dependabot
         end
       end
 
-      def lock_file
-        return @lock_file if defined?(@lock_file)
+      def lockfile
+        return @lockfile if defined?(@lockfile)
 
-        @lock_file = fetch_file_if_present(".terraform.lock.hcl")
+        @lockfile = fetch_file_if_present(".terraform.lock.hcl")
       end
     end
   end

data/lib/dependabot/terraform/file_parser.rb

@@ -359,17 +359,17 @@ module Dependabot
       def determine_version_for(hostname, namespace, name, constraint)
         return constraint if constraint&.match?(/\A\d/)
 
-        lock_file_content
+        lockfile_content
           .dig("provider", "#{hostname}/#{namespace}/#{name}", 0, "version")
       end
 
-      def lock_file_content
-        @lock_file_content ||=
+      def lockfile_content
+        @lockfile_content ||=
           begin
-            lock_file = dependency_files.find do |file|
+            lockfile = dependency_files.find do |file|
               file.name == ".terraform.lock.hcl"
             end
-            lock_file ? parsed_file(lock_file) : {}
+            lockfile ? parsed_file(lockfile) : {}
           end
       end
     end

data/lib/dependabot/terraform/file_selector.rb

@@ -13,14 +13,14 @@ module FileSelector
   end
 
   def terragrunt_file?(file_name)
-    !lock_file?(file_name) && file_name.end_with?(".hcl")
+    !lockfile?(file_name) && file_name.end_with?(".hcl")
   end
 
-  def lock_file?(filename)
+  def lockfile?(filename)
     filename == ".terraform.lock.hcl"
   end
 
-  def lock_file
-    dependency_files.find { |f| lock_file?(f.name) }
+  def lockfile
+    dependency_files.find { |f| lockfile?(f.name) }
   end
 end

data/lib/dependabot/terraform/file_updater.rb

@@ -36,8 +36,8 @@ module Dependabot
         end
         updated_lockfile_content = update_lockfile_declaration(updated_files)
 
-        if updated_lockfile_content && lock_file.content != updated_lockfile_content
-          updated_files << updated_file(file: lock_file, content: updated_lockfile_content)
+        if updated_lockfile_content && lockfile.content != updated_lockfile_content
+          updated_files << updated_file(file: lockfile, content: updated_lockfile_content)
         end
 
         updated_files.compact!
@@ -138,7 +138,7 @@ module Dependabot
       end
 
       def lockfile_details(new_req)
-        content = lock_file.content.dup
+        content = lockfile.content.dup
         provider_source = new_req[:source][:registry_hostname] + "/" + new_req[:source][:module_identifier]
         declaration_regex = lockfile_declaration_regex(provider_source)
 
@@ -217,7 +217,7 @@ module Dependabot
       end
 
       def update_lockfile_declaration(updated_manifest_files) # rubocop:disable Metrics/AbcSize, Metrics/PerceivedComplexity
-        return if lock_file.nil?
+        return if lockfile.nil?
 
         new_req = dependency.requirements.first
         # NOTE: Only providers are inlcuded in the lockfile, modules are not

data/lib/dependabot/terraform/requirement.rb

@@ -1,13 +1,16 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
+require "dependabot/requirement"
 require "dependabot/utils"
 require "dependabot/terraform/version"
 
 # Just ensures that Terraform requirements use Terraform versions
 module Dependabot
   module Terraform
-    class Requirement < Gem::Requirement
+    class Requirement < Dependabot::Requirement
       # Override regex PATTERN from Gem::Requirement to add support for the
       # optional 'v' prefix to release tag names, which Terraform supports.
       # https://www.terraform.io/docs/registry/modules/publish.html#requirements
@@ -31,6 +34,7 @@ module Dependabot
       # For consistency with other languages, we define a requirements array.
       # Terraform doesn't have an `OR` separator for requirements, so it
       # always contains a single element.
+      sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
       def self.requirements_array(requirement_string)
         [new(requirement_string)]
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.238.0
+  version: 0.239.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-07 00:00:00.000000000 Z
+date: 2023-12-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.239.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.239.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -231,7 +231,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.238.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
 post_install_message: 
 rdoc_options: []
 require_paths: