dependabot-terraform 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8967cf03e79ccf2048ee8899931fe7c5c84b61626ad1434821d4ea9c44116178
-  data.tar.gz: a0e6c8d998eebbc10c0041859cdb48e2006a9367dddafc270ade1aa0ce43dfed
+  metadata.gz: 854707e5aa015235888308e5a99930812a2dc73ad7caea716ed14586b96b016f
+  data.tar.gz: 8b98973272cdb6eea95926755a3aae61cf60cae33904b2ba0b1dad7ef43ee763
 SHA512:
-  metadata.gz: 781749e9fd5bc08e9292ac4eebb9e857149aab0cee47e7d63e4984ca249dfb32044ce5e372828f6c5949f8fa3704c3e49c4c2d174523fb82e26abee6b2301c81
-  data.tar.gz: 5bb5d99c9be118bb96bae5f66eb4329648b465259d2bf5b4ace83c645b4d9f5177c3ce6122531cb606b1b8b22ad9be6fce2604305dc67709cf6dd1639eeef91a
+  metadata.gz: a59fe3869313ca23147a148b4f1a840051af65d92f0441acfd4c8656520f2103af784b3fb48405df97285584874193d02863213c5815f2f9254ab6007cd68cc6
+  data.tar.gz: 67ef88826158667e0614244f494213520da10fdad7644be64bebf06ef2ac9d4d15e4a20f9aef1231eba67d402e5048916bff7976c00c43237e6253e158280bfe

data/lib/dependabot/terraform/file_parser.rb

@@ -76,10 +76,13 @@ module Dependabot
               details = details.first
 
               source = source_from(details)
-              # Cannot update local path modules, skip
-              next if source && source[:type] == "path"
+              # Cannot update local path modules, and `source_from` returns nil for an
+              # interpolated source (Terraform >= 1.15 permits a `const` variable there), which
+              # has no version to read. Skip both, as the terragrunt path above does, rather
+              # than passing the nil to `T.must` and aborting the parse for the whole repo.
+              next if source.nil? || source[:type] == "path"
 
-              dependency_set << build_terraform_dependency(file, name, T.must(source), details)
+              dependency_set << build_terraform_dependency(file, name, source, details)
             end
           end
 

data/lib/dependabot/terraform/update_checker.rb

@@ -174,14 +174,14 @@ module Dependabot
         # we want to update that tag. Because we don't have a lockfile, the
         # latest version is the tag itself. Tags within their cooldown window
         # are filtered out by the shared GitCommitChecker.
-        latest_tag = git_commit_checker.local_tag_for_pinned_version_ref(update_cooldown)&.fetch(:tag)
+        latest_tag = git_commit_checker.local_tag_for_pinned_version_ref(update_cooldown)&.tag
         return unless latest_tag
 
         version_rgx = GitCommitChecker::VERSION_REGEX
         return unless latest_tag.match(version_rgx)
 
-        version = latest_tag.match(version_rgx)
-                            .named_captures.fetch("version")
+        version = T.must(latest_tag.match(version_rgx))
+                   .named_captures.fetch("version")
         version_class.new(version)
       end
 
@@ -189,8 +189,7 @@ module Dependabot
       def tag_for_latest_version
         return unless git_commit_checker.git_dependency?
 
-        latest_tag = git_commit_checker.local_tag_for_pinned_version_ref(update_cooldown)
-                                       &.fetch(:tag)
+        latest_tag = git_commit_checker.local_tag_for_pinned_version_ref(update_cooldown)&.tag
         return unless latest_tag
 
         version_rgx = GitCommitChecker::VERSION_REGEX

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -263,7 +263,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib