Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot not Updating terraform module using commit sha #10787

Open
1 task done
Osazz opened this issue Oct 14, 2024 · 0 comments
Open
1 task done

Dependabot not Updating terraform module using commit sha #10787

Osazz opened this issue Oct 14, 2024 · 0 comments
Labels
L: terraform Terraform packages T: bug 🐞 Something isn't working

Comments

@Osazz
Copy link

Osazz commented Oct 14, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Package ecosystem

Terraform

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

No response

dependabot.yml content

---
version: 2
registries:
  git-terraform-modules:
    type: git
    url: https://github.com
    username: x-access-token
    password: ${{ secrets.TESTER_GITHUB_TOKEN }}
updates:
  - package-ecosystem: terraform
    directories:
      - /live/**/*
    schedule:
      interval: weekly
    groups:
      terraform-live:
        patterns:
          - "*"
    registries:
      - git-terraform-modules

Updated dependency

I am trying to update terraform module used in my project, the source file is like this
source = "git::ssh://[email protected]/private/infra-live.git//modules/btg/first-module?ref=dc7c47554614c3d3d3065a45e020fc7f44adbscx"

Project is a monorepo with something like this

.
live/
  /something
      /another folder
module/
   /btg
       /first_module
       /second_module

git ls-remote result

ad0ea10cdc73a7229c40efbede6a3586a0555544	refs/tags/second-module-v1.1.0
dc7c47554614c3d3d3065a45e020fc7f44adbscx	refs/tags/first-module-v1.1.0
5a9792a8ec05d876314c2a977dcf8194c2333333	refs/tags/first-module-v1.1.1

What you expected to see, versus what you actually saw

When dependabot runs, all dependency with commit sha dc7c47554614c3d3d3065a45e020fc7f44adbscx should be updated to 5a9792a8ec05d876314c2a977dcf8194c2333333

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

Dependabot log is returning no update and empty latest version when there is one :

 => checking for updates 1/2
🌍 --> GET https://github.com/private/infra-live.git/info/refs?service=git-upload-pack
🌍 <-- 200 https://github.com/private/infra-live.git/info/refs?service=git-upload-pack
 => latest available version is
    (no update needed as it's already up-to-date)

Smallest manifest that reproduces the issue

No response

@Osazz Osazz added the T: bug 🐞 Something isn't working label Oct 14, 2024
@github-actions github-actions bot added the L: terraform Terraform packages label Oct 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
L: terraform Terraform packages T: bug 🐞 Something isn't working
Projects
Status: No status
Development

No branches or pull requests

1 participant