From a96a9ff295527b2cd1e2c76a67eecf8af0719e5d Mon Sep 17 00:00:00 2001 From: Tali Herzka Date: Tue, 19 Dec 2023 09:17:56 -0800 Subject: [PATCH 1/2] for early access #283 (#48080) From bc796a4829cd34005d1dfe9fb73e881b8f44a7e6 Mon Sep 17 00:00:00 2001 From: mc <42146119+mchammer01@users.noreply.github.com> Date: Tue, 19 Dec 2023 18:09:58 +0000 Subject: [PATCH 2/2] Clarify what sources are supported for Terraform Dependency Updates (#48039) --- data/reusables/dependabot/supported-package-managers.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/data/reusables/dependabot/supported-package-managers.md b/data/reusables/dependabot/supported-package-managers.md index d4fac8a80c..637ae9b8ba 100644 --- a/data/reusables/dependabot/supported-package-managers.md +++ b/data/reusables/dependabot/supported-package-managers.md @@ -26,7 +26,7 @@ pipenv | `pip` | <= 2021-05-29 | {% octicon "x" aria-label {% endif %}poetry | `pip` | v1 | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |{% ifversion fpt or ghec or ghes %} [pub](#pub) | `pub` | v2 | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} |{% endif %}{% ifversion dependabot-updates-swift-support %} [Swift](#swift) | `swift` | v5 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |{% endif %} -Terraform | `terraform` | >= 0.13, <= 1.5.x | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable | +[Terraform](#terraform) | `terraform` | >= 0.13, <= 1.5.x | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable | {% ifversion dependabot-yarn-v3-update %}[yarn](#yarn) | `npm` | v1, v2, v3 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %}|{% else %}yarn | `npm` | v1 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | | {% endif %} @@ -122,6 +122,13 @@ Private registry support applies to git registries only. Swift registries are no {% ifversion dependabot-yarn-v3-update %} +#### Terraform + +Terraform support includes: +- Modules hosted on Terraform Registry or a publicly reachable Git repository. +- Terraform providers. +- Private Terraform Registry. You can configure access for private git repositories by specifying a git registry in your `dependabot.yml` file. For more information, see [`git`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#git). + #### yarn Dependabot supports vendored dependencies for v2 onwards.