Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fetch changelogs for Terraform modules hosted in private registry of Terraform Cloud app.terraform.io #7010

Open
1 task done
jgrumboe opened this issue Apr 5, 2023 · 1 comment
Labels
F: package-metadata The metadata that Dependabot fetched for the package F: private-registries 💂‍♂️ Issues about using private registries with Dependabot; may be paired with an R: label. good first issue L: terraform Terraform packages T: feature-request Requests for new features

Comments

@jgrumboe
Copy link

jgrumboe commented Apr 5, 2023

Is there an existing issue for this?

  • I have searched the existing issues

Feature description

Currently, Changelogs / Release notes are fetched for public Terraform modules hosted on registry.terraform.io.
Unfortunately, that's not working for private modules hosted on Terraform Cloud app.terraform.io.

I saw the same problem with renovate bot and started this discussion there: renovatebot/renovate#21297 (reply in thread)
TL;DR: There's an "extended API" responding with more information, including the source of the Terraform module, available in public and private terraform.io registry.
In renovatebot that's covered by a separate function calling this "extended API" https://github.com/renovatebot/renovate/blob/cec928d7219a0cce10942867884096c7f5430365/lib/modules/datasource/terraform-module/index.ts#L80

Is this something which could also be implemented in dependabot to get changelogs for private Terraform modules?

@jgrumboe jgrumboe added the T: feature-request Requests for new features label Apr 5, 2023
@jeffwidman jeffwidman added L: terraform Terraform packages F: private-registries 💂‍♂️ Issues about using private registries with Dependabot; may be paired with an R: label. F: package-metadata The metadata that Dependabot fetched for the package good first issue labels Apr 6, 2023
@jeffwidman
Copy link
Member

👋 Thanks for reporting.

Yeah, this is something we should add support for.

I'm not sure how many users are actually impacted, my hunch is not that many, so although it's probably pretty straightforward to implement this might have to float for a bit unless someone from the community steps up with a PR. If anyone is interested, we'd happily review/answer any questions along the way.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
F: package-metadata The metadata that Dependabot fetched for the package F: private-registries 💂‍♂️ Issues about using private registries with Dependabot; may be paired with an R: label. good first issue L: terraform Terraform packages T: feature-request Requests for new features
Projects
None yet
Development

No branches or pull requests

2 participants