feat(manager/terraform): support OCI charts in helm_release

lib/modules/manager/terraform/__fixtures__/helm.tf

@@ -38,3 +38,10 @@ resource "helm_release" "invalid_3" {
   chart      = "redis"
   version    = "6.0.1"
 }
+
+## chart in OCI registry
+resource "helm_release" "karpenter" {
+  name  = "karpenter"
+  chart = "oci://public.ecr.aws/karpenter/karpenter"
+  version = "v0.22.1"
+}

lib/modules/manager/terraform/extract.spec.ts

@@ -574,7 +574,7 @@ describe('modules/manager/terraform/extract', () => {
 
     it('extract helm releases', async () => {
       const res = await extractPackageFile(helm, 'helm.tf', {});
-      expect(res?.deps).toHaveLength(6);
+      expect(res?.deps).toHaveLength(7);
       expect(res?.deps.filter((dep) => dep.skipReason)).toHaveLength(2);
       expect(res?.deps).toIncludeAllPartialMembers([
         {
@@ -619,6 +619,13 @@ describe('modules/manager/terraform/extract', () => {
           depType: 'helm_release',
           registryUrls: [undefined],
         },
+        {
+          currentValue: 'v0.22.1',
+          datasource: 'docker',
+          depName: 'public.ecr.aws/karpenter/karpenter',
+          depType: 'helm_release',
+          registryUrls: [undefined],
+        },
       ]);
     });
 

lib/modules/manager/terraform/extractors/resources/helm-release.ts

@@ -1,8 +1,9 @@
 import is from '@sindresorhus/is';
+import { DockerDatasource } from '../../../../datasource/docker';
 import { HelmDatasource } from '../../../../datasource/helm';
 import type { PackageDependency } from '../../../types';
 import { DependencyExtractor } from '../../base';
-import { checkIfStringIsPath } from '../../util';
+import { checkIfChartIsOCI, checkIfStringIsPath, ociRegex } from '../../util';
 
 export class HelmReleaseExtractor extends DependencyExtractor {
   getCheckList(): string[] {
@@ -25,9 +26,18 @@ export class HelmReleaseExtractor extends DependencyExtractor {
           depName: helmRelease.chart,
           datasource: HelmDatasource.id,
         };
+
+        // For oci charts, we remove the oci:// and use the docker datasource
+        const isOciChart = checkIfChartIsOCI(helmRelease.chart);
+        if (isOciChart) {
+          dep.depName = helmRelease.chart.replace(ociRegex, '');
+          dep.datasource = DockerDatasource.id;
+        }
+
         if (!helmRelease.chart) {
           dep.skipReason = 'invalid-name';
-        } else if (checkIfStringIsPath(helmRelease.chart)) {
+          // OCI charts strings are valid paths, therefore we exclude them here
+        } else if (!isOciChart && checkIfStringIsPath(helmRelease.chart)) {
           dep.skipReason = 'local-chart';
         }
         dependencies.push(dep);

lib/modules/manager/terraform/readme.md

@@ -33,7 +33,7 @@ Renovate can update the `required_version` attribute of the Terraform block.
 
 #### helm_release
 
-Renovate can update the version attribute of `helm_release` resources.
+Renovate can update the version attribute of `helm_release` resources. This applies to both helm chart repositories and [charts published in OCI registries](https://helm.sh/docs/topics/registries/).
 
 | Name             | Public hosting | Private hosting |
 | ---------------- | :------------: | :-------------: |

lib/modules/manager/terraform/util.ts

@@ -18,6 +18,13 @@ export function checkIfStringIsPath(path: string): boolean {
   return !!match;
 }
 
+const ociRegex = /^oci:\/\//;
+export { ociRegex };
+export function checkIfChartIsOCI(chart: string): boolean {
+  const match = ociRegex.exec(chart);
+  return !!match;
+}
+
 export function massageProviderLookupName(dep: PackageDependency): void {
   if (!dep.packageName) {
     dep.packageName = dep.depName;