feat(manager/terraform): support OCI charts in helm_release

lib/modules/manager/helmv3/utils.spec.ts

@@ -1,4 +1,4 @@
-import { isAlias, resolveAlias } from './utils';
+import { isAlias, isOCIRegistry, resolveAlias } from './utils';
 
 describe('modules/manager/helmv3/utils', () => {
   describe('.resolveAlias()', () => {
@@ -70,4 +70,18 @@ describe('modules/manager/helmv3/utils', () => {
       expect(repository).toBeFalse();
     });
   });
+
+  describe('.isOCIRegistry()', () => {
+    it('return false if repository is null', () => {
+      // TODO #7154
+      const repository = isOCIRegistry(null as never);
+      expect(repository).toBeFalse();
+    });
+
+    it('return false if repository is undefined', () => {
+      // TODO #7154
+      const repository = isOCIRegistry(undefined as never);
+      expect(repository).toBeFalse();
+    });
+  });
 });

lib/modules/manager/helmv3/utils.ts

@@ -1,3 +1,4 @@
+import is from '@sindresorhus/is';
 import upath from 'upath';
 import { logger } from '../../../logger';
 import { DockerDatasource } from '../../datasource/docker';
@@ -82,8 +83,14 @@ export function isAlias(repository: string): boolean {
   return repository.startsWith('@') || repository.startsWith('alias:');
 }
 
-export function isOCIRegistry(repository: Repository): boolean {
-  return repository.repository.startsWith('oci://');
+export function isOCIRegistry(
+  repository: Repository | string | null | undefined
+): boolean {
+  if (is.nullOrUndefined(repository)) {
+    return false;
+  }
+  const repo = is.string(repository) ? repository : repository.repository;
+  return repo.startsWith('oci://');
 }
 
 export function aliasRecordToRepositories(

lib/modules/manager/terraform/__fixtures__/helm.tf

@@ -38,3 +38,10 @@ resource "helm_release" "invalid_3" {
   chart      = "redis"
   version    = "6.0.1"
 }
+
+## chart in OCI registry
+resource "helm_release" "karpenter" {
+  name  = "karpenter"
+  chart = "oci://public.ecr.aws/karpenter/karpenter"
+  version = "v0.22.1"
+}

lib/modules/manager/terraform/extract.spec.ts

@@ -574,7 +574,7 @@ describe('modules/manager/terraform/extract', () => {
 
     it('extract helm releases', async () => {
       const res = await extractPackageFile(helm, 'helm.tf', {});
-      expect(res?.deps).toHaveLength(6);
+      expect(res?.deps).toHaveLength(7);
       expect(res?.deps.filter((dep) => dep.skipReason)).toHaveLength(2);
       expect(res?.deps).toIncludeAllPartialMembers([
         {
@@ -619,6 +619,13 @@ describe('modules/manager/terraform/extract', () => {
           depType: 'helm_release',
           registryUrls: [undefined],
         },
+        {
+          currentValue: 'v0.22.1',
+          datasource: 'docker',
+          depName: 'public.ecr.aws/karpenter/karpenter',
+          depType: 'helm_release',
+          registryUrls: [undefined],
+        },
       ]);
     });
 

lib/modules/manager/terraform/extractors/resources/helm-release.ts

@@ -1,9 +1,14 @@
 import is from '@sindresorhus/is';
+import { regEx } from '../../../../../util/regex';
+import { DockerDatasource } from '../../../../datasource/docker';
 import { HelmDatasource } from '../../../../datasource/helm';
+import { isOCIRegistry } from '../../../helmv3/utils';
 import type { PackageDependency } from '../../../types';
 import { DependencyExtractor } from '../../base';
 import { checkIfStringIsPath } from '../../util';
 
+const ociRegex = regEx(/^oci:\/\//);
+
 export class HelmReleaseExtractor extends DependencyExtractor {
   getCheckList(): string[] {
     return [`"helm_release"`];
@@ -27,9 +32,14 @@ export class HelmReleaseExtractor extends DependencyExtractor {
         };
         if (!helmRelease.chart) {
           dep.skipReason = 'invalid-name';
+        } else if (isOCIRegistry(helmRelease.chart)) {
+          // For oci charts, we remove the oci:// and use the docker datasource
+          dep.depName = helmRelease.chart.replace(ociRegex, '');
+          dep.datasource = DockerDatasource.id;
         } else if (checkIfStringIsPath(helmRelease.chart)) {
           dep.skipReason = 'local-chart';
         }
+
         dependencies.push(dep);
       }
     }

lib/modules/manager/terraform/readme.md

@@ -33,7 +33,7 @@ Renovate can update the `required_version` attribute of the Terraform block.
 
 #### helm_release
 
-Renovate can update the version attribute of `helm_release` resources.
+Renovate can update the version attribute of `helm_release` resources. This applies to both helm chart repositories and [charts published in OCI registries](https://helm.sh/docs/topics/registries/).
 
 | Name             | Public hosting | Private hosting |
 | ---------------- | :------------: | :-------------: |