Update supported Terraform version in Dependabot to 1.15.x - #45307
Draft
KazuyaMiyagi wants to merge 1 commit into
Draft
Update supported Terraform version in Dependabot to 1.15.x#45307KazuyaMiyagi wants to merge 1 commit into
KazuyaMiyagi wants to merge 1 commit into
Conversation
Contributor
How to review these changes 👓Thank you for your contribution. To review these changes, choose one of the following options: A Hubber will need to deploy your changes internally to review. Table of review linksNote: Please update the URL for your staging server or codespace. The table shows the files in the
Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server 🤖 This comment is automatically generated. |
5 tasks
3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why:
Follow-up to dependabot/dependabot-core#15694, which bumps the Terraform version bundled in the Dependabot updater image from
1.15.3to1.15.8.CONTRIBUTING.mdindependabot-coreasks contributors to file a corresponding docs PR when bumping a bundled version.Opened as a draft: the version documented here is not shipped until dependabot/dependabot-core#15694 is merged and rolled out. I'll mark this ready for review once that happens.
While preparing this I noticed the supported Terraform version is documented in two places that have drifted apart:
content/code-security/reference/supply-chain-security/dependabot-options-reference.md>= 0.13, <= 1.10.xdata/reusables/dependabot/supported-package-managers.md>= 0.13, <= 1.13.xThe bundled version was last bumped to
1.13.3in September 2025, and the reusable was updated accordingly in #40672. The copy independabot-options-reference.mdwas introduced in February 2025 by the PR that addressed the disparity between the Dependabot docs articles, carrying the then-current1.10.x, and has not been updated since. That file already carries a note asking for both copies to be kept in sync:This PR brings both to the same value.
What's being changed (if available, include any code snippets, screenshots, or gifs):
One line in each of the two files, so the supported Terraform version reads
>= 0.13, <= 1.15.xin both:The
.xnotation follows the four previous updates to this value (#18646, #23298, #35614, #40672).Check off the following: