Look into checking if renovate can be implemented to manage dependencies downstreaams specially for major version upates

[renuka-sharma]

Is there an existing issue for this?

• [x] I have searched the existing issues

Description

https://github.com/renovatebot/renovate

https://docs.renovatebot.com/getting-started/installing-onboarding/

Potential Terraform Configuration

No response

References

No response

[renuka-sharma]

so I have a use case where this makes it more relevant to update the downstream pipelines on regular bases.

while working on sananet I was presented with this issue

│ Error: Failed to query available provider packages │ │ Could not retrieve the list of available versions for provider hashicorp/random: no available releases match the given constraints >= 3.3.2, ~> 3.5.1, ~> 3.6

I found out that client was far behind in their modules version

diff --git a/02-Workloads/01-Sol/Infrastructure/app_server.tf b/02-Workloads/01-Sol/Infrastructure/app_server.tf index 21dd42b..e48c635 100644 --- a/02-Workloads/01-Sol/Infrastructure/app_server.tf +++ b/02-Workloads/01-Sol/Infrastructure/app_server.tf @@ -1,6 +1,6 @@ module "vm" { source = "cloudnationhq/vm/azure"

• version = "~> 0.5"

• version = "~> 2.0"

  keyvault = module.kv.vault.id location = module.groups.groups.app.location diff --git a/02-Workloads/01-Sol/Infrastructure/vnet.tf b/02-Workloads/01-Sol/Infrastructure/vnet.tf index 93dda01..54bb630 100644 --- a/02-Workloads/01-Sol/Infrastructure/vnet.tf +++ b/02-Workloads/01-Sol/Infrastructure/vnet.tf @@ -6,7 +6,7 @@ data "azurerm_virtual_network" "vnet_hub" {

  module "network" { source = "cloudnationhq/vnet/azure"

• version = "~> 0.2"

• version = "~> 2.0"

  naming = { subnet = module.naming.subnet.name

so it would not be easy if multiple modules from cloudnation are used by client and are not updated regularly.

we would need to work on updating the downstream pipelines.