Pin Terraform versions doesn't seem to work

[jeroenjonckers]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Azure DevOps

Please tell us more about your question or problem

We are using renovatebot in our environment. Sometimes we don't want specific terrafrom versions to be updated, so we tried that with pinning.

renovate.json:
{ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ "group:all" ], "commitMessagePrefix": "REN-000: ", "packageRules": [ { "description": "Pin provider versions", "enabled": false, "matchFileNames": ["versions.tf"], "matchDatasources": ["terraform-provider"], "matchUpdateTypes": ["pin"] } ] }

versions.tf:

terraform { required_version = "> 1.0.0" required_providers { azuredevops = { source = "microsoft/azuredevops" version = "= 1.4.0" # 1.5.0 results in Error } aws = { source = "hashicorp/aws" version = ">= 5.0.0" } } }
Unfortunately this results in a new Pull Request with the following changes:

terraform { required_version = "> 1.0.0" required_providers { azuredevops = { source = "microsoft/azuredevops" version = "1.5.0" # 1.5.0 results in Error } aws = { source = "hashicorp/aws" version = ">= 5.0.0" } } }

Are we doing something wrong, or is it a bug?

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[rarkins]

How do you want to specify this?

• Disable updating of entire files
• Disable updating of specific package names, or
• Disable anything which has a value beginning with =?

[jeroenjonckers]

I only want to disable updating where a value beginning with = of providers configured in the versions.tf file. In this specific case I don't want renovate to update the microsoft/azuredevops provider. I want to keep it (for now) on 1.4.0.

[rarkins]

In that case you should use a package rule with matchManagers=terraform, matchCurrentValue = /^=/, enabled=false. In other words, disable all terraform dependencies where the current value starts with a =

[jeroenjonckers]

That did the trick. Thanks for guiding in the right direction.