Makefile

@@ -16,11 +16,6 @@ define vault_env
 endef
 
 init:
-	@# Drop any stale dependency locks so provider sources are re-resolved
-	@# purely from config. Locks are gitignored and CI can reuse a workspace
-	@# carrying a lock from an earlier (old provider source) run, which -upgrade
-	@# on some OpenTofu versions tries to re-resolve instead of dropping.
-	@find . -name '.terraform.lock.hcl' -not -path '*/.git/*' -delete
 	@$(call vault_env) && \
 	terragrunt run --all --non-interactive init -- -upgrade
 

environments/root.hcl

@@ -15,12 +15,6 @@ terraform {
     ca_file = "/etc/pki/tls/certs/ca-bundle.crt"
   }
   required_version = ">= 1.10"
-  required_providers {
-    artifactapi = {
-      source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
-      version = "0.1.2"
-    }
-  }
 }
 EOF
 }

modules/artifactapi/versions.tf

@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 1.10"
+  required_providers {
+    artifactapi = {
+      source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
+      version = ">= 0.1.2"
+    }
+  }
+}