fix(terraform): Replace correct currentValue match in constraint with new value (#26867)

Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com>

lib/modules/manager/terraform/lockfile/index.spec.ts

@@ -1118,6 +1118,32 @@ describe('modules/manager/terraform/lockfile/index', () => {
       ).toBe('>= 2.36.0, 2.46.0');
     });
 
+    it('update constraint when current version is matched multiple times', () => {
+      expect(
+        getNewConstraint(
+          {
+            currentValue: '2.41.0',
+            newValue: '2.46.0',
+            newVersion: '2.46.0',
+          },
+          '>= 2.41.0, 2.41.0',
+        ),
+      ).toBe('>= 2.41.0, 2.46.0');
+    });
+
+    it('update constraint when current version is in a complicated constraint', () => {
+      expect(
+        getNewConstraint(
+          {
+            currentValue: '<= 2.41.0',
+            newValue: '<= 2.46.0',
+            newVersion: '2.46.0',
+          },
+          '>= 2.41.0, <= 2.41.0, >= 2.0.0',
+        ),
+      ).toBe('>= 2.41.0, <= 2.46.0, >= 2.0.0');
+    });
+
     it('create constraint with full version', () => {
       expect(
         getNewConstraint(

lib/modules/manager/terraform/lockfile/index.ts

@@ -99,8 +99,8 @@ export function getNewConstraint(
     );
     //remove surplus .0 version
     return oldConstraint.replace(
-      regEx(`${escapeRegExp(currentValue)}(\\.0)*`),
-      newValue,
+      regEx(`(,\\s|^)${escapeRegExp(currentValue)}(\\.0)*`),
+      `$1${newValue}`,
     );
   }