chef 18.10.17 → 19.2.12

data/lib/chef/resource/windows_uac.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Tim Smith (<tsmith@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -26,23 +26,23 @@ class Chef
       description 'The *windows_uac* resource configures UAC on Windows hosts by setting registry keys at `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System`'
       introduced "15.0"
       examples <<~DOC
-        **Disable UAC prompts for the admin**:
+      **Disable UAC prompts for the admin**:
 
-        ```ruby
-        windows_uac 'Disable UAC prompts for the admin' do
-          enable_uac true
-          prompt_on_secure_desktop false
-          consent_behavior_admins :no_prompt
-        end
-        ```
+      ```ruby
+      windows_uac 'Disable UAC prompts for the admin' do
+        enable_uac true
+        prompt_on_secure_desktop false
+        consent_behavior_admins :no_prompt
+      end
+      ```
 
-        **Disable UAC entirely**:
+      **Disable UAC entirely**:
 
-        ```ruby
-        windows_uac 'Disable UAC entirely' do
-          enable_uac false
-        end
-        ```
+      ```ruby
+      windows_uac 'Disable UAC entirely' do
+        enable_uac false
+      end
+      ```
       DOC
 
       # https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings#user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations

data/lib/chef/resource/windows_update_settings.rb

@@ -4,7 +4,7 @@
 # Author:: Tim Smith (tsmith@chef.io)
 #
 # Copyright:: 2014-2017, Sölvi Páll Ásgeirsson.
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -29,20 +29,20 @@ class Chef
       description "Use the **windows_update_settings** resource to manage the various Windows Update patching options."
       introduced "17.3"
       examples <<~DOC
-        **Set Windows Update settings**:
-
-        ```ruby
-        windows_update_settings 'Settings to Configure Windows Nodes to automatically receive updates' do
-          disable_os_upgrades true
-          elevate_non_admins true
-          block_windows_update_website true
-          automatically_install_minor_updates true
-          scheduled_install_day 'Friday'
-          scheduled_install_hour 18
-          update_other_ms_products true
-          action :enable
-        end
-        ```
+      **Set Windows Update settings**:
+
+      ```ruby
+      windows_update_settings 'Settings to Configure Windows Nodes to automatically receive updates' do
+        disable_os_upgrades true
+        elevate_non_admins true
+        block_windows_update_website true
+        automatically_install_minor_updates true
+        scheduled_install_day 'Friday'
+        scheduled_install_hour 18
+        update_other_ms_products true
+        action :enable
+      end
+      ```
       DOC
 
       # required for the alias to pass validation
@@ -87,8 +87,8 @@ class Chef
       # HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
 
       property :automatic_update_option, [Integer, Symbol], equal_to: UPDATE_OPTIONS.keys, coerce: proc { |x| UPDATE_OPTIONS.key(x) || x },
-        default: :download_and_schedule,
-        description: "Control what to do when updates are found. This allows you to notify, automatically download and notify to install, automatically download and schedule the install, or let the local admin decide what action to take."
+                default: :download_and_schedule,
+                description: "Control what to do when updates are found. This allows you to notify, automatically download and notify to install, automatically download and schedule the install, or let the local admin decide what action to take."
       # options: 2 - notify before download
       #          3 - auto download and notify
       #          4 - auto download and schedule - must also set day and time (below)
@@ -104,11 +104,11 @@ class Chef
       #          1 - yeah, buddy, i want to set my own interval for checking for updates - true
 
       property :custom_detection_frequency, Integer, default: 22, description: "If you decided to override the OS default detection frequency, specify your choice here. Valid choices are 0 - 22",
-        callbacks: {
-          "should be a valid detection frequency (0-22)" => lambda { |p|
-            p.between?(0, 22)
-          },
-        }
+      callbacks: {
+        "should be a valid detection frequency (0-22)" => lambda { |p|
+          p.between?(0, 22)
+        },
+      }
       # a time period of between 0 and 22 hours to check for new updates
       # this is a hex value - convert it from dec to hex
 
@@ -125,11 +125,11 @@ class Chef
       #          Sunday - Saturday day of the week to install, 1 == sunday
 
       property :scheduled_install_hour, Integer, description: "If you chose a scheduled day to install, then choose an hour on that day for you installation",
-        callbacks: {
-          "should be a valid hour in a 24 hour clock" => lambda { |p|
-            p > 0 && p < 25
-          },
-        }
+                callbacks: {
+                  "should be a valid hour in a 24 hour clock" => lambda { |p|
+                    p > 0 && p < 25
+                  },
+                }
       # options: --- 2-digit number representing an hour of the day, uses a 24-hour clock, 12 == noon, 24 == midnight
 
       property :update_other_ms_products, [true, false], default: true, description: "Allows for other Microsoft products to get updates too"

data/lib/chef/resource/windows_user_privilege.rb

@@ -1,7 +1,7 @@
 #
 # Author:: Jared Kauppila (<jared@kauppi.la>)
 # Author:: Vasundhara Jagdale(<vasundhara.jagdale@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -28,67 +28,67 @@ class Chef
       introduced "16.0"
 
       examples <<~DOC
-        **Set the SeNetworkLogonRight privilege for the Builtin Administrators and Authenticated Users groups**:
+      **Set the SeNetworkLogonRight privilege for the Builtin Administrators and Authenticated Users groups**:
 
-        The `:set` action will add this privilege for these two groups and remove this privilege from all other groups or users.
+      The `:set` action will add this privilege for these two groups and remove this privilege from all other groups or users.
 
-        ```ruby
-        windows_user_privilege 'Network Logon Rights' do
-          privilege      'SeNetworkLogonRight'
-          users          ['BUILTIN\\Administrators', 'NT AUTHORITY\\Authenticated Users']
-          action         :set
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Network Logon Rights' do
+        privilege      'SeNetworkLogonRight'
+        users          ['BUILTIN\\Administrators', 'NT AUTHORITY\\Authenticated Users']
+        action         :set
+      end
+      ```
 
-        **Set the SeCreatePagefilePrivilege privilege for the Builtin Guests and Administrator groups**:
+      **Set the SeCreatePagefilePrivilege privilege for the Builtin Guests and Administrator groups**:
 
-        The `:set` action will add this privilege for these two groups and remove this privilege from all other groups or users.
+      The `:set` action will add this privilege for these two groups and remove this privilege from all other groups or users.
 
-        ```ruby
-        windows_user_privilege 'Create Pagefile' do
-          privilege      'SeCreatePagefilePrivilege'
-          users          ['BUILTIN\\Guests', 'BUILTIN\\Administrators']
-          action         :set
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Create Pagefile' do
+        privilege      'SeCreatePagefilePrivilege'
+        users          ['BUILTIN\\Guests', 'BUILTIN\\Administrators']
+        action         :set
+      end
+      ```
 
-        **Add the SeDenyRemoteInteractiveLogonRight privilege to the 'Remote interactive logon' principal**:
+      **Add the SeDenyRemoteInteractiveLogonRight privilege to the 'Remote interactive logon' principal**:
 
-        ```ruby
-        windows_user_privilege 'Remote interactive logon' do
-          privilege      'SeDenyRemoteInteractiveLogonRight'
-          action         :add
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Remote interactive logon' do
+        privilege      'SeDenyRemoteInteractiveLogonRight'
+        action         :add
+      end
+      ```
 
-        **Add the SeCreatePageFilePrivilege privilege to the Builtin Guests group**:
+      **Add the SeCreatePageFilePrivilege privilege to the Builtin Guests group**:
 
-        ```ruby
-        windows_user_privilege 'Guests add Create Pagefile' do
-          principal      'BUILTIN\\Guests'
-          privilege      'SeCreatePagefilePrivilege'
-          action         :add
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Guests add Create Pagefile' do
+        principal      'BUILTIN\\Guests'
+        privilege      'SeCreatePagefilePrivilege'
+        action         :add
+      end
+      ```
 
-        **Remove the SeCreatePageFilePrivilege privilege from the Builtin Guests group**:
+      **Remove the SeCreatePageFilePrivilege privilege from the Builtin Guests group**:
 
-        ```ruby
-        windows_user_privilege 'Create Pagefile' do
-          privilege      'SeCreatePagefilePrivilege'
-          users          ['BUILTIN\\Guests']
-          action         :remove
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Create Pagefile' do
+        privilege      'SeCreatePagefilePrivilege'
+        principal      'BUILTIN\\Guests'
+        action         :remove
+      end
+      ```
 
-        **Clear the SeDenyNetworkLogonRight privilege from all users**:
+      **Clear the SeDenyNetworkLogonRight privilege from all users**:
 
-        ```ruby
-        windows_user_privilege 'Allow any user the Network Logon right' do
-          privilege      'SeDenyNetworkLogonRight'
-          action         :clear
-        end
-        ```
+      ```ruby
+      windows_user_privilege 'Allow any user the Network Logon right' do
+        privilege      'SeDenyNetworkLogonRight'
+        action         :clear
+      end
+      ```
       DOC
 
       PRIVILEGE_OPTS = %w{ SeAssignPrimaryTokenPrivilege
@@ -139,20 +139,20 @@ class Chef
                           }.freeze
 
       property :principal, String,
-        description: "An optional property to add the privilege for given principal. Use only with add and remove action. Principal can either be a user, group, or [special identity](https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/special-identities).",
-        name_property: true
+               description: "An optional property to add the privilege for given principal. Use only with add and remove action. Principal can either be a user, group, or [special identity](https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/special-identities).",
+               name_property: true
 
       property :users, [Array, String],
-        description: "An optional property to set the privilege for the specified users. Use only with `:set` action",
-        coerce: proc { |v| Array(v) }
+               description: "An optional property to set the privilege for the specified users. Use only with `:set` action",
+               coerce: proc { |v| Array(v) }
 
       property :privilege, [Array, String],
-        description: "One or more privileges to set for principal or users/groups. For more information, see [Microsoft's documentation on what each privilege does](https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment).",
-        required: true,
-        coerce: proc { |v| Array(v) },
-        callbacks: {
-          "Privilege property restricted to the following values: #{PRIVILEGE_OPTS}" => lambda { |n| (n - PRIVILEGE_OPTS).empty? },
-        }, identity: true
+               description: "One or more privileges to set for principal or users/groups. For more information, see [Microsoft's documentation on what each privilege does](https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment).",
+               required: true,
+               coerce: proc { |v| Array(v) },
+               callbacks: {
+                 "Privilege property restricted to the following values: #{PRIVILEGE_OPTS}" => lambda { |n| (n - PRIVILEGE_OPTS).empty? },
+               }, identity: true
 
       load_current_value do |new_resource|
         if new_resource.principal && (new_resource.action.include?(:add) || new_resource.action.include?(:remove))

data/lib/chef/resource/windows_workgroup.rb

@@ -27,20 +27,20 @@ class Chef
       description "Use the **windows_workgroup** resource to join or change the workgroup of a Windows host."
       introduced "14.5"
       examples <<~DOC
-        **Join a workgroup**:
+      **Join a workgroup**:
 
-        ```ruby
-        windows_workgroup 'myworkgroup'
-        ```
+      ```ruby
+      windows_workgroup 'myworkgroup'
+      ```
 
-        **Join a workgroup using a specific user**:
+      **Join a workgroup using a specific user**:
 
-        ```ruby
-        windows_workgroup 'myworkgroup' do
-          user 'Administrator'
-          password 'passw0rd'
-        end
-        ```
+      ```ruby
+      windows_workgroup 'myworkgroup' do
+        user 'Administrator'
+        password 'passw0rd'
+      end
+      ```
       DOC
 
       property :workgroup_name, String,

data/lib/chef/resource/yum_package.rb

@@ -1,6 +1,6 @@
 #
 # Author:: AJ Christensen (<aj@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -23,8 +23,9 @@ class Chef
   class Resource
     class YumPackage < Chef::Resource::Package
 
-      provides :yum_package
+      provides :yum_package, target_mode: true
       provides :package, platform_family: "fedora_derived"
+      target_mode support: :full
 
       description "Use the **yum_package** resource to install, upgrade, and remove packages with Yum for the Red Hat and CentOS platforms. The yum_package resource is able to resolve `provides` data for packages much like Yum can do when it is run from the command line. This allows a variety of options for installing packages, like minimum versions, virtual provides, and library names. Note: Support for using file names to install packages (as in `yum_package '/bin/sh'`) is not available because the volume of data required to parse for this is excessive."
       examples <<~DOC
@@ -109,7 +110,7 @@ class Chef
         ```
       DOC
 
-      allowed_actions :install, :upgrade, :remove, :purge, :lock, :unlock
+      allowed_actions :install, :upgrade, :remove, :purge, :lock, :unlock, :flush_cache
 
       # XXX: the coercions here are due to the provider promiscuously updating the properties on the
       # new_resource which causes immutable modification exceptions when passed an immutable node array.
@@ -157,7 +158,7 @@ class Chef
         description: "The path to the yum binary."
 
       property :environment, Hash,
-        introduced: "18.8",
+        introduced: "19.0",
         description: "A Hash of environment variables in the form of {'ENV_VARIABLE' => 'VALUE'} to be set before running the command.",
         default: {}, desired_state: false
     end

data/lib/chef/resource/yum_repository.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Thom May (<thom@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -22,29 +22,30 @@ class Chef
   class Resource
     class YumRepository < Chef::Resource
 
-      provides(:yum_repository) { true }
+      provides(:yum_repository, target_mode: true) { true }
+      target_mode support: :full
 
       description "Use the **yum_repository** resource to manage a Yum repository configuration file located at `/etc/yum.repos.d/repositoryid.repo` on the local machine. This configuration file specifies which repositories to reference, how to handle cached data, etc."
       introduced "12.14"
       examples <<~DOC
-        **Add an internal company repository**:
-
-        ```ruby
-        yum_repository 'OurCo' do
-          description 'OurCo yum repository'
-          mirrorlist 'http://artifacts.ourco.org/mirrorlist?repo=ourco-8&arch=$basearch'
-          gpgkey 'http://artifacts.ourco.org/pub/yum/RPM-GPG-KEY-OURCO-8'
-          action :create
-        end
-        ```
-
-        **Delete a repository**:
-
-        ```ruby
-        yum_repository 'CentOS-Media' do
-          action :delete
-        end
-        ```
+      **Add an internal company repository**:
+
+      ```ruby
+      yum_repository 'OurCo' do
+        description 'OurCo yum repository'
+        mirrorlist 'http://artifacts.ourco.org/mirrorlist?repo=ourco-8&arch=$basearch'
+        gpgkey 'http://artifacts.ourco.org/pub/yum/RPM-GPG-KEY-OURCO-8'
+        action :create
+      end
+      ```
+
+      **Delete a repository**:
+
+      ```ruby
+      yum_repository 'CentOS-Media' do
+        action :delete
+      end
+      ```
       DOC
 
       # http://linux.die.net/man/5/yum.conf as well as
@@ -67,8 +68,8 @@ class Chef
         default: true
 
       property :cost, String, regex: /^\d+$/,
-        description: "Relative cost of accessing this repository. Useful for weighing one repo's packages as greater/less than any other.",
-        validation_message: "The cost property must be a numeric value!"
+               description: "Relative cost of accessing this repository. Useful for weighing one repo's packages as greater/less than any other.",
+               validation_message: "The cost property must be a numeric value!"
 
       property :description, String,
         description: "Descriptive name for the repository channel and maps to the 'name' parameter in a repository .conf.",
@@ -99,7 +100,7 @@ class Chef
         description: "URL pointing to the ASCII-armored GPG key file for the repository. This is used if Yum needs a public key to verify a package and the required key hasn't been imported into the RPM database. If this option is set, Yum will automatically import the key from the specified URL. Multiple URLs may be specified in the same manner as the baseurl option. If a GPG key is required to install a package from a repository, all keys specified for that repository will be installed.\nMultiple URLs may be specified in the same manner as the baseurl option. If a GPG key is required to install a package from a repository, all keys specified for that repository will be installed."
 
       property :http_caching, String, equal_to: %w{packages all none},
-        description: "Determines how upstream HTTP caches are instructed to handle any HTTP downloads that Yum does. This option can take the following values:\n - `all` means all HTTP downloads should be cached\n - `packages` means only RPM package downloads should be cached, but not repository metadata downloads\n - `none` means no HTTP downloads should be cached.\n\nThe default value of `all` is recommended unless you are experiencing caching related issues."
+               description: "Determines how upstream HTTP caches are instructed to handle any HTTP downloads that Yum does. This option can take the following values:\n - `all` means all HTTP downloads should be cached\n - `packages` means only RPM package downloads should be cached, but not repository metadata downloads\n - `none` means no HTTP downloads should be cached.\n\nThe default value of `all` is recommended unless you are experiencing caching related issues."
 
       property :include_config, String,
         description: "An external configuration file using the format `url://to/some/location`."
@@ -122,19 +123,19 @@ class Chef
         description: "Number of times any attempt to retrieve a file should retry before returning an error. Setting this to `0` makes Yum try forever."
 
       property :metadata_expire, String, regex: [/^\d+$/, /^\d+[mhd]$/, /never/],
-        description: "Time (in seconds) after which the metadata will expire. If the current metadata downloaded is less than the value specified, then Yum will not update the metadata against the repository. If you find that Yum is not downloading information on updates as often as you would like lower the value of this option. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively. The default is six hours to compliment yum-updates running once per hour. It is also possible to use the word `never`, meaning that the metadata will never expire. Note: When using a metalink file, the metalink must always be newer than the metadata for the repository due to the validation, so this timeout also applies to the metalink file.",
-        validation_message: "The metadata_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
+               description: "Time (in seconds) after which the metadata will expire. If the current metadata downloaded is less than the value specified, then Yum will not update the metadata against the repository. If you find that Yum is not downloading information on updates as often as you would like lower the value of this option. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively. The default is six hours to compliment yum-updates running once per hour. It is also possible to use the word `never`, meaning that the metadata will never expire. Note: When using a metalink file, the metalink must always be newer than the metadata for the repository due to the validation, so this timeout also applies to the metalink file.",
+               validation_message: "The metadata_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
 
       property :metalink, String,
         description: "Specifies a URL to a metalink file for the repomd.xml, a list of mirrors for the entire repository are generated by converting the mirrors for the repomd.xml file to a baseurl."
 
       property :mirror_expire, String, regex: [/^\d+$/, /^\d+[mhd]$/],
-        description: "Time (in seconds) after which the mirrorlist locally cached will expire. If the current mirrorlist is less than this many seconds old then Yum will not download another copy of the mirrorlist, it has the same extra format as metadata_expire. If you find that Yum is not downloading the mirrorlists as often as you would like lower the value of this option. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively.",
-        validation_message: "The mirror_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
+               description: "Time (in seconds) after which the mirrorlist locally cached will expire. If the current mirrorlist is less than this many seconds old then Yum will not download another copy of the mirrorlist, it has the same extra format as metadata_expire. If you find that Yum is not downloading the mirrorlists as often as you would like lower the value of this option. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively.",
+               validation_message: "The mirror_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
 
       property :mirrorlist_expire, String, regex: [/^\d+$/, /^\d+[mhd]$/],
-        description: "Specifies the time (in seconds) after which the mirrorlist locally cached will expire. If the current mirrorlist is less than the value specified, then Yum will not download another copy of the mirrorlist. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively.",
-        validation_message: "The mirrorlist_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
+               description: "Specifies the time (in seconds) after which the mirrorlist locally cached will expire. If the current mirrorlist is less than the value specified, then Yum will not download another copy of the mirrorlist. You can also change from the default of using seconds to using days, hours or minutes by appending a `d`, `h` or `m` respectively.",
+               validation_message: "The mirrorlist_expire property must be a numeric value for time in seconds, the string 'never', or a numeric value appended with with `d`, `h`, or `m`!"
 
       property :mirrorlist, String,
         description: "URL to a file containing a list of baseurls. This can be used instead of or with the baseurl option. Substitution variables, described below, can be used with this option."
@@ -150,8 +151,8 @@ class Chef
         description: "Password to use with the username for basic authentication."
 
       property :priority, String, regex: /^(\d?[1-9]|[0-9][0-9])$/,
-        description: "Assigns a priority to a repository where the priority value is between `1` and `99` inclusive. Priorities are used to enforce ordered protection of repositories. Packages from repositories with a lower priority (higher numerical value) will never be used to upgrade packages that were installed from a repository with a higher priority (lower numerical value). The repositories with the lowest numerical priority number have the highest priority.",
-        validation_message: "The priority property must be a numeric value from 1-99!"
+               description: "Assigns a priority to a repository where the priority value is between `1` and `99` inclusive. Priorities are used to enforce ordered protection of repositories. Packages from repositories with a lower priority (higher numerical value) will never be used to upgrade packages that were installed from a repository with a higher priority (lower numerical value). The repositories with the lowest numerical priority number have the highest priority.",
+               validation_message: "The priority property must be a numeric value from 1-99!"
 
       property :proxy_password, String,
         description: "Password for this proxy."
@@ -169,9 +170,9 @@ class Chef
         description: "Determines whether to report the instance ID when using Amazon Linux AMIs and repositories."
 
       property :repositoryid, String, regex: [%r{^[^/]+$}],
-        description: "An optional property to set the repository name if it differs from the resource block's name.",
-        validation_message: "repositoryid property cannot contain a forward slash '/'",
-        name_property: true
+               description: "An optional property to set the repository name if it differs from the resource block's name.",
+               validation_message: "repositoryid property cannot contain a forward slash '/'",
+               name_property: true
 
       property :skip_if_unavailable, [TrueClass, FalseClass],
         description: "Allow yum to continue if this repository cannot be contacted for any reason."
@@ -195,8 +196,8 @@ class Chef
         description: "Enable bandwidth throttling for downloads."
 
       property :timeout, String, regex: /^\d+$/,
-        description: "Number of seconds to wait for a connection before timing out. Defaults to 30 seconds. This may be too short of a time for extremely overloaded sites.",
-        validation_message: "The timeout property must be a numeric value!"
+               description: "Number of seconds to wait for a connection before timing out. Defaults to 30 seconds. This may be too short of a time for extremely overloaded sites.",
+               validation_message: "The timeout property must be a numeric value!"
 
       property :username, String,
         description: "Username to use for basic authentication to a repository."

data/lib/chef/resource/zypper_package.rb

@@ -22,8 +22,9 @@ class Chef
   class Resource
     class ZypperPackage < Chef::Resource::Package
 
-      provides :zypper_package
-      provides :package, platform_family: "suse"
+      provides :zypper_package, target_mode: true
+      provides :package, platform_family: "suse", target_mode: true
+      target_mode support: :full
 
       description "Use the **zypper_package** resource to install, upgrade, and remove packages with Zypper for the SUSE Enterprise and openSUSE platforms."
       examples <<~DOC

data/lib/chef/resource/zypper_repository.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Tim Smith (<tsmith@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -22,8 +22,9 @@ class Chef
   class Resource
     class ZypperRepository < Chef::Resource
 
-      provides(:zypper_repository) { true }
-      provides(:zypper_repo) { true } # legacy cookbook compatibility
+      provides(:zypper_repository, target_mode: true) { true }
+      provides(:zypper_repo, target_mode: true) { true } # legacy cookbook compatibility
+      target_mode support: :full
 
       description "Use the **zypper_repository** resource to create Zypper package repositories on SUSE Enterprise Linux and openSUSE systems. This resource maintains full compatibility with the **zypper_repository** resource in the existing **zypper** cookbook."
       introduced "13.3"

data/lib/chef/resource.rb

@@ -2,7 +2,7 @@
 # Author:: Adam Jacob (<adam@chef.io>)
 # Author:: Christopher Walters (<cw@chef.io>)
 # Author:: John Keiser (<jkeiser@chef.io)
-# Copyright:: Copyright 2008-2016, Chef, Inc.
+# Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -1219,9 +1219,9 @@ class Chef
     #
 
     # FORBIDDEN_IVARS do not show up when the resource is converted to JSON (ie. hidden from data_collector and sending to the chef server via #to_json/to_h/as_json/inspect)
-    FORBIDDEN_IVARS = %i{@run_context @logger @not_if @only_if @enclosing_provider @description @introduced @examples @validation_message @deprecated @default_description @skip_docs @executed_by_runner @action_descriptions}.freeze
+    FORBIDDEN_IVARS = %i{@run_context @logger @not_if @only_if @enclosing_provider @description @introduced @examples @validation_message @deprecated @default_description @target_mode @skip_docs @executed_by_runner @action_descriptions}.freeze
     # HIDDEN_IVARS do not show up when the resource is displayed to the user as text (ie. in the error inspector output via #to_text)
-    HIDDEN_IVARS = %i{@allowed_actions @resource_name @source_line @run_context @logger @name @not_if @only_if @elapsed_time @enclosing_provider @description @introduced @examples @validation_message @deprecated @default_description @skip_docs @executed_by_runner @action_descriptions}.freeze
+    HIDDEN_IVARS = %i{@allowed_actions @resource_name @source_line @run_context @logger @name @not_if @only_if @elapsed_time @enclosing_provider @description @introduced @examples @validation_message @deprecated @default_description @target_mode @skip_docs @executed_by_runner @action_descriptions}.freeze
 
     include Chef::Mixin::ConvertToClassName
     extend Chef::Mixin::ConvertToClassName
@@ -1491,6 +1491,14 @@ class Chef
       @default_description
     end
 
+    # Documentation-only keyword
+    def self.target_mode(target_mode = "NOT_PASSED")
+      if target_mode != "NOT_PASSED"
+        @target_mode = target_mode
+      end
+      @target_mode
+    end
+
     # Use a partial code fragment.  This can be used for code sharing between multiple resources.
     #
     # Do not wrap the code fragment in a class or module.  It also does not support the use of super

data/lib/chef/resource_builder.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Lamont Granquist (<lamont@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource_collection/resource_collection_serialization.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Tyler Ball (<tball@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");

data/lib/chef/resource_collection/resource_list.rb

@@ -1,6 +1,6 @@
 #
 # Author:: Tyler Ball (<tball@chef.io>)
-# Copyright:: Copyright (c) Chef Software Inc.
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");