inspec 5.22.50 → 6.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cd14b23a16599446de8bd98e75541a6da2b7c5488e13ef3a63dc2a7731665d02
-  data.tar.gz: 1776b5fb94dffb87fd5c84f3d6490771dff8908cf24af4ad8347431f0a104498
+  metadata.gz: b6b99d5ef7985f1fdc7315b1eaeb7f8ac1daa5f37720264a41072c6c93bfd6d5
+  data.tar.gz: e4d8316ba9bce858167356a2fc99b445c78b1293292e326d4e190ea549b51127
 SHA512:
-  metadata.gz: 2858b4b3fae43fd4d4e786c765483b3f5d1776eafbc348ba0aa9dd37d409339ed59cafd6633874c976442122ec1de717817471a58241e92919a496fd8464bee3
-  data.tar.gz: 81573232ed3f399e02da110b5d702c731bd70851dfdd11b38795228025bf16df04aa860e148f8e7236c2c0fb0e6ce4ab0c66fd1e83d76ac6f679b04c1a6e525f
+  metadata.gz: 86a3fe036510babf1542548106ea7923d3837f555dd72619a8c5bf75c0e3d0742f4cf04c9d9c184afcf78b40e009b20b47da45c76bf6f9891c43515592c669d0
+  data.tar.gz: 7fd2228f96ea3992ac8caac76c1e664225637ccdb7b323bc58a97f3b0845ef2dabd1b247a157f89a646b23733e427937cb5f8324a1cc5b5cc4befbb397bab281

data/Gemfile

@@ -1,3 +1,14 @@
+# TODO: Commentine artifactory source block temporarily
+# to addres JIRA #9390 (Chef InSpec  Verify pipeline is failing due to checksum mismatch of mixlib-shellout gem)
+# For Chef internal builds, allows preview versions of gems if available.
+# if ENV["ARTIFACTORY_BASE_URL"]
+#   source ENV["ARTIFACTORY_BASE_URL"] + "/artifactory/api/gems/omnibus-gems-local/" do
+#     # TODO: either fully populate this list, or revert back to non-block format
+#     #       to sweep all Chef gems from Artifactory.
+#     gem "chef-licensing"
+#   end
+# end
+
 source "https://rubygems.org"
 
 gem "inspec", path: "."
@@ -9,11 +20,10 @@ gem "inspec", path: "."
 # in it in order to package the executable. Hence the odd backwards dependency.
 gem "inspec-bin", path: "./inspec-bin"
 
-gem "ffi", ">= 1.9.14", "!= 1.13.0", "!= 1.14.2"
+# ffi version v1.17.0 is breaking verify pipeline as it requires
+# rubygems version to be upgraded to >= 3.3.22 Ref:https://buildkite.com/chef/inspec-inspec-main-verify-private/builds/812#018fe177-2ccb-45ed-a25e-213c8a6453df/698-707
 
-# We have a build issue 2023-11-13 with unf_ext 0.0.9 so we are pinning to 0.0.8.2
-# See https://github.com/knu/ruby-unf_ext/issues/74 https://buildkite.com/chef/inspec-inspec-inspec-5-omnibus-release/builds/22
-gem "unf_ext", "= 0.0.8.2"
+gem "ffi", ">= 1.15.5", "< 1.17.0"
 
 # inspec tests depend text output that changed in the 3.10 release
 # but our runtime dep is still 3.9+

data/inspec.gemspec

@@ -8,12 +8,20 @@ Gem::Specification.new do |spec|
   spec.authors       = ["Chef InSpec Team"]
   spec.email         = ["inspec@chef.io"]
   spec.summary       = "Infrastructure and compliance testing."
-  spec.description   = "InSpec provides a framework for creating end-to-end infrastructure tests. You can use it for integration or even compliance testing. Create fully portable test profiles and use them in your workflow to ensure stability and security. Integrate InSpec in your change lifecycle for local testing, CI/CD, and deployment verification."
+  spec.description   = <<-EOT
+InSpec provides a framework for creating end-to-end infrastructure tests. You can use it for integration or even compliance testing. Create fully portable test profiles and use them in your workflow to ensure stability and security. Integrate InSpec in your change lifecycle for local testing, CI/CD, and deployment verification.
+
+Packaged distributions of Progress® Chef® products obtained from RubyGems are made available pursuant to the Progress Chef EULA at https://www.chef.io/end-user-license-agreement, unless there is an executed agreement in effect between you and Progress that covers the Progress Chef products ("Master Agreement"), in which case the Master Agreement shall govern.
+
+Source code obtained from the Chef GitHub repository is made available under Apache-2.0, a copy of which is included.
+
+  EOT
+
   spec.homepage      = "https://github.com/inspec/inspec"
-  spec.license       = "Apache-2.0"
+  spec.license       = "LicenseRef-Chef-EULA"
   spec.require_paths = ["lib"]
 
-  spec.required_ruby_version = ">= 2.7"
+  spec.required_ruby_version = ">= 3.1.0"
 
   # ONLY the aws/azure/gcp files. The rest will come in from inspec-core
   # the gemspec is necessary for appbundler so don't remove it
@@ -31,7 +39,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "progress_bar", "~> 1.3.3"
 
   # Used for Azure profile until integrated into train
-  spec.add_dependency "faraday_middleware", ">= 0.12.2", "< 1.3"
+  spec.add_dependency "faraday_middleware", ">= 0.12.2", "< 1.1"
 
   # Train plugins we ship with InSpec
   spec.add_dependency "train-habitat",    "~> 0.1"

data/lib/plugins/inspec-license/inspec-license.gemspec

@@ -0,0 +1,6 @@
+Gem::Specification.new do |spec|
+  spec.name          = "inspec-license"
+  spec.summary       = "Plugin to list user licenses."
+  spec.description   = ""
+  spec.license       = "Apache-2.0"
+end

data/lib/plugins/inspec-parallel/inspec-parallel.gemspec

@@ -0,0 +1,6 @@
+Gem::Specification.new do |spec|
+  spec.name          = "inspec-parallel"
+  spec.summary       = "Plugin to handle parallel InSpec scan operations over multiple targets"
+  spec.description   = ""
+  spec.license       = "Apache-2.0"
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: inspec
 version: !ruby/object:Gem::Version
-  version: 5.22.50
+  version: 6.8.1
 platform: ruby
 authors:
 - Chef InSpec Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-05-21 00:00:00.000000000 Z
+date: 2024-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inspec-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.22.50
+        version: 6.8.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.22.50
+        version: 6.8.1
 - !ruby/object:Gem::Dependency
   name: train
   requirement: !ruby/object:Gem::Requirement
@@ -75,7 +75,7 @@ dependencies:
         version: 0.12.2
     - - "<"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -85,7 +85,7 @@ dependencies:
         version: 0.12.2
     - - "<"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.1'
 - !ruby/object:Gem::Dependency
   name: train-habitat
   requirement: !ruby/object:Gem::Requirement
@@ -156,10 +156,13 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 2.13.2
-description: InSpec provides a framework for creating end-to-end infrastructure tests.
-  You can use it for integration or even compliance testing. Create fully portable
-  test profiles and use them in your workflow to ensure stability and security. Integrate
-  InSpec in your change lifecycle for local testing, CI/CD, and deployment verification.
+description: |+
+  InSpec provides a framework for creating end-to-end infrastructure tests. You can use it for integration or even compliance testing. Create fully portable test profiles and use them in your workflow to ensure stability and security. Integrate InSpec in your change lifecycle for local testing, CI/CD, and deployment verification.
+
+  Packaged distributions of Progress® Chef® products obtained from RubyGems are made available pursuant to the Progress Chef EULA at https://www.chef.io/end-user-license-agreement, unless there is an executed agreement in effect between you and Progress that covers the Progress Chef products ("Master Agreement"), in which case the Master Agreement shall govern.
+
+  Source code obtained from the Chef GitHub repository is made available under Apache-2.0, a copy of which is included.
+
 email:
 - inspec@chef.io
 executables: []
@@ -184,6 +187,8 @@ files:
 - lib/plugins/inspec-init/templates/profiles/gcp/controls/example.rb
 - lib/plugins/inspec-init/templates/profiles/gcp/inputs.yml
 - lib/plugins/inspec-init/templates/profiles/gcp/inspec.yml
+- lib/plugins/inspec-license/inspec-license.gemspec
+- lib/plugins/inspec-parallel/inspec-parallel.gemspec
 - lib/plugins/inspec-plugin-manager-cli/inspec-plugin-manager-cli.gemspec
 - lib/plugins/inspec-reporter-html2/inspec-reporter-html2.gemspec
 - lib/plugins/inspec-reporter-json-min/inspec-reporter-json-min.gemspec
@@ -192,7 +197,7 @@ files:
 - lib/plugins/inspec-streaming-reporter-progress-bar/inspec-streaming-reporter-progress-bar.gemspec
 homepage: https://github.com/inspec/inspec
 licenses:
-- Apache-2.0
+- LicenseRef-Chef-EULA
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -202,7 +207,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.7'
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="