omnibus-software 22.11.239 → 23.2.281

data/config/software/make.rb

@@ -15,16 +15,19 @@
 #
 
 name "make"
-default_version "4.3"
+default_version "4.4"
 
 license "GPL-3.0"
 license_file "COPYING"
 
 # version_list: url=https://ftp.gnu.org/gnu/make/ filter=*.tar.gz
 
+version("4.4") { source sha256: "581f4d4e872da74b3941c874215898a7d35802f03732bdccee1d4a7979105d18" }
 version("4.3") { source sha256: "e05fdde47c5f7ca45cb697e973894ff4f5d79e13b750ed57d7b66d8defc78e19" }
 
 source url: "https://ftp.gnu.org/gnu/make/make-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "make-#{version}"
 

data/config/software/makedepend.rb

@@ -15,7 +15,7 @@
 #
 
 name "makedepend"
-default_version "1.0.6"
+default_version "1.0.8"
 
 license "MIT"
 license_file "COPYING"
@@ -23,10 +23,13 @@ skip_transitive_dependency_licensing true
 
 # version_list: url=https://www.x.org/releases/individual/util/ Filter=makedepend-*.tar.gz
 
+version("1.0.8") { source sha256: "275f0d2b196bfdc740aab9f02bb48cb7a97e4dfea011a7b468ed5648d0019e54" }
 version("1.0.6") { source sha256: "845f6708fc850bf53f5b1d0fb4352c4feab3949f140b26f71b22faba354c3365" }
 version("1.0.5") { source sha256: "503903d41fb5badb73cb70d7b3740c8b30fe1cc68c504d3b6a85e6644c4e5004" }
 
 source url: "https://www.x.org/releases/individual/util/makedepend-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "makedepend-#{version}"
 

data/config/software/mpc.rb

@@ -13,9 +13,10 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+# expeditor/ignore: deprecated 2022-12
 
 name "mpc"
-default_version "1.2.1"
+default_version "1.3.1"
 
 dependency "gmp"
 dependency "mpfr"
@@ -25,6 +26,7 @@ license_file "COPYING.LESSER"
 
 # version_list: url=https://ftp.gnu.org/gnu/mpc/ filter=*.tar.gz
 
+version("1.3.1") { source sha256: "ab642492f5cf882b74aa0cb730cd410a81edcdbec895183ce930e706c1c759b8" }
 version("1.2.1") { source sha256: "17503d2c395dfcf106b622dc142683c1199431d095367c6aacba6eec30340459" }
 version("1.1.0") { source sha256: "6985c538143c1208dcb1ac42cedad6ff52e267b47e5f970183a3e75125b43c2e" }
 

data/config/software/mpfr.rb

@@ -13,6 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+# expeditor/ignore: deprecated 2022-12
 
 name "mpfr"
 default_version "4.1.0"

data/config/software/ncurses.rb

@@ -15,7 +15,7 @@
 #
 
 name "ncurses"
-default_version "6.3"
+default_version "6.4"
 
 license "MIT"
 license_file "http://invisible-island.net/ncurses/ncurses-license.html"
@@ -25,12 +25,15 @@ skip_transitive_dependency_licensing true
 dependency "config_guess"
 
 # versions_list: https://ftp.gnu.org/gnu/ncurses/ filter=*.tar.gz
+version("6.4") { source sha256: "6931283d9ac87c5073f30b6290c4c75f21632bb4fc3603ac8100812bed248159" }
 version("6.3") { source sha256: "97fc51ac2b085d4cde31ef4d2c3122c21abc217e9090a43a30fc5ec21684e059" }
 version("6.2") { source sha256: "30306e0c76e0f9f1f0de987cf1c82a5c21e1ce6568b9227f7da5b71cbea86c9d" }
 version("6.1") { source sha256: "aa057eeeb4a14d470101eff4597d5833dcef5965331be3528c08d99cebaa0d17" }
 version("5.9") { source sha256: "9046298fb440324c9d4135ecea7879ffed8546dd1b58e59430ea07a4633f563b" }
 
 source url: "https://ftp.gnu.org/gnu/ncurses/ncurses-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "ncurses-#{version}"
 

data/config/software/opensearch.rb

@@ -15,7 +15,7 @@
 #
 
 name "opensearch"
-default_version "2.2.0"
+default_version "2.4.1"
 
 dependency "server-open-jre"
 license "Apache-2.0"
@@ -26,6 +26,9 @@ source url: "https://artifacts.opensearch.org/releases/bundle/opensearch/#{versi
 relative_path "opensearch-#{version}"
 
 # versions_list:https://opensearch.org/docs/latest/version-history/
+version("2.4.1") { source sha256: "f2b71818ad84cdab1b736211efbdd79d33835a92d46f66a237fa1182d012410d" }
+version("2.4.0") { source sha256: "82bee5f68ea3d74a7d835d35f1479509b8497d01c1ae758a4737f5ea799e38e8" }
+version("2.3.0") { source sha256: "696500b3126d2f2ad7216456cff1c58e8ea89402d76e0544a2e547549cf910ca" }
 version("2.2.0") { source sha256: "4480c15682ddcd10cebb8a1103f4efafa789d7aee9d4c8c9201cd9864d5ed58c" }
 version("2.1.0") { source sha256: "bccd737e0f4e4554d3918f011a1e379ebda9e53473c70b4264aa28ce719611e3" }
 version("2.0.1") { source sha256: "8366dc71c839935330dbe841b415b37f28573de5ae7718e75f2e1c50756e0d99" }

data/config/software/openssl-fips.rb

@@ -26,10 +26,14 @@ skip_transitive_dependency_licensing true
 # You are then supposed to manually verify the PGP signatures.
 # When making an "official" build - make sure you go do that...
 source url: "https://www.openssl.org/source/old/fips/openssl-fips-#{version}.tar.gz", extract: :lax_tar
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz", extract: :lax_tar,
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 version("2.0.16") {
   source sha256: "a3cd13d0521d22dd939063d3b4a0d4ce24494374b91408a05bdaca8b681c63d4", \
          url: "https://www.openssl.org/source/openssl-fips-#{version}.tar.gz", extract: :lax_tar
+  internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz", extract: :lax_tar,
+                  authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 }
 version("2.0.14") { source sha256: "8ea069ec39f9c49d85b9831b16daa29936b4527446998336cf93e575f07626c0" }
 version("2.0.11") { source sha256: "a6532875956d357a05838ca2c9865b8eecac211543e4246512684b17acbbdfac" }

data/config/software/openssl.rb

@@ -37,11 +37,15 @@ end
 # 1.0.2u was the last public release of 1.0.2. Subsequent releases come from a support contract with OpenSSL Software Services
 if version.satisfies?("< 1.1.0")
   source url: "https://s3.amazonaws.com/chef-releng/openssl/openssl-#{version}.tar.gz", extract: :lax_tar
+  internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz", extract: :lax_tar,
+                  authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 else
   # As of 2020-09-09 even openssl-1.0.0.tar.gz can be downloaded from /source/openssl-VERSION.tar.gz
   # However, the latest releases are not in /source/old/VERSION/openssl-VERSION.tar.gz.
   # Let's stick with the simpler one for now.
   source url: "https://www.openssl.org/source/openssl-#{version}.tar.gz", extract: :lax_tar
+  internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz", extract: :lax_tar,
+                  authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 end
 
 version("3.0.5")   { source sha256: "aa7d8d9bef71ad6525c55ba11e5f4397889ce49c2c9349dcea6d3e4f0b024a7a" }

data/config/software/patch.rb

@@ -31,6 +31,8 @@ version("2.7.5") { source sha256: "7436f5a19f93c3ca83153ce9c5cbe4847e97c5d956e57
 version("2.7") { source sha256: "59c29f56faa0a924827e6a60c6accd6e2900eae5c6aaa922268c717f06a62048" }
 
 source url: "https://ftp.gnu.org/gnu/patch/patch-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "patch-#{version}"
 

data/config/software/pcre.rb

@@ -32,6 +32,8 @@ version("8.44") { source sha256: "aecafd4af3bd0f3935721af77b889d9024b2e01d96b584
 version("8.38") { source sha256: "9883e419c336c63b0cb5202b09537c140966d585e4d0da66147dc513da13e629" }
 
 source url: "https://downloads.sourceforge.net/project/pcre/pcre/#{version}/pcre-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "pcre-#{version}"
 

data/config/software/pkg-config-lite.rb

@@ -28,6 +28,8 @@ dependency "config_guess"
 version("0.28-1") { source sha256: "21b76ec4e115ee30f9b3077a2506e48e8b837332ed4d30c9776502e69c6a29e5" }
 
 source url: "https://downloads.sourceforge.net/project/pkgconfiglite/#{version}/pkg-config-lite-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 relative_path "pkg-config-lite-#{version}"
 

data/config/software/popt.rb

@@ -15,7 +15,7 @@
 #
 
 name "popt"
-default_version "1.18"
+default_version "1.19"
 
 license "MIT"
 license_file "COPYING"
@@ -24,6 +24,7 @@ skip_transitive_dependency_licensing true
 dependency "config_guess"
 
 # versions_list: https://github.com/rpm-software-management/popt/releases filter=*.tar.gz
+version("1.19") { source sha256: "c25a4838fc8e4c1c8aacb8bd620edb3084a3d63bf8987fdad3ca2758c63240f9" }
 version("1.18") { source sha256: "5159bc03a20b28ce363aa96765f37df99ea4d8850b1ece17d1e6ad5c24fdc5d1" }
 version("1.16") { source sha256: "e728ed296fe9f069a0e005003c3d6b2dde3d9cad453422a10d6558616d304cc8" }
 

data/config/software/postgresql.rb

@@ -15,7 +15,7 @@
 #
 
 name "postgresql"
-default_version "14.5"
+default_version "15.1"
 
 license "PostgreSQL"
 license_file "COPYRIGHT"
@@ -30,14 +30,13 @@ dependency "config_guess"
 
 # version_list: url=https://ftp.postgresql.org/pub/source/v#{version}/ filter=*.tar.bz2
 
+version("15.1")   { source sha256: "64fdf23d734afad0dfe4077daca96ac51dcd697e68ae2d3d4ca6c45cb14e21ae" }
+version("15.0")   { source sha256: "72ec74f4a7c16e684f43ea42e215497fcd4c55d028a68fb72e99e61ff40da4d6" }
 version("14.5")   { source sha256: "d4f72cb5fb857c9a9f75ec8cf091a1771272802f2178f0b2e65b7b6ff64f4a30" }
 version("14.4")   { source sha256: "c23b6237c5231c791511bdc79098617d6852e9e3bdf360efd8b5d15a1a3d8f6a" }
 version("14.3")   { source sha256: "279057368bf59a919c05ada8f95c5e04abb43e74b9a2a69c3d46a20e07a9af38" }
 version("14.2")   { source sha256: "2cf78b2e468912f8101d695db5340cf313c2e9f68a612fb71427524e8c9a977a" }
 version("14.1")   { source sha256: "4d3c101ea7ae38982f06bdc73758b53727fb6402ecd9382006fa5ecc7c2ca41f" }
-version("13.6")   { source sha256: "bafc7fa3d9d4da8fe71b84c63ba8bdfe8092935c30c0aa85c24b2c08508f67fc" }
-version("13.5")   { source sha256: "9b81067a55edbaabc418aacef457dd8477642827499560b00615a6ea6c13f6b3" }
-version("13.3")   { source sha256: "3cd9454fa8c7a6255b6743b767700925ead1b9ab0d7a0f9dcb1151010f8eb4a1" }
 
 # Version 12.x will EoL November 14, 2024
 version("12.7")   { source sha256: "8490741f47c88edc8b6624af009ce19fda4dc9b31c4469ce2551d84075d5d995" }

data/config/software/python.rb

@@ -15,7 +15,7 @@
 #
 
 name "python"
-default_version "3.10.5"
+default_version "3.11.1"
 
 license "Python-2.0"
 license_file "LICENSE"
@@ -32,6 +32,8 @@ end
 
 # version_list: url=https://www.python.org/ftp/python/#{version}/ filter=*.tgz
 
+version("3.11.1") { source sha256: "baed518e26b337d4d8105679caf68c5c32630d702614fc174e98cb95c46bdfa4" }
+version("3.11.0") { source sha256: "64424e96e2457abbac899b90f9530985b51eef2905951febd935f0e73414caeb" }
 version("3.10.5") { source sha256: "18f57182a2de3b0be76dfc39fdcfd28156bb6dd23e5f08696f7492e9e3d0bf2d" }
 version("3.10.4") { source sha256: "f3bcc65b1d5f1dc78675c746c98fcee823c038168fc629c5935b044d0911ad28" }
 version("3.10.2") { source sha256: "3c0ede893011319f9b0a56b44953a3d52c7abf9657c23fb4bc9ced93b86e9c97" }

data/config/software/redis.rb

@@ -21,8 +21,9 @@ license_file "COPYING"
 skip_transitive_dependency_licensing true
 
 dependency "config_guess"
-default_version "7.0.4"
+default_version "7.0.8"
 
+version("7.0.8") { source sha256: "06a339e491306783dcf55b97f15a5dbcbdc01ccbde6dc23027c475cab735e914" }
 version("7.0.4") { source sha256: "f0e65fda74c44a3dd4fa9d512d4d4d833dd0939c934e946a5c622a630d057f2f" }
 version("7.0.2") { source sha256: "5e57eafe7d4ac5ecb6a7d64d6b61db775616dbf903293b3fcc660716dbda5eeb" }
 version("7.0.0") { source sha256: "284d8bd1fd85d6a55a05ee4e7c31c31977ad56cbf344ed83790beeb148baa720" }

data/config/software/ruby-msys2-devkit.rb

@@ -29,16 +29,22 @@ if windows_arch_i386?
   version "3.0.3-1" do
     source url: "https://github.com/oneclick/rubyinstaller2/releases/download/RubyInstaller-#{version}/rubyinstaller-devkit-#{version}-x86.exe",
            sha256: "4cf4d3522c33472354f3c1af998f1cff8371d4a9a5958067efaa04bb9147b2be"
+    internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/rubyinstaller-devkit-#{version}-x86.exe",
+                    authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
   end
 else
   version "3.0.3-1" do
     source url: "https://github.com/oneclick/rubyinstaller2/releases/download/RubyInstaller-#{version}/rubyinstaller-devkit-#{version}-x64.exe",
            sha256: "be05e2de16d75088613cc998beb2938aa2946384884ed7f9142daec9a848d08c"
+    internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/rubyinstaller-devkit-#{version}-x64.exe",
+                    authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
   end
 
   version "3.1.2-1" do
     source url: "https://github.com/oneclick/rubyinstaller2/releases/download/RubyInstaller-#{version}/rubyinstaller-devkit-#{version}-x64.exe",
            sha256: "5f0fd4a206b164a627c46e619d2babbcafb0ed4bc3e409267b9a73b6c58bdec1"
+    internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/rubyinstaller-devkit-#{version}-x64.exe",
+                    authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
   end
 end
 

data/config/software/ruby.rb

@@ -60,6 +60,8 @@ version("2.6.8")      { source sha256: "1807b78577bc08596a390e8a41aede37b8512190
 version("2.6.7")      { source sha256: "e4227e8b7f65485ecb73397a83e0d09dcd39f25efd411c782b69424e55c7a99e" }
 
 source url: "https://cache.ruby-lang.org/pub/ruby/#{version.match(/^(\d+\.\d+)/)[0]}/ruby-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 # In order to pass notarization we need to sign any binaries and libraries included in the package.
 # This makes sure we include and bins and libs that are brought in by gems.

data/config/software/sqitch.rb

@@ -15,7 +15,7 @@
 #
 
 name "sqitch"
-default_version "1.3.0"
+default_version "1.3.1"
 
 license "MIT"
 license_file "https://raw.githubusercontent.com/theory/sqitch/master/README.md"
@@ -28,6 +28,7 @@ dependency "libintl-perl"
 
 # version_list: url=https://github.com/theory/#{name}/releases/download/v#{version}/ filter=app-sqitch-*.tar.gz
 
+version("1.3.1")  { source sha256: "f5e768d298cd4047ee2ae42319782e8c2cda312737bcbdbfaf580bd47efe8b94" }
 version("1.3.0")  { source sha256: "7d07635ec77a7faf3c50281c76ec833c68702f14470996cb2203a8bc6abc5bf2" }
 version("1.2.1")  { source sha256: "020835a13429effd8fda12d5627604ecf99293775918f4f8ba9ccc5ed796e5e7" }
 version("1.1.0")  { source sha256: "ee146cd75d6300837e6ca559bb0bde247d42123c96b2c5d4b2800f38d3e3d1ab" }

data/config/software/stunnel.rb

@@ -26,12 +26,12 @@ dependency "openssl"
 
 # version_list: url=https://www.stunnel.org/downloads/ filter=*.tar.gz
 
-if version < "5.65"
-  source url: "https://www.stunnel.org/archive/5.x/stunnel-#{version}.tar.gz"
-else
-  source url: "https://www.stunnel.org/downloads/stunnel-#{version}.tar.gz"
-end
+source url: "https://www.stunnel.org/archive/5.x/stunnel-#{version}.tar.gz"
+
 relative_path "stunnel-#{version}"
+
+version("5.67") { source sha256: "3086939ee6407516c59b0ba3fbf555338f9d52f459bcab6337c0f00e91ea8456" }
+version("5.66") { source sha256: "558178704d1aa5f6883aac6cc5d6bbf2a5714c8a0d2e91da0392468cee9f579c" }
 version("5.65") { source sha256: "60c500063bd1feff2877f5726e38278c086f96c178f03f09d264a2012d6bf7fc" }
 version("5.64") { source sha256: "eebe53ed116ba43b2e786762b0c2b91511e7b74857ad4765824e7199e6faf883" }
 version("5.63") { source sha256: "c74c4e15144a3ae34b8b890bb31c909207301490bd1e51bfaaa5ffeb0a994617" }
@@ -58,7 +58,7 @@ build do
     env["WIN32_SSL_DIR_PATCHED"] = "#{install_dir}/embedded"
 
     mingw = ENV["MSYSTEM"].downcase
-    target = (mingw == "mingw32" ? "mingw" : mingw)
+    target = (mingw == "mingw32" ? "mingw" : "mingw64")
     # Starting omnibus-toolchain version 1.1.115 we do not build msys2 as a part of omnibus-toolchain anymore, but pre install it in image
     # so here we set the path to default install of msys2 first and default to OMNIBUS_TOOLCHAIN_INSTALL_DIR for backward compatibility
     msys_path = ENV["MSYS2_INSTALL_DIR"] ? "#{ENV["MSYS2_INSTALL_DIR"]}" : "#{ENV["OMNIBUS_TOOLCHAIN_INSTALL_DIR"]}/embedded/bin"

data/config/software/util-macros.rb

@@ -24,6 +24,8 @@ version("1.19.0") { source sha256: "0d4df51b29023daf2f63aebf3ebc638ea88efedfd560
 version("1.18.0") { source sha256: "cf4ab0e17bfee0f7689cdcff8c7d7f164c9a710f851f91c488f5cd81fac9c0aa" }
 
 source url: "https://www.x.org/releases/individual/util/util-macros-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 license "MIT"
 license_file "COPYING"

data/config/software/xproto.rb

@@ -24,7 +24,8 @@ version("7.0.28") { source sha256: "6cabc8ce3fa2b1a2427871167b62c24d5b08a58bd3e8
 version("7.0.25") { source sha256: "e3dc634103f923a2276289745eb7b702b18cfc885ea4b2382bd35a8cc3d935cb" }
 
 source url: "https://www.x.org/releases/individual/proto/xproto-#{version}.tar.gz"
-
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 license "MIT"
 license_file "COPYING"
 skip_transitive_dependency_licensing true

data/config/software/zlib.rb

@@ -15,16 +15,19 @@
 #
 
 name "zlib"
-default_version "1.2.12"
+default_version "1.2.13"
 
 # version_list: url=https://zlib.net/fossils/ filter=*.tar.gz
 
+version("1.2.13") { source sha256: "b3a24de97a8fdbc835b9833169501030b8977031bcb54b3b3ac13740f846ab30" }
 version("1.2.12") { source sha256: "91844808532e5ce316b3c010929493c0244f3d37593afd6de04f71821d5136d9" }
 version("1.2.11") { source sha256: "c3e5e9fdd5004dcb542feda5ee4f0ff0744628baf8ed2dd5d66f8ca1197cb1a1" }
 version("1.2.8")  { source sha256: "36658cb768a54c1d4dec43c3116c27ed893e88b02ecfcb44f2166f9c0b7f2a0d" }
 version("1.2.6")  { source sha256: "21235e08552e6feba09ea5e8d750805b3391c62fb81c71a235c0044dc7a8a61b" }
 
 source url: "https://zlib.net/fossils/zlib-#{version}.tar.gz"
+internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz",
+                authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
 license "Zlib"
 license_file "README"

data/scripts/internal_sources.rb

@@ -0,0 +1,78 @@
+#!/usr/bin/env ruby
+require "net/http"
+require "openssl"
+require "tmpdir"
+require "yaml"
+
+ARTIFACTORY_REPO_URL = ENV["ARTIFACTORY_REPO_URL"] || "https://artifactory-internal.ps.chef.co/artifactory/omnibus-software-local"
+ARTIFACTORY_TOKEN = ENV["ARTIFACTORY_TOKEN"]
+
+def print_usage
+  puts "Must provide path to internal_sources.yml file."
+  puts "Usage: ./internal_sources.rb <file path> [only]"
+  puts ""
+  puts "          <file path>: Path to an internal_sources.yml file."
+  puts "          [only]: (Optional) Name of software to upload. Skips all others."
+end
+
+def validate_checksum!(response, source)
+  if source.key?("sha256")
+    response.header["x-checksum-sha256"] == source["sha256"]
+  elsif source.key?("md5")
+    response.header["x-checksum-md5"]  == source["md5"]
+  elsif source.key?("sha1")
+    response.header["x-checksum-sha1"] == source["sha1"]
+  else
+    raise "Unknown checksum format supplied for '#{source["url"]}'"
+  end
+end
+
+def exists_in_artifactory?(name, source)
+  uri = URI(ARTIFACTORY_REPO_URL)
+  file_name = File.basename(source["url"])
+  dir_name = name
+  path = File.join(uri.path, dir_name, file_name)
+  http = Net::HTTP.new(uri.host, uri.port)
+  http.use_ssl = true
+  response = http.head(path)
+  validate_checksum!(response, source)
+end
+
+def maybe_upload(name, source)
+  unless exists_in_artifactory?(name, source)
+    Dir.mktmpdir do |dir|
+      puts "Downloading #{name} from #{source["url"]}"
+      raise "Failed to download" unless system("wget -q -P #{dir} #{source["url"]}")
+
+      file_name = File.basename(source["url"])
+      downloaded_file = File.join(dir, file_name)
+      repo_url = File.join(ARTIFACTORY_REPO_URL, name, file_name)
+      puts "Uploading #{downloaded_file} to #{repo_url}"
+      raise "Failed to upload" unless system("curl -s -H 'X-JFrog-Art-Api:#{ARTIFACTORY_TOKEN}' -T '#{downloaded_file}' #{repo_url}")
+
+      puts ""
+    end
+  else
+    puts "#{File.basename(source["url"])} exists in artifactory already...skipping"
+  end
+end
+
+if ARGV.size < 1 || ARGV.size > 2
+  print_usage
+  exit(1)
+end
+
+file_path = ARGV[0]
+only = ARGV[1]
+
+unless File.exist?(file_path)
+  abort("File '#{file_path}' does not exist")
+end
+
+yaml = YAML.load_file file_path
+yaml["software"].each do |software|
+  next if only && software["name"] != only
+
+  name = software["name"]
+  software["sources"].each { |source| maybe_upload(name, source) }
+end