openvox 8.27.0 → 8.28.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4c843fbe86064f932413b012a552e6cecf6623ecd71be172a8db1b5ac350c8f6
-  data.tar.gz: 87fbb8cf66802e3f367e014730960c81b3d5915ccb2a616f34ff32cc7f95fc40
+  metadata.gz: 2237abcdd8a5a1ebb597961b356db775eb64b74e6735e0d3014a3b221bdf49e1
+  data.tar.gz: 8a5f0e31309441c4883df565b8c65e0cecc239465b523d6d3ba97c78d95a808d
 SHA512:
-  metadata.gz: ccb529f52fa44c2245eabdb509c75c4d430d21de88ec661c9f2013fbffeb2e8c23b85fa9fd619cdb38593c0b4f0c863fc4fd501fe6fdb2631df819fbb1ea9ae6
-  data.tar.gz: c561244e6dd9d1f5e13faf50897dbb48ded025ef1917ba857f9b13a30504e6078ce1b7139aa0b6050a2532ce62d601d062b8e879c168172cdce7b529174ddb04
+  metadata.gz: ff8595b526d3cb54553745f7932e5b67205f277335f596642625296fc6aecc8c0e26b06385bc2c7ad16d404cf7af0929ef885fadf0892efed3a0662df05a05cf
+  data.tar.gz: b56a9c03db302d36b87ba431d5a4326f77c07626fcc891d6f72a953751def305e84573d55321356d12a80620b277ed061e6873815ff1d016fa4aeb98042efde7

data/CHANGELOG.md

@@ -2,32 +2,69 @@
 
 All notable changes to this project will be documented in this file.
 
-## [8.27.0](https://github.com/openvoxproject/openvox/tree/8.27.0) (2026-05-15)
+## [8.28.1](https://github.com/openvoxproject/openvox/tree/8.28.1) (2026-07-06)
 
-[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.26.2...8.27.0)
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.28.0...8.28.1)
 
 **Fixed bugs:**
 
-- \[Bug\]: openvox-agent 8.26.2 reports 8.26.1 with --version option [\#415](https://github.com/OpenVoxProject/openvox/issues/415)
-- avoid badly anchored regular expression [\#414](https://github.com/OpenVoxProject/openvox/pull/414) ([corporate-gadfly](https://github.com/corporate-gadfly))
+- \[Bug\]: ca\_refresh\_interval is not respected — agent refreshes CA on every run when server responds 304 [\#435](https://github.com/OpenVoxProject/openvox/issues/435)
+- \[Bug\]: Puppet 8 introduced a regex node definition regression [\#14](https://github.com/OpenVoxProject/openvox/issues/14)
+- \[Backport 8.x\] Update ca\_last\_update/crl\_last\_update on HTTP 304 [\#526](https://github.com/OpenVoxProject/openvox/pull/526) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- \[Backport 8.x\] Copy input mtime to files generated by puppet generate types [\#523](https://github.com/OpenVoxProject/openvox/pull/523) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- \[Backport 8.x\] Fix regex node lookup regression from PUP-11515 [\#515](https://github.com/OpenVoxProject/openvox/pull/515) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- \[Backport 8.x\] Tolerate concurrent creation of directories [\#507](https://github.com/OpenVoxProject/openvox/pull/507) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
 
 **Closed issues:**
 
-- \[docs\] use openvox-strings instead of puppet-strings [\#433](https://github.com/OpenVoxProject/openvox/issues/433)
+- \[Deprecation\] `Puppet::SSL::Certificate` Class [\#344](https://github.com/OpenVoxProject/openvox/issues/344)
+- \[Deprecation\] PAL Script Evaluation APIs [\#343](https://github.com/OpenVoxProject/openvox/issues/343)
+- \[Deprecation\] `source_permissions` File Parameter [\#340](https://github.com/OpenVoxProject/openvox/issues/340)
+- \[Deprecation\] `pluginsync` Setting [\#339](https://github.com/OpenVoxProject/openvox/issues/339)
+- \[Deprecation\] `configprint` Setting [\#337](https://github.com/OpenVoxProject/openvox/issues/337)
+- \[Deprecation\] `regsubst()` Encoding Argument [\#336](https://github.com/OpenVoxProject/openvox/issues/336)
+
+**Merged pull requests:**
+
+- Promote puppet-resource\_api 1.9.2 into 8.x [\#527](https://github.com/OpenVoxProject/openvox/pull/527) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote puppet-resource\_api 1.9.1 into 8.x [\#518](https://github.com/OpenVoxProject/openvox/pull/518) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- \[Backport 8.x\] Fix handling of Puppet::Pops serialization issues [\#514](https://github.com/OpenVoxProject/openvox/pull/514) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote puppet-runtime 2026.06.24.1 into 8.x [\#501](https://github.com/OpenVoxProject/openvox/pull/501) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Add arm64 support to acceptance 8.x [\#499](https://github.com/OpenVoxProject/openvox/pull/499) ([jpartlow](https://github.com/jpartlow))
+- Add jruby 9.4.15 to CI [\#487](https://github.com/OpenVoxProject/openvox/pull/487) ([bastelfreak](https://github.com/bastelfreak))
+
+## [8.28.0](https://github.com/openvoxproject/openvox/tree/8.28.0) (2026-06-10)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.27.0...8.28.0)
+
+**Implemented enhancements:**
+
+- Backport: Add Platform definitions for Fedora 44 to 8.x [\#459](https://github.com/OpenVoxProject/openvox/pull/459) ([Sharpie](https://github.com/Sharpie))
+
+**Fixed bugs:**
+
+- \[Backport 8.x\] Fix File.open Ruby 3.2 regression in FileSystem::Uniquefile [\#478](https://github.com/OpenVoxProject/openvox/pull/478) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- \[Backport 8.x\] Manage group members on EL 10 without libuser [\#477](https://github.com/OpenVoxProject/openvox/pull/477) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2026.06.09.1 into 8.x [\#480](https://github.com/OpenVoxProject/openvox/pull/480) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+
+## [8.27.0](https://github.com/openvoxproject/openvox/tree/8.27.0) (2026-05-15)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.26.2...8.27.0)
+
+**Fixed bugs:**
+
+- avoid badly anchored regular expression [\#414](https://github.com/OpenVoxProject/openvox/pull/414) ([corporate-gadfly](https://github.com/corporate-gadfly))
 
 **Merged pull requests:**
 
-- Fix rubocop 1.86.2 lint [\#447](https://github.com/OpenVoxProject/openvox/pull/447) ([Sharpie](https://github.com/Sharpie))
-- Clarify "ref" description in GitHub build workflow [\#445](https://github.com/OpenVoxProject/openvox/pull/445) ([Sharpie](https://github.com/Sharpie))
-- Promote puppet-runtime 2026.05.11.1 into main [\#437](https://github.com/OpenVoxProject/openvox/pull/437) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
-- Promote openfact 5.6.1 into main [\#436](https://github.com/OpenVoxProject/openvox/pull/436) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
-- Switch from puppet-strings to openvox-strings [\#434](https://github.com/OpenVoxProject/openvox/pull/434) ([tuxmea](https://github.com/tuxmea))
-- Update acceptance defaults and descriptions for OpenVox 9 [\#431](https://github.com/OpenVoxProject/openvox/pull/431) ([nmburgan](https://github.com/nmburgan))
-- Promote puppet-runtime 2026.05.07.1 into main [\#429](https://github.com/OpenVoxProject/openvox/pull/429) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
-- Change branch name in promote workflow [\#428](https://github.com/OpenVoxProject/openvox/pull/428) ([nmburgan](https://github.com/nmburgan))
+- 8.x Backport: Fix rubocop 1.86.2 lint [\#448](https://github.com/OpenVoxProject/openvox/pull/448) ([Sharpie](https://github.com/Sharpie))
+- Promote puppet-runtime 2026.05.11.1 into 8.x [\#439](https://github.com/OpenVoxProject/openvox/pull/439) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote openfact 5.6.1 into 8.x [\#438](https://github.com/OpenVoxProject/openvox/pull/438) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote puppet-runtime 2026.05.07.1 into 8.x [\#430](https://github.com/OpenVoxProject/openvox/pull/430) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
 - Changes to prepare for 8.x branching [\#425](https://github.com/OpenVoxProject/openvox/pull/425) ([nmburgan](https://github.com/nmburgan))
-- Update github\_changelog\_generator [\#424](https://github.com/OpenVoxProject/openvox/pull/424) ([nmburgan](https://github.com/nmburgan))
-- Modify S3 copy command to suppress progress output [\#423](https://github.com/OpenVoxProject/openvox/pull/423) ([corporate-gadfly](https://github.com/corporate-gadfly))
 - Add release version check and stop trying to bump to an RC version [\#413](https://github.com/OpenVoxProject/openvox/pull/413) ([nmburgan](https://github.com/nmburgan))
 
 ## [8.26.2](https://github.com/openvoxproject/openvox/tree/8.26.2) (2026-04-18)

data/Gemfile

@@ -45,11 +45,11 @@ end
 group(:test) do
   # 1.16.0 - 1.16.2 are broken on Windows
   gem 'ffi', '>= 1.15.5', '< 2', '!= 1.16.0', '!= 1.16.1', '!= 1.16.2', require: false
-  gem "json-schema", '>= 2', '< 6', require: false
+  gem "json-schema", '>= 2', '< 7', require: false
   gem "rake", *location_for(ENV['RAKE_LOCATION'] || '~> 13.0')
   gem "rspec", "~> 3.1", require: false
   gem "rspec-expectations", ["~> 3.9", "!= 3.9.3"]
-  gem "rspec-its", "~> 1.1", require: false
+  gem "rspec-its", "~> 2.0", require: false
   gem 'rspec-mocks', '< 3.13.3', require: false # breaking change afterwards: https://github.com/rspec/rspec-mocks/pull/1596
   gem 'vcr', '~> 6.1', require: false
   gem 'webmock', '~> 3.0', require: false

data/Rakefile

@@ -162,7 +162,8 @@ begin
     config.exclude_labels = %w[dependencies duplicate question invalid wontfix wont-fix modulesync skip-changelog]
     config.since_tag = "8.18.1"
     config.future_release = Puppet::PUPPETVERSION
-    config.exclude_tags_regex = /\A7\./
+    config.exclude_tags_regex = /\A[7,9]\./
+    config.release_branch = "8.x"
   end
 rescue LoadError
   task :changelog do

data/lib/puppet/file_system/uniquefile.rb

@@ -30,21 +30,18 @@ class Puppet::FileSystem::Uniquefile < DelegateClass(File)
   def initialize(basename, *rest)
     create_tmpname(basename, *rest) do |tmpname, _n, opts|
       mode = File::RDWR | File::CREAT | File::EXCL
-      perm = 0o600
       if opts
         mode |= opts.delete(:mode) || 0
-        opts[:perm] = perm
-        perm = nil
+        opts.delete(:perm)
       else
-        opts = perm
+        opts = {}
       end
       self.class.locking(tmpname) do
-        @tmpfile = File.open(tmpname, mode, opts)
+        @tmpfile = File.open(tmpname, mode, 0o600, **opts)
         @tmpname = tmpname
       end
       @mode = mode & ~(File::CREAT | File::EXCL)
-      perm or opts.freeze
-      @opts = opts
+      @opts = opts.freeze
     end
 
     super(@tmpfile)
@@ -53,7 +50,7 @@ class Puppet::FileSystem::Uniquefile < DelegateClass(File)
   # Opens or reopens the file with mode "r+".
   def open
     @tmpfile.close if @tmpfile
-    @tmpfile = File.open(@tmpname, @mode, @opts)
+    @tmpfile = File.open(@tmpname, @mode, 0o600, **@opts)
     __setobj__(@tmpfile)
   end
 

data/lib/puppet/generate/type.rb

@@ -45,11 +45,14 @@ module Puppet
         end
 
         # Determines if the output file is up-to-date with respect to the input file.
+        # Generated files are stamped with their input's mtime, so the output is
+        # up-to-date only on an exact match; an input with older timestamps (e.g.
+        # a module downgrade) also triggers regeneration.
         # @param [String, nil] The path to output to, or nil if determined by input
         # @return [Boolean] Returns true if the output is up-to-date or false if not.
         def up_to_date?(outputdir)
           f = effective_output_path(outputdir)
-          Puppet::FileSystem.exist?(f) && (Puppet::FileSystem.stat(@path) <=> Puppet::FileSystem.stat(f)) <= 0
+          Puppet::FileSystem.exist?(f) && (Puppet::FileSystem.stat(@path) <=> Puppet::FileSystem.stat(f)) == 0
         end
 
         # Gets the filename of the output file.
@@ -240,6 +243,7 @@ module Puppet
             Puppet::FileSystem.open(effective_output_path, nil, 'w:UTF-8') do |file|
               file.write(result)
             end
+            Puppet::FileSystem.touch(effective_output_path, mtime: Puppet::FileSystem.stat(input.path).mtime)
           rescue Exception => e
             @bad_input = true
             Puppet.log_exception(e, _("Failed to generate '%{effective_output_path}': %{message}") % { effective_output_path: effective_output_path, message: e.message })

data/lib/puppet/pops/serialization/to_data_converter.rb

@@ -305,7 +305,7 @@ module Serialization
         if tos.empty?
           semantic = Puppet::Pops::SemanticError.new(issue, nil, EMPTY_HASH)
         else
-          file, line = stacktrace
+          file, line = Puppet::Pops::PuppetStack.stacktrace
           semantic = Puppet::Pops::SemanticError.new(issue, nil, { :file => file, :line => line })
         end
       end

data/lib/puppet/provider/group/groupadd.rb

@@ -19,10 +19,14 @@ Puppet::Type.type(:group).provide :groupadd, :parent => Puppet::Provider::NameSe
 
   optional_commands :localadd => "lgroupadd", :localdelete => "lgroupdel", :localmodify => "lgroupmod", :purgemember => "usermod"
 
-  has_feature :manages_local_users_and_groups if Puppet.features.libuser?
-  has_feature :manages_members if Puppet.features.libuser? ||
-                                  (Puppet.runtime[:facter].value('os.name') == "Fedora" &&
-                                  Puppet.runtime[:facter].value('os.release.major').to_i >= 40)
+  if Puppet.features.libuser?
+    has_feature :manages_local_users_and_groups
+    has_feature :manages_members
+  elsif Puppet.runtime[:facter].value('os.name') == "Fedora"
+    has_feature :manages_members if Puppet.runtime[:facter].value('os.release.major').to_i >= 40
+  elsif Puppet.runtime[:facter].value('os.family') == "RedHat"
+    has_feature :manages_members if Puppet.runtime[:facter].value('os.release.major').to_i >= 10
+  end
 
   # Libuser's modify command 'lgroupmod' requires '-M' flag for member additions.
   # 'groupmod' command requires the '-aU' flags for it.

data/lib/puppet/resource/type.rb

@@ -34,13 +34,13 @@ class Puppet::Resource::Type
   EMPTY_ARRAY = [].freeze
 
   LOOKAROUND_OPERATORS = {
-    "(" => 'LP',
-    "?" => "QU",
-    "<" => "LT",
-    ">" => "GT",
-    "!" => "EX",
-    "=" => "EQ",
-    ")" => 'RP'
+    "(" => 'lp',
+    "?" => "qu",
+    "<" => "lt",
+    ">" => "gt",
+    "!" => "ex",
+    "=" => "eq",
+    ")" => 'rp'
   }.freeze
 
   attr_accessor :file, :line, :doc, :code, :parent, :resource_type_collection, :override
@@ -206,7 +206,7 @@ class Puppet::Resource::Type
 
   def name
     if type == :node && name_is_regex?
-      # Normalize lookarround regex patthern
+      # Normalize lookaround regex pattern to a unique, lookup-safe lowercase string.
       internal_name = @name.source.downcase.gsub(/\(\?[^)]*\)/) do |str|
         str.gsub(/./) { |ch| LOOKAROUND_OPERATORS[ch] || ch }
       end

data/lib/puppet/ssl/state_machine.rb

@@ -121,6 +121,10 @@ class Puppet::SSL::StateMachine
     rescue Puppet::HTTP::ResponseError => e
       if e.response.code == 304
         Puppet.info(_("CA certificate is unmodified, using existing CA certificate"))
+        # 304 confirms the local CA is current, so reset the TTL.
+        # Otherwise ca_last_update (backed by ca.pem mtime) never advances
+        # past the initial download and needs_refresh? triggers on every run.
+        @cert_provider.ca_last_update = Time.now
       else
         Puppet.info(_("Failed to refresh CA certificate, using existing CA certificate: %{message}") % { message: e.message })
       end
@@ -219,6 +223,8 @@ class Puppet::SSL::StateMachine
     rescue Puppet::HTTP::ResponseError => e
       if e.response.code == 304
         Puppet.info(_("CRL is unmodified, using existing CRL"))
+        # 304 confirms the local CRL is current, so reset the TTL.
+        @cert_provider.crl_last_update = Time.now
       else
         Puppet.info(_("Failed to refresh CRL, using existing CRL: %{message}") % { message: e.message })
       end

data/lib/puppet/type/file/ensure.rb

@@ -86,12 +86,21 @@ module Puppet
         raise Puppet::Error,
               "Cannot create #{@resource[:path]}; parent directory #{parent} does not exist"
       end
-      if mode
-        Puppet::Util.withumask(0o00) do
-          Dir.mkdir(@resource[:path], symbolic_mode_to_int(mode, 0o755, true))
+      begin
+        if mode
+          Puppet::Util.withumask(0o00) do
+            Dir.mkdir(@resource[:path], symbolic_mode_to_int(mode, 0o755, true))
+          end
+        else
+          Dir.mkdir(@resource[:path])
         end
-      else
-        Dir.mkdir(@resource[:path])
+      rescue Errno::EEXIST
+        # Another process may have created the directory concurrently. If it
+        # really is a directory now, treat that as success.
+        #
+        # Directory mode, and other properties, will be checked and enforced by
+        # the call to `property_fix`.
+        raise unless Puppet::FileSystem.directory?(@resource[:path])
       end
       @resource.send(:property_fix)
       return :directory_created

data/lib/puppet/version.rb

@@ -8,7 +8,7 @@
 # Raketasks and such to set the version based on the output of `git describe`
 
 module Puppet
-  PUPPETVERSION = '8.27.0'
+  PUPPETVERSION = '8.28.1'
   IMPLEMENTATION = 'openvox'
 
   ##

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: openvox
 version: !ruby/object:Gem::Version
-  version: 8.27.0
+  version: 8.28.1
 platform: ruby
 authors:
 - OpenVox Project