openvox 9.0.0.pre.beta2 → 9.0.0.pre.rc2

data/HISTORY.md

@@ -0,0 +1,311 @@
+## [8.28.1](https://github.com/openvoxproject/openvox/tree/8.28.1) (2026-07-07)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.28.0...8.28.1)
+
+**Fixed bugs:**
+
+- \[Bug\]: ca\_refresh\_interval is not respected — agent refreshes CA on every run when server responds 304 [\#435](https://github.com/OpenVoxProject/openvox/issues/435)
+- \[Bug\]: Puppet 8 introduced a regex node definition regression [\#14](https://github.com/OpenVoxProject/openvox/issues/14)
+
+**Closed issues:**
+
+- \[Deprecation\] `Puppet::SSL::Certificate` Class [\#344](https://github.com/OpenVoxProject/openvox/issues/344)
+- \[Deprecation\] PAL Script Evaluation APIs [\#343](https://github.com/OpenVoxProject/openvox/issues/343)
+- \[Deprecation\] `source_permissions` File Parameter [\#340](https://github.com/OpenVoxProject/openvox/issues/340)
+- \[Deprecation\] `pluginsync` Setting [\#339](https://github.com/OpenVoxProject/openvox/issues/339)
+- \[Deprecation\] `configprint` Setting [\#337](https://github.com/OpenVoxProject/openvox/issues/337)
+- \[Deprecation\] `regsubst()` Encoding Argument [\#336](https://github.com/OpenVoxProject/openvox/issues/336)
+
+## [8.28.0](https://github.com/openvoxproject/openvox/tree/8.28.0) (2026-06-10)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.27.0...8.28.0)
+
+**Implemented enhancements:**
+
+- Add platform definitions for Fedora 44 [\#455](https://github.com/OpenVoxProject/openvox/pull/455) ([Sharpie](https://github.com/Sharpie))
+- Promote openfact 5.6.1 into main [\#436](https://github.com/OpenVoxProject/openvox/pull/436) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+
+**Fixed bugs:**
+
+- avoid badly anchored regular expression [\#414](https://github.com/OpenVoxProject/openvox/pull/414) ([corporate-gadfly](https://github.com/corporate-gadfly))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2026.05.20.1 into main [\#453](https://github.com/OpenVoxProject/openvox/pull/453) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Switch from puppet-strings to openvox-strings [\#434](https://github.com/OpenVoxProject/openvox/pull/434) ([tuxmea](https://github.com/tuxmea))
+- Update acceptance defaults and descriptions for OpenVox 9 [\#431](https://github.com/OpenVoxProject/openvox/pull/431) ([nmburgan](https://github.com/nmburgan))
+- Promote puppet-runtime 2026.05.07.1 into main [\#429](https://github.com/OpenVoxProject/openvox/pull/429) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Change branch name in promote workflow [\#428](https://github.com/OpenVoxProject/openvox/pull/428) ([nmburgan](https://github.com/nmburgan))
+- Changes to prepare for 8.x branching [\#425](https://github.com/OpenVoxProject/openvox/pull/425) ([nmburgan](https://github.com/nmburgan))
+- Add release version check and stop trying to bump to an RC version [\#413](https://github.com/OpenVoxProject/openvox/pull/413) ([nmburgan](https://github.com/nmburgan))
+
+## [8.27.0](https://github.com/openvoxproject/openvox/tree/8.27.0) (2026-05-15)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.26.2...8.27.0)
+
+## [8.26.2](https://github.com/openvoxproject/openvox/tree/8.26.2) (2026-04-18)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.26.1...8.26.2)
+
+**Fixed bugs:**
+
+- \[Bug\]: `provides puppet-agent` uses bare major version, breaking `>= x.y.z` dependency constraints \(e.g. foreman-installer\) [\#406](https://github.com/OpenVoxProject/openvox/issues/406)
+- Revert "Add syslog as a runtime dependency" [\#410](https://github.com/OpenVoxProject/openvox/pull/410) ([nmburgan](https://github.com/nmburgan))
+- \(\#406\) packaging: Set Maj.Min.Patch version as `provides` instead of major one [\#407](https://github.com/OpenVoxProject/openvox/pull/407) ([bastelfreak](https://github.com/bastelfreak))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2026.04.17.1 [\#411](https://github.com/OpenVoxProject/openvox/pull/411) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- .gitignore: Ignore /acceptance/.vendor [\#408](https://github.com/OpenVoxProject/openvox/pull/408) ([bastelfreak](https://github.com/bastelfreak))
+
+## [8.26.1](https://github.com/openvoxproject/openvox/tree/8.26.1) (2026-04-15)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.26.0...8.26.1)
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2026.04.15.1 [\#404](https://github.com/OpenVoxProject/openvox/pull/404) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Add signoff to promote action [\#402](https://github.com/OpenVoxProject/openvox/pull/402) ([nmburgan](https://github.com/nmburgan))
+- Add syslog as a runtime dependency [\#400](https://github.com/OpenVoxProject/openvox/pull/400) ([nmburgan](https://github.com/nmburgan))
+- acceptance: add hiera-eyaml v5 backend test [\#399](https://github.com/OpenVoxProject/openvox/pull/399) ([nmburgan](https://github.com/nmburgan))
+- avoid command injection risk [\#398](https://github.com/OpenVoxProject/openvox/pull/398) ([corporate-gadfly](https://github.com/corporate-gadfly))
+
+## [8.26.0](https://github.com/openvoxproject/openvox/tree/8.26.0) (2026-04-14)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.25.0...8.26.0)
+
+**Implemented enhancements:**
+
+- \[Feature request\]: file resource should support etag [\#328](https://github.com/OpenVoxProject/openvox/issues/328)
+- \[Feature request\]: Provide SLES16 packages [\#246](https://github.com/OpenVoxProject/openvox/issues/246)
+- Add a renew\_cert subcommand to puppet ssl [\#363](https://github.com/OpenVoxProject/openvox/pull/363) ([jay7x](https://github.com/jay7x))
+- Make regsubst\(\) sensitive-aware [\#354](https://github.com/OpenVoxProject/openvox/pull/354) ([cocker-cc](https://github.com/cocker-cc))
+- Feature: file etag support [\#329](https://github.com/OpenVoxProject/openvox/pull/329) ([C24-AK](https://github.com/C24-AK))
+- Add environment parameter to the package resource type [\#321](https://github.com/OpenVoxProject/openvox/pull/321) ([C24-AK](https://github.com/C24-AK))
+
+**Fixed bugs:**
+
+- \[Bug\]: OpenVox Agent on SuSE 15.5 fails with `version 'GLIBC_2.34' not found` [\#226](https://github.com/OpenVoxProject/openvox/issues/226)
+- fix: puppet module install should honor manage\_file\_permissions=false [\#362](https://github.com/OpenVoxProject/openvox/pull/362) ([dotconfig404](https://github.com/dotconfig404))
+- unbreak OpenBSD package handling. [\#316](https://github.com/OpenVoxProject/openvox/pull/316) ([buzzdeee](https://github.com/buzzdeee))
+- Use usermod\(8\) on OpenBSD to unbreak password management [\#294](https://github.com/OpenVoxProject/openvox/pull/294) ([klemensn](https://github.com/klemensn))
+
+**Merged pull requests:**
+
+- Promote openfact 5.6.0 [\#387](https://github.com/OpenVoxProject/openvox/pull/387) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote puppet-runtime 2026.04.09.1 [\#386](https://github.com/OpenVoxProject/openvox/pull/386) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- fix: skip SHA1 CSR signing test when OpenSSL doesn't support it [\#378](https://github.com/OpenVoxProject/openvox/pull/378) ([silug](https://github.com/silug))
+- fix: stub SRV DNS in ca\_server session spec [\#377](https://github.com/OpenVoxProject/openvox/pull/377) ([silug](https://github.com/silug))
+- Fix acceptance tests for systemd PrivateTmp compatibility [\#376](https://github.com/OpenVoxProject/openvox/pull/376) ([nmburgan](https://github.com/nmburgan))
+- Fix acceptance tests for systemd PrivateTmp compatibility [\#375](https://github.com/OpenVoxProject/openvox/pull/375) ([nmburgan](https://github.com/nmburgan))
+- Add libffi-devel to Windows setup script [\#373](https://github.com/OpenVoxProject/openvox/pull/373) ([nmburgan](https://github.com/nmburgan))
+- Promote puppet-runtime 2026.04.05.1 [\#372](https://github.com/OpenVoxProject/openvox/pull/372) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Restore the legend of help help help help help [\#364](https://github.com/OpenVoxProject/openvox/pull/364) ([nmburgan](https://github.com/nmburgan))
+- Fixes for Ruby 4.0 compatibility [\#311](https://github.com/OpenVoxProject/openvox/pull/311) ([silug](https://github.com/silug))
+
+## [8.25.0](https://github.com/openvoxproject/openvox/tree/8.25.0) (2026-02-17)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.24.2...8.25.0)
+
+**Implemented enhancements:**
+
+- \[Feature request\]: environment parameter for package resource [\#298](https://github.com/OpenVoxProject/openvox/issues/298)
+- Add Ubuntu 26.04 support [\#315](https://github.com/OpenVoxProject/openvox/pull/315) ([bastelfreak](https://github.com/bastelfreak))
+- Reduce OpenSSL monkey patch to only calling set\_params [\#308](https://github.com/OpenVoxProject/openvox/pull/308) ([ekohl](https://github.com/ekohl))
+- Remove monkey patch to remove daemonize [\#307](https://github.com/OpenVoxProject/openvox/pull/307) ([ekohl](https://github.com/ekohl))
+- Add SLES 16 ARM64 support [\#306](https://github.com/OpenVoxProject/openvox/pull/306) ([bastelfreak](https://github.com/bastelfreak))
+- Add SLES16 [\#302](https://github.com/OpenVoxProject/openvox/pull/302) ([sbernhard](https://github.com/sbernhard))
+- Drop multi\_json support [\#293](https://github.com/OpenVoxProject/openvox/pull/293) ([ekohl](https://github.com/ekohl))
+- Do not explicitly disable SSLv3 [\#287](https://github.com/OpenVoxProject/openvox/pull/287) ([smortex](https://github.com/smortex))
+- feat: add `{debian13,ubuntu24.04,ubuntu25.04}-armhf` platform configs [\#286](https://github.com/OpenVoxProject/openvox/pull/286) ([Gitii](https://github.com/Gitii))
+
+**Fixed bugs:**
+
+- \[Bug\]: OpenVox Agent fails/gets deactivated after update with theforeman-puppet [\#279](https://github.com/OpenVoxProject/openvox/issues/279)
+- Include missing EC2 stub request [\#272](https://github.com/OpenVoxProject/openvox/pull/272) ([eciii](https://github.com/eciii))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2026.02.16.1 [\#324](https://github.com/OpenVoxProject/openvox/pull/324) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote openfact 5.4.0 [\#322](https://github.com/OpenVoxProject/openvox/pull/322) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote puppet-runtime 2026.02.06.1 [\#313](https://github.com/OpenVoxProject/openvox/pull/313) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- puppet-runtime: Update 2025.12.05.1-\>2026.01.30.1 [\#305](https://github.com/OpenVoxProject/openvox/pull/305) ([bastelfreak](https://github.com/bastelfreak))
+- Promote openssl-fips 2025.12.17.1 [\#284](https://github.com/OpenVoxProject/openvox/pull/284) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Update promotion action [\#283](https://github.com/OpenVoxProject/openvox/pull/283) ([nmburgan](https://github.com/nmburgan))
+
+## [8.24.2](https://github.com/openvoxproject/openvox/tree/8.24.2) (2025-12-15)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.24.1...8.24.2)
+
+**Fixed bugs:**
+
+- \[Bug\]: Version 8.24.0 fails with Error: Could not find a suitable provider for augeas [\#262](https://github.com/OpenVoxProject/openvox/issues/262)
+
+**Merged pull requests:**
+
+- Promote openfact 5.2.1 [\#277](https://github.com/OpenVoxProject/openvox/pull/277) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Relax version requirements for some default gems [\#275](https://github.com/OpenVoxProject/openvox/pull/275) ([nmburgan](https://github.com/nmburgan))
+
+## [8.24.1](https://github.com/openvoxproject/openvox/tree/8.24.1) (2025-12-05)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.24.0...8.24.1)
+
+**Fixed bugs:**
+
+- \[Bug\]: sysctl augeas broken after upgrade to Version 8.24.0 [\#264](https://github.com/OpenVoxProject/openvox/issues/264)
+- \[Bug\]: Augeas broken since openvox 8.24.0, missing augeas/facade [\#263](https://github.com/OpenVoxProject/openvox/issues/263)
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2025.12.05.1 [\#266](https://github.com/OpenVoxProject/openvox/pull/266) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Update augeas test to detect provider failure [\#265](https://github.com/OpenVoxProject/openvox/pull/265) ([nmburgan](https://github.com/nmburgan))
+- Add dbus feature [\#261](https://github.com/OpenVoxProject/openvox/pull/261) ([ananace](https://github.com/ananace))
+
+## [8.24.0](https://github.com/openvoxproject/openvox/tree/8.24.0) (2025-12-04)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.23.1...8.24.0)
+
+**Implemented enhancements:**
+
+- Loosen some gem dependencies for new versions and update minitar usage [\#242](https://github.com/OpenVoxProject/openvox/pull/242) ([nmburgan](https://github.com/nmburgan))
+- Create execution\_wrapper.bat to allow Choria to work with Windows [\#222](https://github.com/OpenVoxProject/openvox/pull/222) ([magarvo](https://github.com/magarvo))
+- feat: add opkg package management support for TurrisOS [\#221](https://github.com/OpenVoxProject/openvox/pull/221) ([VILJkid](https://github.com/VILJkid))
+- Add jruby-9.4.14.0 to CI matrix [\#210](https://github.com/OpenVoxProject/openvox/pull/210) ([bastelfreak](https://github.com/bastelfreak))
+
+**Fixed bugs:**
+
+- \[Bug\]: `implementation` is just a local fact [\#220](https://github.com/OpenVoxProject/openvox/issues/220)
+- \[Bug\]: puppet apply warns about missing client certificates [\#21](https://github.com/OpenVoxProject/openvox/issues/21)
+
+**Merged pull requests:**
+
+- Promote openfact 5.2.0 [\#258](https://github.com/OpenVoxProject/openvox/pull/258) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Promote openfact 6a26ce51cf65f7cc325330c40922e9556651cf35 [\#257](https://github.com/OpenVoxProject/openvox/pull/257) ([OpenVoxProjectBot](https://github.com/OpenVoxProjectBot))
+- Use PR for promotion action [\#255](https://github.com/OpenVoxProject/openvox/pull/255) ([nmburgan](https://github.com/nmburgan))
+- Use token when checking out repo [\#254](https://github.com/OpenVoxProject/openvox/pull/254) ([nmburgan](https://github.com/nmburgan))
+- Add promote action [\#253](https://github.com/OpenVoxProject/openvox/pull/253) ([nmburgan](https://github.com/nmburgan))
+- Update release automation [\#252](https://github.com/OpenVoxProject/openvox/pull/252) ([nmburgan](https://github.com/nmburgan))
+- add note about server\_list precedence [\#251](https://github.com/OpenVoxProject/openvox/pull/251) ([binford2k](https://github.com/binford2k))
+- Fix description of `source` since `yum` allows it now [\#249](https://github.com/OpenVoxProject/openvox/pull/249) ([binford2k](https://github.com/binford2k))
+- include "local" facts in facts output [\#240](https://github.com/OpenVoxProject/openvox/pull/240) ([binford2k](https://github.com/binford2k))
+- Correct homepage in gemspec [\#223](https://github.com/OpenVoxProject/openvox/pull/223) ([ekohl](https://github.com/ekohl))
+- CI: Build gem for each PR & Move packaging checks to global config & Windows: Run one spec file per CPU core [\#216](https://github.com/OpenVoxProject/openvox/pull/216) ([bastelfreak](https://github.com/bastelfreak))
+- Add switch for uploading to S3 [\#212](https://github.com/OpenVoxProject/openvox/pull/212) ([nmburgan](https://github.com/nmburgan))
+- Update acceptance workflow for changed beaker acceptance [\#209](https://github.com/OpenVoxProject/openvox/pull/209) ([jpartlow](https://github.com/jpartlow))
+- `yum` package provider: add `assumeyes` to `yum check-update` [\#188](https://github.com/OpenVoxProject/openvox/pull/188) ([SvenVD-be](https://github.com/SvenVD-be))
+- Prevents spurious clientcert warnings in serverless mode [\#22](https://github.com/OpenVoxProject/openvox/pull/22) ([binford2k](https://github.com/binford2k))
+
+## [8.23.1](https://github.com/openvoxproject/openvox/tree/8.23.1) (2025-09-08)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.23.0...8.23.1)
+
+**Fixed bugs:**
+
+- Fix how we find the version library [\#203](https://github.com/OpenVoxProject/openvox/pull/203) ([nmburgan](https://github.com/nmburgan))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2025.09.08.1 [\#204](https://github.com/OpenVoxProject/openvox/pull/204) ([nmburgan](https://github.com/nmburgan))
+- Test for r10k failure condition [\#202](https://github.com/OpenVoxProject/openvox/pull/202) ([nmburgan](https://github.com/nmburgan))
+
+## [8.23.0](https://github.com/openvoxproject/openvox/tree/8.23.0) (2025-09-07)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.22.0...8.23.0)
+
+- This is our first release where MacOS and Windows agents are built entirely in GitHub Actions!
+- MacOS x86_64 is now supported
+- The MacOS agents now work on all currently supported MacOS versions (13, 14, and 15). No need for separate packages!
+- The openvox-agent repo, which was the repo used for building the openvox-agent packages, has now been integrated into this openvox repo under the 'packaging' directory. This will allow us to have fewer steps in the build process and tag changes more cleanly, rather than having to tag two separate repos. Note that for releases prior to this one, the changelog in this file refers only to the changes to openvox itself and not packaging changes. For example, 8.22.1 was released to fix an unintentional service renaming issue and details are in the openvox-agent repo. At some point, we may try to integrate the two changelogs.
+- This release contains a large number of dependencies bumps. Most are not security related, but many dependencies were lagging for a long time. See [this PR](https://github.com/OpenVoxProject/puppet-runtime/pull/35) for details.
+- A patch for Augeas to address [CVE-2025-2588](https://github.com/advisories/GHSA-hxwj-c5vw-fwgp)
+
+**Implemented enhancements:**
+
+- Respect systemd's RUNTIME\_DIRECTORY environment variable [\#165](https://github.com/OpenVoxProject/openvox/pull/165) ([ekohl](https://github.com/ekohl))
+
+**Fixed bugs:**
+
+- treat windows service accounts as case insensitive [\#172](https://github.com/OpenVoxProject/openvox/pull/172) ([binford2k](https://github.com/binford2k))
+- Ensure confdir exists [\#171](https://github.com/OpenVoxProject/openvox/pull/171) ([binford2k](https://github.com/binford2k))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2025.09.04.1 [\#191](https://github.com/OpenVoxProject/openvox/pull/191) ([nmburgan](https://github.com/nmburgan))
+- Merge openvox-agent vanagon repo [\#186](https://github.com/OpenVoxProject/openvox/pull/186) ([austb](https://github.com/austb))
+
+## [8.22.0](https://github.com/openvoxproject/openvox/tree/8.22.0) (2025-08-23)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.21.1...8.22.0)
+
+## [8.21.1](https://github.com/openvoxproject/openvox/tree/8.21.1) (2025-07-23)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.21.0...8.21.1)
+
+**Fixed bugs:**
+
+- Make passing invalid options to install.rb fatal [\#156](https://github.com/OpenVoxProject/openvox/pull/156) ([ekohl](https://github.com/ekohl))
+
+**Merged pull requests:**
+
+- Revert "Mark some failing 8.3 Windows tests as pending" [\#159](https://github.com/OpenVoxProject/openvox/pull/159) ([ekohl](https://github.com/ekohl))
+- \(maint\) Drop debian-10 from testing matrix [\#152](https://github.com/OpenVoxProject/openvox/pull/152) ([jpartlow](https://github.com/jpartlow))
+
+## [8.21.0](https://github.com/openvoxproject/openvox/tree/8.21.0) (2025-07-09)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.20.0...8.21.0)
+
+**Implemented enhancements:**
+
+- Remove facter from install.rb [\#147](https://github.com/OpenVoxProject/openvox/pull/147) ([ekohl](https://github.com/ekohl))
+
+## [8.20.0](https://github.com/openvoxproject/openvox/tree/8.20.0) (2025-06-27)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.19.2...8.20.0)
+
+**Implemented enhancements:**
+
+- Switch from facter to openfact [\#142](https://github.com/OpenVoxProject/openvox/pull/142) ([smortex](https://github.com/smortex))
+- \(PUP-12083\) Update soft limit warning for fact value & name length [\#137](https://github.com/OpenVoxProject/openvox/pull/137) ([bastelfreak](https://github.com/bastelfreak))
+
+**Fixed bugs:**
+
+- Maintain consistent JSON formatting  [\#132](https://github.com/OpenVoxProject/openvox/pull/132) ([bastelfreak](https://github.com/bastelfreak))
+
+**Merged pull requests:**
+
+- cleanup gem metadata after Perforce-\>OpenVoxProject migration [\#140](https://github.com/OpenVoxProject/openvox/pull/140) ([smortex](https://github.com/smortex))
+
+## [8.19.2](https://github.com/openvoxproject/openvox/tree/8.19.2) (2025-06-06)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.19.1...8.19.2)
+
+**Fixed bugs:**
+
+- server\_facts: Switch implementation-\>serverimplementation [\#107](https://github.com/OpenVoxProject/openvox/pull/107) ([binford2k](https://github.com/binford2k))
+- Reflect Ruby 3.4 stack trace changes [\#100](https://github.com/OpenVoxProject/openvox/pull/100) ([ekohl](https://github.com/ekohl))
+- Add base64 as gem dependencies for Ruby 3.4 [\#98](https://github.com/OpenVoxProject/openvox/pull/98) ([ekohl](https://github.com/ekohl))
+- Add racc gem dependency [\#89](https://github.com/OpenVoxProject/openvox/pull/89) ([ekohl](https://github.com/ekohl))
+
+## [8.19.1](https://github.com/openvoxproject/openvox/tree/8.19.1) (2025-06-03)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.19.0...8.19.1)
+
+**Fixed bugs:**
+
+- Fix invalid gemspec in AIO package [\#91](https://github.com/OpenVoxProject/openvox/pull/91) ([smortex](https://github.com/smortex))
+
+## [8.19.0](https://github.com/openvoxproject/openvox/tree/8.19.0) (2025-05-30)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.18.1...8.19.0)
+
+**Implemented enhancements:**
+
+- Add `implementation` fact to agent and server. [\#63](https://github.com/OpenVoxProject/openvox/pull/63) ([ffrank](https://github.com/ffrank))
+
+**Fixed bugs:**
+
+- Replace `erase` with `remove`, since it's no longer supported with DNF5 [\#68](https://github.com/OpenVoxProject/openvox/pull/68) ([Stricken1670](https://github.com/Stricken1670))
+
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*

data/Rakefile

@@ -56,13 +56,12 @@ task :default do
   sh %{rake -T}
 end
 
-namespace :pl_ci do
+namespace :ci do
   desc 'Build openvox gems'
   task :gem_build, [:gemspec] do |t, args|
     args.with_defaults(gemspec: 'openvox.gemspec')
     stdout, stderr, status = Open3.capture3(<<~END)
-      gem build #{args.gemspec} --verbose --strict --platform x86-mingw32 && \
-      gem build #{args.gemspec} --verbose --strict --platform x64-mingw32 && \
+      gem build #{args.gemspec} --verbose --strict --platform x64-mingw-ucrt && \
       gem build #{args.gemspec} --verbose --strict --platform universal-darwin && \
       gem build #{args.gemspec} --verbose --strict
     END
@@ -92,7 +91,7 @@ namespace :pl_ci do
         end
       end
       dst.flush
-      Rake::Task['pl_ci:gem_build'].invoke(dst.path)
+      Rake::Task['ci:gem_build'].invoke(dst.path)
     end
   end
 end
@@ -160,9 +159,9 @@ begin
     config.user = "openvoxproject"
     config.project = "openvox"
     config.exclude_labels = %w[dependencies duplicate question invalid wontfix wont-fix modulesync skip-changelog]
-    config.since_tag = "8.18.1"
+    config.since_tag = "9.0.0-alpha1"
     config.future_release = Puppet::PUPPETVERSION
-    config.exclude_tags_regex = /\A7\./
+    config.exclude_tags_regex = /\A[7,8]\./
   end
 rescue LoadError
   task :changelog do

data/ext/debian/puppet.default

@@ -1,4 +1,4 @@
-# Defaults for puppet - sourced by /etc/init.d/puppet
+# Defaults for puppet - sourced by /etc/init.d/puppet and puppet.service
 
 # Startup options
-DAEMON_OPTS=""
+PUPPET_EXTRA_OPTS=""

data/ext/debian/puppet.init

@@ -9,7 +9,7 @@
 ### END INIT INFO
 
 DAEMON=/opt/puppetlabs/puppet/bin/puppet
-DAEMON_OPTS=""
+PUPPET_EXTRA_OPTS=""
 NAME="agent"
 PROCNAME="puppet"
 DESC="puppet agent"
@@ -26,7 +26,7 @@ reload_puppet_agent() {
 }
 
 start_puppet_agent() {
-    start-stop-daemon --start --quiet --pidfile $PIDFILE --startas $DAEMON -- $NAME $DAEMON_OPTS
+    start-stop-daemon --start --quiet --pidfile $PIDFILE --startas $DAEMON -- $NAME $PUPPET_EXTRA_OPTS
 }
 
 stop_puppet_agent() {

data/ext/windows/service/daemon.rb

@@ -26,8 +26,7 @@ class WindowsDaemon < Puppet::Util::Windows::Daemon
     end
   end
 
-  def service_init
-  end
+  def service_init; end
 
   def service_main(*argsv)
     argsv = (argsv << ARGV).flatten.compact

data/lib/hiera/scope.rb

@@ -80,8 +80,6 @@ class Hiera
         scope.source.name.downcase
       elsif scope.parent
         find_hostclass(scope.parent)
-      else
-        nil
       end
     end
     private :find_hostclass

data/lib/puppet/agent/disabler.rb

@@ -12,7 +12,7 @@ require_relative '../../puppet/util/json_lockfile'
 #  because it used by external tools such as mcollective.
 #
 # For more information, please see docs on the website.
-#  http://links.puppet.com/agent_lockfiles
+#  https://docs.openvoxproject.org/openvox/latest/configuration.html#agent_catalog_run_lockfile
 module Puppet::Agent::Disabler
   DISABLED_MESSAGE_JSON_KEY = "disabled_message"
 

data/lib/puppet/agent/locker.rb

@@ -13,7 +13,7 @@ require_relative '../../puppet/error'
 # OpenVox API because it used by external tools such as mcollective.
 #
 # For more information, please see docs on the website.
-#  http://links.puppet.com/agent_lockfiles
+#  https://docs.openvoxproject.org/openvox/latest/configuration.html#agent_catalog_run_lockfile
 module Puppet::Agent::Locker
   # Yield if we get a lock, else raise Puppet::LockError. Return
   # value of block yielded.

data/lib/puppet/agent.rb

@@ -22,6 +22,12 @@ class Puppet::Agent
   class RunTimeoutError < Exception # rubocop:disable Lint/InheritException
   end
 
+  # Exit status the forked child uses to tell the daemon that the SSL state
+  # machine gave up waiting for a certificate, so the daemon can exit as it
+  # did when the wait happened in the parent. Must not collide with the
+  # detailed exit codes returned by a run (0, 1, 2, 4, 6) or with 254 (NoMemoryError).
+  CERTIFICATE_FAILURE_EXIT_STATUS = 253
+
   attr_reader :client_class, :client, :should_fork
 
   def initialize(client_class, should_fork = true)
@@ -60,12 +66,28 @@ class Puppet::Agent
         end
       end
 
-      # waiting for certs may sleep for awhile depending on onetime, waitforcert and maxwaitforcert!
-      # this needs to happen before forking so that if we fail to obtain certs and try to exit, then
-      # we exit the main process and not the forked child.
-      ssl_context = wait_for_certificates(client_options)
-
       result = run_in_fork(should_fork) do
+        # waiting for certs may sleep for awhile depending on onetime, waitforcert and maxwaitforcert!
+        #
+        # This happens in the forked child, not in the long-lived daemon. Refreshing
+        # the CRL or renewing the certificate resolves the server's name, and on
+        # Ruby 3.3+ that runs in short-lived native threads. If the daemon forks
+        # while one of those threads is exiting, the child inherits glibc's
+        # resolv.conf lock in the locked state and every name lookup in the run
+        # hangs (#485). Keeping the lookups out of the parent avoids that.
+        #
+        # The state machine calls exit when it gives up waiting for a certificate
+        # (waitforcert 0 or maxwaitforcert exceeded). Report that back so the
+        # daemon exits, as it did when the wait happened in the parent.
+        begin
+          ssl_context = wait_for_certificates(client_options)
+        rescue SystemExit
+          next CERTIFICATE_FAILURE_EXIT_STATUS
+        rescue StandardError => detail
+          Puppet.log_exception(detail, _("Could not obtain certificates: %{detail}") % { detail: detail })
+          next nil
+        end
+
         with_client(client_options[:transaction_uuid], client_options[:job_id]) do |client|
           client_args = client_options.merge(:pluginsync => Puppet::Configurer.should_pluginsync?)
           begin
@@ -115,6 +137,9 @@ class Puppet::Agent
           end
         end
       end
+      # The child could not obtain a certificate and the state machine asked to exit.
+      exit(1) if result == CERTIFICATE_FAILURE_EXIT_STATUS
+
       true
     end
     Puppet.notice _("Shutdown/restart in progress (%{status}); skipping run") % { status: Puppet::Application.run_status.inspect } unless block_run
@@ -146,8 +171,55 @@ class Puppet::Agent
       atForkHandler.parent
     end
 
-    exit_code = Process.waitpid2(child_pid)
-    exit_code[1].exitstatus
+    _, status = wait_for_child(child_pid)
+    status.exitstatus
+  end
+
+  # Wait for the forked child to exit. The child enforces `runtimeout` on its
+  # own run, but it may fail to exit afterwards (a stranded thread, a hung
+  # subprocess, etc.). Without a deadline here, the parent blocks forever and
+  # the agent stops checking in. Once the run timeout plus a grace period has
+  # elapsed, the child is killed so the daemon can carry on.
+  def wait_for_child(child_pid)
+    deadline = child_deadline
+    return Process.waitpid2(child_pid) unless deadline
+
+    loop do
+      result = Process.waitpid2(child_pid, Process::WNOHANG)
+      return result if result
+
+      if monotonic_now >= deadline
+        Puppet.err _("Agent run (pid %{pid}) did not exit within %{timeout} seconds of the run timeout, killing it") %
+                   { pid: child_pid, timeout: child_grace_period }
+        begin
+          Process.kill(:KILL, child_pid)
+        rescue Errno::ESRCH
+          # The child exited between the last check and the kill.
+        end
+        return Process.waitpid2(child_pid)
+      end
+
+      sleep 1
+    end
+  end
+
+  # After the run timeout fires inside the child, it may still need to send
+  # its report, which is bounded by the HTTP connect and read timeouts.
+  def child_grace_period
+    Puppet[:http_connect_timeout] + Puppet[:http_read_timeout]
+  end
+
+  # Returns the absolute monotonic deadline for the child, or nil when
+  # `runtimeout` is disabled.
+  def child_deadline
+    runtimeout = Puppet[:runtimeout]
+    return nil if runtimeout.nil? || runtimeout <= 0
+
+    monotonic_now + runtimeout + child_grace_period
+  end
+
+  def monotonic_now
+    Process.clock_gettime(Process::CLOCK_MONOTONIC)
   end
 
   private

data/lib/puppet/application/agent.rb

@@ -103,9 +103,13 @@ class Puppet::Application::Agent < Puppet::Application
       -----
       puppet agent [--certname <NAME>] [-D|--daemonize|--no-daemonize]
         [-d|--debug] [--detailed-exitcodes] [--digest <DIGEST>] [--disable [MESSAGE]] [--enable]
-        [--fingerprint] [-h|--help] [-l|--logdest syslog|eventlog|<ABS FILEPATH>|console]
+        [--environment <NAME>] [--fingerprint] [-h|--help]
+        [-l|--logdest syslog|eventlog|<ABS FILEPATH>|console]
         [--serverport <PORT>] [--noop] [-o|--onetime] [--sourceaddress <IP_ADDRESS>] [-t|--test]
-        [-v|--verbose] [-V|--version] [-w|--waitforcert <SECONDS>]
+        [-v|--verbose] [-V|--version] [-w|--waitforcert <SECONDS>] [--<setting> <VALUE>]
+
+      Any setting that is valid in puppet.conf is also accepted as a long argument,
+      not only the ones listed above. See OPTIONS below.
 
 
       DESCRIPTION
@@ -199,8 +203,7 @@ class Puppet::Application::Agent < Puppet::Application
 
       * --no-daemonize:
         Do not send the process into the background.
-        (This is an OpenVox setting, and can go in puppet.conf. Note the special 'no-'
-        prefix for boolean settings on the command line.)
+        (This is an OpenVox setting, and can go in puppet.conf.)
 
       * --debug:
         Enable full debugging.
@@ -249,6 +252,18 @@ class Puppet::Application::Agent < Puppet::Application
 
         'puppet agent' exits after executing this.
 
+      * --environment:
+        Request a catalog for the given environment. When set on the command line,
+        the agent uses this environment directly and skips both the environment
+        recorded by the previous run and the node request to the server, which is
+        how it picks an environment otherwise. This is the usual way to move an
+        agent out of an environment it switched to on an earlier run. The server
+        can still assign a different environment, for example through an ENC. In
+        that case the agent switches to the server's environment and requests
+        the catalog again. If 'strict_environment_mode' is set, the agent refuses
+        the mismatched catalog and fails the run instead of switching.
+        (This is an OpenVox setting, and can go in puppet.conf.)
+
       *  --evaltrace:
         Logs each resource as it is being evaluated. This allows you to interactively
         see exactly what is being done. (This is an OpenVox setting, and can go in

data/lib/puppet/application/ssl.rb

@@ -304,13 +304,14 @@ class Puppet::Application::Ssl < Puppet::Application
     @cert_provider.delete_request(certname)
     cert
   rescue Puppet::HTTP::ResponseError => e
-    if e.response.code == 404
-      nil
-    else
-      raise Puppet::Error.new(_("Failed to download certificate: %{message}") % { message: e.message }, e)
-    end
+    body = e.response.body.to_s.strip
+    raise Puppet::Error.new(_("Failed to renew certificate: %{code} %{reason}%{body}") % {
+      code: e.response.code,
+      reason: e.response.reason,
+      body: body.empty? ? '' : ": #{body}"
+    }, e)
   rescue => e
-    raise Puppet::Error.new(_("Failed to download certificate: %{message}") % { message: e.message }, e)
+    raise Puppet::Error.new(_("Failed to renew certificate: %{message}") % { message: e.message }, e)
   end
 
   def verify(certname)

data/lib/puppet/application.rb

@@ -381,8 +381,7 @@ class Application
   # usually not necessary to override this method.
   # @return [void]
   # @api public
-  def preinit
-  end
+  def preinit; end
 
   # Call in setup of subclass to deprecate an application.
   # @return [void]

data/lib/puppet/configurer/fact_handler.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require_relative '../../puppet/agent'
 require_relative '../../puppet/indirector/facts/facter'
 
 require_relative '../../puppet/configurer'
@@ -20,7 +21,10 @@ module Puppet::Configurer::FactHandler
       facts.name = Puppet[:node_name_value]
     end
     facts
-  rescue SystemExit, NoMemoryError
+  rescue SystemExit, NoMemoryError, Puppet::Agent::RunTimeoutError
+    # RunTimeoutError means the agent run as a whole has exceeded `runtimeout`.
+    # Let it propagate so the run is aborted instead of wrapping it in a
+    # Puppet::Error and carrying on with the rest of the run.
     raise
   rescue Exception => detail
     message = _("Could not retrieve local facts: %{detail}") % { detail: detail }

data/lib/puppet/confine.rb

@@ -81,6 +81,5 @@ class Puppet::Confine
   end
 
   # Provide a hook for subclasses.
-  def reset
-  end
+  def reset; end
 end