openvox 8.22.0 → 8.23.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: caf78c678db56707d858e1d97c0476530041054e645e1de45ebadcd0ee1affa4
-  data.tar.gz: 801f887a1b30867bedbf3eb797187d04f90e85c2a6d949f0b60531eca0f6b874
+  metadata.gz: aed4767f47fbc8e2cada7f28bd3eb89af5c63a93d77c51cfe6863db5613f360d
+  data.tar.gz: 35906d9b41395c95d8162d1cc3af5109c265c4bd6a9749483f3572de3802940f
 SHA512:
-  metadata.gz: cb5cfbebe5aaca65a86ed29a647a4e2041bc59e5097f1fe602219b5a6b585494fef0ac9178198d2f610dde79933a0b52c9c149dd4ba0d74d7c83f5fa3bfde24e
-  data.tar.gz: 1570ebc01ac6a7f63ebfb36327380ce2f813e68d7e9369cf99f0fa8129e6485645345ef1733fccc1d38c5aa4787655a32c79631cce779f06d880798b069c7cfc
+  metadata.gz: 23098a31bba7f56c0c52c81a7f22964034f11e695ac23f19fcf927ff51ffd74d2e41b1fd6cb2bf0c6d3e88aacad039e0e84e77717c0601ec546289d3c1809d6d
+  data.tar.gz: 24aa9b6b9f4b03bcff0c52de755ce6d29584cc8462a985b3fd7474124aee6edeeaca5b5be4dc139776246b441fd6c886d74d3c455986106734b795cfcc0e31b6

data/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 All notable changes to this project will be documented in this file.
 
+## [8.23.0](https://github.com/openvoxproject/openvox/tree/8.23.0) (2025-09-07)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.22.0...8.23.0)
+
+- This is our first release where MacOS and Windows agents are built entirely in GitHub Actions!
+- MacOS x86_64 is now supported
+- The MacOS agents now work on all currently supported MacOS versions (13, 14, and 15). No need for separate packages!
+- The openvox-agent repo, which was the repo used for building the openvox-agent packages, has now been integrated into this openvox repo under the 'packaging' directory. This will allow us to have fewer steps in the build process and tag changes more cleanly, rather than having to tag two separate repos. Note that for releases prior to this one, the changelog in this file refers only to the changes to openvox itself and not packaging changes. For example, 8.22.1 was released to fix an unintentional service renaming issue and details are in the openvox-agent repo. At some point, we may try to integrate the two changelogs.
+- This release contains a large number of dependencies bumps. Most are not security related, but many dependencies were lagging for a long time. See [this PR](https://github.com/OpenVoxProject/puppet-runtime/pull/35) for details.
+- A patch for Augeas to address [CVE-2025-2588](https://github.com/advisories/GHSA-hxwj-c5vw-fwgp)
+
+**Implemented enhancements:**
+
+- Respect systemd's RUNTIME\_DIRECTORY environment variable [\#165](https://github.com/OpenVoxProject/openvox/pull/165) ([ekohl](https://github.com/ekohl))
+
+**Fixed bugs:**
+
+- treat windows service accounts as case insensitive [\#172](https://github.com/OpenVoxProject/openvox/pull/172) ([binford2k](https://github.com/binford2k))
+- Ensure confdir exists [\#171](https://github.com/OpenVoxProject/openvox/pull/171) ([binford2k](https://github.com/binford2k))
+
+**Merged pull requests:**
+
+- Promote puppet-runtime 2025.09.04.1 [\#191](https://github.com/OpenVoxProject/openvox/pull/191) ([nmburgan](https://github.com/nmburgan))
+- Merge openvox-agent vanagon repo [\#186](https://github.com/OpenVoxProject/openvox/pull/186) ([austb](https://github.com/austb))
+
+## [8.22.0](https://github.com/openvoxproject/openvox/tree/8.22.0) (2025-08-23)
+
+[Full Changelog](https://github.com/openvoxproject/openvox/compare/8.21.1...8.22.0)
+
 ## [8.21.1](https://github.com/openvoxproject/openvox/tree/8.21.1) (2025-07-23)
 
 [Full Changelog](https://github.com/openvoxproject/openvox/compare/8.21.0...8.21.1)

data/Gemfile

@@ -12,7 +12,7 @@ def location_for(place, fake_version = nil)
   end
 end
 
-# Make sure these gem requirements are in sync with the gempspec. Specifically,
+# Make sure these gem requirements are in sync with the gemspec. Specifically,
 # the runtime_dependencies in openvox.gemspec match the runtime dependencies here
 # (like openfact, semantic_puppet, and puppet-resource_api)
 
@@ -53,7 +53,7 @@ group(:test) do
   gem 'webrick', '~> 1.7', require: false
   gem 'yard', require: false
 
-  gem 'rubocop', '~> 1.79.0', require: false, platforms: [:ruby]
+  gem 'rubocop', '~> 1.80.0', require: false, platforms: [:ruby]
   gem 'rubocop-i18n', '~> 3.0', require: false, platforms: [:ruby]
   gem 'rubocop-performance', '~> 1.0', require: false, platforms: [:ruby]
   gem 'rubocop-rake', '~> 0.6', require: false, platforms: [:ruby]
@@ -69,7 +69,13 @@ group(:development, optional: true) do
 end
 
 group(:packaging) do
-  gem 'packaging', *location_for(ENV['PACKAGING_LOCATION'] || '~> 0.99')
+  gem 'packaging', *location_for(ENV['PACKAGING_LOCATION'] || '~> 0.105')
+  if RUBY_VERSION >= '3.2'
+    gem 'vanagon', *location_for(ENV['VANAGON_LOCATION'] || 'https://github.com/openvoxproject/vanagon#main')
+  end
+  gem 'artifactory'
+  gem 'json'
+  gem 'octokit'
 end
 
 group(:documentation, optional: true) do
@@ -81,7 +87,7 @@ end
 
 group :release, optional: true do
   gem 'faraday-retry', require: false
-  gem 'github_changelog_generator', require: false
+  gem 'github_changelog_generator', require: false, git: 'https://github.com/voxpupuli/github-changelog-generator', branch: 'avoid-processing-a-single-commit-multiple-time'
 end
 
 if File.exist? "#{__FILE__}.local"

data/lib/puppet/face/config.rb

@@ -171,6 +171,7 @@ Puppet::Face.define(:config, '0.0.1') do
       end
 
       path = Puppet::FileSystem.pathname(Puppet.settings.which_configuration_file)
+      Puppet::FileSystem.dir_mkpath(path)
       Puppet::FileSystem.touch(path)
       Puppet::FileSystem.open(path, nil, 'r+:UTF-8') do |file|
         Puppet::Settings::IniFile.update(file) do |config|

data/lib/puppet/file_system.rb

@@ -288,7 +288,7 @@ module Puppet::FileSystem
   # @api public
   #
   def self.unlink(*paths)
-    @impl.unlink(*(paths.map { |p| assert_path(p) }))
+    @impl.unlink(*paths.map { |p| assert_path(p) })
   end
 
   # @return [File::Stat] object for the named file.

data/lib/puppet/indirector/catalog/compiler.rb

@@ -169,7 +169,7 @@ class Puppet::Resource::Catalog::Compiler < Puppet::Indirector::Code
     elsif sources.empty?
       # TRANSLATORS Inlining refers to adding additional metadata (in this case we are not inlining)
       Puppet::Util::Profiler.profile(_("Not inlining resource without sources"), [:compiler, :static_compile_inlining, :skipped_file_metadata, :no_sources]) { false }
-    elsif !(sources.all? { |source| source =~ /^puppet:/ })
+    elsif !sources.all? { |source| source =~ /^puppet:/ }
       # TRANSLATORS Inlining refers to adding additional metadata (in this case we are not inlining)
       Puppet::Util::Profiler.profile(_("Not inlining unsupported source scheme"), [:compiler, :static_compile_inlining, :skipped_file_metadata, :unsupported_scheme]) { false }
     else

data/lib/puppet/indirector/file_bucket_file/file.rb

@@ -234,7 +234,7 @@ module Puppet::FileBucketFile
     # @api private
     def verify_identical_file(contents_file, bucket_file)
       (bucket_file.to_binary.bytesize == Puppet::FileSystem.size(contents_file)) &&
-        (bucket_file.stream() { |s| Puppet::FileSystem.compare_stream(contents_file, s) })
+        bucket_file.stream() { |s| Puppet::FileSystem.compare_stream(contents_file, s) }
     end
 
     # @param contents_file [Pathname] Opaque file path to intended backup

data/lib/puppet/pops/issues.rb

@@ -922,12 +922,12 @@ module Issues
     _("The 'bolt' library is required to %{action}") % { action: action }
   end
 
-  UNKNOWN_TASK = issue :UNKNOWN_TASK, :type_name do
-    _('Task not found: %{type_name}') % { type_name: type_name }
+  UNKNOWN_TASK = issue :UNKNOWN_TASK, :task_name do
+    _('Task not found: %{task_name}') % { task_name: task_name }
   end
 
-  LOADER_FAILURE = issue :LOADER_FAILURE, :type do
-    _('Failed to load: %{type_name}') % { type: type }
+  LOADER_FAILURE = issue :LOADER_FAILURE, :task_name do
+    _('Failed to load: %{task_name}') % { task_name: task_name }
   end
 end
 end

data/lib/puppet/pops/validation/checker4_0.rb

@@ -43,7 +43,7 @@ class Checker4_0 < Evaluator::LiteralEvaluator
     @acceptor = diagnostics_producer
 
     # Use null migration checker unless given in context
-    @migration_checker = (Puppet.lookup(:migration_checker) { Migration::MigrationChecker.new() })
+    @migration_checker = Puppet.lookup(:migration_checker) { Migration::MigrationChecker.new() }
   end
 
   # Validates the entire model by visiting each model element and calling `check`.

data/lib/puppet/provider/package/nim.rb

@@ -274,7 +274,7 @@ Puppet::Type.type(:package).provide :nim, :parent => :aix, :source => :aix do
       [packages[package_name][version], nil]
     else
       versions = packages[package_name].keys
-      latest_version = (versions.sort { |a, b| Puppet::Util::Package.versioncmp(b, a) })[0]
+      latest_version = versions.sort { |a, b| Puppet::Util::Package.versioncmp(b, a) }[0]
       [packages[package_name][latest_version], latest_version]
     end
   end

data/lib/puppet/provider/service/windows.rb

@@ -127,7 +127,7 @@ Puppet::Type.type(:service).provide :windows, :parent => :service do
     @normalized_logon_account ||= normalize_logonaccount
     @resource[:logonaccount] = @normalized_logon_account
 
-    insync = @resource[:logonaccount] == current
+    insync = @resource[:logonaccount].casecmp?(current)
     self.logonpassword = @resource[:logonpassword] if insync
     insync
   end

data/lib/puppet/type.rb

@@ -374,11 +374,9 @@ class Type
   # @see uniqueness_key
   # @return [Array<Puppet::Parameter>] WARNING: this return type is uncertain
   def self.key_attribute_parameters
-    @key_attribute_parameters ||= (
-      @parameters.find_all { |param|
-        param.isnamevar? or param.name == :name
-      }
-    )
+    @key_attribute_parameters ||= @parameters.find_all { |param|
+      param.isnamevar? or param.name == :name
+    }
   end
 
   # Returns cached {key_attribute_parameters} names.

data/lib/puppet/util/run_mode.rb

@@ -81,7 +81,7 @@ module Puppet
       end
 
       def run_dir
-        which_dir("/var/run/puppetlabs", "~/.puppetlabs/var/run")
+        ENV.fetch('RUNTIME_DIRECTORY') { which_dir("/var/run/puppetlabs", "~/.puppetlabs/var/run") }
       end
 
       def log_dir

data/lib/puppet/version.rb

@@ -8,7 +8,7 @@
 # Raketasks and such to set the version based on the output of `git describe`
 
 module Puppet
-  PUPPETVERSION = '8.22.0'
+  PUPPETVERSION = '8.23.0'
   IMPLEMENTATION = 'openvox'
 
   ##

data/tasks/build.rake

@@ -0,0 +1,26 @@
+require 'fileutils'
+
+namespace :vox do
+  desc 'Build vanagon project with Docker'
+  task :build, [:project, :platform] do |_, args|
+    args.with_defaults(project: 'openvox-agent')
+    project = args[:project]
+
+    ENV['SOURCE_DATE_EPOCH'] ||= `git log -1 --format=%ct`.chomp
+
+    abort 'You must provide a platform.' if args[:platform].nil? || args[:platform].empty?
+    platform = args[:platform]
+    os, _ver, arch = platform.match(/^(\w+)-([\w|\.]+)-(\w+)$/).captures
+    if os == 'macos'
+      abort "You must run this build from a #{arch} machine or shell. To do this on the current host, run 'arch -#{arch} /bin/bash'" if `uname -m`.chomp != arch
+      abort "You must run this build with a #{arch} Ruby version. To do this on the current host, install Ruby from an #{arch} shell via 'arch -#{arch} /bin/bash'." unless `ruby -v`.chomp =~ /#{arch}/
+    end
+
+    engine = platform =~ /^(macos|windows)-/ ? 'local' : 'docker'
+    cmd = "bundle exec build #{project} #{platform} --engine #{engine}"
+
+    Dir.chdir('packaging') do
+      run_command(cmd, silent: false, print_command: true, report_status: true)
+    end
+  end
+end

data/tasks/cleanup.rake

@@ -0,0 +1,19 @@
+require 'fileutils'
+
+namespace :vox do
+  desc 'Cleanup after puppet-runtime compile'
+  task :cleanup, [:platform] do |_, args|
+    abort 'You must provide a platform.' if args[:platform].nil? || args[:platform].empty?
+    platform = args[:platform]
+
+    if platform =~ /^windows-/
+      FileUtils.rm_rf('C:/ProgramFiles64Folder')
+    elsif platform =~ /^macos-/
+      FileUtils.rm_rf('/opt/puppetlabs')
+      FileUtils.rm_rf('/private/etc/puppetlabs')
+    else
+      FileUtils.rm_rf('/opt/puppetlabs')
+      FileUtils.rm_rf('/etc/puppetlabs')
+    end
+  end
+end

data/tasks/promote.rake

@@ -0,0 +1,36 @@
+namespace :vox do
+  desc 'Promote a component with a given ref into this repo. For puppet-runtime and pxp-agent, use the tag that has been built and uploaded to openvox-artifacts.'
+  task :promote, [:component, :ref] do |_, args|
+    component = args[:component]
+    ref = args[:ref]
+
+    abort 'You must specify a component.' if component.nil? || component.empty?
+    abort "Could not find configs/components/#{component}.json" unless File.exist?("packaging/configs/components/#{component}.json")
+    abort 'You must provide a ref.' if ref.nil? || ref.empty?
+
+    if component == 'puppet-runtime'
+      munged = ref.gsub('-', '.')
+      data = <<~DATA
+        {"location":"https://s3.osuosl.org/openvox-artifacts/#{component}/#{ref}/","version":"#{munged}"}
+      DATA
+    else
+      data = <<~DATA
+        {"url":"https://github.com/openvoxproject/#{component}.git","ref":"#{ref}"}
+      DATA
+    end
+
+    branch = run_command('git rev-parse --abbrev-ref HEAD')
+    
+    Dir.chdir('packaging') do
+      puts "Writing #{component}.json"
+      File.write("configs/components/#{component}.json", data)
+      run_command("git add configs/components/#{component}.json")
+      puts 'Creating commit'
+      run_command("git commit -m 'Promote #{component} #{ref}'")
+      if ENV['NOPUSH'].nil?
+        puts 'Pushing to origin'
+        run_command("git push origin #{branch}")
+      end
+    end
+  end
+end

data/tasks/upload.rake

@@ -0,0 +1,50 @@
+namespace :vox do
+  desc 'Upload artifacts from the output directory to S3. Requires the AWS CLI to be installed and configured appropriately.'
+  task :upload, [:tag, :platform] do |_, args|
+    endpoint = ENV.fetch('ENDPOINT_URL')
+    bucket = ENV.fetch('BUCKET_NAME')
+    component = 'openvox-agent'
+    os = nil
+    arch = nil
+    if args[:platform]
+      parts = args[:platform].split('-')
+      os = parts[0].gsub('fedora','fc')
+      osver = parts[1]
+      # On MacOS, the dmg name has "macos.all"
+      os = os == 'macos' ? "#{os}.#{osver}" : "#{os}#{osver}"
+      arch = parts[2]
+    end
+
+    abort 'You must set the ENDPOINT_URL environment variable to the S3 server you want to upload to.' if endpoint.nil? || endpoint.empty?
+    abort 'You must set the BUCKET_NAME environment variable to the S3 bucket you are uploading to.' if bucket.nil? || bucket.empty?
+    abort 'You must provide a tag.' if args[:tag].nil? || args[:tag].empty?
+
+    munged_tag = args[:tag].gsub('-', '.')
+    s3 = "aws s3 --endpoint-url=#{endpoint}"
+
+    # Ensure the AWS CLI isn't going to fail with the given parameters
+    run_command("#{s3} ls s3://#{bucket}/")
+
+    glob = "#{__dir__}/../packaging/output/**/*#{munged_tag}*"
+    if os
+      if os =~ /windows/
+        # We don't put the OS in the filename for Windows
+        glob += "#{arch}.msi"
+      else
+        # "arch" is not used here because we are currently horrifyingly
+        # inconsistent with the platform -> package name
+        # (e.g. debian-12-aarch64 ends up as debian12.arm64).
+        glob += "#{os}*"
+      end
+    end
+    puts "Searching for files with glob #{glob}"
+    files = Dir.glob(glob)
+    abort 'No files for the given tag found in the output directory.' if files.empty?
+
+    path = "s3://#{bucket}/#{component}/#{args[:tag]}"
+    files.each do |f|
+      f = `cygpath -m #{f}`.chomp if os =~ /windows/
+      run_command("#{s3} cp #{f} #{path}/#{File.basename(f)}", silent: false)
+    end
+  end
+end

data/tasks/vox.rake

@@ -13,11 +13,5 @@ namespace :vox do
     warn 'Failed to update version in lib/puppet/version.rb' if data == new_data
 
     File.write('lib/puppet/version.rb', new_data)
-
-    data = File.read('openvox.gemspec')
-    new_data = data.sub(/spec.version = "\d+\.\d+\.\d+(\.rc\d+)?"/, "spec.version = \"#{version}\"")
-    warn 'Failed to update version in openvox.gemspec' if data == new_data
-
-    File.write('openvox.gemspec', new_data)
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: openvox
 version: !ruby/object:Gem::Version
-  version: 8.22.0
+  version: 8.23.0
 platform: ruby
 authors:
 - OpenVox Project
@@ -86,7 +86,7 @@ dependencies:
         version: '2.1'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '4'
+        version: '5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -96,7 +96,7 @@ dependencies:
         version: '2.1'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '4'
+        version: '5'
 - !ruby/object:Gem::Dependency
   name: getoptlong
   requirement: !ruby/object:Gem::Requirement
@@ -1332,6 +1332,10 @@ files:
 - man/man8/puppet-script.8
 - man/man8/puppet-ssl.8
 - man/man8/puppet.8
+- tasks/build.rake
+- tasks/cleanup.rake
+- tasks/promote.rake
+- tasks/upload.rake
 - tasks/vox.rake
 homepage: https://github.com/OpenVoxProject/puppet
 licenses: