ra10ke 1.0.0 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6b40e69bd38407cb3c0e54c36a83cdc1699ac85ea8512118275bce2f9e8dc6ef
-  data.tar.gz: 4cedb006d2cf6591280e75df20fcf33ba4abdd5f8647caf68497f13c53c05f36
+  metadata.gz: 42a64a748cf4b63602804c2aac20987e23d8a7ad2a01ca3365d3ed998324f058
+  data.tar.gz: daa94b8601294ed8c480f431d396eda60c2a14d2c7aa608e4941189033c01b24
 SHA512:
-  metadata.gz: 0d87d64c5635eb697987a69e3ce56dcb230175f43182ee67e54817da51624c07426ad5f7c82b6f31c896ef88e2ed2132584c5dfc4d085c591e9336fc1d5fc6b3
-  data.tar.gz: 84247260dbf741c18cd0aef1888b40f07328c015b228f1c021ae15c1d8846497819bbe6a6226e51cfe43697e84707c4d0a827f57796a6e73cce76015b354272a
+  metadata.gz: b1b0a572ecb7928f0e38254f6ed91f4e501f2755497a53ced15a164ada79dfa2b335afe7f4565c27ae63050a17d57c8df45dd39dd5fbac0271361f00c8063c5a
+  data.tar.gz: 251245599d77dbbd4b01c3946693083782fe8b1f0937236fc207ca3c69616b967743cafa0bb8e4151407199fd8d4e0be0479da8e7f83009bb22f0fe9192785e1

data/.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "bundler" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"

data/.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'voxpupuli'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install Ruby 3.0
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.0'
+        env:
+          BUNDLE_WITHOUT: release
+      - name: Build gem
+        run: gem build *.gemspec
+      - name: Publish gem to rubygems.org
+        run: gem push *.gem
+        env:
+          GEM_HOST_API_KEY: '${{ secrets.RUBYGEMS_AUTH_TOKEN }}'
+      - name: Setup GitHub packages access
+        run: |
+          mkdir -p ~/.gem
+          echo ":github: Bearer ${{ secrets.GITHUB_TOKEN }}" >> ~/.gem/credentials
+          chmod 0600 ~/.gem/credentials
+      - name: Publish gem to GitHub packages
+        run: gem push --key github --host https://rubygems.pkg.github.com/voxpupuli *.gem

data/.github/workflows/test.yml

@@ -0,0 +1,32 @@
+name: Test
+
+on:
+  - pull_request
+
+env:
+  BUNDLE_WITHOUT: release
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - ruby: "2.7"
+          - ruby: "3.0"
+          - ruby: "3.1"
+            coverage: "yes"
+    env:
+      COVERAGE: ${{ matrix.coverage }}
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install Ruby ${{ matrix.ruby }}
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+      - name: Run tests
+        run: bundle exec rake
+      - name: Build gem
+        run: gem build *.gemspec

data/.gitignore

@@ -1,3 +1,6 @@
 Gemfile.lock
+coverage
 pkg
 .bundle
+vendor
+.vendor

data/.ruby-version

@@ -1 +1 @@
-2.5.3
+2.5.7

data/.travis.yml

@@ -6,6 +6,7 @@ rvm:
   - '2.3'
   - '2.4'
   - '2.5'
+  - '2.6'
 deploy:
   provider: rubygems
   api_key:

data/CHANGELOG.md

@@ -1,8 +1,73 @@
-CHANGELOG
-=========
+# Changelog
 
-1.0.0
------
+All notable changes to this project will be documented in this file.
+
+## [v2.0.0](https://github.com/voxpupuli/ra10ke/tree/v2.0.0) (2022-05-18)
+
+[Full Changelog](https://github.com/voxpupuli/ra10ke/compare/v1.2.0...v2.0.0)
+
+**Breaking changes:**
+
+- Bump minimal Ruby Version 2.4.0-\>2.7.0 [\#77](https://github.com/voxpupuli/ra10ke/pull/77) ([bastelfreak](https://github.com/bastelfreak))
+- Dependencies Table output  [\#72](https://github.com/voxpupuli/ra10ke/pull/72) ([logicminds](https://github.com/logicminds))
+
+**Implemented enhancements:**
+
+- Add Ruby 3.1 support [\#78](https://github.com/voxpupuli/ra10ke/pull/78) ([bastelfreak](https://github.com/bastelfreak))
+- Converts puppet forge module entries into puppetfile git entries [\#76](https://github.com/voxpupuli/ra10ke/pull/76) ([logicminds](https://github.com/logicminds))
+
+**Fixed bugs:**
+
+- incompatible with r10k gem \> 3.8 [\#57](https://github.com/voxpupuli/ra10ke/issues/57)
+- CI: Do not run twice [\#79](https://github.com/voxpupuli/ra10ke/pull/79) ([bastelfreak](https://github.com/bastelfreak))
+- Fix \#74 - server responded with 400 [\#75](https://github.com/voxpupuli/ra10ke/pull/75) ([logicminds](https://github.com/logicminds))
+- Fix \#70 - cache dir does not exist [\#71](https://github.com/voxpupuli/ra10ke/pull/71) ([logicminds](https://github.com/logicminds))
+
+**Closed issues:**
+
+- cache dir does not exist [\#70](https://github.com/voxpupuli/ra10ke/issues/70)
+
+## [v1.2.0](https://github.com/voxpupuli/ra10ke/tree/v1.2.0) (2022-04-21)
+
+[Full Changelog](https://github.com/voxpupuli/ra10ke/compare/v1.1.0...v1.2.0)
+
+**Closed issues:**
+
+- Add support for commit ref [\#67](https://github.com/voxpupuli/ra10ke/issues/67)
+
+**Merged pull requests:**
+
+- Fix \#67 - Add support for commit ref [\#68](https://github.com/voxpupuli/ra10ke/pull/68) ([logicminds](https://github.com/logicminds))
+
+## [v1.1.0](https://github.com/voxpupuli/ra10ke/tree/v1.1.0) (2021-10-26)
+
+[Full Changelog](https://github.com/voxpupuli/ra10ke/compare/v1.0.0...v1.1.0)
+
+**Implemented enhancements:**
+
+- Support r10k:validate with control\_branch [\#58](https://github.com/voxpupuli/ra10ke/issues/58)
+- Implement GitHub Actions and fix tests [\#62](https://github.com/voxpupuli/ra10ke/pull/62) ([bastelfreak](https://github.com/bastelfreak))
+- Add handling for additional r10k args in validate for control\_branch [\#61](https://github.com/voxpupuli/ra10ke/pull/61) ([ananace](https://github.com/ananace))
+- Add r10k:deprecation task [\#60](https://github.com/voxpupuli/ra10ke/pull/60) ([ananace](https://github.com/ananace))
+- Support r10k:validate with control\_branch modules [\#59](https://github.com/voxpupuli/ra10ke/pull/59) ([ananace](https://github.com/ananace))
+- allow to add other version formats in dependencies [\#56](https://github.com/voxpupuli/ra10ke/pull/56) ([jduepmeier](https://github.com/jduepmeier))
+- Fixes \#52 - validate task fails when repo does not exist [\#53](https://github.com/voxpupuli/ra10ke/pull/53) ([logicminds](https://github.com/logicminds))
+
+**Fixed bugs:**
+
+- Fix source of control\_branch data [\#63](https://github.com/voxpupuli/ra10ke/pull/63) ([ananace](https://github.com/ananace))
+
+**Closed issues:**
+
+- validate task fails when repo does not exist [\#52](https://github.com/voxpupuli/ra10ke/issues/52)
+
+**Merged pull requests:**
+
+- Add Dependabot config [\#65](https://github.com/voxpupuli/ra10ke/pull/65) ([bastelfreak](https://github.com/bastelfreak))
+- Set minimal Ruby version to 2.4.0 [\#64](https://github.com/voxpupuli/ra10ke/pull/64) ([bastelfreak](https://github.com/bastelfreak))
+- Add coverage reports [\#54](https://github.com/voxpupuli/ra10ke/pull/54) ([logicminds](https://github.com/logicminds))
+
+## [v1.0.0](https://github.com/voxpupuli/ra10ke/tree/v1.0.0) (2020-02-08)
 
 2020-02-08
 
@@ -120,3 +185,6 @@ Many thanks to [Alexander "Ace" Olofsson](https://github.com/ace13) and [James P
 2015-12-07
 
 * Initial release
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*

data/Gemfile

@@ -2,3 +2,12 @@ source 'https://rubygems.org'
 
 # Specify your gem's dependencies in ra10ke.gemspec
 gemspec
+
+group :release do
+  gem 'github_changelog_generator', :require => false
+end
+
+group :coverage, optional: ENV['COVERAGE']!='yes' do
+  gem 'simplecov-console', :require => false
+  gem 'codecov', :require => false
+end

data/HISTORY.md

@@ -0,0 +1,118 @@
+## [v1.0.0](https://github.com/voxpupuli/ra10ke/tree/v1.0.0) (2020-02-08)
+
+2020-02-08
+
+Closed Pull Requests:
+
+* [#44](https://github.com/voxpupuli/ra10ke/pull/44) - Fix the faulty docs for Ra10ke::Validate#all_refs after [#42](https://github.com/voxpupuli/ra10ke/pull/42)
+* [#45](https://github.com/voxpupuli/ra10ke/pull/45) - Add a duplicates check
+* [#48](https://github.com/voxpupuli/ra10ke/pull/48) - Allow semverse 3.x
+
+0.6.2
+-----
+
+2019-08-26
+
+Closed Pull Requests:
+
+* [#42](https://github.com/voxpupuli/ra10ke/pull/42) - Fix lost refs in validation
+
+Again many thanks to the following contributors for submitting PRs:
+
+* [Alexander Olofsson](https://github.com/ananace)
+
+0.6.1
+-----
+
+2019-08-17
+
+Closed Pull Requests:
+
+* [#40](https://github.com/voxpupuli/ra10ke/pull/40) - Fix a fault in the mod handling behaviour
+
+Closed Issues:
+
+* [#25](https://github.com/voxpupuli/ra10ke/issues/25) - Consider making r10k:install have a default path of '.'
+
+Many thanks to the following contributors for submitting PRs:
+
+* [Alexander Olofsson](https://github.com/ananace)
+
+0.6.0
+-----
+
+2019-07-30
+
+Closed Pull Requests:
+
+* [#35](https://github.com/voxpupuli/ra10ke/pull/35) Adds new validate task for verifying the integrity of all modules      specified in the Puppetfile
+* [#33](https://github.com/voxpupuli/ra10ke/pull/33) Refactor tasks, Version tag handling fix, purge option
+* [#32](https://github.com/voxpupuli/ra10ke/pull/32) Make it possible to configure the tasks in the rakefile
+
+Many thanks to the following contributors for submitting PRs:
+
+* [Corey Osman](https://github.com/logicminds)
+* [Andreas Zuber](https://github.com/ZeroPointEnergy)
+
+0.5.0
+-----
+
+2018-12-26
+
+Closed Pull Requests:
+
+* [#22](https://github.com/voxpupuli/ra10ke/pull/22) Add rudimentary r10k:install task
+* [#26](https://github.com/voxpupuli/ra10ke/pull/26) make use of the forge command in puppetfile
+* [#29](https://github.com/voxpupuli/ra10ke/pull/29) Abort (exit 1) if Puppetfile syntax check fails
+* [#30](https://github.com/voxpupuli/ra10ke/pull/30) enable travis deployment
+
+0.4.0
+-----
+
+2018-06-17
+
+* [#13](https://github.com/voxpupuli/ra10ke/pull/13) Avoid using `desired_ref` directly for Git
+* [#14](https://github.com/voxpupuli/ra10ke/pull/14) Set required Ruby version as `>= 2.1.0`
+* [#15](https://github.com/voxpupuli/ra10ke/pull/15) ignore invalid ref
+* [#16](https://github.com/voxpupuli/ra10ke/pull/16) Use Semantic Versioning for Git tags
+* [#17](https://github.com/voxpupuli/ra10ke/pull/17) Be careful around trimming Git tags
+* [#19](https://github.com/voxpupuli/ra10ke/pull/19) Ensure Puppetfile gets parsed with absolute path
+
+Many thanks to the following contributors for submitting the PRs:
+* [Valter Jansons](https://github.com/sigv)
+* [Martin Alfke](https://github.com/tuxmea)
+* [Matthias Baur](https://github.com/baurmatt)
+
+0.3.0
+-----
+
+2017-10-08
+
+* [#6](https://github.com/voxpupuli/ra10ke/pull/6) Add a dependency solver based on the Ruby Solve library (thanks to [Jarkko Oranen](https://github.com/oranenj))
+* [#8](https://github.com/voxpupuli/ra10ke/pull/8) Add numeric tag convention support (thanks to [Hervé MARTIN](https://github.com/HerveMARTIN))
+
+0.2.0
+-----
+
+2017-01-03
+
+* Moved to [Vox Pupuli](https://voxpupuli.org/)
+* [#3](https://github.com/voxpupuli/ra10ke/pull/3) Update ra10ke with r10k 2.4.0 support
+* [#4](https://github.com/voxpupuli/ra10ke/pull/4) Added git support
+
+Many thanks to [Alexander "Ace" Olofsson](https://github.com/ace13) and [James Powis](https://github.com/james-powis) for their contributions!
+
+0.1.1
+-----
+
+2016-08-22
+
+* [#1](https://github.com/tampakrap/ra10ke/issues/1) update docs to mention Gemfile and Rakefile
+* properly advertise the user agent
+
+0.1.0
+-----
+
+2015-12-07
+
+* Initial release

data/README.md

@@ -1,7 +1,12 @@
 ra10ke
 ======
 
-[![Gem Version](https://badge.fury.io/rb/ra10ke.svg)](https://badge.fury.io/rb/ra10ke)
+[![License](https://img.shields.io/github/license/voxpupuli/ra10ke.svg)](https://github.com/voxpupuli/ra10ke/blob/master/LICENSE.txt)
+[![Test](https://github.com/voxpupuli/ra10ke/actions/workflows/test.yml/badge.svg)](https://github.com/voxpupuli/ra10ke/actions/workflows/test.yml)
+[![codecov](https://codecov.io/gh/voxpupuli/ra10ke/branch/master/graph/badge.svg?token=Mypkl78hvK)](https://codecov.io/gh/voxpupuli/ra10ke)
+[![Release](https://github.com/voxpupuli/ra10ke/actions/workflows/release.yml/badge.svg)](https://github.com/voxpupuli/ra10ke/actions/workflows/release.yml)
+[![RubyGem Version](https://img.shields.io/gem/v/ra10ke.svg)](https://rubygems.org/gems/ra10ke)
+[![RubyGem Downloads](https://img.shields.io/gem/dt/ra10ke.svg)](https://rubygems.org/gems/ra10ke)
 
 Rake tasks related to [R10K](https://github.com/puppetlabs/r10k) and
 [Puppetfile](https://github.com/puppetlabs/r10k/blob/master/doc/puppetfile.mkd).
@@ -63,6 +68,15 @@ Ignoring specific modules:
 Under specific conditions you may not wish to report on specific modules being out of date,
 to ignore a module create `.r10kignore` file in the same directory as your Puppetfile.
 
+### r10k::print_git_conversion
+This rake task will go through the puppetfile and convert forge based modules into git based modules using
+the modules't source repository and version tag.
+
+This feature is useful when you want to bring all the forge modules into git source control.  This assumes every module
+tags the release or provides a valid repo url.  We recommend to manually review
+the output provided by this task before replacing the forge based content in your puppetfile as not every module author 
+tagged a release or provided a working url.
+
 ### r10k:solve_dependencies
 
 Reads the Puppetfile in the current directory and uses the ruby 'solve' library to find
@@ -145,3 +159,22 @@ gitlab:
 
 Error: Duplicates exist in the Puppetfile
 ```
+
+### r10k:deprecation
+
+This rake task checks all the Forge modules listed in the Puppetfile, looking
+for modules that are marked as deprecated on the Forge.
+
+Example
+
+```
+NAME                    | DEPRECATED_AT            
+------------------------|--------------------------
+kemra102-auditd         | 2021-07-22 12:11:46      
+puppet-staging          | 2018-12-18 11:11:29      
+puppetlabs-resource_api | 2021-03-31 12:53:24      
+puppetlabs-ruby         | 2021-04-22 10:29:42      
+puppetlabs-translate    | 2021-03-19 10:11:51      
+
+Error: Puppetfile contains deprecated modules.
+```

data/Rakefile

@@ -14,3 +14,16 @@ task :default => [:spec]
 RSpec::Core::RakeTask.new(:spec) do |spec|
     spec.pattern = FileList['spec/**/*_spec.rb']
 end
+
+begin
+  require 'github_changelog_generator/task'
+  GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+    version = Ra10ke::VERSION
+    config.future_release = "v#{version}" if version =~ /^\d+\.\d+.\d+$/
+    config.header = "# Changelog\n\nAll notable changes to this project will be documented in this file."
+    config.exclude_labels = %w{duplicate question invalid wontfix wont-fix skip-changelog}
+    config.user = 'voxpupuli'
+    config.project = 'ra10ke'
+  end
+rescue LoadError
+end

data/lib/ra10ke/dependencies.rb

@@ -1,7 +1,147 @@
+require 'semverse'
+require 'r10k/puppetfile'
+require 'puppet_forge'
+require 'table_print'
+require 'git'
+
 module Ra10ke::Dependencies
-  def define_task_dependencies(*_args)
-    desc "Print outdated forge modules"
-    task :dependencies do
+  class Verification
+
+    def self.version_formats
+      @version_formats ||= {}
+    end
+
+    # Registers a block that finds the latest version.
+    # The block will be called with a list of tags.
+    # If the block returns nil the next format will be tried.
+    def self.register_version_format(name, &block)
+      version_formats[name] = block
+    end
+
+    Ra10ke::Dependencies::Verification.register_version_format(:semver) do |tags|
+      latest_tag = tags.map do |tag|
+        begin
+          Semverse::Version.new tag[/\Av?(.*)\Z/, 1]
+        rescue Semverse::InvalidVersionFormat
+          # ignore tags that do not comply to semver
+          nil
+        end
+      end.select { |tag| !tag.nil? }.sort.last.to_s.downcase
+      latest_ref = tags.detect { |tag| tag[/\Av?(.*)\Z/, 1] == latest_tag }
+    end
+    attr_reader :puppetfile
+
+    def initialize(pfile)
+      @puppetfile = pfile
+       # semver is the default version format.
+  
+      puppetfile.load!
+    end
+
+    def get_latest_ref(remote_refs)
+      tags = remote_refs['tags'].keys
+      latest_ref = nil
+      self.class.version_formats.detect { |_, block| latest_ref = block.call(tags) }
+      latest_ref = 'undef (tags do not follow any known pattern)' if latest_ref.nil?
+      latest_ref
+    end
+
+    def ignored_modules
+      # ignore file allows for "don't tell me about this"
+      @ignored_modules ||= begin
+        File.readlines('.r10kignore').each {|l| l.chomp!} if File.exist?('.r10kignore')
+      end || []
+    end
+  
+    # @summary creates an array of module hashes with version info 
+    # @param {Object} supplied_puppetfile - the parsed puppetfile object 
+    # @returns {Array} array of version info for each module
+    # @note does not include ignored modules or modules up2date
+    def processed_modules(supplied_puppetfile = puppetfile)
+      threads = []
+      threads = supplied_puppetfile.modules.map do |puppet_module|
+      Thread.new do 
+        begin
+          next if ignored_modules.include? puppet_module.title
+          if puppet_module.class == ::R10K::Module::Forge
+            module_name = puppet_module.title.gsub('/', '-')
+            forge_version = ::PuppetForge::Module.find(module_name).current_release.version
+            installed_version = puppet_module.expected_version
+            {
+              name: puppet_module.title,
+              installed: installed_version,
+              latest: forge_version,
+              type: 'forge',
+              message: installed_version != forge_version ? :outdated : :current
+            }
+          
+          elsif puppet_module.class == R10K::Module::Git
+            # use helper; avoid `desired_ref`
+            # we do not want to deal with `:control_branch`
+            ref = puppet_module.version
+            next unless ref
+
+            remote = puppet_module.instance_variable_get(:@remote)
+            remote_refs = Git.ls_remote(remote)
+
+            # skip if ref is a branch
+            next if remote_refs['branches'].key?(ref)
+
+            if remote_refs['tags'].key?(ref)
+              # there are too many possible versioning conventions
+              # we have to be be opinionated here
+              # so semantic versioning (vX.Y.Z) it is for us
+              # as well as support for skipping the leading v letter
+              #
+              # register own version formats with
+              # Ra10ke::Dependencies.register_version_format(:name, &block)
+              latest_ref = get_latest_ref(remote_refs)
+            elsif ref.match(/^[a-z0-9]{40}$/)
+              ref = ref.slice(0,8)
+              # for sha just assume head should be tracked
+              latest_ref = remote_refs['head'][:sha].slice(0,8)
+            else
+              raise "Unable to determine ref type for #{puppet_module.title}"
+            end
+            {
+              name: puppet_module.title,
+              installed: ref,
+              latest: latest_ref,
+              type: 'git',
+              message: ref != latest_ref ? :outdated : :current
+            }
+
+          end
+        rescue R10K::Util::Subprocess::SubprocessError => e
+            {
+              name: puppet_module.title,
+              installed: nil,
+              latest: nil,
+              type: :error,
+              message: e.message
+            }
+        end
+        end
+      end
+      threads.map { |th| th.join.value }.compact
+    end
+
+    def outdated(supplied_puppetfile = puppetfile)
+      processed_modules.find_all do | mod |
+        mod[:message] == :outdated
+      end
+    end
+
+    def print_table(mods)
+      puts
+      tp mods, { name: { width: 50 } }, :installed, :latest, :type, :message
+    end
+  end
+
+  def define_task_print_git_conversion(*_args)
+    desc "Convert and print forge modules to git format"
+    task :print_git_conversion do
+      require 'ra10ke/git_repo'
       require 'r10k/puppetfile'
       require 'puppet_forge'
 
@@ -15,57 +155,40 @@ module Ra10ke::Dependencies
       if File.exist?('.r10kignore')
         ignore_modules = File.readlines('.r10kignore').each {|l| l.chomp!}
       end
-
-      puppetfile.modules.each do |puppet_module|
-        next if ignore_modules.include? puppet_module.title
-        if puppet_module.class == R10K::Module::Forge
-          module_name = puppet_module.title.gsub('/', '-')
-          forge_version = PuppetForge::Module.find(module_name).current_release.version
-          installed_version = puppet_module.expected_version
-          if installed_version != forge_version
-            puts "#{puppet_module.title} is OUTDATED: #{installed_version} vs #{forge_version}"
-          end
-        end
-
-        if puppet_module.class == R10K::Module::Git
-          # use helper; avoid `desired_ref`
-          # we do not want to deal with `:control_branch`
-          ref = puppet_module.version
-          next unless ref
-
-          remote = puppet_module.instance_variable_get(:@remote)
-          remote_refs = Git.ls_remote(remote)
-
-          # skip if ref is a branch
-          next if remote_refs['branches'].key?(ref)
-
-          if remote_refs['tags'].key?(ref)
-            # there are too many possible versioning conventions
-            # we have to be be opinionated here
-            # so semantic versioning (vX.Y.Z) it is for us
-            # as well as support for skipping the leading v letter
-            tags = remote_refs['tags'].keys
-            latest_tag = tags.map do |tag|
-              begin
-                Semverse::Version.new tag[/\Av?(.*)\Z/, 1]
-              rescue Semverse::InvalidVersionFormat
-                # ignore tags that do not comply to semver
-                nil
-              end
-            end.select { |tag| !tag.nil? }.sort.last.to_s.downcase
-            latest_ref = tags.detect { |tag| tag[/\Av?(.*)\Z/, 1] == latest_tag }
-            latest_ref = 'undef (tags do not match semantic versioning)' if latest_ref.nil?
-          elsif ref.match(/^[a-z0-9]{40}$/)
-            # for sha just assume head should be tracked
-            latest_ref = remote_refs['head'][:sha]
-          else
-            raise "Unable to determine ref type for #{puppet_module.title}"
+      forge_mods = puppetfile.modules.find_all { |mod| mod.instance_of?(R10K::Module::Forge) && mod.v3_module.homepage_url? }
+     
+      threads = forge_mods.map do |mod|
+       Thread.new do 
+          source_url = mod.v3_module.attributes.dig(:current_release, :metadata, :source) || mod.v3_module.homepage_url 
+          # git:// does not work with ls-remote command, convert to https
+          source_url = source_url.gsub('git://', 'https://')
+          source_url = source_url.gsub(/\Agit\@(.*)\:(.*)/) do
+            "https://#{$1}/#{$2}"
           end
+          repo = ::Ra10ke::GitRepo.new(source_url)
+          ref = repo.get_ref_like(mod.expected_version) 
+          ref_name = ref ? ref[:name] : "bad url or tag #{mod.expected_version} is missing"
+          <<~EOF
+          mod '#{mod.name}',
+            :git => '#{source_url}',
+            :ref => '#{ref_name}'
 
-          puts "#{puppet_module.title} is OUTDATED: #{ref} vs #{latest_ref}" if ref != latest_ref
+          EOF
         end
       end
+      output = threads.map { |th| th.join.value }
+      puts output
     end
+  end
 
+  def define_task_dependencies(*_args)
+    desc "Print outdated forge modules"
+    task :dependencies do
+      PuppetForge.user_agent = "ra10ke/#{Ra10ke::VERSION}"
+      puppetfile = get_puppetfile
+      PuppetForge.host = puppetfile.forge if puppetfile.forge =~ /^http/
+      dependencies = Ra10ke::Dependencies::Verification.new(puppetfile)
+      dependencies.print_table(dependencies.outdated)
+    end
   end
 end