ruby-jss 4.1.1 → 4.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0df8e9b794ba674f60a7a224e9f7b9ae166d6ef5ff39435920e17460412a770
-  data.tar.gz: afef3a2acddf6588525facb25eb3273a1e96c02a5d3b2c57771cd951bf8fc0d6
+  metadata.gz: 19c9e79713c2ae52e27acf1baaecdf03446328ebce206b0d4a6d6c995d98e0cf
+  data.tar.gz: b05700b3f5e07771b257af10da6b73cf44334916cbdc0442d9d7aca539518af9
 SHA512:
-  metadata.gz: fbd69adff24c3b718c0711042a36162f92f5f399081239c6d1f4919daf4fa978980a6a424a9cdc87e0635beafa04368f8eba71991fdef1d999ce799c8433db62
-  data.tar.gz: eae8268d15ecdd23d0f88039e6329a5d298e570716a3abfe552fc861bc403583b8402066379f2e5bd3c3e36f0ebf2eea543aa9bed0c9f34f18394d8473a8910d
+  metadata.gz: d400c1033d40a4128d5021e21f3fd367158caf2ed176108bf912198f76f4669bfd3500b26e0677279a9d87c65dc69974fe636588d100256f64a79315d64747b0
+  data.tar.gz: 631190601b377d45d1cb1ba80ec54decf662f7b6223d311f6b6e3a73dfea5731b86bac7d5046d47a6364395a3abb5b4ef4c1b1add424868da917ed037152fa8c

data/CHANGES.md

@@ -14,6 +14,90 @@ __Please update all installations of ruby-jss to at least v1.6.0.__
 
 Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue and providing examples of how it could be exploited.
 
+--------
+## \[4.2.0] 2025-06-11
+
+### Moving forward with the Jamf Pro API
+With this release, we begin the long process of porting existing classes from the Classic API to the Jamf Pro API where possible, starting with `Jamf::Package`. So far, our implementation of classes from the Jamf Pro API has been limited to those not already implemented via the Classic API.
+
+However, because of our stated goals and changes for implementing things in the Jamf Pro API (see [README-2.0.0.md](README-2.0.0.md)), we can't just change the existing classes without breaking lots of code. For example, in order to eliminate various 'hidden permissions requirements' and adhere more closely to the actual API, we're [eliminating cross-object validation](README-2.0.0.md#cross-object-validation-in-setters). 
+
+For Packages this means that when setting the categoryId, for example, you must provide an id, not a category name. In the existing `Jamf::Package` class using the Classic API, you could provide a name, and ruby-jss would look at the categories in the API and validate/convert to an id. This required 'undocumented' permissions to see the category endpoints when working with the package endpoints. NOTE: if you have read-permissions on categories, you can still use the `Jamf::Category.valid_id` method to convert from names to ids yourself. That method is available for all collection classes in both APIs.
+
+In order to move forward with Jamf Pro-based classes, while providing reasonable backward compatibility, here's the plan:
+
+  - For each class being migrated, and new class, prepended with `J` will be created.  So for accessing packages via the Jamf Pro API, we are introducing the class `Jamf::JPackage`. We've had an experimental  Jamf Pro version of Jamf::JpBuilding for a while, and it has been renamed to `Jamf::JBuilding` 
+  - The original Classic API-based class will be marked as deprecated when the matching J-class is released.
+  - The deprecated classes will exist for at least one year (probably longer) but will get few, if any, updates, mostly limited to security-related fixes. As of this release, `Jamf::Package` and `Jamf::Building` are deprecated. 
+  - During the deprecation period, please update all your code to use the new Jamf Pro API-based classes.
+  - When the older Classic API-based class is actually removed, the remaining Jamf Pro API-based class will be aliased back to the original name, without the `J`. So at that point `Jamf::Package` and `Jamf::JPackage` will be the same class. At this time please start updating your code to use the non-J version of the class name.
+  - After some long-ish period of time (2-5 years?), the `J` version of the class name will be removed. Or - maybe not! Aliases are cheap :-)
+
+If you have thoughts or comments on this, please reach out:
+  - [Open an issue on github](https://github.com/PixarAnimationStudios/ruby-jss/issues)
+  - [Email us at ruby-jss@pixar.com](mailto:ruby-jss@pixar.com)
+  - Join the conversation in the [#ruby-jss Macadmins Slack Channel](https://macadmins.slack.com/archives/C03C7F563MK)
+
+### Added
+  
+  - `Jamf::JPackage`: The first major migration of a class from the Classic to the Jamf Pro API.
+    - Implements the /v1/packages endpoints
+    - Support for manifests
+    - Support for uploads to the /v1/packages/{id}/upload endpoint via the `#upload` method
+    - Implements the /v1/deploy-package endpoint via the `#deploy_via_mdm` instance method. For this to work:
+      - The endpoint must be enabled - contact Jamf Support.
+      - The package must have a manifest
+      - The .pkg file must be a "Product Archive", e.g. it must contain a 'Distribution' file, as when created with the `productbuild` command. Component packages created with `pkgbuild` will not work.
+      - The .pkg file must be signed.
+
+  - Collection Resource classes from the Jamf Pro API can now define a constant OBJECT_NAME_ATTR, which indicates the attribute that holds the individual object's name, if that isn't "name". 
+
+    For example, Computer and MobileDevice prestage objects, the name is in the "displayName" attribute.  For JPackages via the Jamf Pro API, the package object's name (not its file name) is in the "packageName" object.
+    
+    When the OBJECT_NAME_ATTR is defined, the class can use "name" as a alias of the OBJECT_NAME_ATTR with getters & setters (`name=` is an alias of `displayName=`, etc) and can be used for .fetch and .valid_id:  `Jamf::JPackage.fetch name: 'foo'`  is the same as `Jamf::JPackage.fetch packageName: 'foo'`
+
+    For some objects this isn't relevant, e.g. Inventory Preload Records, but for JPAPI that use variations on the word 'name' for the objects actual name, this will help normalize things, and keep better compatility with objects from the Classic API, which all use 'name'.
+
+  - `Jamf::ManagedSoftwareUpdates` This module replaces the deprecated MacOSManagedUpdates class, giving access to the `v1/managed-software-updates` endpoints for creating and querying Software Update plans and their statuses. This code is preliminary and provides basic access. It will probably be enhanced in the future.
+    
+    See the `Jamf::ManagedSoftwareUpdates.send_managed_sw_update` and `Jamf::ManagedSoftwareUpdates.status` module methods, and the `Jamf::ManagedSoftwareUpdates::Plan` class, 
+
+  
+### Changed
+  - `Jamf::JpBuilding` is now known as `Jamf::JBuilding`
+
+### Fixed
+  - [Github issue #102](https://github.com/PixarAnimationStudios/ruby-jss/issues/102): Apply redundant boolean value to indicate that a MobileDeviceApplication is/is not in Self Service. Thanks @carolinebeauchamp!
+
+  - [Github #103](https://github.com/PixarAnimationStudios/ruby-jss/pull/103) Fixed and issue where linking a mobile device application to VPP failed as the vpp_admin_account_id wasn't included in the XML. Thanks @carolinebeauchamp!
+
+  - [Github #104](https://github.com/PixarAnimationStudios/ruby-jss/pull/104) Add allow_user_to_delete attribute. Thanks @carolinebeauchamp!
+
+  - [Github #105](https://github.com/PixarAnimationStudios/ruby-jss/pull/105) Fix configuration preferences in MobileDeviceApplication. Thanks @carolinebeauchamp!
+
+  - Some lingering method parameter fixes for ruby 3.x compatibility
+
+  - Fix for `Jamf::Group#remove_member`
+
+  - Fixes for `Jamf::Scopable::Scope#set_exclusions`, `#set_limitations` and more.
+
+  - Fix to ensure passing correct connection object when fetching.
+
+  - Fix for `CollectionResource.valid_id` for JP API objects, it now works when given an identifier and value, eg `SomeClass.valid_id displayName: 'foobar'`
+
+### Deprecated
+  - `Jamf::Package` and `Jamf::Building` are now deprecated amd will be removed in a future release. Please update your code to use `Jamf::JBuilding` and `Jamf::JPackage`
+
+  - Auto-generated OAPISchemas are no longer used _directly_. There's still too much inconsistency and other problems that arise from using them as we were. See the NOTE from the previous release. 
+
+    For the forseeable future we'll keep the overall structure of the class/mixin hierarchy, and will probably use auto-generated classes as a starting point, but as new classes are added to ruby-jss via the Jamf Pro API, the `OAPISchemas` classes will be hand-built and maintained as needed, just like APIObject classes always have been for objects in the Classic API. 
+
+    To start with, we're keeping the ones currently in use (about 40 of them) where they've always lived, in the `lib/jamf/api/jamf_pro/oapi_schemas` directory, and the new bespoke ones will go there also. The other ~550 unused auto-generated classes have been removed from ruby-jss.  
+    
+    For details about how the've been auto-generated, see the `generate_object_models` tool in the bin directory.
+
+  - `Jamf::MacOSManagedUpdates` This endpoint has been deprecated by Jamf, and replaced with the more broad, and future-proof `Jamf::ManagedSoftwareUpdates` module.
+
 --------
 ## \[4.1.1] 2024-06-25
 
@@ -29,7 +113,6 @@ Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue an
   - A bug in Jamf::PatchTitle which prevented use of non-default connection objects.
   
   - Some ObjectModel classes from the OAPI3 schema were not getting generated, causing problems when using Zeitwerk's `eager_load`. Thanks to @j-o-lantern0422 and @jcruce13 for reporting the issue, and @nick-f for providing a fix!
-
     
     NOTE: Given the nature of this issue, along with known inconsistencies in the data structures and naming of items in the OAPI3 schema, plus the fact that we're starting to migrate to the JP API for more complex object handling (e.g. `Jamf::MobileDevice`)  we're probably going to stop using the auto-generated `Jamf::OAPISchemas` classes - at least in the way we have been using them. Most likely we'll still generate them, but then hand-edit them to create more robust, bespoke classes for the items we implement (as we did in the Classic API), and only include those required for the objects implemented. These changes shouldn't affect compatibility. Feedback is welcome, via GitHub or The [#ruby-jss channel in Macadmins Slack](https://macadmins.slack.com/archives/C03C7F563MK) 
 

data/README-2.0.0.md

@@ -34,7 +34,7 @@ These changes have been in mind for some time, but the requirement in late 2022
   - [The valid_id method for Classic API collection classes](#the-valid_id-method-for-classic-api-collection-classes)
 - [Planned deprecations](#planned-deprecations)
   - [Use of the term 'api'](#use-of-the-term-api)
-  - [.map_all_ids_to method for Classic API collection classes](#map_all_ids_to-method-for-classic-api-collection-classes)
+  - [map_all_ids_to method for Classic API collection classes](#map_all_ids_to-method-for-classic-api-collection-classes)
   - [Using .make, #create, and #update for Classic API objects](#using-make-create-and-update-for-classic-api-objects)
   - [JSS::CONFIG](#jssconfig)
   - [Jamf::Connection instance methods #next_refresh, #secs_to_refresh, &  #time_to_refresh](#jamfconnection-instance-methods-next_refresh-secs_to_refresh---time_to_refresh)
@@ -76,7 +76,7 @@ The announcement with Jamf Pro 10.35 that the Classic API can use, and will even
 
 #### A single Connection class
 
-There is now one `Jamf::Connection` class, instances of which are connections to a Jamf Pro server. Once connected, the connection instance maintains connections to _both_ APIs and other classes use them as needed. As before, there are low-level methods available for sending HTTP requests manually, which are specific to each API. See the documentation for `Jamf::Connection` (link TBA) for details.
+There is now one `Jamf::Connection` class, instances of which are connections to a Jamf Pro server. Once connected, the connection instance maintains connections to _both_ APIs and other classes use them as needed. As before, there are low-level methods available for sending HTTP requests manually, which are specific to each API. See the documentation for [Jamf::Connection](https://www.rubydoc.info/gems/ruby-jss/Jamf/Connection) for details.
 
 ##### Connecting to the API
 
@@ -91,7 +91,7 @@ Other connection parameters can be passed in as normal.
 
 ###### The default connection
 
-The top-level module methods for accessing the 'default' connection are still available and are now synonyms: `Jamf.cnx` and `JSS.api` both return the current default Jamf::Connection instance. There is also a top-level methods`Jamf.connect` which is the same as `Jamf.cnx.connect`. The top-level methods for changing the default connection are still there. 
+The top-level module methods for accessing the 'default' connection are still available and are now synonyms: `Jamf.cnx` and `JSS.api` both return the current default Jamf::Connection instance. There is also a top-level method`Jamf.connect` which is the same as `Jamf.cnx.connect`. The top-level methods for changing the default connection are still there. 
 
 NOTE: The use of `JSS::API` has been deprecated for years now, and still is (see below).
 
@@ -118,6 +118,13 @@ The `.all` method, and its relatives like `.all_ids`, `.all_names`, etc. exist f
 To confirm which API a class comes from, just look at its `API_SOURCE` constant, e.g. `Jamf::Computer::API_SOURCE`. This constant will return a symbol, either `:classic` or `:jamf_pro`
 
 ### Automatic code generation
+---
+**UPDATE** 
+
+As of version 4.2.0, the auto-generated class definitions will only be used as a starting point for more bespoke, hand-maintained classes. This is due to ongoing inconsistencies across the Jamf Pro API, and occasional name-clashes.
+See the Deprecations section for version 4.2.0 in the [CHANGES](CHANGES.md) file for a longer explaination.
+
+---
 
 While the Classic API classes in ruby-jss are very hand-built and must be manually edited to add access to new data, the Jamf Pro API has an OpenAPI3 specification - a JSON document that fully describes the entire API and what it can do.
 
@@ -133,7 +140,7 @@ If you develop ruby-jss, please see (documentation link will go here) for more i
 
 ### Autoloading with Zeitwerk
 
-Because the classes generated from the OAPI spec number in the hundreds, it's a waste of memory and time to load all of them in every time you `require 'ruby-jss'`, since most of them will never be used for any given application.
+Because ruby-jss implements so many classes and modules, it's a waste of memory and time to load all of them in every time you `require 'ruby-jss'`, since most of them will never be used for any given application.
 
 To deal with this, ruby-jss now uses the wonderfully cool [Zeitwerk gem](https://github.com/fxn/zeitwerk) to automatically load only the files needed for classes and modules as they are used.
 
@@ -172,7 +179,11 @@ The `.all` method will never deliver paged results, however if you give it a `fi
 
 ### API data are no longer cached (?)
 
-**NOTE:** As of this writing, caching has been removed for the objects from the Jamf Pro API, but caching remains in the Classic API. Its removal, or the re-instatement of caching for JP API objects, are pending discussion with other users of ruby-jss.
+---
+**NOTE:** 
+Caching has been removed for the objects from the Jamf Pro API, but remains for those from the Classic API. The re-instatement of caching for JP API objects is pending discussion with other users of ruby-jss.
+
+---
 
 Pre-2.0, methods that would fetch large datasets from the server would always cache that data in the Connection object, and by default use the cache in future calls unless a `refresh` parameter is given. These datasets included:
 
@@ -274,7 +285,7 @@ Here are the things we are planning on removing or changing in the coming months
 
 In ruby-jss < 2.0, the term `api` is used with the Classic API in method names, method parameters, instance variables, attributes, and constants. It is used to pass, access, refer to, or hold instances of JSS::APIConnnection, e.g. so a method that talks to the server would use the passed connection rather than the module-wide default connection.  
 
-The term 'api' is inappropriate because the thing being passed is a 'connection' not an 'api'. Now that there are actually two APIs at play, that usage is even less appropriate.
+The term 'api' is inappropriate because the thing being referred to is a 'connection' not an 'api'. Now that there are actually two APIs at play, that usage is even less appropriate.
 
 Going forward, use `cnx` (simpler to type than 'connection') instead. Example:
 
@@ -384,11 +395,11 @@ Or when you try to set the value of an extension attribute on a Computer object,
 
 This validation happens before you try to send the new data to the server.
 
-This type of pre-validation will be removed over time from objects in the Classic API, for 3 reasons:
+This type of pre-validation will not be use when using the Jamf Pro API, for 3 reasons:
 
 1) The API itself will perform this validation when you send the data, and will return an error if there's a problem.
 2) Removing this validation will simplify the code, and reduce interdependency between objects
-3) Removing this code will make it easier to understand the permissions needed to do things in ruby-jss
+3) Removing this code will make it easier to understand the permissions needed to do things in ruby-jss, removing 'hidden permissions requirements' when interacting with class-specific API endpoints.
 
 The last point is very important.  Right now, in order to be able to manipulate the scope of any scopable object, the account with which you're accessing the API must have at least 'read' permission on all the different kinds of objects that _might_ be in the scope: computers, computer groups, buildings, departments, network segments, and so on. Removing or limiting the validation-based interdependency will make it easier to limit the access needed for API service accounts, and thereby increase overall security.
 

data/README.md

@@ -1,24 +1,6 @@
 # ruby-jss: Working with the Jamf Pro APIs in Ruby
 [![Gem Version](https://badge.fury.io/rb/ruby-jss.svg)](http://badge.fury.io/rb/ruby-jss)
 
-## Version 2.0.0 has been released
-
-Version 2.0.0 has major changes! While we've strived for _mostly_ being backward compatible, and have done lots of testing, YMMV.  Please report any issues.
-
-_NOTE_: ruby-jss 2.0 is not completely backward compatible, please see  [README-2.0.0.md](README-2.0.0.md) for more info
-
-### Highlights
-
-- Support for Ruby 3.x
-  - tested in 3.0 and 3.1
-- Combined access to both the Classic and Jamf Pro APIs
-  - A single namespace module
-  - Connection objects talk to both APIs & automatically handle details like bearer tokens
-- Auto-generated code for Jamf Pro API objects
-- Autoloading of code using [Zeitwerk](https://github.com/fxn/zeitwerk)
-
-For details about the changes, the document [README-2.0.0.md](README-2.0.0.md).
-
 ## _IMPORTANT_: Known Security Issue in v1.5.3 and below
 
 Versions of ruby-jss prior to 1.6.0 contain a known security issue due to how we were using the 'plist' gem.
@@ -35,9 +17,7 @@ Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue an
 
 <!-- TOC -->
 
-- [Version 2.0.0 has been released](#version-200-has-been-released)
-  - [Highlights](#highlights)
-- [_IMPORTANT_: Known Security Issue in v1.5.3 and below](#_important_-known-security-issue-in-v153-and-below)
+- [IMPORTANT: Known Security Issue in v1.5.3 and below](#important-known-security-issue-in-v153-and-below)
 - [DESCRIPTION](#description)
 - [SYNOPSIS](#synopsis)
 - [USAGE](#usage)
@@ -50,6 +30,7 @@ Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue an
     - [Updating Objects](#updating-objects)
     - [Deleting Objects](#deleting-objects)
 - [OBJECTS IMPLEMENTED](#objects-implemented)
+    - [Migrating classes from the Classic to the Jamf Pro API](#migrating-classes-from-the-classic-to-the-jamf-pro-api)
     - [Other useful classes & modules:](#other-useful-classes--modules)
 - [Object-related API endpoints](#object-related-api-endpoints)
 - [CONFIGURATION](#configuration)
@@ -64,7 +45,7 @@ Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue an
 
 ## DESCRIPTION
 
-ruby-jss defines a Ruby module called `Jamf`, which is used for accessing the 'Classic' and
+ruby-jss defines a Ruby module called `Jamf`, which is used for accessing both the 'Classic' and
 'Jamf Pro' APIs of a Jamf Pro server. Jamf Pro is an enterprise-level management tool for Apple
 devices from [Jamf.com](http://www.jamf.com/). ruby-jss is available as a [ruby gem](https://rubygems.org/gems/ruby-jss), and the
 [source is on github](https://github.com/PixarAnimationStudios/ruby-jss).
@@ -74,16 +55,17 @@ Details like authentication tokens, token refreshing, JSON and XML parsing, and
 which API are all handled under-the-hood.
 
 The Jamf module abstracts many API resources as Ruby objects, and provides methods for interacting with those
-resources. It also provides some features that aren't a part of the API itself, but come with other
-Jamf-related tools, such as uploading {Jamf::Package} files to the primary fileshare distribution
-point, and the installation of those objects on client machines. (See [BEYOND THE API](#beyond-the-api))
+resources. It can also provide some features that aren't a part of the API itself, but come with other
+Jamf-related tools.
 
 The Jamf module is not a complete implementation of the Jamf Pro APIs. Only some objects are modeled,
 some only minimally. Of those, some are read-only, some partially writable, some fully read-write.
 We've implemented the things we need in our environment, and as our needs grow, we'll add more.
 Hopefully others will find it useful, and add more to it as well.
 
-[Full technical documentation can be found here.](http://www.rubydoc.info/gems/ruby-jss/)
+For some of the major changes that happened with the release of v2.0.0, see [README-2.0.0](README-2.0.0.md)
+
+[Full technical documentation can be found at rubydoc.info](http://www.rubydoc.info/gems/ruby-jss/)
 
 ## SYNOPSIS
 
@@ -173,6 +155,8 @@ Most of the time, you'll only need a single connection to a single server, and t
 you can also create multiple Connection objects, to different servers, or perhaps the same server with different credentials and
 access, and pass those connection objects into methods using the `cnx:` parameter as appropriate.
 
+This is especially important when creating tools that use threads or fibers to perform different tasks concurrently. In such cases the default connection should never be used, and every task should use its own connection object, preferably closing it when done.
+
 ```ruby
 # Make connections to 2 different Jamf servers.
 # The .new class method accepts the same parameters as the #connect instance method,
@@ -316,27 +300,34 @@ Here's some of what we've implemented so far. See each Class's [documentation(ht
 * {Jamf::AdvancedComputerSearch}
 * {Jamf::AdvancedMobileDeviceSearch}
 * {Jamf::AdvancedUserSearch}
-* {Jamf::Building}
+* {Jamf::APIClient}
+* {Jamf::APIRole}
+* {Jamf::Building} (Classic, deprecated), {Jamf::JBuilding} (Jamf Pro)
 * {Jamf::Category}
 * {Jamf::Computer}
 * {Jamf::ComputerExtensionAttribute}
 * {Jamf::ComputerGroup}
 * {Jamf::ComputerInvitation}
+* {Jamf::ComputerPrestage}
 * {Jamf::Department}
+* {Jamf::DeviceEnrollment}
 * {Jamf::DistributionPoint}
 * {Jamf::DockItem}
 * {Jamf::EBook}
 * {Jamf::IBeacon}
+* {Jamf::InventoryPreloadRecord}
 * {Jamf::LdapServer}
+* {Jamf::MacApplication}
 * {Jamf::MobileDevice}
 * {Jamf::MobileDeviceApplication}
 * {Jamf::MobileDeviceConfigurationProfile}
 * {Jamf::MobileDeviceExtensionAttribute}
 * {Jamf::MobileDeviceGroup}
+* {Jamf::MobileDevicePrestage}
 * {Jamf::NetBootServer}
 * {Jamf::NetworkSegment}
 * {Jamf::OSXConfigurationProfile}
-* {Jamf::Package}
+* {Jamf::Package} (Classic, deprecated), {Jamf::JPackage} (Jamf Pro)
 * {Jamf::PatchTitle}
 * {Jamf::PatchTitle::Version}
 * {Jamf::PatchExternalSource}
@@ -344,7 +335,8 @@ Here's some of what we've implemented so far. See each Class's [documentation(ht
 * {Jamf::PatchPolicy}
 * {Jamf::Peripheral}
 * {Jamf::PeripheralType}
-* {Jamf::Policy} (not fully implemented)
+* {Jamf::Policy} 
+* {Jamf::Printer} 
 * {Jamf::RemovableMacAddress}
 * {Jamf::RestrictedSoftware}
 * {Jamf::Script}
@@ -353,10 +345,28 @@ Here's some of what we've implemented so far. See each Class's [documentation(ht
 * {Jamf::User}
 * {Jamf::UserExtensionAttribute}
 * {Jamf::UserGroup}
+* {Jamf::VPPAccount}
 * {Jamf::WebHook}
 
 **NOTE** Most Computer and MobileDevice data gathered by an Inventory Upate (a.k.a. 'recon') is not editable.
 
+#### Migrating classes from the Classic to the Jamf Pro API
+
+With the release of version 4.2.0, we begin the long process of porting existing classes from the Classic API to the Jamf Pro API where possible, starting with `Jamf::Package`. Before that, our implementation of classes from the Jamf Pro API has been limited to those not already implemented via the Classic API, such as `Jamf::InventoryPreloadRecord`.
+
+However, because of our stated goals for implementing things in the Jamf Pro API (see [README-2.0.0.md](README-2.0.0.md)), we can't just change the existing classes without breaking lots of code. For example, in order to eliminate various 'hidden permissions requirements' and adhere more closely to the actual API, we're [eliminating cross-object validation](README-2.0.0.md#cross-object-validation-in-setters). 
+
+For example, for Packages this means that when setting the categoryId, you must provide an id, not a category name. In Jamf::Package, using the Classic API, you could provide a name, and behind-the-scenes ruby-jss would look at the categories in the API and validate/convert to an id. This required 'undocumented' read-permissions to the categories when working with packages. NOTE: if you do have read-permissions on categories, you can still use the `Jamf::Category.valid_id` method to convert from names to ids yourself. That method is available for all collection classes in both APIs.
+
+In order to move forward with Jamf Pro-based classes, while providing reasonable backward compatibility, here's the plan:
+
+  - For each class being migrated, and new class, prepended with `J` will be created.  So for accessing packages via the Jamf Pro API, we are introducing the class `Jamf::JPackage`.
+  - The original Classic API-based class will be marked as deprecated when the matching J-class is released.
+  - The deprecated classes will exist for at least one year (probably longer) but will get few, if any, updates, mostly limited to security-related fixes.
+  - During the deprecation period, please update all your code to use the new Jamf Pro API-based classes.
+  - When the older Classic API-based class is actually removed, the remaning Jamf Pro API-based class will be aliased back to the original name, without the `J`. So at that point `Jamf::Package` and `Jamf::JPackage` will be the same class. At this time please start updating your code to use the non-J version of the class name.
+  - After some long-ish period of time (2-5 years?), the `J` version of the class name will be removed. Or - maybe not! Aliases are cheap :-)
+
 #### Other useful classes & modules:
 
 These modules either provide stand-alone methods, or are mixed in to other classes to extend their functionality. See their documentation for details
@@ -367,7 +377,7 @@ These modules either provide stand-alone methods, or are mixed in to other class
 
 * {Jamf::Scopable} - a module that handles Scope for those objects that can be scoped. It defines the Scope class used in those objects. Instances of Scope are where you change targets, limitations, and exclusions.
 
-* {Jamf::MDM} - a module that handles sending MDM commands. It is accessed via the Computer and MobileDevice classes and their instances.
+* {Jamf::MDM} - a module that handles sending MDM commands via the Classic API. It is accessed via the Computer and MobileDevice classes and their instances.
 
 ## Object-related API endpoints
 
@@ -398,10 +408,13 @@ The currently known attributes are:
 
 * api_server_name [String] the hostname of the Jamf API server
 * api_server_port [Integer] the port number for the API connection
-* api_verify_cert [Boolean] 'true' or 'false' - if SSL is used, should the certificate be verified? (usually false for a self-signed cert)
+# api_ssl_version [String] the SSL version to use for the connection. Default is TLSv1_2
+* api_verify_cert [Boolean] if SSL is used, should the certificate be verified? (usually false for a self-signed cert)
 * api_username [String] the Jamf username for connecting to the API
 * api_timeout_open [Integer] the number of seconds for the open-connection timeout
 * api_timeout [Integer] the number of seconds for the response timeout
+* package_manifest_base_url [String] Used by JPackage#generate_manifest. 
+  The base-url for downloading a package for installation. The JPackage#fileName is appended to this to create the full URL.
 
 To put a standard server & username on all client machines, and auto-accept the Jamf's self-signed https certificate, create the file /etc/ruby-jss.conf containing three lines like this:
 
@@ -479,13 +492,13 @@ Full documentation is available at [rubydoc.info](http://www.rubydoc.info/gems/r
 
 There's a [wiki on the github page](https://github.com/PixarAnimationStudios/ruby-jss/wiki), feel free to contribute examples and tidbits.
 
-If you have questions or feedback about ruby-jss, please reach out  to us via:
+If you have questions or feedback about ruby-jss, please reach out to us via:
 - [Open an issue on github](https://github.com/PixarAnimationStudios/ruby-jss/issues)
 - [Email the developers at ruby-jss@pixar.com](mailto:ruby-jss@pixar.com)
 - Join the conversation in the [#ruby-jss Macadmins Slack Channel](https://macadmins.slack.com/archives/C03C7F563MK)
 
 ## LICENSE
 
-Copyright 2023 Pixar
+Copyright 2025 Pixar
 
 Licensed under a modified Apache License, Version 2.0. See LICENSE.txt for details

data/bin/cgrouper

@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/bin/jamfHelperBackgrounder

@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/bin/netseg-update

@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -275,7 +275,7 @@ Notes:
       @columns.include?(:cidr) || \
       @columns.include?(:mask)
 
-    @use_cidr = (@columns.include?(:cidr) || @columns.include?(:mask))
+    @use_cidr = @columns.include?(:cidr) || @columns.include?(:mask)
   end
 
   def parse_a_data_line(line)

data/data/ruby-jss.conf.example

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/lib/jamf/api/classic/api_objects/account.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -44,7 +44,7 @@ module Jamf
   #
   class Account < Jamf::APIObject
 
-    # Note: This class is not fully extended and since the resource
+    # NOTE: This class is not fully extended and since the resource
     # is different than the rest, methods like Jamf::Account.all do not work
 
     # Mix-Ins
@@ -104,19 +104,19 @@ module Jamf
     end
 
     # @return [Array<Hash>] all JSS account groups
-    def self.all_groups(refresh = false,  api: nil, cnx: Jamf.cnx)
+    def self.all_groups(refresh = false, api: nil, cnx: Jamf.cnx)
       cnx = api if api
       all(refresh, cnx: cnx)[:groups]
     end
 
     # @return [Array<Hash>] all JSS account group ids
-    def self.all_group_ids(refresh = false,  api: nil, cnx: Jamf.cnx)
+    def self.all_group_ids(refresh = false, api: nil, cnx: Jamf.cnx)
       cnx = api if api
       all(refresh, cnx: cnx)[:groups].map { |i| i[:id] }
     end
 
     # @return [Array<Hash>] all JSS account group names
-    def self.all_group_names(refresh = false,  api: nil, cnx: Jamf.cnx)
+    def self.all_group_names(refresh = false, api: nil, cnx: Jamf.cnx)
       cnx = api if api
       all(refresh, cnx: cnx)[:groups].map { |i| i[:name] }
     end
@@ -161,7 +161,7 @@ module Jamf
       super
 
       # check to see if a user has been specified, haven't built groups yet
-      is_user = [:userid, :username].any? { |key| args.keys.include? key }
+      is_user = %i[userid username].any? { |key| args.keys.include? key }
 
       return unless is_user
 
@@ -171,7 +171,6 @@ module Jamf
       @access_level = @init_data[:access_level]
       @privilege_set = @init_data[:privilege_set]
       @privileges = @init_data[:privileges]
-
     end # initialize
 
   end # class accounts

data/lib/jamf/api/classic/api_objects/advanced_computer_search.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/lib/jamf/api/classic/api_objects/advanced_mobile_device_search.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -64,7 +64,7 @@ module Jamf
 
     # what data fields come back along with the display fields
     # for each mobiledevices?
-    RESULT_ID_FIELDS = [:id, :name, :udid].freeze
+    RESULT_ID_FIELDS = %i[id name udid].freeze
 
     # the object type for this object in
     # the object history table.

data/lib/jamf/api/classic/api_objects/advanced_user_search.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -64,7 +64,7 @@ module Jamf
 
     # what data fields come back along with the display fields
     # for each user?
-    RESULT_ID_FIELDS = [:id, :name].freeze
+    RESULT_ID_FIELDS = %i[id name].freeze
 
     # the object type for this object in
     # the object history table.

data/lib/jamf/api/classic/api_objects/building.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -38,8 +38,13 @@ module Jamf
   # A Building in the JSS.
   # These are simple, in that they only have an ID and a name.
   #
+  # @deprecated Use {Jamf::JBuiding} instead. This class will be removed in a future release.
+  #
   # @see Jamf::APIObject
   #
+  # For accessing buildings via the Jamf Pro API, see {Jamf::JBuiding}, which
+  # provides access to the other building-related attributes.
+  #
   class Building < Jamf::APIObject
 
     # Mix-Ins

data/lib/jamf/api/classic/api_objects/categorizable.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -109,6 +109,7 @@ module Jamf
     #
     def category_object
       return nil unless category_assigned?
+
       Jamf::Category.fetch id: @category_id
     end # cat obj
 
@@ -175,6 +176,7 @@ module Jamf
     def unset_category
       # no change, go home
       return nil if @category_name.nil?
+
       @category_name = nil
       @category_id = nil
       @need_to_update = true
@@ -220,6 +222,7 @@ module Jamf
     #
     def add_category_to_xml(xmldoc)
       return if category_name.to_s.empty?
+
       cat_elem = REXML::Element.new('category')
 
       if self.class::CATEGORY_DATA_TYPE == String

data/lib/jamf/api/classic/api_objects/category.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -116,7 +116,12 @@ module Jamf
     #
     def priority=(new_val = @priority)
       return nil if new_val == @priority
-      raise Jamf::InvalidDataError, "priority must be an integer between #{POSSIBLE_PRIORITIES.first} and #{POSSIBLE_PRIORITIES.last} (inclusive)" unless POSSIBLE_PRIORITIES.include? new_val
+
+      unless POSSIBLE_PRIORITIES.include? new_val
+        raise Jamf::InvalidDataError, 
+              "priority must be an integer between #{POSSIBLE_PRIORITIES.first} and #{POSSIBLE_PRIORITIES.last} (inclusive)"
+      end
+
       @priority = new_val
       @need_to_update = true
     end

data/lib/jamf/api/classic/api_objects/computer.rb

@@ -1,4 +1,4 @@
-### Copyright 2023 Pixar
+### Copyright 2025 Pixar
 
 ###
 ###    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/lib/jamf/api/classic/api_objects/computer_extension_attribute.rb

@@ -1,4 +1,4 @@
-# Copyright 2023 Pixar
+# Copyright 2025 Pixar
 
 #
 #    Licensed under the Apache License, Version 2.0 (the "Apache License")

data/lib/jamf/api/classic/api_objects/computer_group.rb

@@ -1,4 +1,4 @@
-# Copyright 2023 Pixar
+# Copyright 2025 Pixar
 
 #
 #    Licensed under the Apache License, Version 2.0 (the "Apache License")
@@ -28,7 +28,6 @@ module Jamf
   # Classes
   #####################################
 
-
   # A computer group in the JSS
   #
   # See also the parent class Jamf::Group
@@ -39,7 +38,6 @@ module Jamf
   #
   class ComputerGroup < Jamf::Group
 
-
     # Mix-Ins
     #####################################
     include Jamf::MDM