ruby-jss 4.2.1 → 4.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c4954d82549682beafa2624e07bad383d732fae5f77b8d1a3a07f499504b4be2
-  data.tar.gz: 2bd26c0615a368da8988779fb6a2d2726090a8484dbef6005f98a60c8db50326
+  metadata.gz: 3e7ad859997c4a7a6a5193c1361d9c6857f1f686228fa21c8a9f0b1ff0415a68
+  data.tar.gz: bfa9c1e6b81536615408ac424f8b130db94a83f3631da8b3367a5695f6efcb17
 SHA512:
-  metadata.gz: ad08c4b7028c37be9b8b0a941ef59eabf8e77530d4533c69f9ff824fed78d8624808640121fd84a08d14f0fac55c14a19d58c36a2a2a76ce4f6b503ef93c1796
-  data.tar.gz: 88d53f94ac7412b278c6dac089ed52b12327476a32b7e57fd92c0509c3a7dffec9f55c03c533ae1545a7d7b771599192baadfb141af0e230b8648fdcfd6d7267
+  metadata.gz: 847adedb756ad11d89c77d8cf5bf537d36db0f8223d00bc9c83e9cabb5cd06552cd5b33b032adc84ef6c85c44e96b5d0228a53308d01d06abc5172df3781e8fa
+  data.tar.gz: a4f4139af258cdccd444bbe1e534442284af3e2c2915f027874248917268786ddc2fda978c4fbd927f2f5e8b2673e2ff1bb52a2e788d98c461fca435d1c39b29

data/CHANGES.md

@@ -14,6 +14,35 @@ __Please update all installations of ruby-jss to at least v1.6.0.__
 
 Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue and providing examples of how it could be exploited.
 
+--------
+## \[4.2.3] 2025-09-23
+
+### Fixed
+  - Fixed bug were `#save` was not returning the object's Jamf ID when updating scopable objects.
+  - Fixed bug where `Jamf::Policy#retry_event=` raisse error when no retry_attempts are defined.
+
+--------
+## \[4.2.2] 2025-09-06
+
+### Fixed
+  - Class `Jamf::JPackage` no longer raises `Errno::EINVAL Invalid argument @ io_fread` when generating manifest checksums for very large package files.
+
+
+### Deprecated
+
+  - Class `Jamf::DBConnection`. Access to the MySQL backend database for on-prem Jamf Pro installations will be removed in a future release, probably some time in mid-late 2026. If you use this class, please update your code to make and use such connections independently of ruby-jss. This removal also includes the 'default' instance stored in `Jamf::DB_CNX` and `Jamf.db`. 
+  
+    The following methods will also be removed, as they require that class for direct database access.
+    - `Jamf::ComputerExtensionAttribute#history`
+    - `Jamf::MobileDeviceExtensionAttribute#history`
+    - `Jamf::Icon.all`
+    - `Jamf::SelfServable#validate_icon`
+    - `Jamf::APIObject#add_object_history_entry`
+
+    Note that some objects in the Jamf Pro API have access to their object_history. As classes are migrated (see release notes for 4.2.0 below) that access will be included when available.
+ 
+  
+
 --------
 ## \[4.2.1] 2025-08-11
 

data/lib/jamf/api/classic/api_objects/policy.rb

@@ -928,7 +928,7 @@ module Jamf
 
       # if the event is not 'none' and attempts is <= 0,
       # set events to 1, or the API won't accept it
-      @retry_attempts = 1 if !(evt == RETRY_EVENTS[:none]) && !@retry_attempts.positive?
+      @retry_attempts = 1 if !(evt == RETRY_EVENTS[:none]) && !@retry_attempts.to_i.positive?
 
       @retry_event = evt
       @need_to_update = true
@@ -1907,7 +1907,7 @@ module Jamf
       output = Jamf::Client.run_jamf('policy', "-id #{id}", show_output)
       return nil if output.include? 'No policies were found for the ID'
 
-      $CHILD_STATUS.exitstatus.zero? ? true : false
+      $CHILD_STATUS.exitstatus.zero? || false
     end
     alias execute run
 

data/lib/jamf/api/classic/api_objects/scopable.rb

@@ -109,8 +109,9 @@ module Jamf
     # when we couldn't verify all ldap users/groups due to lack of ldap connections
     #
     def update
-      super
+      resp = super
       @scope.should_update = false
+      resp
     rescue Jamf::ConflictError => e
       raise Jamf::InvalidDataError, 'Potentially non-existant LDAP user or group in new scope values.' if scope.unable_to_verify_ldap_entries == true
 

data/lib/jamf/api/classic/base_classes/extension_attribute.rb

@@ -84,7 +84,7 @@ module Jamf
     INPUT_TYPE_FIELD = 'Text Field'.freeze
     INPUT_TYPE_POPUP = 'Pop-up Menu'.freeze
     INPUT_TYPE_SCRIPT = 'script'.freeze
-    INPUT_TYPE_LDAP = 'LDAP Attribute Mapping'.freeze
+    INPUT_TYPE_LDAP = 'Directory Service Attribute Mapping'.freeze
 
     INPUT_TYPES = [
       INPUT_TYPE_FIELD,
@@ -138,7 +138,7 @@ module Jamf
     # @return [Array<String>] the choices available in the UI when the @input_type is "Pop-up Menu"
     attr_reader :popup_choices
 
-    # @return [String] the LDAP attribute for the User's ldap entry that maps to this EA, when input type is INPUT_TYPE_LDAP
+    # @return [String] the Directory Service attribute for the User's ldap entry that maps to this EA, when input type is INPUT_TYPE_LDAP
     attr_reader :attribute_mapping
 
     # @return [String] In which part of the web UI does the data appear?

data/lib/jamf/api/jamf_pro/api_objects/j_package.rb

@@ -661,7 +661,15 @@ module Jamf
     # @return [void]
     ##############################
     def calculate_manifest_checksums(file, new_manifest, chunk_size: nil)
+      # we need the whole file checksum even if chunking, so
+      # get that first
+      # The Digest::SHA256.file method will read even huge files successfully
+      # without loading the whole file into memory, as would File.read.
+      #
+      whole_file_checksum = Digest::SHA256.file(file).hexdigest
+
       # are we chunking the download?
+      # we need checksums for each chunk, and the size of each chunk
       if chunk_size.is_a? Integer
         new_manifest[:items][0][:assets][0]['sha256-size'] = chunk_size
         file.open do |f|
@@ -670,23 +678,17 @@ module Jamf
           end
         end
 
-      # not chunking, use the file filesize
+      # not chunking, use the file filesize and whole-file checksum
       else
         new_manifest[:items][0][:assets][0]['sha256-size'] = file.size
-        new_manifest[:items][0][:assets][0]['sha256s'] = [Digest::SHA256.hexdigest(file.read)]
+        new_manifest[:items][0][:assets][0]['sha256s'] = [whole_file_checksum]
       end
 
       # Store the whole-file checksum in
-      # manifest[:items][0][:metadata]['sha256-whole']. taking it from
-      # manifest[:items][0][:assets][0]['sha256s'][0], if available, or generate it if needed
+      # manifest[:items][0][:metadata]['sha256-whole'], a non-standard key used by ruby-jss.
       # It is used by the deploy_via_mdm method.
       # This value is required for MDM deployments, even if the file is chunked in the manifest.
-      new_manifest[:items][0][:metadata]['sha256-whole'] =
-        if new_manifest[:items][0][:assets][0]['sha256s'].size == 1
-          new_manifest[:items][0][:assets][0]['sha256s'][0]
-        else
-          Digest::SHA256.hexdigest(file.read)
-        end
+      new_manifest[:items][0][:metadata]['sha256-whole'] = whole_file_checksum
     end
     private :calculate_manifest_checksums
 

data/lib/jamf/version.rb

@@ -27,6 +27,6 @@
 module Jamf
 
   ### The version of ruby-jss
-  VERSION = '4.2.1'.freeze
+  VERSION = '4.2.3'.freeze
 
 end # module

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-jss
 version: !ruby/object:Gem::Version
-  version: 4.2.1
+  version: 4.2.3
 platform: ruby
 authors:
 - Chris Lasell
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-08-11 00:00:00.000000000 Z
+date: 2025-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: CFPropertyList
@@ -502,7 +502,7 @@ files:
 - test/tests/policy.rb
 homepage: http://pixaranimationstudios.github.io/ruby-jss/
 licenses:
-- Nonstandard
+- LicenseRef-LICENSE.txt
 metadata:
   source_code_uri: https://github.com/PixarAnimationStudios/ruby-jss
   changelog_uri: https://github.com/PixarAnimationStudios/ruby-jss/blob/master/CHANGES.md