ruby-jss 4.2.1 → 4.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c4954d82549682beafa2624e07bad383d732fae5f77b8d1a3a07f499504b4be2
-  data.tar.gz: 2bd26c0615a368da8988779fb6a2d2726090a8484dbef6005f98a60c8db50326
+  metadata.gz: 1c7c5b51e4752d7be68fb4e6caab5fa98d00e2bba66bfa356a316004a5f7ea49
+  data.tar.gz: 455ef851b1e8bb75faf2e9abc171a0fbd84a8a1b30156c18b30933fc0ad51edf
 SHA512:
-  metadata.gz: ad08c4b7028c37be9b8b0a941ef59eabf8e77530d4533c69f9ff824fed78d8624808640121fd84a08d14f0fac55c14a19d58c36a2a2a76ce4f6b503ef93c1796
-  data.tar.gz: 88d53f94ac7412b278c6dac089ed52b12327476a32b7e57fd92c0509c3a7dffec9f55c03c533ae1545a7d7b771599192baadfb141af0e230b8648fdcfd6d7267
+  metadata.gz: c8c9d09216f3105002b9c9200896223d94a191a5601cb21cde79df1aeb1745275d86481765cfa840ed25fcb93ba9d634f1efd4332e774d8a74d079a7a036604f
+  data.tar.gz: 640aef2c3794c0337ab6ce7c08598eb096280e3feab54d245f5e0af7cef62903898f0c8d405c0265c2febe065f2bac05182081f3736c5d5fe75f879ce44d40ba

data/CHANGES.md

@@ -14,6 +14,28 @@ __Please update all installations of ruby-jss to at least v1.6.0.__
 
 Many many thanks to actae0n of Blacksun Hackers Club for reporting this issue and providing examples of how it could be exploited.
 
+--------
+## \[4.2.2] Unreleased
+
+### Fixed
+  - Class `Jamf::JPackage` no longer raises `Errno::EINVAL Invalid argument @ io_fread` when generating manifest checksums for very large package files.
+
+
+### Deprecated
+
+  - Class `Jamf::DBConnection`. Access to the MySQL backend database for on-prem Jamf Pro installations will be removed in a future release, probably some time in mid-late 2026. If you use this class, please update your code to make and use such connections independently of ruby-jss. This removal also includes the 'default' instance stored in `Jamf::DB_CNX` and `Jamf.db`. 
+  
+    The following methods will also be removed, as they require that class for direct database access.
+    - `Jamf::ComputerExtensionAttribute#history`
+    - `Jamf::MobileDeviceExtensionAttribute#history`
+    - `Jamf::Icon.all`
+    - `Jamf::SelfServable#validate_icon`
+    - `Jamf::APIObject#add_object_history_entry`
+
+    Note that some objects in the Jamf Pro API have access to their object_history. As classes are migrated (see release notes for 4.2.0 below) that access will be included when available.
+ 
+  
+
 --------
 ## \[4.2.1] 2025-08-11
 

data/lib/jamf/api/jamf_pro/api_objects/j_package.rb

@@ -661,7 +661,15 @@ module Jamf
     # @return [void]
     ##############################
     def calculate_manifest_checksums(file, new_manifest, chunk_size: nil)
+      # we need the whole file checksum even if chunking, so
+      # get that first
+      # The Digest::SHA256.file method will read even huge files successfully
+      # without loading the whole file into memory, as would File.read.
+      #
+      whole_file_checksum = Digest::SHA256.file(file).hexdigest
+
       # are we chunking the download?
+      # we need checksums for each chunk, and the size of each chunk
       if chunk_size.is_a? Integer
         new_manifest[:items][0][:assets][0]['sha256-size'] = chunk_size
         file.open do |f|
@@ -670,23 +678,17 @@ module Jamf
           end
         end
 
-      # not chunking, use the file filesize
+      # not chunking, use the file filesize and whole-file checksum
       else
         new_manifest[:items][0][:assets][0]['sha256-size'] = file.size
-        new_manifest[:items][0][:assets][0]['sha256s'] = [Digest::SHA256.hexdigest(file.read)]
+        new_manifest[:items][0][:assets][0]['sha256s'] = [whole_file_checksum]
       end
 
       # Store the whole-file checksum in
-      # manifest[:items][0][:metadata]['sha256-whole']. taking it from
-      # manifest[:items][0][:assets][0]['sha256s'][0], if available, or generate it if needed
+      # manifest[:items][0][:metadata]['sha256-whole'], a non-standard key used by ruby-jss.
       # It is used by the deploy_via_mdm method.
       # This value is required for MDM deployments, even if the file is chunked in the manifest.
-      new_manifest[:items][0][:metadata]['sha256-whole'] =
-        if new_manifest[:items][0][:assets][0]['sha256s'].size == 1
-          new_manifest[:items][0][:assets][0]['sha256s'][0]
-        else
-          Digest::SHA256.hexdigest(file.read)
-        end
+      new_manifest[:items][0][:metadata]['sha256-whole'] = whole_file_checksum
     end
     private :calculate_manifest_checksums
 

data/lib/jamf/version.rb

@@ -27,6 +27,6 @@
 module Jamf
 
   ### The version of ruby-jss
-  VERSION = '4.2.1'.freeze
+  VERSION = '4.2.2'.freeze
 
 end # module

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-jss
 version: !ruby/object:Gem::Version
-  version: 4.2.1
+  version: 4.2.2
 platform: ruby
 authors:
 - Chris Lasell
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-08-11 00:00:00.000000000 Z
+date: 2025-09-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: CFPropertyList
@@ -502,7 +502,7 @@ files:
 - test/tests/policy.rb
 homepage: http://pixaranimationstudios.github.io/ruby-jss/
 licenses:
-- Nonstandard
+- LicenseRef-LICENSE.txt
 metadata:
   source_code_uri: https://github.com/PixarAnimationStudios/ruby-jss
   changelog_uri: https://github.com/PixarAnimationStudios/ruby-jss/blob/master/CHANGES.md