inspec/omnibus_overrides.rb

# THIS IS NOW HAND MANAGED, JUST EDIT THE THING

# grab the current train release from rubygems.org
train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
override "train", version: "v#{train_stable}"
override "ruby", version: "3.1.2"

override :openssl, version: "3.0.11"

override "ruby-msys2-devkit", version: "3.1.2-1"
Update to Ruby 2.6.2 and Rubygems 3.0.3 We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily. Signed-off-by: Tim Smith <tsmith@chef.io> 2019-04-29 17:06:36 +00:00			`# THIS IS NOW HAND MANAGED, JUST EDIT THE THING`
Remove comment about the omnibus lock in overrides file The comment about running `bundle exec rake dependencies:update_omnibus_gemfile_lock` is copy-pasta from chef/chef. The inspec project does not commit any Gemfile.lock files, including omnibus/Gemfile.lock, due to `Gemfile.lock` being in the `.gitignore` file. Signed-off-by: Bryan McLellan <btm@loftninjas.org> 2020-05-11 16:10:49 +00:00
Update to Ruby 2.6.2 and Rubygems 3.0.3 We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily. Signed-off-by: Tim Smith <tsmith@chef.io> 2019-04-29 17:06:36 +00:00			`# grab the current train release from rubygems.org`
			train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
blindly applied chefstyle -a Signed-off-by: Ryan Davis <zenspider@chef.io> 2019-06-11 22:24:35 +00:00			`override "train", version: "v#{train_stable}"`
Fix omnibus build which is picking ruby 2.7.4 which has vulnerability (#6341) Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io> Co-authored-by: Vasu1105 <vasundhara.jagdale@chef.io> 2023-01-03 15:02:48 +00:00			`override "ruby", version: "3.1.2"`
Conditionally use openssl 1.1.1j on m1 Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com> 2021-03-04 15:36:31 +00:00
Upgrades openssl version to 3.0.11 (#6872) Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com> 2023-12-13 08:28:30 +00:00			`override :openssl, version: "3.0.11"`
Explicitly pin openssl to 1.0.2zi to avoid a CVE (#6825) Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com> 2023-10-24 16:13:20 +00:00
			`override "ruby-msys2-devkit", version: "3.1.2-1"`