inspec/omnibus_overrides.rb

# THIS IS NOW HAND MANAGED, JUST EDIT THE THING

# grab the current train release from rubygems.org
train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
override "train", version: "v#{train_stable}"
override "ruby", version: "2.6.6"
Update to Ruby 2.6.2 and Rubygems 3.0.3 We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily. Signed-off-by: Tim Smith <tsmith@chef.io> 2019-04-29 17:06:36 +00:00			`# THIS IS NOW HAND MANAGED, JUST EDIT THE THING`
Remove comment about the omnibus lock in overrides file The comment about running `bundle exec rake dependencies:update_omnibus_gemfile_lock` is copy-pasta from chef/chef. The inspec project does not commit any Gemfile.lock files, including omnibus/Gemfile.lock, due to `Gemfile.lock` being in the `.gitignore` file. Signed-off-by: Bryan McLellan <btm@loftninjas.org> 2020-05-11 16:10:49 +00:00
Update to Ruby 2.6.2 and Rubygems 3.0.3 We thought we were riding the latest, but actually the overrides file wasn't wired up the same way it is in Chef. This properly sources that file and does a few other syncs from the chef config so we can diff things more easily. Signed-off-by: Tim Smith <tsmith@chef.io> 2019-04-29 17:06:36 +00:00			`# grab the current train release from rubygems.org`
			train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
blindly applied chefstyle -a Signed-off-by: Ryan Davis <zenspider@chef.io> 2019-06-11 22:24:35 +00:00			`override "train", version: "v#{train_stable}"`
Update omnibus builds to Ruby 2.6.6 2.6.5 has 2 CVEs in it: CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix) CVE-2020-10933: Heap exposure vulnerability in the socket library Signed-off-by: Tim Smith <tsmith@chef.io> 2020-08-12 20:16:32 +00:00			`override "ruby", version: "2.6.6"`