diff --git a/components/gems/Gemfile b/components/gems/Gemfile
index ca728f81b..d126387e1 100644
--- a/components/gems/Gemfile
+++ b/components/gems/Gemfile
@@ -32,6 +32,8 @@ group(:omnibus_package, :development, :test) do
   # The version of ruby/openssl that supports the FIPS mode of OpenSSL 3.0/3.1 is 3.2.0
   # and later, hence pinning the version for openssl.
   gem "openssl", ">= 3.2.0"
+
+  gem "rdoc", "~> 6.4.1" # 6.4.1.1 required for CVE-2024-27281, allow patch upgrades
 end
 
 group(:dep_selector) do
diff --git a/components/gems/Gemfile.lock b/components/gems/Gemfile.lock
index 7ba2ca7d5..331f69bb8 100644
--- a/components/gems/Gemfile.lock
+++ b/components/gems/Gemfile.lock
@@ -8,15 +8,18 @@ GIT
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.1.3.4)
+    activesupport (7.1.5)
       base64
+      benchmark (>= 0.3)
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)
       connection_pool (>= 2.2.5)
       drb
       i18n (>= 1.6, < 2)
+      logger (>= 1.4.2)
       minitest (>= 5.1)
       mutex_m
+      securerandom (>= 0.3)
       tzinfo (~> 2.0)
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
@@ -26,9 +29,9 @@ GEM
     artifactory (3.0.17)
     ast (2.4.2)
     aws-eventstream (1.3.0)
-    aws-partitions (1.962.0)
-    aws-sdk-account (1.28.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-partitions (1.1002.0)
+    aws-sdk-account (1.35.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.1)
     aws-sdk-alexaforbusiness (1.71.0)
       aws-sdk-core (~> 3, >= 3.193.0)
@@ -36,17 +39,17 @@ GEM
     aws-sdk-amplify (1.32.0)
       aws-sdk-core (~> 3, >= 3.120.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-apigateway (1.101.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-apigateway (1.109.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-apigatewayv2 (1.60.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-apigatewayv2 (1.68.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.1)
     aws-sdk-applicationautoscaling (1.51.0)
       aws-sdk-core (~> 3, >= 3.112.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-athena (1.89.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-athena (1.96.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-autoscaling (1.92.0)
       aws-sdk-core (~> 3, >= 3.176.0)
@@ -54,41 +57,41 @@ GEM
     aws-sdk-batch (1.73.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-budgets (1.71.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-budgets (1.78.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudformation (1.114.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudformation (1.123.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudfront (1.96.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudfront (1.103.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudhsm (1.58.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudhsm (1.65.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudhsmv2 (1.62.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudhsmv2 (1.69.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudtrail (1.85.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudtrail (1.93.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-cloudwatch (1.97.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudwatch (1.105.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-cloudwatchevents (1.62.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-cloudwatchlogs (1.88.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-cloudwatchlogs (1.101.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-codecommit (1.72.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-codecommit (1.79.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-codedeploy (1.72.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-codedeploy (1.79.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-codepipeline (1.78.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-codepipeline (1.90.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-cognitoidentity (1.45.0)
       aws-sdk-core (~> 3, >= 3.176.0)
@@ -96,55 +99,55 @@ GEM
     aws-sdk-cognitoidentityprovider (1.76.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-configservice (1.113.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-configservice (1.121.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-core (3.201.3)
+    aws-sdk-core (3.212.0)
       aws-eventstream (~> 1, >= 1.3.0)
-      aws-partitions (~> 1, >= 1.651.0)
-      aws-sigv4 (~> 1.8)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
       jmespath (~> 1, >= 1.6.1)
-    aws-sdk-costandusagereportservice (1.61.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-costandusagereportservice (1.68.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-databasemigrationservice (1.80.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-dynamodb (1.118.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-dynamodb (1.128.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-ec2 (1.467.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-ec2 (1.487.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-ecr (1.80.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-ecr (1.88.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-ecrpublic (1.33.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-ecrpublic (1.40.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-ecs (1.152.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-ecs (1.167.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-efs (1.79.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-efs (1.87.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-eks (1.111.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-eks (1.120.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-elasticache (1.109.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-elasticache (1.117.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-elasticbeanstalk (1.73.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-elasticbeanstalk (1.80.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-elasticloadbalancing (1.61.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-elasticloadbalancing (1.68.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-elasticloadbalancingv2 (1.109.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-elasticloadbalancingv2 (1.121.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-elasticsearchservice (1.89.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-elasticsearchservice (1.97.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-emr (1.53.0)
       aws-sdk-core (~> 3, >= 3.121.2)
@@ -152,38 +155,38 @@ GEM
     aws-sdk-eventbridge (1.46.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-firehose (1.76.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-firehose (1.84.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-glue (1.145.0)
       aws-sdk-core (~> 3, >= 3.176.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-guardduty (1.96.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-guardduty (1.106.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-iam (1.104.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-iam (1.113.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-kafka (1.77.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
-      aws-sigv4 (~> 1.1)
-    aws-sdk-kinesis (1.63.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-kafka (1.86.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-kinesis (1.71.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-kms (1.88.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-kms (1.95.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-lambda (1.125.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-lambda (1.139.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-mq (1.40.0)
       aws-sdk-core (~> 3, >= 3.120.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-networkfirewall (1.48.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-networkfirewall (1.57.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-networkmanager (1.48.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-networkmanager (1.55.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-organizations (1.77.0)
       aws-sdk-core (~> 3, >= 3.176.0)
@@ -191,23 +194,23 @@ GEM
     aws-sdk-ram (1.26.0)
       aws-sdk-core (~> 3, >= 3.112.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-rds (1.241.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-rds (1.257.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-redshift (1.119.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-redshift (1.130.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-route53 (1.95.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-route53 (1.104.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-route53domains (1.63.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-route53domains (1.70.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-route53resolver (1.64.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-route53resolver (1.72.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-s3 (1.157.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-s3 (1.170.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.5)
     aws-sdk-s3control (1.43.0)
@@ -216,8 +219,8 @@ GEM
     aws-sdk-secretsmanager (1.46.0)
       aws-sdk-core (~> 3, >= 3.112.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-securityhub (1.113.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-securityhub (1.123.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-servicecatalog (1.60.0)
       aws-sdk-core (~> 3, >= 3.112.0)
@@ -225,8 +228,8 @@ GEM
     aws-sdk-ses (1.41.0)
       aws-sdk-core (~> 3, >= 3.120.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-shield (1.68.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-shield (1.76.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-signer (1.32.0)
       aws-sdk-core (~> 3, >= 3.120.0)
@@ -234,17 +237,17 @@ GEM
     aws-sdk-simpledb (1.29.0)
       aws-sdk-core (~> 3, >= 3.120.0)
       aws-sigv2 (~> 1.0)
-    aws-sdk-sms (1.59.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-sms (1.66.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-sns (1.82.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-sns (1.90.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-sqs (1.80.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-sqs (1.88.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-ssm (1.174.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-ssm (1.184.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-states (1.39.0)
       aws-sdk-core (~> 3, >= 3.112.0)
@@ -259,7 +262,7 @@ GEM
       aws-sdk-core (~> 3, >= 3.122.0)
       aws-sigv4 (~> 1.1)
     aws-sigv2 (1.2.0)
-    aws-sigv4 (1.9.1)
+    aws-sigv4 (1.10.1)
       aws-eventstream (~> 1, >= 1.0.2)
     axiom-types (0.1.1)
       descendants_tracker (~> 0.0.4)
@@ -285,6 +288,7 @@ GEM
       ms_rest_azure (~> 0.12.0)
     base64 (0.2.0)
     bcrypt_pbkdf (1.1.1)
+    benchmark (0.4.0)
     berkshelf (8.0.9)
       chef (>= 15.7.32)
       chef-config
@@ -401,9 +405,9 @@ GEM
       tty-spinner
     chef-bin (18.5.0)
       chef (= 18.5.0)
-    chef-cli (5.6.14)
+    chef-cli (5.6.16)
       addressable (>= 2.3.5, < 2.9)
-      chef (>= 16.0)
+      chef (~> 18.0)
       cookbook-omnifetch (~> 0.5)
       diff-lcs (>= 1.0, < 1.4)
       ffi-yajl (>= 1.0, < 3.0)
@@ -456,7 +460,7 @@ GEM
     coderay (1.1.3)
     coercible (1.0.0)
       descendants_tracker (~> 0.0.1)
-    concurrent-ruby (1.3.3)
+    concurrent-ruby (1.3.4)
     connection_pool (2.4.1)
     cookbook-omnifetch (0.12.2)
       mixlib-archive (>= 0.4, < 2.0)
@@ -464,7 +468,7 @@ GEM
       rubocop (= 1.25.1)
     corefoundation (0.3.13)
       ffi (>= 1.15.0)
-    date (3.3.4)
+    date (3.4.0)
     debug_inspector (1.2.0)
     declarative (0.0.20)
     dep-selector-libgecode (1.3.5)
@@ -474,7 +478,7 @@ GEM
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
     diff-lcs (1.3)
-    docker-api (2.3.0)
+    docker-api (2.4.0)
       excon (>= 0.64.0)
       multi_json
     domain_name (0.6.20240107)
@@ -487,8 +491,9 @@ GEM
     dry-configurable (1.2.0)
       dry-core (~> 1.0, < 2)
       zeitwerk (~> 2.6)
-    dry-core (1.0.1)
+    dry-core (1.0.2)
       concurrent-ruby (~> 1.0)
+      logger
       zeitwerk (~> 2.6)
     dry-inflector (1.1.0)
     dry-logic (1.5.0)
@@ -510,8 +515,8 @@ GEM
     ed25519 (1.3.0)
     erubi (1.13.0)
     erubis (2.7.0)
-    excon (0.111.0)
-    faraday (1.10.3)
+    excon (0.112.0)
+    faraday (1.10.4)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
       faraday-excon (~> 1.1)
@@ -539,7 +544,7 @@ GEM
     faraday-patron (1.0.0)
     faraday-rack (1.0.0)
     faraday-retry (1.0.3)
-    faraday_middleware (1.2.0)
+    faraday_middleware (1.2.1)
       faraday (~> 1.0)
     fauxhai-chef (9.3.16)
       net-ssh
@@ -609,7 +614,7 @@ GEM
       signet (~> 0.15)
     gssapi (1.3.1)
       ffi (>= 1.0.1)
-    guard (2.18.1)
+    guard (2.19.0)
       formatador (>= 0.2.4)
       listen (>= 2.7, < 4.0)
       lumberjack (>= 1.0.12, < 2.0)
@@ -625,17 +630,17 @@ GEM
     hashie (4.1.0)
     highline (2.1.0)
     http-accept (1.7.0)
-    http-cookie (1.0.6)
+    http-cookie (1.0.7)
       domain_name (~> 0.5)
     httpclient (2.8.3)
-    i18n (1.14.5)
+    i18n (1.14.6)
       concurrent-ruby (~> 1.0)
     ice_nine (0.11.2)
     inifile (3.0.0)
     iniparse (1.5.0)
-    inspec (5.22.55)
+    inspec (5.22.58)
       faraday_middleware (>= 0.12.2, < 1.3)
-      inspec-core (= 5.22.55)
+      inspec-core (= 5.22.58)
       mongo (= 2.13.2)
       progress_bar (~> 1.3.3)
       rake
@@ -644,9 +649,9 @@ GEM
       train-habitat (~> 0.1)
       train-kubernetes (~> 0.1)
       train-winrm (~> 0.2)
-    inspec-bin (5.22.55)
-      inspec (= 5.22.55)
-    inspec-core (5.22.55)
+    inspec-bin (5.22.58)
+      inspec (= 5.22.58)
+    inspec-core (5.22.58)
       addressable (~> 2.4)
       chef-telemetry (~> 1.0, >= 1.0.8)
       cookstyle
@@ -673,10 +678,10 @@ GEM
     ipaddress (0.8.3)
     iso8601 (0.13.0)
     jmespath (1.6.2)
-    json (2.7.2)
+    json (2.8.1)
     jsonpath (1.1.5)
       multi_json
-    jwt (2.8.2)
+    jwt (2.9.3)
       base64
     k8s-ruby (0.16.0)
       dry-configurable
@@ -698,7 +703,7 @@ GEM
     kitchen-digitalocean (0.16.1)
       droplet_kit (>= 3.7, < 4.0)
       test-kitchen (>= 1.17, < 4)
-    kitchen-dokken (2.20.6)
+    kitchen-dokken (2.20.7)
       docker-api (>= 1.33, < 3)
       lockfile (~> 2.1)
       test-kitchen (>= 1.15, < 4)
@@ -832,13 +837,14 @@ GEM
       mixlib-shellout
     memoist (0.16.2)
     method_source (1.1.0)
-    mime-types (3.5.2)
+    mime-types (3.6.0)
+      logger
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2024.0702)
+    mime-types-data (3.2024.1105)
     mini_mime (1.1.5)
     mini_portile2 (2.8.7)
-    minitar (0.9)
-    minitest (5.24.1)
+    minitar (0.12.1)
+    minitest (5.25.1)
     mixlib-archive (1.1.7)
       mixlib-log
     mixlib-archive (1.1.7-universal-mingw32)
@@ -853,7 +859,7 @@ GEM
       thor
     mixlib-log (3.1.1)
       ffi (< 1.17.0)
-    mixlib-shellout (3.2.8)
+    mixlib-shellout (3.3.4)
       chef-utils
     mixlib-shellout (3.2.8-universal-mingw32)
       chef-utils
@@ -891,7 +897,7 @@ GEM
     multipart-post (2.4.1)
     mutex_m (0.2.0)
     nenv (0.3.0)
-    net-ftp (0.3.7)
+    net-ftp (0.3.8)
       net-protocol
       time
     net-ping (2.0.8)
@@ -901,7 +907,7 @@ GEM
       net-ssh (>= 2.6.5, < 8.0.0)
     net-sftp (4.0.0)
       net-ssh (>= 5.0.0, < 8.0.0)
-    net-ssh (7.2.3)
+    net-ssh (7.3.0)
     net-ssh-gateway (2.0.0)
       net-ssh (>= 4.0.0)
     net-ssh-multi (1.2.1)
@@ -942,8 +948,8 @@ GEM
     optimist (3.1.0)
     options (2.3.2)
     os (1.1.4)
-    parallel (1.25.1)
-    parser (3.3.4.0)
+    parallel (1.26.3)
+    parser (3.3.6.0)
       ast (~> 2.4.1)
       racc
     parslet (2.0.0)
@@ -967,12 +973,14 @@ GEM
     pry-stack_explorer (0.6.1)
       binding_of_caller (~> 1.0)
       pry (~> 0.13)
+    psych (5.2.0)
+      stringio
     public_suffix (6.0.1)
     r18n-core (5.0.1)
     r18n-desktop (5.0.1)
       r18n-core (~> 5.0)
     racc (1.8.1)
-    rack (2.2.9)
+    rack (2.2.10)
     rainbow (3.1.1)
     rake (13.0.1)
     rb-fsevent (0.11.2)
@@ -990,6 +998,8 @@ GEM
       nokogiri (~> 1.12, >= 1.12.5)
       optimist (~> 3.0)
     rdp-ruby-wmi (0.3.1)
+    rdoc (6.4.1.1)
+      psych (>= 4.0.0)
     recursive-open-struct (1.1.3)
     regexp_parser (2.9.2)
     representable (3.2.0)
@@ -1017,8 +1027,7 @@ GEM
       netrc (~> 0.8)
     retriable (3.1.2)
     retryable (3.0.5)
-    rexml (3.3.4)
-      strscan
+    rexml (3.3.9)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -1028,7 +1037,7 @@ GEM
     rspec-expectations (3.12.3)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-its (1.3.0)
+    rspec-its (1.3.1)
       rspec-core (>= 3.0.0)
       rspec-expectations (>= 3.0.0)
     rspec-mocks (3.12.7)
@@ -1044,7 +1053,7 @@ GEM
       rubocop-ast (>= 1.15.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.32.0)
+    rubocop-ast (1.34.1)
       parser (>= 3.3.1.0)
     ruby-progressbar (1.13.0)
     ruby2_keywords (0.0.5)
@@ -1054,6 +1063,7 @@ GEM
     sawyer (0.9.2)
       addressable (>= 2.3.5)
       faraday (>= 0.17.3, < 3)
+    securerandom (0.3.1)
     semverse (3.0.2)
     shellany (0.0.1)
     signet (0.19.0)
@@ -1067,12 +1077,14 @@ GEM
       semverse (>= 1.1, < 4.0)
     sshkey (2.0.0)
     sslshake (1.3.1)
+    stringio (3.1.2)
     strings (0.2.1)
       strings-ansi (~> 0.2)
       unicode-display_width (>= 1.5, < 3.0)
       unicode_utils (~> 1.4)
     strings-ansi (0.2.0)
     strscan (3.1.0)
+    structured_warnings (0.4.0)
     syslog-logger (1.6.8)
     test-kitchen (3.6.0)
       bcrypt_pbkdf (~> 1.0)
@@ -1090,17 +1102,17 @@ GEM
       winrm-fs (~> 1.1)
     thor (1.2.2)
     thread_safe (0.3.6)
-    time (0.3.0)
+    time (0.4.1)
       date
     timeliness (0.3.10)
-    timeout (0.4.1)
+    timeout (0.4.2)
     toml-rb (3.0.1)
       citrus (~> 3.0, > 3.0)
       racc (~> 1.7)
     tomlrb (1.3.0)
     trailblazer-option (0.1.2)
-    train (3.12.6)
-      activesupport (>= 6.0.3.1)
+    train (3.12.7)
+      activesupport (>= 6.0.3.1, < 7.2.0)
       azure_graph_rbac (~> 0.16)
       azure_mgmt_key_vault (~> 0.17)
       azure_mgmt_resources (~> 0.15)
@@ -1116,7 +1128,7 @@ GEM
       google-apis-storage_v1 (~> 0.30.0)
       googleauth (>= 0.16.2, < 1.9.0)
       inifile (~> 3.0)
-      train-core (= 3.12.6)
+      train-core (= 3.12.7)
       train-winrm (~> 0.2)
     train-aws (0.2.36)
       aws-sdk-account (~> 1.14)
@@ -1195,7 +1207,7 @@ GEM
       aws-sdk-synthetics (~> 1.19.0)
       aws-sdk-transfer (>= 1.26, < 1.74)
       aws-sdk-waf (~> 1.43.0)
-    train-core (3.12.6)
+    train-core (3.12.7)
       addressable (~> 2.5)
       ffi (!= 1.13.0)
       json (>= 1.8, < 3.0)
@@ -1335,7 +1347,7 @@ GEM
     wmi-lite (1.0.7)
     yajl-ruby (1.4.3)
     yaml-safe_load_stream3 (0.1.2)
-    zeitwerk (2.6.17)
+    zeitwerk (2.6.18)
 
 PLATFORMS
   ruby
@@ -1404,6 +1416,7 @@ DEPENDENCIES
   rake (= 13.0.1)
   rb-readline
   rdp-ruby-wmi
+  rdoc (~> 6.4.1)
   ruby-shadow!
   test-kitchen (>= 3.0)
   unf_ext (~> 0.0.8.2)
diff --git a/omnibus/Gemfile.lock b/omnibus/Gemfile.lock
index 612636d4a..35c867a4b 100644
--- a/omnibus/Gemfile.lock
+++ b/omnibus/Gemfile.lock
@@ -1,6 +1,6 @@
 GIT
   remote: https://github.com/chef/omnibus-software.git
-  revision: 16598229698d9626c42974bb290502dab8b25ad6
+  revision: dd171125b10e9a457090cc20165ee4ecf2e0d51d
   branch: main
   specs:
     omnibus-software (24.6.323)
@@ -8,7 +8,7 @@ GIT
 
 GIT
   remote: https://github.com/chef/omnibus.git
-  revision: 3efa84c1a26daf55c4d477bf3653e5905ab4f737
+  revision: 0633d009f24dfced4eb6ab76346b84fbb8c970f0
   branch: main
   specs:
     omnibus (9.0.25)
@@ -35,23 +35,23 @@ GEM
     ast (2.4.2)
     awesome_print (1.9.2)
     aws-eventstream (1.3.0)
-    aws-partitions (1.962.0)
-    aws-sdk-core (3.201.3)
+    aws-partitions (1.1002.0)
+    aws-sdk-core (3.212.0)
       aws-eventstream (~> 1, >= 1.3.0)
-      aws-partitions (~> 1, >= 1.651.0)
-      aws-sigv4 (~> 1.8)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
       jmespath (~> 1, >= 1.6.1)
-    aws-sdk-kms (1.88.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-kms (1.95.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
     aws-sdk-s3 (1.116.0)
       aws-sdk-core (~> 3, >= 3.127.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.4)
-    aws-sdk-secretsmanager (1.102.0)
-      aws-sdk-core (~> 3, >= 3.201.0)
+    aws-sdk-secretsmanager (1.110.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
       aws-sigv4 (~> 1.5)
-    aws-sigv4 (1.9.1)
+    aws-sigv4 (1.10.1)
       aws-eventstream (~> 1, >= 1.0.2)
     base64 (0.2.0)
     bcrypt_pbkdf (1.1.1)
@@ -177,24 +177,25 @@ GEM
     citrus (3.0.2)
     cleanroom (1.0.0)
     coderay (1.1.3)
-    concurrent-ruby (1.3.3)
+    concurrent-ruby (1.3.4)
     contracts (0.16.1)
     cookstyle (7.32.8)
       rubocop (= 1.25.1)
     corefoundation (0.3.13)
       ffi (>= 1.15.0)
-    date (3.3.4)
+    date (3.4.0)
     diff-lcs (1.5.1)
     domain_name (0.6.20240107)
     ed25519 (1.3.0)
     erubi (1.13.0)
     erubis (2.7.0)
-    faraday (2.10.1)
-      faraday-net_http (>= 2.0, < 3.2)
+    faraday (2.12.0)
+      faraday-net_http (>= 2.0, < 3.4)
+      json
       logger
     faraday-follow_redirects (0.3.0)
       faraday (>= 1, < 3)
-    faraday-net_http (3.1.1)
+    faraday-net_http (3.3.0)
       net-http
     ffi (1.16.3)
     ffi (1.16.3-x64-mingw-ucrt)
@@ -214,11 +215,11 @@ GEM
       rexml (~> 3.0)
     hashie (4.1.0)
     http-accept (1.7.0)
-    http-cookie (1.0.6)
+    http-cookie (1.0.7)
       domain_name (~> 0.5)
     httpclient (2.8.3)
     iniparse (1.5.0)
-    inspec-core (5.22.55)
+    inspec-core (5.22.58)
       addressable (~> 2.4)
       chef-telemetry (~> 1.0, >= 1.0.8)
       cookstyle
@@ -242,11 +243,11 @@ GEM
       train-core (~> 3.10)
       tty-prompt (~> 0.17)
       tty-table (~> 0.10)
-    iostruct (0.1.3)
+    iostruct (0.2.0)
     ipaddress (0.8.3)
     iso8601 (0.13.0)
     jmespath (1.6.2)
-    json (2.7.2)
+    json (2.8.1)
     kitchen-vagrant (2.0.1)
       test-kitchen (>= 1.4, < 4)
     libyajl2 (2.1.0)
@@ -255,20 +256,21 @@ GEM
       tomlrb (>= 1.2, < 3.0)
       tty-box (~> 0.6)
       tty-prompt (~> 0.20)
-    license_scout (1.3.10)
+    license_scout (1.3.15)
       ffi-yajl (~> 2.2)
       mixlib-shellout (>= 2.2, < 4.0)
       toml-rb (>= 1, < 3)
     little-plugger (1.1.4)
-    logger (1.6.0)
+    logger (1.6.1)
     logging (2.4.0)
       little-plugger (~> 1.1)
       multi_json (~> 1.14)
     method_source (1.1.0)
-    mime-types (3.5.2)
+    mime-types (3.6.0)
+      logger
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2024.0702)
-    minitar (0.9)
+    mime-types-data (3.2024.1105)
+    minitar (1.0.2)
     mixlib-archive (1.1.7)
       mixlib-log
     mixlib-archive (1.1.7-universal-mingw32)
@@ -283,14 +285,14 @@ GEM
       thor
     mixlib-log (3.1.1)
       ffi (< 1.17.0)
-    mixlib-shellout (3.2.8)
+    mixlib-shellout (3.3.4)
       chef-utils
-    mixlib-shellout (3.2.8-universal-mingw32)
+    mixlib-shellout (3.3.4-universal-mingw32)
       chef-utils
       ffi-win32-extensions (~> 1.0.3)
       win32-process (~> 0.9)
       wmi-lite (~> 1.0)
-    mixlib-shellout (3.2.8-x64-mingw-ucrt)
+    mixlib-shellout (3.3.4-x64-mingw-ucrt)
       chef-utils
       ffi-win32-extensions (~> 1.0.3)
       win32-process (~> 0.9)
@@ -299,10 +301,10 @@ GEM
     molinillo (0.8.0)
     multi_json (1.15.0)
     multipart-post (2.4.1)
-    net-ftp (0.3.7)
+    net-ftp (0.3.8)
       net-protocol
       time
-    net-http (0.4.1)
+    net-http (0.5.0)
       uri
     net-protocol (0.2.2)
       timeout
@@ -310,7 +312,7 @@ GEM
       net-ssh (>= 2.6.5, < 8.0.0)
     net-sftp (4.0.0)
       net-ssh (>= 5.0.0, < 8.0.0)
-    net-ssh (7.2.3)
+    net-ssh (7.3.0)
     net-ssh-gateway (2.0.0)
       net-ssh (>= 4.0.0)
     netrc (0.11.0)
@@ -332,8 +334,8 @@ GEM
       plist (~> 3.1)
       train-core
       wmi-lite (~> 1.0)
-    parallel (1.25.1)
-    parser (3.3.4.0)
+    parallel (1.26.3)
+    parser (3.3.6.0)
       ast (~> 2.4.1)
       racc
     parslet (2.0.0)
@@ -352,7 +354,7 @@ GEM
       method_source (~> 1.0)
     public_suffix (6.0.1)
     racc (1.8.1)
-    rack (2.2.9)
+    rack (2.2.10)
     rainbow (3.1.1)
     regexp_parser (2.9.2)
     rest-client (2.1.0)
@@ -373,8 +375,7 @@ GEM
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
     retryable (3.0.5)
-    rexml (3.3.4)
-      strscan
+    rexml (3.3.9)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -384,7 +385,7 @@ GEM
     rspec-expectations (3.12.4)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-its (1.3.0)
+    rspec-its (1.3.1)
       rspec-core (>= 3.0.0)
       rspec-expectations (>= 3.0.0)
     rspec-mocks (3.12.7)
@@ -400,7 +401,7 @@ GEM
       rubocop-ast (>= 1.15.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.32.0)
+    rubocop-ast (1.34.1)
       parser (>= 3.3.1.0)
     ruby-progressbar (1.13.0)
     rubyntlm (0.6.5)
@@ -420,7 +421,6 @@ GEM
       unicode_utils (~> 1.4)
     strings-ansi (0.2.0)
     structured_warnings (0.4.0)
-    strscan (3.1.0)
     syslog-logger (1.6.8)
     test-kitchen (3.6.0)
       bcrypt_pbkdf (~> 1.0)
@@ -437,13 +437,13 @@ GEM
       winrm-elevated (~> 1.0)
       winrm-fs (~> 1.1)
     thor (1.2.2)
-    time (0.3.0)
+    time (0.4.1)
       date
-    timeout (0.4.1)
+    timeout (0.4.2)
     toml-rb (2.2.0)
       citrus (~> 3.0, > 3.0)
     tomlrb (1.3.0)
-    train-core (3.12.6)
+    train-core (3.12.7)
       addressable (~> 2.5)
       ffi (!= 1.13.0)
       json (>= 1.8, < 3.0)
@@ -478,16 +478,16 @@ GEM
       tty-screen (~> 0.8)
     unf_ext (0.0.8.2)
     unf_ext (0.0.8.2-x64-mingw-ucrt)
-    unicode-display_width (2.5.0)
+    unicode-display_width (2.6.0)
     unicode_utils (1.4.0)
-    uri (0.13.0)
+    uri (1.0.1)
     uuidtools (2.2.0)
     vault (0.18.2)
       aws-sigv4
-    webrick (1.8.1)
+    webrick (1.9.0)
     win32-api (1.10.1-universal-mingw32)
-    win32-certstore (0.6.15)
-      chef-powershell (>= 1.0.12)
+    win32-certstore (0.6.16)
+      chef-powershell
       ffi
     win32-event (0.6.3)
       win32-ipc (>= 0.6.0)
diff --git a/omnibus/config/projects/chef-workstation.rb b/omnibus/config/projects/chef-workstation.rb
index 6fe6fe8d9..4f232d286 100644
--- a/omnibus/config/projects/chef-workstation.rb
+++ b/omnibus/config/projects/chef-workstation.rb
@@ -131,7 +131,7 @@
   fast_msi true
   upgrade_code "9870C512-DF2C-43D9-8C28-7ACD60ABBE27"
   wix_light_extension "WixUtilExtension"
-  signing_identity "769E6AF679126F184850AAC7C5C823A80DB3ADAA", machine_store: false, keypair_alias: "key_495941360"
+  signing_identity "7D16AE73AB249D473362E9332D029089DBBB89B2", machine_store: false, keypair_alias: "key_875762014"
 end
 
 # We don't support appx builds, and they eat a lot of time.
diff --git a/omnibus/config/software/openssl.rb b/omnibus/config/software/openssl.rb
index efab09fb8..4132d7a2b 100644
--- a/omnibus/config/software/openssl.rb
+++ b/omnibus/config/software/openssl.rb
@@ -23,7 +23,7 @@
 dependency "cacerts"
 dependency "openssl-fips" if fips_mode?
 
-default_version "3.0.12"
+default_version "3.0.15"
 
 # Openssl builds engines as libraries into a special directory. We need to include
 # that directory in lib_dirs so omnibus can sign them during macOS deep signing.
@@ -35,7 +35,7 @@
 internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.gz", extract: :lax_tar,
                 authorization: "X-JFrog-Art-Api:#{ENV["ARTIFACTORY_TOKEN"]}"
 
-version("3.0.12") { source sha256: "f93c9e8edde5e9166119de31755fc87b4aa34863662f67ddfcba14d0b6b69b61" }
+version("3.0.15") { source sha256: "23c666d0edf20f14249b3d8f0368acaee9ab585b09e1de82107c66e1f3ec9533" }
 
 relative_path "openssl-#{version}"
 
diff --git a/omnibus_overrides.rb b/omnibus_overrides.rb
index 9160c1e48..498076eff 100644
--- a/omnibus_overrides.rb
+++ b/omnibus_overrides.rb
@@ -6,22 +6,22 @@
 override "chef-analyze", version: "0.1.186"
 # /DO NOT MODIFY
 
-override "libarchive", version: "3.7.4"
+override "libarchive", version: "3.7.5"
 override "libffi", version: "3.4.2"
 override "libiconv", version: "1.16"
 override "liblzma", version: "5.2.5"
 override "curl", version: "8.4.0"
 override "go", version: "1.22.5"
-override "git-windows", version: "2.41.0"
+override "git-windows", version: "2.47.0"
 override "libyaml", version: "0.1.7"
-override "libxml2", version: "2.12.5"
+override "libxml2", version: "2.12.7"
 override "makedepend", version: "1.0.5"
 override "ncurses", version: "6.4"
 override :stunnel, version: "5.71"
 override "pkg-config-lite", version: "0.28-1"
-override "ruby", version: "3.1.2"
+override "ruby", version: "3.1.6"
 override "ruby-windows-devkit-bash", version: "3.1.23-4-msys-1.0.18"
-override "ruby-msys2-devkit", version: "3.1.2-1"
+override "ruby-msys2-devkit", version: "3.1.6-1"
 override "rust", version: "1.37.0"
 override "util-macros", version: "1.19.0"
 override "xproto", version: "7.0.28"