202410140

What's Changed

• (PA-6881) Configure a default gem_uninstall command by @donoghuc in #910
• (PA-6959) Update OpenSSL to 3.0.15 for puppet-agent main by @imaqsood in #909
• (PE-39261) add configurations for 2023.8.x by @jonathannewman in #911
• (PA-7089) Apply upstream rdoc fix for start_with? by @joshcooper in #917
• (PA-6973) Upgrade libxml2 and libxslt by @skyamgarp in #918
• (PA-6961) Patch for CVE-2024-8096 (Curl) by @shubhamshinde360 in #920
• (PA-6962) update curl to address CVE-2024-8096 by @amitkarsale in #921
• (CAT-643) - Add puppet_forge to pdk-runtime by @danadoherty639 in #919

New Contributors

• @danadoherty639 made their first contribution in #919

Full Changelog: 2024090...2024101

202409030

What's Changed

• (CAT-1903) Add support for RedHat 8 and 9 AARCH architecture to the PDK by @david22swan in #876
• (PA-6507)(PA-6736) Gem install rexml to 3.3.2 for CVE-2024-35176 and … by @shubhamshinde360 in #882
• (PA-6875) Update Ruby to 3.2.5 by @skyamgarp in #887
• (PE-38998) Update shared ruby runtime for PE release by @donoghuc in #886
• (PE-38998) Downgrade rubyntlm for now by @donoghuc in #889
• (PE-38998) Revert ffi bump by @donoghuc in #891
• (PA-6885) Add DigiCert Global Root CA G2 for puppetlabs.net by @joshcooper in #890
• (PE-38998) Include getoptlong for bolt-server main by @donoghuc in #893
• (PA-6699) Bump puppet-agent's bundled openssl 3.0 to address CVE-2024-5535 by @imaqsood in #894
• (PA-6383) Enable PIE for Ubuntu and Debian by @skyamgarp in #892
• (PA-6872) Upgrade Curl to address CVE-2024-6874 and CVE-2024-6197 by @imaqsood in #897
• (PA-6889) Bump puppet-agent's bundled openssl 1.1.1v to 1.1.1w and addressed CVE-2024-5535 by @imaqsood in #899
• (PA-6900) Update ruby-augeas to 0.6.0 by @amitkarsale in #905
• (PA-6324) Add windowsfips-2016-x64 to agent-runtime-main and agent-runtime-7.x by @shubhamshinde360 in #900
• (PA-6901) Bump REXML to 3.3.6 to address CVE-2024-43398 by @imaqsood in #904
• (PA-6881) Adding rexml gem to agent-runtime-main for CVE-2024-41123 and CVE-2024-41946 by @imaqsood in #901
• Revert "(PA-6900) Update ruby-augeas to 0.6.0" by @amitkarsale in #908
• (PA-6282) RDoc vulnerability in Puppet7/Ruby 2.7.8 (CVE-2024-27281) by @imaqsood in #907
• (PA-6878) Patch agent-runtime-7.x Curl for CVE-2024-7264 by @amitkarsale in #898

Full Changelog: 2024071...2024090

202407160

What's Changed

• (PA-6549) Fix warning:undefining the allocator of T_DATA class by @AriaXLi in #860
• Revert "Merge pull request #860 from AriaXLi/PA-6549" by @AriaXLi in #861
• (maint) Bump Aix-7.1's xz to 5.4.3 by @cthorn42 in #862
• (PA-6549) Patch selinux_ruby_wrap.c to fix warning: undefining the allocator of T_DATA class # SWIG::TYPE_p_selabel_handle by @AriaXLi in #864
• Future proof ruby-selinux by @joshcooper in #849
• (PA-6625): Applied following CVE-2024-4741 to openssl by @span786 in #866
• (PUP-12048) Update openssl 3.0.14 for CVE-2024-4741, CVE-2024-4603, CVE-2024-2511 by @amitkarsale in #865
• Add minitar rubygem on AIX by @joshcooper in #863
• Switch to Ruby 3.3 for GitHub Actions by @mhashizume in #870
• (CAT-1869) - Add puppet-modulebuilder to pdk bundled gems by @jordanbreen28 in #869
• (PA-6283) Patch stringio in Ruby 2.7 for CVE-2024-27280 by @shubhamshinde360 in #871
• (PA-6507) Update gem rexml from default to 3.2.9 for CVE-2024-35176 by @shubhamshinde360 in #873
• Revert "(PA-6507) Update gem rexml from default to 3.2.9 for CVE-2024-35176" by @amitkarsale in #874

New Contributors

• @jordanbreen28 made their first contribution in #869

Full Changelog: 2024060...2024071

202406040

What's Changed

• Drop unused win32 gems from bolt-runtime and other cleanup by @joshcooper in #817
• (CAT-1807) Remove all analytics runtime dependencies from the PDK by @david22swan in #820
• (PA-6378) Address a low-severity vulnerability, CVE-2024-2511 by @skyamgarp in #822
• Leave comment to remove patch by @mhashizume in #823
• (PE-38079) Gem updates to prepare for upcomming pe release by @donoghuc in #821
• Update virt-what by @smokris in #588
• Fixup by @donoghuc in #825
• (PE-38079) Ensure puppet 8 deps are included in bolt-server-main by @donoghuc in #826
• (maint) Fix typo in component name by @donoghuc in #828
• (PA-6379): Applied patch to openssl 1.1.1 by @span786 in #824
• (PA-5715) Download release tarballs for libxml2 and libxslt by @joshcooper in #827
• Add curl 8.7.1 and configure agent-runtime-main to use it by @joshcooper in #816
• Update puppet-agent components by @mhashizume in #829
• Disable nghttp2 explicitly by @joshcooper in #835
• Remove unused mingw package by @joshcooper in #836
• ensure ruby-selinux component is included consistently across runtimes by @h0tw1r3 in #830
• (PA-6350) Enable agent-runtime main builds for fedora 40 Intel by @shubhamshinde360 in #838
• (PA-6260) Add Amazon Linux2 ARM in puppet-runtime build 7.x by @amitkarsale in #833
• (PA-5943) Remove unneeded augeas versions & default to augeas 1.14.1 by @AriaXLi in #840
• (PA-6259) openssl error Can't locate IPC/Cmd.pm by @imaqsood in #841
• (maint) Use packaged libxml to build nokogiri on MacOS by @cthorn42 in #832
• Revert "Add curl 8.7.1 and configure agent-runtime-main to use it" by @cthorn42 in #842
• Bolt windows ed25519 support by @h0tw1r3 in #844
• fix augeas pkg.url by @h0tw1r3 in #845
• Use cmake3 for Amazon Linux 2 by @mhashizume in #848
• (PA-6387) Enable curl 8 by @joshcooper in #843
• Set Mend branch to master by @mhashizume in #850
• Correctly patch host ruby 3.2.3 and 3.2.4 when cross compiling by @joshcooper in #847
• (CAT-1643) Update childprocess pin by @david22swan in #851
• Bump FFI gem from 1.15.5 to 1.16.3 by @mhashizume in #852
• (maint) Bump bcrypt gem by @donoghuc in #854
• Remove base64 and nkf which conflict with default gems by @tlehman in #855
• (PA-6299) Ubuntu 24.04 (ARM) puppet-runtime by @skyamgarp in #857
• Rename amazon 7 to 2 by @joshcooper in #859
• (PA-6386) Patch/Upgrade Ruby for CVE-2024-27282 by @shubhamshinde360 in #858

New Contributors

• @smokris made their first contribution in #588
• @tlehman made their first contribution in #855

Full Changelog: 2024040...2024060

202404030

What's Changed

• PA-6132: Back-Port OpenSSL 1.1.1 for agent-runtime-7.x by @span786 in #797
• (CAT-1739) Add CFPropertyList as a component to resolve dependency issue by @david22swan in #799
• (PA-5849) Consistently use miniruby when native compiling ruby 3.2 by @joshcooper in #801
• Apply Ruby patch to enable FIPS with OpenSSL 3 by @mhashizume in #804
• (PE-37599) Openssl-1.1.1-fips fix for client-tools-runtime-2021.7.x project for Redhatfips by @imaqsood in #803
• [PA-6145]: Applied Curl Patch CVE-2023-46218 by @span786 in #805
• (PE-36494,PE-37833) Standardize pe-installer-runtime on shared format with more deps by @nmburgan in #806
• (PE-36494) Ship puppet gem with installer runtime by @donoghuc in #809
• (PA-6291): Applied curl patches to curl 7.88.1 by @span786 in #810
• (PA-6131) Bump openssl version by @joshcooper in #814

Full Changelog: 2024022...2024040