Skip to content

CHEF-28019: Enable TCPS Connection to Oracle DB#7684

Merged
sathish-progress merged 12 commits intoinspec-5from
CHEF-28019/oracle-tns-ssl-resource-only
Jan 9, 2026
Merged

CHEF-28019: Enable TCPS Connection to Oracle DB#7684
sathish-progress merged 12 commits intoinspec-5from
CHEF-28019/oracle-tns-ssl-resource-only

Conversation

@sa-progress
Copy link
Copy Markdown
Contributor

@sa-progress sa-progress commented Dec 15, 2025

  • Add tns_alias parameter for TNS-based connections (required for TCPS/SSL)
  • Add env parameter to pass environment variables (TNS_ADMIN, LD_LIBRARY_PATH, etc.)
  • Add debug parameter to output masked command for troubleshooting
  • Support both TNS alias and traditional host:port/service connection methods
  • Maintain full backward compatibility with existing code
  • Enable Oracle TCPS (SSL) connections with proper certificate DN validation

Tested with Oracle XE 21c using TCPS protocol with wallet-based SSL configuration. All acceptance tests pass (11/11) including:

  • TCPS connectivity with TNS alias
  • Environment variable support
  • Certificate DN validation
  • Debug mode functionality
  • Backward compatibility with TCP and host:port/service

Description

Related Issue

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New content (non-breaking change)
  • Breaking change (a content change which would break existing functionality or processes)

Checklist:

  • I have read the CONTRIBUTING document.

@sa-progress sa-progress requested a review from a team as a code owner December 15, 2025 17:57
@sa-progress sa-progress requested review from Vasu1105 and sathish-progress and removed request for a team December 15, 2025 17:57
Comment thread lib/inspec/resources/oracledb_session.rb Fixed
@sa-progress sa-progress force-pushed the CHEF-28019/oracle-tns-ssl-resource-only branch 2 times, most recently from bcf8a1a to 46c7c0f Compare December 15, 2025 18:38
@sa-progress sa-progress marked this pull request as draft December 15, 2025 18:42
@Vasu1105 Vasu1105 changed the title CHEF-28019: Add TNS alias, environment variables, and SSL/TCPS suppor… CHEF-28019: Enable TCPS Connection to Oracle DB Dec 16, 2025
@sa-progress sa-progress force-pushed the CHEF-28019/oracle-tns-ssl-resource-only branch from 2efa06b to 28f431d Compare December 17, 2025 06:52
@github-actions github-actions Bot added the Documentation ZH multi-repo label for the docs-team label Dec 19, 2025
@sa-progress sa-progress force-pushed the CHEF-28019/oracle-tns-ssl-resource-only branch from b201f1d to bb9798b Compare December 22, 2025 07:08
@sa-progress sa-progress marked this pull request as ready for review January 8, 2026 07:15
@sa-progress sa-progress requested a review from a team as a code owner January 8, 2026 07:15
…t to oracledb_session

- Add tns_alias parameter for TNS-based connections (required for TCPS/SSL)
- Add env parameter to pass environment variables (TNS_ADMIN, LD_LIBRARY_PATH, etc.)
- Add debug parameter to output masked command for troubleshooting
- Support both TNS alias and traditional host:port/service connection methods
- Maintain full backward compatibility with existing code
- Enable Oracle TCPS (SSL) connections with proper certificate DN validation

Tested with Oracle XE 21c using TCPS protocol with wallet-based SSL configuration.
All acceptance tests pass (11/11) including:
- TCPS connectivity with TNS alias
- Environment variable support
- Certificate DN validation
- Debug mode functionality
- Backward compatibility with TCP and host:port/service

Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
@sa-progress sa-progress force-pushed the CHEF-28019/oracle-tns-ssl-resource-only branch from 33e058b to b09cb62 Compare January 8, 2026 08:45
Signed-off-by: Samir Anand <sanand@progress.com>
@sa-progress sa-progress force-pushed the CHEF-28019/oracle-tns-ssl-resource-only branch from b09cb62 to 3512e95 Compare January 8, 2026 09:14
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Comment thread test/unit/resources/oracledb_session_test.rb Outdated
cmd = %{su - #{@su_user} -c "#{oracle_echo_str} #{env_prefix} #{@bin} -s /nolog <<'INSPECSQL'\n#{heredoc_content}\nINSPECSQL"}
else
cmd = %{#{oracle_echo_str}#{bin} -s /nolog <<'INSPECSQL'\n#{heredoc_content}\nINSPECSQL}
cmd = env_prefix.empty? ? cmd : "#{env_prefix} #{cmd}"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
cmd = env_prefix.empty? ? cmd : "#{env_prefix} #{cmd}"
cmd = "#{env_prefix} #{cmd}" unless env_prefix.empty?

sqlplus_bin: "/bin/sqlplus") do |cmd|
cmd.strip!
case cmd
when "TNS_ADMIN='/opt/oracle/network/admin' LD_LIBRARY_PATH='/opt/oracle/lib' echo 'oracle_query_string';/bin/sqlplus -S -s /nolog <<'INSPECSQL'\nconnect USER/password@XEPDB1_TCPS\nSET PAGESIZE 32000\nSET FEEDBACK OFF\nSET UNDERLINE OFF\nSELECT NAME AS VALUE FROM v$database;\nEXIT\nINSPECSQL" then
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is non deterministic .. even though the build_env_prefix uses .map it is still building a hash where in ruby 2.7 + the order is preserved but going by the laws of Hash we shouldn't expect the hash to preserve the order of keys at the application level, hence I would recommend to modify this test to test against proper env vars

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updating it , good catch.

Comment thread test/unit/resources/oracledb_session_test.rb
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
@sathish-progress sathish-progress merged commit f1a3e86 into inspec-5 Jan 9, 2026
35 checks passed
@sathish-progress sathish-progress deleted the CHEF-28019/oracle-tns-ssl-resource-only branch January 9, 2026 09:11
sa-progress pushed a commit that referenced this pull request Jan 23, 2026
…ce-only

CHEF-28019: Enable TCPS Connection to Oracle DB
Nik08 pushed a commit that referenced this pull request Jan 27, 2026
…ce-only (#7732)

CHEF-28019: Enable TCPS Connection to Oracle DB

Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Vasu1105 pushed a commit that referenced this pull request Apr 16, 2026
…ce-only (#7732)

CHEF-28019: Enable TCPS Connection to Oracle DB

Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Vasu1105 pushed a commit that referenced this pull request Apr 17, 2026
…ce-only (#7732)

CHEF-28019: Enable TCPS Connection to Oracle DB

Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Nik08 added a commit that referenced this pull request Apr 20, 2026
* Added sonar configuration for inspec 7 branch

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.44 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-19361 Removed Opa resources from Inspec (#7314)

* Removed Opa resources discarded 1st pr

Signed-off-by: Samir <85890442+sa-progress@users.noreply.github.com>

* Removed Opa Utils

Signed-off-by: Samir <85890442+sa-progress@users.noreply.github.com>

* Empty commit to start dco check

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

---------

Signed-off-by: Samir <85890442+sa-progress@users.noreply.github.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>

* Bump version to 7.0.45 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.46 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* bump up train-kubernetes

Signed-off-by: Sathish <sbabu@progress.com>

* Bump version to 7.0.47 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* set archive_path as attr_reader

Signed-off-by: Sathish <sbabu@progress.com>

* write to archive path is `path` is provided

This helps to copy the installed gems to cache path

Signed-off-by: Sathish <sbabu@progress.com>

* small refactor and style fix

Signed-off-by: Sathish <sbabu@progress.com>

* modify exists check also to check  if gemspec path exists and if gem exists in cache

Signed-off-by: Sathish <sbabu@progress.com>

* Refactor gem base path to fallback to cache when gem is not installed

Signed-off-by: Sathish <sbabu@progress.com>

* fix style issue

Signed-off-by: Sathish <sbabu@progress.com>

* attempt to capture `gem_version` if not provided

Signed-off-by: Sathish <sbabu@progress.com>

* use gem_version in rsolved source

Signed-off-by: Sathish <sbabu@progress.com>

* Update cache_key method to use SHA256 for key generation

This is to align with existing fetchers

Signed-off-by: Sathish <sbabu@progress.com>

* test inspec vendor installation

Signed-off-by: Sathish <sbabu@progress.com>

* adding inspec.yml to `inspec-test-fixture`
All resource packs is expected to have an inspec.yml by the plugin system

Signed-off-by: Sathish <sbabu@progress.com>

* add inspec.yml to spec files to include during build

Signed-off-by: Sathish <sbabu@progress.com>

* add the bundled gem

Signed-off-by: Sathish <sbabu@progress.com>

* update test-fixture gem version

Signed-off-by: Sathish <sbabu@progress.com>

* add new profile with remote gem support

Signed-off-by: Sathish <sbabu@progress.com>

* use the new path to support profile deps

Signed-off-by: Sathish <sbabu@progress.com>

* fix plugin test

Signed-off-by: Sathish <sbabu@progress.com>

* fix plugin test

Signed-off-by: Sathish <sbabu@progress.com>

* make sure gem dir path exists before running cp path

Signed-off-by: Sathish <sbabu@progress.com>

* use 0.3.0 of inspec test fixture

Signed-off-by: Sathish <sbabu@progress.com>

* fix style issue

Signed-off-by: Sathish <sbabu@progress.com>

* add test-fixture-3-float

Signed-off-by: Sathish <sbabu@progress.com>

* add test-fixture-3-float for tests

Signed-off-by: Sathish <sbabu@progress.com>

* set target as archive path if gem dir path is absent

Signed-off-by: Sathish <sbabu@progress.com>

* fix style

Signed-off-by: Sathish <sbabu@progress.com>

* make path as gem path rather than entry point

Signed-off-by: Sathish <sbabu@progress.com>

* add gem file to git to be used in tests

Signed-off-by: Sathish <sbabu@progress.com>

* do not assert cache when it is gem based plugin

Signed-off-by: Sathish <sbabu@progress.com>

* install gems from local gem path

Signed-off-by: Sathish <sbabu@progress.com>

* pass gem name for path based installation

Signed-off-by: Sathish <sbabu@progress.com>

* cache the generated cache_key to avoid re-generation

Signed-off-by: Sathish <sbabu@progress.com>

* add todo to remove this logic later

Signed-off-by: Sathish <sbabu@progress.com>

* do not try to load gems

Signed-off-by: Sathish <sbabu@progress.com>

* fix the json parser error

Signed-off-by: Sathish <sbabu@progress.com>

* test installation from path

Signed-off-by: Sathish <sbabu@progress.com>

* remove sub process for uninstall

Signed-off-by: Sathish <sbabu@progress.com>

* Fix two requires so testing will work from external plugins (#7363)

Signed-off-by: Clinton Wolfe <156460+clintoncwolfe@users.noreply.github.com>

* Bump version to 7.0.48 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Trying to fix uninitialized constant issue in isolated test verify pipeline  using the require_relative in gemspec

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Bump version to 7.0.49 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Removed chef licensing gem usage and dependency

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed license validation call from inspec execution starting point

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed license software entitlement check and other license validation block

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed license validation for inspec shell

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Remove chef licensing cli thor options

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Disabled telemetry

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Disabled license add/list command

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Commented licenses information from license help

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Commented out telemetry unit tests

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Commented chef licening load from telemetry libraries to support inspec run_context command function

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Comment usage of licensing config in libraries and tests

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Comment usage of chef licensing in inspec parallel usecase and other libs

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Linter issue - unused variable

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Disabled usage of chef licensing in gem source manager logic

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Disabled adding chef ruby gem server as source for installation of gems

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Verify pipelines changes for ruby 3.4 - picked from sa/ruby_upgrade_3.4.2 branch

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Gem deps changes for Ruby 3.4 - picked from sa/ruby_upgrade_3.4.2 branch

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Code changes supporting Ruby 3.4 upgrade

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Test cases fixed and fixtures updated - picked changes from branch sa/ruby_upgrade_3.4.2

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Commenting more chef licensing related usage - gem_source_manager

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.50 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* store train-test-fixture for 3.4.2 in ABI-compatible version ( 3.4.0 )

Signed-off-by: Sathish <sbabu@progress.com>

* store test-fixture-*-float profiles' gems for 3.4.2 in ABI-compatible version ( 3.4.0 )

Signed-off-by: Sathish <sbabu@progress.com>

* Upgrading ruby version for hab artifact testing

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated readme with latest version of ruby supported for versions of inspec available

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.51 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.52 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Habitat authentication token (#7397)

Signed-off-by: Boris Borisov <borisb@progress.com>

* Bump version to 7.0.53 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-18373-Habitat package upgrade for Ruby 3.4.x - Linux (#7400)

* Update ruby version in hab plan files

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* fix channel name

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* test commit

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* update ruby version in pipelines

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* test commit

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* test trigger commit

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* empty-commit to check pipeline triggeres

Signed-off-by: muthuja <muthujabavaji.vempalli@progress.com>

* trigger commit test

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Signed-off-by: muthuja <muthujabavaji.vempalli@progress.com>
Co-authored-by: muthuja <muthujabavaji.vempalli@progress.com>

* Bump version to 7.0.54 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Cleanup HAB env & Update HAB Promote channel to base-2025 (#7410)

* change hab promote channel to base2025

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* upadte plan file

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.55 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Fixes for 'Package Not Found ' error in Habitat pipelines (#7411)

* Update hab env

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* fix hab env

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* cleanup env & fix pipeline error

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.56 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-18374 Habitat package upgrade for Ruby 3.4.x - Windows (#7401)

* Update inspec-7 plan files to change from LTS-2024 to base-2025 with core/windows 3.4.2 devkit

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* CHANNEL updated from LTS to Base

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* CHANNEL updated from LTS to Base

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* Cleaned old code

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* Rake used habitat

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* Rake used habitat

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* Rake used habitat

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>

* Update artifact.habitat.yml

* fix hab env

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Revert "fix hab env"

This reverts commit ebdf17bb9b602884f94c6a4eb88e516f54826c11.

* Blank commit: for sign

Signed-off-by: Samir Anand <sanand@progress.com>

* Updated from Inspec-7

Signed-off-by: Samir Anand <sanand@progress.com>

---------

Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Co-authored-by: samir anand <sanand@progress.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.57 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Upgrade train and train-winrm to latest version

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.58 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Added back chef-licensing dependency in gemspec (#7479)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.59 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Revert "CHEF-21376 Disable licensing and telemetry from InSpec 7" (#7495)

* Revert "CHEF-21376 Disable licensing and telemetry from InSpec 7"

* trigger commit test

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.60 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Foreport 7391 : CHEF-22822 Fixes unspecified class error while running waiver file with --filter-waived-controls flag (#7395)

* Adds expiration_date in waiver.yml to capture the failing scenario

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Fixes the Tried to load unspecified class: Date error

Signed-off-by: Vasu1105 <vjagdale@progress.com>

---------

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* CHEF-23911 Revert "CHEF-18207 Removed SSH resources and tests" (#7502)

* Revert "CHEF-18207 Removed SSH resources and tests"

Signed-off-by: Samir Anand <sanand@progress.com>

* fix(ssh_key test): generate PEM RSA key so Net::SSH parses in CI

Signed-off-by: Samir Anand <sanand@progress.com>

---------

Signed-off-by: Samir Anand <sanand@progress.com>

* Bump version to 7.0.61 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* bypass entitlement checks (#7509)

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.62 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-23438-Disable Entitlement check for edge case  (#7520)

* comment entitlement checks for edge case

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* remove url

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.63 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* updating stub to 1.0.5

* Update sonar-project.properties

* Added support to use trace level debug with log level flag (#7513)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.64 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Revert "CHEF-23438-Disable Entitlement check for edge case  (#7520)"

This reverts commit c67176f0a74348579dcb8ed48242945f90d9671f.

* Revert "bypass entitlement checks (#7509)"

This reverts commit 8a098f512f9214fc89c3864071b58fc0ac2d4a9a.

* chore: update fallback resource packs

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.65 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.66 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-25173 Pull release notes from v7 wiki page for InSpec 7 (#7540)

* Pull release notes from v7 wiki page for InSpec 7

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Typo fix

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.67 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Merge pull request #7448 from inspec/CHEF-23504-add-socks-kerberos-cli-options-to-Inspec (#7554)

Chef 23504 add socks kerberos cli options to inspec

Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>

* Bump version to 7.0.68 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Fix inspec habitat tests (#7558)

* Fix inspec habitat tests for log level debug scenario

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Changed to test to not use debug log

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.69 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update rspec-its requirement from ~> 1.2 to >= 1.2, < 3.0 (#7553)

Updates the requirements on [rspec-its](https://github.com/rspec/rspec-its) to permit the latest version.
- [Changelog](https://github.com/rspec/rspec-its/blob/main/Changelog.md)
- [Commits](https://github.com/rspec/rspec-its/compare/v1.2.0...v2.0.0)

---
updated-dependencies:
- dependency-name: rspec-its
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump version to 7.0.70 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update parslet requirement from >= 1.5, < 2.0 to >= 1.5, < 3.0

Updates the requirements on [parslet](https://github.com/kschiess/parslet) to permit the latest version.
- [Changelog](https://github.com/kschiess/parslet/blob/master/HISTORY.txt)
- [Commits](https://github.com/kschiess/parslet/compare/1.5.0...2.0.0)

---
updated-dependencies:
- dependency-name: parslet
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump version to 7.0.71 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update rubyzip requirement from >= 1.2.2, < 3.0 to >= 1.2.2, < 4.0 (#7550)

Updates the requirements on [rubyzip](https://github.com/rubyzip/rubyzip) to permit the latest version.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](https://github.com/rubyzip/rubyzip/compare/v1.2.2...v2.4.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 2.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump version to 7.0.72 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-18030- Fix GitFetcher to Clear Empty Cache Directory on Fetch (#7398) (#7498)

* remove empty directory in cache



* add unit test cases for new logic



* fix logger message



* Test commit



* fix test case and add comments



* refactor code and tests



* review changes



* fix test cases



* fix log message



* raise exception if git profile is empty



* copilot review changes



---------


(cherry picked from commit 8367a3f175a7aaadb379a6cd03e286160de684b0)

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.73 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-23547 use official distribution in hab plan (#7507)

* inject `chef-official-distribution` gem part of hab plan

Signed-off-by: Sathish <sbabu@progress.com>

* install custom branch of chef-licensing

Signed-off-by: Sathish <sbabu@progress.com>

* point to custom branch of chef-licensing, for CI

Signed-off-by: Sathish <sbabu@progress.com>

* add support for windows chef-official-distribution builds

Signed-off-by: Sathish <sbabu@progress.com>

* Fix: Address Copilot recommendations

Signed-off-by: Sathish <sbabu@progress.com>

* Trying to pull gem using gem source add

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Using env variable for artifactory

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* update windows plan file to add gem source

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Removed the curl way of installing chef-official-distribution gem and code clean up

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* remove custom pinning of `chef-licensing` gem

Signed-off-by: Sathish <sbabu@progress.com>

* pull the latest chef-licensing

Signed-off-by: Sathish <sbabu@progress.com>

* remove old approach to write chef-official-distribution

Signed-off-by: Sathish <sbabu@progress.com>

* remove redundant ref to custom branch of chef-licensing

Signed-off-by: Sathish <sbabu@progress.com>

* remove redundant ref to custom branch of chef-licensing

Signed-off-by: Sathish <sbabu@progress.com>

---------

Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Vasu1105 <vjagdale@progress.com>
Co-authored-by: Vasu1105 <vjagdale@progress.com>

* Bump version to 7.0.74 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Added fatal message check for postgres_session:query method (#7154) (#7564)

* Added fatal message check for postgres_session:query method



* Added empty new line for the new fixture



---------

Signed-off-by: Gokulakrishnan KS <Gokulakrishnan.KS@progress.com>
Co-authored-by: Gokulakrishnan KS <Gokulakrishnan.KS@progress.com>

* Improved regex to load readme from inspec profiles (#7198) (#7565)

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>

* Bump version to 7.0.75 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.76 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* hab: fix hab pipeline for windows (#7153) (#7569)

Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>

* Bump version to 7.0.77 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update Artifact test Profiles (#7443) (#7567)

* update test profile repo



* update profile name



---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Balasubramanian S <68114029+balasubramanian-s@users.noreply.github.com>

* Update CHANGELOG.md with details from pull request #7567

Obvious fix; these changes are the result of automation not creative thinking.

* Forport 7277 Postgres session resource fix for special characters in password (#7566)

* encode password for spl char

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
(cherry picked from commit c570f654a5e180ffafc57f1a68790018f96ced96)

* lint fixes

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
(cherry picked from commit 225ce7024eed8cbf1bf24fc447dbbc8b4825527e)

* updated tests

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
(cherry picked from commit d512f3658d02978a8e3ab46990c6239bb05802f9)

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.78 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update thor requirement from >= 0.20, < 1.3.0 to >= 0.20, < 1.5.0 (#7551)

* Update thor requirement from >= 0.20, < 1.3.0 to >= 0.20, < 1.5.0

Updates the requirements on [thor](https://github.com/rails/thor) to permit the latest version.
- [Release notes](https://github.com/rails/thor/releases)
- [Commits](https://github.com/rails/thor/compare/v0.20.0...v1.4.0)

---
updated-dependencies:
- dependency-name: thor
  dependency-version: 1.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* update test cases

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Fixes test case failure

Signed-off-by: Vasu1105 <vjagdale@progress.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Signed-off-by: Vasu1105 <vjagdale@progress.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Vasu1105 <vjagdale@progress.com>

* Bump version to 7.0.79 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Trying refactorign (#7576)

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Bump version to 7.0.80 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* fix: Prioritize environment-set license server URL to address configuration override issue (#7203) (#7572)

Signed-off-by: Sonu Saha <ahasunos@gmail.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>

* Bump version to 7.0.81 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Merge pull request #7349 from inspec/nm/fix-issue-tar-library (#7571)

Issue with reading/writing signed and tar profiles

* Bump version to 7.0.82 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Foreport 7261 Fix code scanning alert no. 63: Use of a broken or weak cryptographic hashing algorithm on sensitive data (#7570)

* Fix code scanning alert no. 63: Use of a broken or weak cryptographic hashing algorithm on sensitive data

Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* change in Digest SHA method produced a different hash uuid so updating tests

Signed-off-by: Sathish <sbabu@progress.com>

---------

Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Bump version to 7.0.83 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* update ruby version (#7581)

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.84 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-12173: Update regular expression to fix warnings detected by CodeQL (#7222) (#7573)

* fix: update regex in input_registry



* fix: update regex in auditd



* fix: update regex in port



* fix: update regex in yum



* fix: update regex in port



* fix: Refactor mount line parsing to avoid regex



* fix: Refactor includes_whitespaces? method to avoid regex



* refactor: minor refactoring and comments cleanup



* fix: remove length check condition



---------

Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>

* Bump version to 7.0.85 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update ostruct requirement from ~> 0.1.0 to >= 0.1, < 0.7 (#7548)

Updates the requirements on [ostruct](https://github.com/ruby/ostruct) to permit the latest version.
- [Release notes](https://github.com/ruby/ostruct/releases)
- [Commits](https://github.com/ruby/ostruct/compare/v0.1.0...v0.1.0)

---
updated-dependencies:
- dependency-name: ostruct
  dependency-version: 0.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump version to 7.0.86 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-12879 Test kitchen integration with InSpec 6 (#7168) (#7568)

* Test kitchen integration changes for inspec



* Disable license usage telemetry when running under test kitchen



* Enable persistence of license key and license server url in file when passed via test kitchen



* Product dist name changes for error messages when run under test kitchen



---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>

* Bump version to 7.0.87 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Add NOTICE.TXT to package directory in plan.ps1

Signed-off-by: Sathish <sbabu@progress.com>

* Add NOTICE.TXT to package directory in plan.sh

Signed-off-by: Sathish <sbabu@progress.com>

* Add blank NOTICE.TXT

This is really only needed for testing and the original content will be updated after manual SBOM.

Signed-off-by: Sathish <sbabu@progress.com>

* Prevent adding CHEF RUBYGEMS server if licensing is optional

Signed-off-by: Sathish <sbabu@progress.com>

* Updated train dependency min version to use socks5h feature (#7586)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.88 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Fix to only add chef ruby gem server when license key is present

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Test gem source manager for empty license key scenario

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Revert the comment removal

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Lint issue

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Add error handling for gem source addition and license string retrieval

Signed-off-by: Sathish <sbabu@progress.com>

* CHEF-26188-Foreport deprecation messages for InSpec-7 (#7582)

* CHEF-16823: Introduce deprecation warning for core resources moving to resource packs in InSpec 7 (#7219)

* chore: add deprecation message for core resource that will be moved as resource pack

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: invoke deprecation for docker resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: invoke deprecation for mongodb resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: invoke deprecation for rabbitmq resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: invoke deprecation for ibmdb2 resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: invoke deprecation for sybase resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: expect deprecation for docker resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: expect deprecation for mongodb resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: expect deprecation for rabbitmq resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: expect deprecation for ibmdb2 resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: update keyword to display to change notice for core resources moving to resource pack

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: add the common message to be displayed as part of the warning message

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: update warning message for the core resources moving to resource pack

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: add warning message for elasticsearch resource as it will be moved to resource pack in InSpec 7

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: add warning message for podman resources as it will be moved to resource pack in InSpec 7

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: add warning message for ssh resources as it will be moved to resource pack in InSpec 7

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* spec: update test for ignoring change notice warning

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* refactor: invoke warning during loading of the resource

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* revert: undo changes to unit test files of core resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* spec: add functional test to verify warning message and successful run

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: add fixture profile for deprecated resource

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: update profile fixture for deprecated core resources

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

* chore: minor cleanup and doc change

Signed-off-by: Sonu Saha <sonu.saha@progress.com>

---------

Signed-off-by: Sonu Saha <sonu.saha@progress.com>
(cherry picked from commit 21dc0a73b1bdbf8046e99f34a7b2420ac78a4cdc)

* chore: update deprecation messages for InSpec-7

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* chore: review changes

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* chore: review changes

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* chore: update deprecation list

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>

* Bump version to 7.0.89 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.90 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Bump version to 7.0.91 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-26507 Adds copilot instructions file - InSpec 7 (#7592)

* Adds copilot instructions file

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Updated the instructions with mcp server and jira steps - and some corrections

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed duplicate instructions and updated section around testing

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated the documentation section in instructions

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Changes in steps related to code commit and updated the template for PR creation section

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated instructions based for release note section

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed duplicate instruction

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Mcp configuration file added

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bug fix in PR creation step

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated instructions to ask user which type of change is created in PR

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated instructions to sign each commit as you go

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Removed the restricted section to avoid confusion with model

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Cleanup of redundant instructions

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Vasu1105 <vjagdale@progress.com>
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Vasu1105 <vjagdale@progress.com>

* Update CHANGELOG.md with details from pull request #7592

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-27018 - Update copyright text in InSpec 7 source code (#7593)

* Adds copilot instructions file

Signed-off-by: Vasu1105 <vjagdale@progress.com>

* Bug fix in PR creation step

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated instructions to ask user which type of change is created in PR

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* feat: CHEF-27018 - Update copyright text in InSpec 7 source code

- Added Progress Software Corporation copyright to 10 source files containing Dominik Richter copyright
- Updated README.md copyright table to reflect 2015-2025 Progress Software Corporation
- Preserved original copyright attributions as required
- All files maintain valid syntax and formatting

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Rebase fixes

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Vasu1105 <vjagdale@progress.com>
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Vasu1105 <vjagdale@progress.com>

* Bump version to 7.0.92 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Label updates changes for github and jira (#7598)

* Added changes for ai assisted label to github PRs

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Added JIRA step to update the AI assisted field

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Update CHANGELOG.md with details from pull request #7598

Obvious fix; these changes are the result of automation not creative thinking.

* InSpec 7 Expeditor changes - uncommented (#7599)

* Update expeditor config for inspec 7 release

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Disabled public discourse announcement for the current release

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.93 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Fix gemspec activation logic to check for alternate spec file (#7597)

In this case fallback to default spec file under specifications of the gem

Signed-off-by: Sathish <sbabu@progress.com>

* Bump version to 7.0.94 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-27163-Add github release pipeline (#7603)

* add github release pipeline

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* condition to checkout inspec-7 alone

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* pull version from changelog file

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Update CHANGELOG.md with details from pull request #7603

Obvious fix; these changes are the result of automation not creative thinking.

* Add notice.txt (#7605)

* Add NOTICE.TXT

Signed-off-by: Sathish <sbabu@progress.com>

* removed BOM and fixed CRLF line terminators

Signed-off-by: Sathish <sbabu@progress.com>

* updated at to today

Signed-off-by: Sathish <sbabu@progress.com>

---------

Signed-off-by: Sathish <sbabu@progress.com>

* Update CHANGELOG.md with details from pull request #7605

Obvious fix; these changes are the result of automation not creative thinking.

* Allow all NOTICE changes to be bumped

Signed-off-by: Sathish <sbabu@progress.com>

* Bump version to 7.0.95 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update CHANGELOG.md to reflect the promotion of 7.0.95

Obvious fix; these changes are the result of automation not creative thinking.

* channging options for a manual release

Signed-off-by: Sean Simmons <ssimmons@progress.com>

* Update CHANGELOG.md to reflect the promotion of base-2025-current

Obvious fix; these changes are the result of automation not creative thinking.

* Update CHANGELOG.md to reflect the promotion of base-2025-current

Obvious fix; these changes are the result of automation not creative thinking.

* Revert "channging options for a manual release"

* dco commit

Signed-off-by: Sean Simmons <ssimmons@progress.com>

* Handling of train platform data fetching safely (#7611)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.96 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Remove release notes Expeditor actions (#7725)

Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>

* Bump version to 7.0.97 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* FOREPORT Updated test and dependency version in fixture to solve gem conflict issue (#7742)

* Updated test and dependency version in fixture to solve gem conflict issues (#7689)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Foreport :Fix Minitest::Mock uninitialized constant error (#7743)

* Backport: Require minitest/mock to fix Minitest::Mock uninitialized constant error

Fix test failures caused by Minitest::Mock not being automatically loaded
in newer versions of minitest. This error manifests as:

  NameError: uninitialized constant Minitest::Mock

in test files that use Minitest::Mock (e.g., metadata_test.rb).

Solution: Explicitly require 'minitest/mock' in test/helper.rb after
requiring 'minitest/autorun'.

Related Tickets:
- Original fix in InSpec-5: commit 1f0a1d29f by Sathish <sbabu@progress.com>
- Date: December 19, 2025

Testing:
- Fixes NameError in test/unit/profiles/metadata_test.rb
- Allows Minitest::Mock to be used throughout test suite
- No side effects on existing tests

Cherry-picked from InSpec-5 commit: 1f0a1d29ffeaf4c48ae0782451b827c528e78fc8

Signed-off-by: Samir Anand <sanand@progress.com>

* empty commit

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Add require 'minitest/mock' to plugin test files

Plugin test files load minitest/autorun but not minitest/mock, causing
'uninitialized constant Minitest::Mock' errors when tests use mocking.

This adds the required import to all plugin test files:
- inspec-habitat/test/unit/profile_test.rb
- inspec-compliance/test/unit/api_test.rb
- inspec-compliance/test/unit/target_test.rb
- inspec-compliance/test/unit/api/login_test.rb

Part of the minitest/mock fix for Ruby 3.4+ compatibility.

Signed-off-by: Samir Anand <sanand@progress.com>

---------

Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Samir <85890442+sa-progress@users.noreply.github.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.98 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Pipeline issue fixes for InSpec 7 (#7749)

* Fix issues caused by install context library

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* fix windows tests

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* pin mixlib-shellout dependency

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.99 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Revert mixlib-shellout version pinning (#7752)

* add windows specific dependencies

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Revert "add windows specific dependencies"

This reverts commit 301a245aae3b0c39e5054e1ed82c9a5e5674572e.

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.100 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Merge pull request #7684 from inspec/CHEF-28019/oracle-tns-ssl-resource-only (#7732)

CHEF-28019: Enable TCPS Connection to Oracle DB

Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>

* CHEF-19255 update train (#7733) (#7761)

* update train-core



* update train



* update gemfile



* Update train and train-core dependencies to require version >= 3.16.1



* Update gemfile.lock



* Capture command success status to avoid race condition in test namespace



---------

Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>

* Bump version to 7.0.101 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-28996-Update Pipelines to use Ruby 3.1.7 (#7668) (#7763)

* update pipelines to use ruby 3.1.7



* empty commit



* update windows artifact pipeline to use latest ruby version



* use hab pkg ruby version



* update pkg ident



* set ruby path



* add download scripts



* Installing isolated Habitat safe for shared CI agents



* Revert "Installing isolated Habitat safe for shared CI agents"

This reverts commit 48d943d3d85e7789387feedfd82a1eeeccbcb060.

---------

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Balasubramanian S <68114029+balasubramanian-s@users.noreply.github.com>

* Bump version to 7.0.102 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Remove Gemfile.lock from .gitignore for BlackDuck integration (#7768)

* Remove Gemfile.lock from .gitignore and add Gemfile.lock for BlackDuck integration

- Remove Gemfile.lock from .gitignore to enable SBOM tracking
- Add Gemfile.lock to repository for BlackDuck integration
- This enables proper vulnerability scanning and dependency tracking

Signed-off-by: Samir Anand <sanand@progress.com>

* bundled gemfile.lock with bundler version 2.5.11

Signed-off-by: Chandra <cprasad@progress.com>

---------

Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: Chandra <cprasad@progress.com>
Co-authored-by: Chandra <cprasad@progress.com>

* Bump version to 7.0.103 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Adding a script to clean lint_roller gem from hab packaging (#7770)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.104 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Fix github workflow for sbom generation  (#7711) (#7774)

* verifying whether qulity product name or project name fixes invalid group name issue



* verifying whether qulity product name or project name fixes invalid group name issue



* Trying quality product name change for notice txt generation



* updating project name and verifying



* Updated product names



---------


(cherry picked from commit 2498aab9d9ffd587884b1bedef851daac9396f7f)

Signed-off-by: Vasu1105 <vjagdale@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>

* Update CHANGELOG.md with details from pull request #7774

Obvious fix; these changes are the result of automation not creative thinking.

* Ignore dependencies flag usage for external gem (#7775)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.105 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* test commit for version bump (#7783)

Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>

* Bump version to 7.0.106 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update NOTICE for v7.0.107 (#7789)

* Updating NOTICE.txt content for version 7.0.107

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Updated version without patch version in notice file

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.107 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Update CHANGELOG.md to reflect the promotion of 7.0.107

Obvious fix; these changes are the result of automation not creative thinking.

* Set fail-trufflehog-on-secrets-found flag to block PR if any secrets are detected in your code or git history (#7803)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Update CHANGELOG.md with details from pull request #7803

Obvious fix; these changes are the result of automation not creative thinking.

* Update common github actions to use main (#7807)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Update CHANGELOG.md with details from pull request #7807

Obvious fix; these changes are the result of automation not creative thinking.

* CHEF-20799 Fixes in json reporter (#7799) (#7810)

* Capped the resource_id to 250 characters to not bloat reports



* Pick resource_id defined for resources and if not run the old logic



---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Bump version to 7.0.108 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Added grype scan config (#7808)

Signed-off-by: Nik08 <nikita.mathur@progress.com>

* CHEF-33010 Added config for grype scan on habitat package (#7813)

* feat: Add grype scan configuration for habitat package

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nikita.mathur@progress.com>

* Update common workflow definitions to be picked from main branch

Signed-off-by: Nik08 <nikita.mathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* upgrade adderessable gem to 2.9.0 (#7833)

* upgrades adderessable gem to 2.9.0

Signed-off-by: Chandra <cprasad@progress.com>

* removed comment, not required

Signed-off-by: Chandra <cprasad@progress.com>

---------

Signed-off-by: Chandra <cprasad@progress.com>

* Bump version to 7.0.109 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* refactor: CHEF-29885 - Remove all Omnibus references from InSpec 7 (#7854)

* chore: CHEF-30844 - Remove omnibus/ folder from InSpec repo

Removed the entire omnibus/ directory which contained Omnibus-based
packaging definitions, kitchen config, test scripts, and resources.
InSpec 7 uses Habitat-based packaging exclusively.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* chore: CHEF-30845 - Remove omnibus_overrides.rb from InSpec repo

Removed the omnibus_overrides.rb configuration file which defined
Omnibus-specific version overrides for train, ruby, openssl, and
ruby-msys2-devkit. This file is no longer needed as InSpec 7
uses Habitat-based packaging exclusively.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* chore: CHEF-30846 - Remove omnibus references from copilot instructions

- Removed omnibus/ entry from repository structure diagram
- Updated packaging/distribution guidance to reference Habitat only
- Removed omnibus/ from the list of files/areas to avoid modifying

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* chore: CHEF-30847 - Remove Omnibus references from dev docs

Updated dev-docs/ci-cd.md:
- Removed 'Build Omnibus Packages' section entirely
- Updated release promotion description to reference Habitat packages
  instead of Omnibus packages

InSpec 7 ships exclusively via Habitat-based packaging.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* chore: CHEF-30847 - Fix 'A release is promoted' section in ci-cd.md

Replaced outdated artifact_published:stable reference and incorrect
Omnibus/stable channel description with accurate project_promoted
workload details:
- Updated Slack command example to use inspec-7 branch and 7.x version
- Documented all project_promoted actions (rollover_changelog,
  publish_rubygems, promote_habitat_packages, purge fastly, notify slack)
- Corrected Hab channel promotion flow: unstable -> base-2025-current
  -> base-2025

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* chore: CHEF-30847 - Remove omnibus install context detection

InSpec no longer ships via Omnibus packaging. Remove the
omnibus_install? helper method and its associated test cases
from the install context detection logic.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Mohan Chhalotre <mchhalot@progress.com>

* chore: CHEF-30847 - Remove omnibus references from RELEASE_PROCESS.md

Remove all omnibus-related content from RELEASE_PROCESS.md:
- Remove 'omnibus packages' from artifact list
- Remove 'Expeditor: Skip Omnibus' label entry
- Remove 'Watch Omnibus Build' section entirely
- Update merge notification messages to reference only Habitat builds

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Mohan Chhalotre <mchhalot@progress.com>

---------

Signed-off-by: Nik08 <nmathur@progress.com>
Signed-off-by: Mohan Chhalotre <mchhalot@progress.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Mohan Chhalotre <mchhalot@progress.com>

* Bump version to 7.0.110 by Chef Expeditor

Obvious fix; these changes are the result of automation not creative thinking.

* Test fixes

Signed-off-by: Nik08 <nmathur@progress.com>

* chore: update branch references for inspec-7 → main promotion

- .expeditor/config.yml: release_branches main→inspec-6 (6.*), inspec-7→main (7.*)
- .expeditor/buildkite/verify.sh: sonar branch name inspec-7→main
- sonar-project.properties: sonar.branch.name inspec-7→main
- .github/dependabot.yml: target-branch main→inspec-6, inspec-7→main
- .github/workflows/ci-main-pull-request-stub.yml: branch triggers and job name inspec-7→main
- .github/workflows/create-github-release.yml: checkout ref inspec-7→main

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Nik08 <nmathur@progress.com>

* Updated ci-cd dev doc with main reference instead of inspec 7

Signed-off-by: Nik08 <nmathur@progress.com>

---------

Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Samir <85890442+sa-progress@users.noreply.github.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Clinton Wolfe <156460+clintoncwolfe@users.noreply.github.com>
Signed-off-by: Vasu1105 <vjagdale@progress.com>
Signed-off-by: Boris Borisov <borisb@progress.com>
Signed-off-by: balasubramanian-s <balasubramanian.s@progress.com>
Signed-off-by: muthuja <muthujabavaji.vempalli@progress.com>
Signed-off-by: sa-progress <85890442+sa-progress@users.noreply.github.com>
Signed-off-by: Samir Anand <sanand@progress.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Gokulakrishnan KS <Gokulakrishnan.KS@progress.com>
Signed-off-by: Sonu Saha <ahasunos@gmail.com>
Signed-off-by: Sean Simmons <ssimmons@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Chandra <cprasad@progress.com>
Signed-off-by: Nik08 <nmathur@progress.com>
Signed-off-by: Mohan Chhalotre <mchhalot@progress.com>
Co-authored-by: Chef Expeditor <chef-ci@chef.io>
Co-authored-by: Samir <85890442+sa-progress@users.noreply.github.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Co-authored-by: Clinton Wolfe <156460+clintoncwolfe@users.noreply.github.com>
Co-authored-by: Vasu1105 <vjagdale@progress.com>
Co-authored-by: borisicbs <borisb@progress.com>
Co-authored-by: Balasubramanian S <68114029+balasubramanian-s@users.noreply.github.com>
Co-authored-by: muthuja <muthujabavaji.vempalli@progress.com>
Co-authored-by: samir anand <sanand@progress.com>
Co-authored-by: balasubramanian-s <balasubramanian.s@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>
Co-authored-by: brianLoomis <loomis@progress.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gokulakrishnan KS <Gokulakrishnan.KS@progress.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Sean Simmons <ssimmons@progress.com>
Co-authored-by: Sean <111799713+sean-sype-simmons@users.noreply.github.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
Co-authored-by: Chandra <cprasad@progress.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Mohan Chhalotre <mchhalot@progress.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Documentation ZH multi-repo label for the docs-team Expeditor: Bump Minor Version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants