Puppet 7.5.0 Released 16 March 2021.
New features
* The puppet ssl show command
The puppet ssl show command prints the full-text version of a host's
certificate, including extensions. PUP-10888
* The ciphers setting
The ciphers setting configures which TLS ciphersuites the agent
supports. The default set of ciphersuites is the same, but you can now
make the list of ciphersuites more restricted, for example, to only accept
TLS v1.2 or greater ciphersuites. PUP-10889
* The GlobalSignRoot CA R3
This release adds the GlobalSignRoot CA R3 certificate for
rubygems.org. PA-3525
Resolved issues
* The splat operator in a virtual query is not supported
This release fixes a regression in Puppet 7.x that prevented the splat
operator from being used to override resource attributes in a resource
collector. PUP-10951
* Windows package provider continues to read DisplayVersion key after it is embedded NULL
Previously, Puppet would not stop reading the registry at the correct
WCHAR_NULL because it was encoded to UTF-16LE, causing Puppet to read bad
data and fail. This is now fixed. PUP-10943
* Listing environments during code deploys prevents environment cache invalidation
Previously, catalog compilations for a newly created environment directory
could fail if the environment was listed while the directory was being
created. This issue only occurred when using an environment_timeout value
greater than 0 and less than unlimited. This is now fixed. PUP-10942
* Syntax error in previously valid Puppet code due to removal of keywords
The application, consumes, produces and site application orchestration
keywords were previously removed from the reserved keywords list, causing
syntax errors in Puppet code. This is now fixed. PUP-10929
* Retrieve SID for users under APPLICATION PACKAGE AUTHORITY
A known issue with LookupAccountNameW caused Puppet to fail when managing
Windows users under APPLICATION PACKAGE AUTHORITY with fully qualified
names. This is now fixed and an account name sanitization step has been
added to prevent faulty queries. PUP-10899
* Retrieving the current user with the fully-qualified username fails on
Windows
Previously, retrieving the current username SID on Windows caused Puppet
to fail in certain scenarios, for example, when the user was a secondary
domain controller. This release adds a fallback mechanism that uses the
fully qualified domain name for lookup. PUP-10898
90289fdb97