Puppet 7.13.1 (2021-12-09)
Enhancements
ENC enforced environment bypass
Changed the priority of the --environment option by skipping the
classification whenever the flag is specified. This allows the user to
bypass the ENC enforced environment with the CLI option. PUP-7479
Resolved issues
Puppet::FileSystem.chmod does not validate its arguments
Puppet::FileSystem.chmod now validates its arguments like other
methods. PUP-11345
Warning: #<Puppet::Transaction::Persistence after upgrading to Puppet agent
6.25.0
Fixes a regression introduced in 6.25.0 and 7.10.0 that caused a
Puppet::Transaction::Persistence warning during each agent run. PUP-11321
User resource tries to create rather than modify users created by a utility
This release moves the ssh_authorized_key resource's creation to the end of
the user type flow, after all user properties and parameters were resolved,
to avoid order dependency errors. PUP-11320
Puppet code merger using incorrect command
Reduces memory usage when parsing manifests. PUP-11318
Failure when using the names "apply" and "plan" within an apply() block in a
plan
The names "apply" and "plan" can now be used as resource parameter names in
all cases. Previously, using them within an apply() block in a plan would
fail. PUP-11315
Puppet attempts to execute directories from /etc/init.d/
Prevents Puppet from considering directories from /etc/init.d/ as
services. PUP-11313
Puppet creates excessive Pathname instances
Reduces the number of Pathname allocations when parsing Puppet manifests.
PUP-11312
Pathname.absolute? uses excessive memory
Backported Ruby patch to Pathname.absolute? to reduce memory usage.
PUP-11311
High memory consumption from lib/puppet/pops/parser/lexer2.rb
Reduced lexer2 memory usage. PUP-11236
versioncmp() treats 11.0 as greater than 11
versioncmp() now strips redundant numbers. PUP-11235
puppet lookup --facts {filename} fails if filename does not contain a dot
Before this release, puppet lookup --facts {filename} failed early when the
filename given did not contain a dot. This fix removes the early extensions
check and adds a fallback instead: tries both formats (JSON then YAML) to
read the given facts file when its path doesn't end with any of the expected
extensions (yaml/yml/json). Otherwise, it follows previous implementation
and respects the given extension. PUP-11204
Facts provided in a file cannot be used for classification
Fixed a bug where facts provided in a file were not being merged with the
facts used for classification. This is because Puppet collected and merged
the said facts after the classification happened. To fix this, we ensured
that Puppet resolves the facts being used for classification before the node
request. PUP-10435
Inconsistent handling of trusted facts in the lookup CLI
When using puppet lookup with --facts, if the facts file overrides any of
hostname, domain, fqdn, clientcert, then it must override all of them.
Also, if a value for certname is provided in a fact file for the lookup
application, use it when creating the trusted information object. This
makes it possible to override trusted.certname for classification. PUP-8220
Lookup ignores environment from the classifier when using a rule with
trusted facts
Fixed an issue where trusted facts could not be used as rules for
classification. This was fixed by gathering the trusted facts from the
PuppetDB query result, and overriding the trusted facts context. PUP-8094
Misleading results when using --node flag in puppet lookup
Fixed an issue where puppet lookup would result in misleading results when
using the --node flag. This happened because there can be cases where the
target node does not have any facts cached. To avoid this, the fix
implemented checks for the node facts/facts given in a fact file, and if it
doesn't find any it raises an error. PUP-7362
Files starting with "~" in recursive directories are evaluated as usernames
Puppet can now manage files whose names start with tilde "~" characters.
PUP-5800
Failed to generate additional resources using 'eval_generate': Cannot manage
files of type socket
This release allows Puppet to retrieve attributes for fifo and socket files
and manage them when the given manifest has a file resource which is
recursing over a given path. PUP-4045
cc36e66ae6