Pin everything down with Gemfile.lock, add rake dependencies to update

1 files changed, 104 insertions, 0 deletions

diff --git a/version_policy.rb b/version_policy.rb
new file mode 100644
index 0000000000..fd60fbd644
--- /dev/null
+++ b/version_policy.rb
@@ -0,0 +1,104 @@
+#
+# Copyright:: Copyright (c) 2016 Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Explicit omnibus overrides.
+OMNIBUS_OVERRIDES = {
+  # Lower level library pins
+  ## according to comment in omnibus-sw, latest versions don't work on solaris
+  # https://github.com/chef/omnibus-software/blob/aefb7e79d29ca746c3f843673ef5e317fa3cba54/config/software/libtool.rb#L23
+  "libffi" => "3.2.1",
+  "libiconv" => "1.14",
+  "liblzma" => "5.2.2",
+  ## according to comment in omnibus-sw, the very latest versions don't work on solaris
+  # https://github.com/chef/omnibus-software/blob/aefb7e79d29ca746c3f843673ef5e317fa3cba54/config/software/libtool.rb#L23
+  "libtool" => "2.4.2",
+  "libxml2" => "2.9.3",
+  "libxslt" => "1.1.28",
+  "libyaml" => "0.1.6",
+  "makedepend" => "1.0.5",
+  "ncurses" => "5.9",
+  "pkg-config-lite" => "0.28-1",
+  "ruby" => "2.1.8",
+  # Leave dev-kit pinned to 4.5 because 4.7 is 20MB larger and we don't want
+  # to unnecessarily make the client any fatter.
+  "ruby-windows-devkit" => "4.5.2-20111229-1559",
+  "ruby-windows-devkit-bash" => "3.1.23-4-msys-1.0.18",
+  "util-macros" => "1.19.0",
+  "xproto" => "7.0.28",
+  "zlib" => "1.2.8",
+
+  ## These can float as they are frequently updated in a way that works for us
+  #override "cacerts" =>"???",
+  #override "openssl" =>"???",
+}
+
+#
+# rake dependencies:update_omnibus_overrides (tasks/dependencies.rb) reads this
+# and modifies omnibus_overrides.rb
+#
+# The left side is the software definition name, and the right side is the
+# name of the rubygem (gem list -re <rubygem name> gets us the latest version).
+#
+OMNIBUS_RUBYGEMS_AT_LATEST_VERSION = {
+  rubygems: "rubygems-update",
+  bundler: "bundler",
+}
+
+#
+# rake dependencies:check (tasks/dependencies.rb) uses this as a list of gems
+# that are allowed to be outdated according to `bundle updated`
+#
+# Once you decide that the list of outdated gems is OK, you can just
+# add gems to the output of bundle outdated here and we'll parse it to get the
+# list of outdated gems.
+#
+# We're starting with debt here, but don't want it to get worse.
+#
+ACCEPTABLE_OUTDATED_GEMS = %w{
+  activesupport
+  github_changelog_generator
+}
+
+#
+# Some gems are part of our bundle (must be installed) but not important
+# enough to lock. We allow `bundle install` in test-kitchen, berks, etc.
+# to use their own versions of these.
+#
+# This mainly tells you which gems `chef verify` allows you to install and
+# run.
+#
+GEMS_ALLOWED_TO_FLOAT = [
+]
+
+#
+# The list of groups we install without: this drives both the `bundle install`
+# we do in chef-dk, and the `bundle check` we do to ensure installed gems don't
+# have extra deps hiding in their Gemfiles.
+#
+INSTALL_WITHOUT_GROUPS = %w{
+  development
+  test
+  guard
+  maintenance
+  tools
+  integration
+  changelog
+  compat_testing
+  docgen
+  ruby_prof
+  travis
+}