Merge branch 'main' into refactor/ufw-custom-resources

Signed-off-by: Dan Webb <dan.webb@damacus.io>

Author: damacus

.github/workflows/ci.yml

@@ -8,7 +8,7 @@ name: ci
 
 jobs:
   lint-unit:
-    uses: sous-chefs/.github/.github/workflows/lint-unit.yml@5.0.3
+    uses: sous-chefs/.github/.github/workflows/lint-unit.yml@main
     permissions:
       actions: write
       checks: write

.github/workflows/conventional-commits.yml

@@ -11,4 +11,4 @@ name: conventional-commits
 
 jobs:
   conventional-commits:
-    uses: sous-chefs/.github/.github/workflows/conventional-commits.yml@5.0.3
+    uses: sous-chefs/.github/.github/workflows/conventional-commits.yml@5.0.8

.github/workflows/prevent-file-change.yml

@@ -11,6 +11,6 @@ name: prevent-file-change
 
 jobs:
   prevent-file-change:
-    uses: sous-chefs/.github/.github/workflows/prevent-file-change.yml@5.0.3
+    uses: sous-chefs/.github/.github/workflows/prevent-file-change.yml@5.0.8
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   release:
-    uses: sous-chefs/.github/.github/workflows/release-cookbook.yml@5.0.3
+    uses: sous-chefs/.github/.github/workflows/release-cookbook.yml@5.0.8
     secrets:
       token: ${{ secrets.PORTER_GITHUB_TOKEN }}
       supermarket_user: ${{ secrets.CHEF_SUPERMARKET_USER }}

.mise.toml

@@ -0,0 +1,2 @@
+[env]
+_.path = "/opt/chef-workstation/bin"

.rubocop.yml

@@ -0,0 +1,2 @@
+require:
+  - cookstyle

LIMITATIONS.md

@@ -34,8 +34,8 @@ custom repository.
 
 ### Build Dependencies
 
-| Platform Family | Packages |
-|-----------------|----------|
+| Platform Family | Packages                       |
+| --------------- | ------------------------------ |
 | Debian          | None for normal cookbook usage |
 
 `ufw` is packaged as a distro-managed userspace tool and does not require a compiled-from-source

documentation/ufw_ufw_firewall.md

@@ -4,21 +4,21 @@ Manage Uncomplicated Firewall (UFW) on Debian and Ubuntu hosts.
 
 ## Actions
 
-| Action | Description |
-|--------|-------------|
+| Action    | Description                                                                     |
+|-----------|---------------------------------------------------------------------------------|
 | `:create` | Installs UFW, enables the firewall, and applies the resolved rule set (default) |
-| `:delete` | Disables UFW, resets its rules, and purges the package |
+| `:delete` | Disables UFW, resets its rules, and purges the package                          |
 
 ## Properties
 
-| Property | Type | Default | Description |
-|----------|------|---------|-------------|
-| `firewall_name` | String | `name property` | Logical firewall name passed to the `firewall` cookbook resources |
-| `rules` | Array, Hash | `{}` | Explicit firewall rules to apply |
-| `allow_ssh` | true, false | `true` | Opens TCP port 22 before applying custom rules |
-| `data_bag_name` | String, nil | `nil` | Data bag to scan for additional rules keyed by role or recipe name |
-| `collect_recipe_rules` | true, false | `false` | Merges legacy `node['<recipe>']['firewall']['rules']` values into the final rule set |
-| `securitylevel` | String, nil | `nil` | Enables SecurityLevel role validation before applying rules |
+| Property               | Type        | Default         | Description                                                                          |
+|------------------------|-------------|-----------------|--------------------------------------------------------------------------------------|
+| `firewall_name`        | String      | `name property` | Logical firewall name passed to the `firewall` cookbook resources                    |
+| `rules`                | Array, Hash | `{}`            | Explicit firewall rules to apply                                                     |
+| `allow_ssh`            | true, false | `true`          | Opens TCP port 22 before applying custom rules                                       |
+| `data_bag_name`        | String, nil | `nil`           | Data bag to scan for additional rules keyed by role or recipe name                   |
+| `collect_recipe_rules` | true, false | `false`         | Merges legacy `node['<recipe>']['firewall']['rules']` values into the final rule set |
+| `securitylevel`        | String, nil | `nil`           | Enables SecurityLevel role validation before applying rules                          |
 
 ## Examples