update Gemfile

Signed-off-by: Patrick Münch <patrick.muench1111@gmail.com>

Author: atomic111

.travis.yml

@@ -31,7 +31,7 @@ before_script:
   - /opt/chefdk/embedded/bin/chef --version
   - /opt/chefdk/embedded/bin/cookstyle --version
   - /opt/chefdk/embedded/bin/foodcritic --version
-  - /opt/chefdk/embedded/bin/chef gem install coveralls # needed for chefspecs
+  - /opt/chefdk/embedded/bin/chef gem install coveralls -v 0.8.19 # needed for chefspecs
 
 script: KITCHEN_LOCAL_YAML=.kitchen.docker.yml /opt/chefdk/embedded/bin/kitchen verify ${INSTANCE}
 

Gemfile

@@ -2,45 +2,38 @@
 
 source 'https://rubygems.org'
 
-gem 'berkshelf',  '~> 5.0'
-gem 'chef',       '>= 12.0'
-
-# pin dependency for Ruby 1.9.3 since bundler is not
-# detecting that net-ssh 3 does not work with 1.9.3
-if Gem::Version.new(RUBY_VERSION) < Gem::Version.new('2.2.2')
-  gem 'listen', '~> 3.0.0'
-  gem 'ruby_dep', '~> 1.3.0'
-  gem 'rack', '< 2.0'
-end
+gem 'berkshelf', '~> 6.1'
+gem 'chef', '~> 12.5' # chefspec builds get stucked with 13.1
 
 group :test do
   gem 'rake'
-  gem 'chefspec',   '~> 5.3'
-  gem 'foodcritic', '~> 8.0'
+  gem 'chefspec', '~> 7.1.0'
+  gem 'foodcritic', '~> 11.1'
+  gem 'thor', '~> 0.19.1'
   gem 'thor-foodcritic'
   gem 'cookstyle'
   gem 'coveralls', require: false
-  gem 'minitest', '~> 5.5'
+  gem 'minitest', '~> 5.10.2'
+  gem 'rubocop', '~> 0.49.0'
   gem 'simplecov', '~> 0.10'
 end
 
 group :development do
   gem 'guard'
   gem 'guard-rspec'
+  gem 'guard-foodcritic', '~> 3.0'
   gem 'guard-kitchen'
   gem 'guard-rubocop'
-  # gem 'guard-foodcritic' # disabled until a new release comes out that removes the pin
 end
 
 group :integration do
-  gem 'test-kitchen', '~> 1.0'
+  gem 'test-kitchen', '~> 1.16.0'
   gem 'kitchen-vagrant'
-  gem 'kitchen-inspec'
-  gem 'kitchen-sharedtests', '~> 0.2.0'
-  gem 'concurrent-ruby', '~> 0.9'
   gem 'kitchen-dokken'
+  gem 'kitchen-inspec'
+  gem 'concurrent-ruby', '~> 1.0.5'
 end
 
 group :tools do
-  gem 'github_changelog_generator', '~> 1.14.0'
+  gem 'github_changelog_generator', '~> 1.14'
 end

test/integration/controls/test.rb

@@ -1,6 +1,6 @@
 include_controls 'nginx-baseline' do
-  # skip entropy test, as our short living test VMs usually do not
-  # have enough
+  # skip http method control
   skip_control 'nginx-14'
+  # skip HTTPOnly and secure cookie control
   skip_control 'nginx-16'
 end