fluent-package 5.0.3

As LTS update, basically updates patch versions.

Exceptions for updated:

* tzinfo-data
  * Timezone database should be updated.

Exceptions for NOT updated:

* async-http 0.61.0 -> 0.63.0
  * No bug fixes

* oj 3.16.1 -> 3.16.3
  * No need to update because it adds new option and fix for ruby
    3.3.0 or later
* uri 0.12.2 -> 0.13.0
  * ruby 3.2.3 bundles 0.12.2. No CVE furthermore.

Others:

AWS gems are usually updated to the latest every release, but it
is not updated this time to limit the impact.

Signed-off-by: Kentaro Hayashi <[email protected]>

CHANGELOG.md

@@ -2,6 +2,85 @@
 
 About the past changelog entries, see [old CHANGELOG](CHANGELOG-v4.md) instead.
 
+## Release v5.0.3 - 2024/03/NN
+
+### News
+
+* Update fluentd to 1.16.4
+* Update bundled gems
+* msi: fixed wrong environment path for Fluent Package Prompt (#606)
+  * It breaks fluent-diagtool behavior to launch fluent-gem correctly.
+* msi: removed unnecessary path delimiter (#607)
+  * It doesn't cause any problem yet, but it should treat `%~dp0~ correctly.
+* rpm: fixed to take over enabled state of systemd service from td-agent v4 (#613)
+* deb rpm: fixed to quote target files correctly not to cause migration failures (#615)
+* msi: added a patch for RubyInstaller to avoid crash on start up (#620)
+* Update fluent-diagtool to v1.0.4
+  * Supports to collect list of plugins on Windows.
+
+### Core component
+
+* ruby v3.2.3 (update)
+* jemalloc v3.6.0
+* OpenSSL 3.1.0 Windows
+* OpenSSL 3.0.8 macOS
+* fluentd v1.16.4 (update)
+
+### Core gems
+
+* async-http v0.61.0
+* bundler v2.3.26
+* cool.io v1.8.0
+* http_parser.rb v0.8.0
+* msgpack v1.7.2
+* oj v3.16.1
+* serverengine v2.3.2
+* sigdump v0.2.5
+* tzinfo v2.0.6
+* tzinfo-data v1.2024.1 (update)
+* yajl-ruby v1.4.3
+
+### Bundled plugins and gems
+
+* aws-partitions v1.785.0
+* aws-sdk-core v3.178.0
+* aws-sdk-kms v1.71.0
+* aws-sdk-s3 v1.129.0
+* aws-sdk-sqs v1.61.0
+* aws-sigv4 v1.6.0
+* elasticsearch v8.8.0
+* fluent-diagtool v1.0.4 (update)
+* fluent-plugin-calyptia-monitoring v0.1.3
+* fluent-plugin-elasticsearch v5.4.0
+* fluent-plugin-flowcounter-simple 0.1.0
+* fluent-plugin-kafka v0.19.2
+* fluent-plugin-metrics-cmetrics v0.1.2
+* fluent-plugin-opensearch v1.1.4
+* fluent-plugin-prometheus v2.1.0
+* fluent-plugin-prometheus_pushgateway v0.1.1
+* fluent-plugin-record-modifier v2.1.1
+* fluent-plugin-rewrite-tag-filter v2.4.0
+* fluent-plugin-s3 v1.7.2
+* fluent-plugin-sd-dns 0.1.0
+* fluent-plugin-systemd v1.0.5
+* fluent-plugin-td v1.2.0
+* fluent-plugin-utmpx v0.5.0
+* fluent-plugin-webhdfs v1.5.0
+* mini_portile2 v2.8.2
+* prometheus-client v4.1.0
+* rdkafka v0.12.0
+* ruby-kafka v1.5.0
+* systemd-journal v1.4.2
+* td-client v1.0.8
+* webhdfs v0.10.2
+
+On Windows
+
+* fluent-plugin-parser-winevt_xml v0.2.6
+* fluent-plugin-windows-exporter v1.0.0
+* winevt_c v0.10.1
+* nokogiri v1.15.5
+
 ## Release v5.0.2 - 2023/11/29
 
 ### News

fluent-package/Gemfile

@@ -17,14 +17,11 @@ gem "serverengine", '2.3.2'
 gem "msgpack", "1.7.2"
 gem "oj", "3.16.1"
 gem "tzinfo", "2.0.6"
-gem "tzinfo-data", "1.2023.3"
+gem "tzinfo-data", "1.2024.1"
 gem "async", "1.31.0"
 gem "async-http", "0.61.0"
 gem "webrick", "1.8.1"
 
-# CVE-2023-36617: should be removed after we update Ruby to 3.2.3 or later
-gem "uri", "~> 0.12.2"
-
 if ENV["INSTALL_GEM_FROM_LOCAL_REPO"]
   # During build process, pre-built fluentd gem will be installed
   # from this local repository, this way is used to avoid embedding full-path
@@ -58,7 +55,7 @@ gem "aws-sigv4", "1.6.0"
 gem "aws-sdk-s3", "1.129.0"
 gem "fluent-plugin-s3", "1.7.2"
 gem "httpclient", "2.8.3"
-gem "fluent-diagtool", "1.0.3"
+gem "fluent-diagtool", "1.0.4"
 gem "td", "0.17.1"
 gem "td-client", "1.0.8"
 gem "fluent-plugin-td", "1.2.0"