fix openssl CRL error

[Stromweld]

Description

Bundled version of ruby has a known CRL check issue. latest releases of openssl gem have this fixed.

Also added GHA workflows and proper linting/unit/integration tests with supporting configuration files for the new jobs

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Chore (non-breaking change that does not add functionality or fix an issue)

Checklist:

• I have read the CONTRIBUTING document.
• I have run the pre-merge tests locally and they pass.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• If Gemfile.lock has changed, I have used --conservative to do it and included the full output in the Description above.
• All new and existing tests passed.
• All commits have been signed-off for the Developer Certificate of Origin.

[tas50]

Gemspecs don't work like this. They get interpreted and turned into JSON so this only really parses the deps based on the system where the gemspec is uploaded

[jaymzh]

Indeed, these have to go into the Gemfile.

[jaymzh]

OK I was running out the door when I wrote that as was being very dumb.

Gemfile of course also will not work.

After much discussion with @Stromweld I think the only way to continue to support old versions of ruby that Mac's still have, is to branch this per ruby era, and have different major-versions of mixlib-install per ruby era.

This will get simpler as Mac is the only real reason we have to support ancient Rubies, and they're going to be dropping Ruby altogether, and then as older versions of Mac get EOLd, which happens pretty frequently, we can stop caring.

So I'm thinking something like:

• keep 3.x as ruby < 2.7
• branch a 4.x for ruby >=2.7, < 3.3
• branch a 5.x for ruby >=3.3, < 3.4
• branch a 6.x for ruby >=3.4, < 4.0
• main becomes 7.x for 4.0+

So Order of operations here is something like:

• adapt Ci to move all stuff to GHA instead of BK
• branch and lock versions
• fix openssl on each branch

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Stromweld]

superseded by #417 which removed the need for network call