Removed text/marshal support

Removing text/marshal support in order to close the security
vulnerability described in Bug #13552.
Fix for bucket_path security vulnerability

This is a fix for Bugs #13553, #13418, #13511. The bucket_path parameter
allowed control over where the filebucket will try to read and write to.
The only place available to stop this parameter is in the resolution
from a URI to an indirectory terminus. The bucket_path is used
internally for local filebuckets and so cannot be removed completely
without a larger change to the design.

Conflicts:

	lib/puppet/network/http/api/v1.rb
	spec/unit/network/http/api/v1_spec.rb

Conflicts resolved by modifying the patch to fit the use of
Puppet::Indirector::Request in the code.
(#13260) Use mktmpdir when downloading packages

This fixes a security vulnerability in the appdmg and pkgdmg providers where
they would curl packages directly into /tmp and the install them, allowing an
attacker to craft a symlink and overwrite arbitrary files or install arbitrary
packages.

Conflicts:

	lib/puppet/provider/package/appdmg.rb
	lib/puppet/provider/package/pkgdmg.rb
Refactor pkgdmg specs

Refactor to a more current spec style. Several of these specs didn't actually
test anything. They have either been deleted or made more specific.

Conflicts:

	lib/puppet/provider/package/pkgdmg.rb
(#13260) Spec test to verify that mktmpdir is used
Stub mktmpdir and remove_entry_secure in os x package providers
Updating CHANGELOG and lib/puppet.rb for 2.6.15
Merge branch 'security/2.6.14/filebucket-bucket-path-security' into 2.6.x
Revert "(#5246) Puppetd does not remove it's pidfile when it exits"

This reverts commit e0e31d571f38a3f0436e43ea6662f6d6c1e525c5.

This commit caused spurious error messages when running `puppet agent -t` if
the agent was also running daemonized (#12188). It would display an error of
unable to remove pidfile, but the error would not affect the exit code.
Updating CHANGELOG and lib/puppet.rb for 2.6.16
Updating CHANGELOG, lib/puppet.rb for 2.7.14rc1
(#14036) Handle upstart better

Change the upstart provider to better handle the mix of some services
that are upstart controlled and some that are init script controlled.
(#14036) Add upstart tests

Refactor upstart provider with suggestions from dpittman.
Add specs for upstart provider.
Merge pull request #681 from jeffweiss/ticket/2.7.x/14036_handle_upstart_better

(#14036) Handle upstart better
Improve deprecation warning for dynamic lookup

The new message will tell the user how to get more information about
what is occuring. More information will be provided at debug level so
that a user can see what the change to the lookup will be.
Merge pull request #696 from zaphod42/feature/2.7rc/14101-improved-dynamic-scope-warning-message

Feature/2.7rc/14101 improved dynamic scope warning message
Modernize the style of the shell exec provider tests.

This just whips the content up to the modern standard for tests.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>
(#14060) Fix quoting of commands to interpolate inside the shell.

The `shell` exec provider was supposed to emulate the behaviour of 0.25 exec,
which was to pass the content through the default shell to get it executed.

Unfortunately, it got quoting a bit wrong, and ended up interpolating
variables at the wrong point - it used double quotes where single quotes were
really what was desired.

Thanks to Matthew Byng-Maddick for the report, and a fix to the quoting; in
the end we should not be in this position - we shouldn't be using string
execution where we can pass an array instead.  That avoids any chance that
there is more than one round of shell interpolation entirely.

As a bonus, this fixes the base exec type to support specifying the command to
run that very way, and making it good.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>
Merge pull request #698 from daniel-pittman/bug/2.7.x/14060-incorrect-quoting-in-shell-exec-provider

Bug/2.7.x/14060 incorrect quoting in shell exec provider
Modernize the style of the shell exec provider tests.

This just whips the content up to the modern standard for tests.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>