diff --git a/.gitignore b/.gitignore
index 3f155121..2803e566 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,6 +19,7 @@
 /spec/fixtures/modules/*
 /tmp/
 /vendor/
+/.vendor/
 /convert_report.txt
 /update_report.txt
 .DS_Store
@@ -26,3 +27,9 @@
 .envrc
 /inventory.yaml
 /spec/fixtures/litmus_inventory.yaml
+.resource_types
+.modules
+.task_cache.json
+.plan_cache.json
+.rerun.json
+bolt-debug.log
diff --git a/.pdkignore b/.pdkignore
index 862847a7..84684be6 100644
--- a/.pdkignore
+++ b/.pdkignore
@@ -19,6 +19,7 @@
 /spec/fixtures/modules/*
 /tmp/
 /vendor/
+/.vendor/
 /convert_report.txt
 /update_report.txt
 .DS_Store
@@ -26,6 +27,12 @@
 .envrc
 /inventory.yaml
 /spec/fixtures/litmus_inventory.yaml
+.resource_types
+.modules
+.task_cache.json
+.plan_cache.json
+.rerun.json
+bolt-debug.log
 /.fixtures.yml
 /Gemfile
 /.gitattributes
diff --git a/.puppet-lint.rc b/.puppet-lint.rc
index 02505e80..be67cd1e 100644
--- a/.puppet-lint.rc
+++ b/.puppet-lint.rc
@@ -1,2 +1,10 @@
+--fail-on-warnings
 --relative
+--no-80chars-check
+--no-140chars-check
+--no-class_inherits_from_params_class-check
+--no-autoloader_layout-check
+--no-documentation-check
+--no-single_quote_string_with_variables-check
 --no-puppet_url_without_modules-check
+--ignore-paths=.vendor/**/*.pp,.bundle/**/*.pp,pkg/**/*.pp,spec/**/*.pp,tests/**/*.pp,types/**/*.pp,vendor/**/*.pp
diff --git a/.rubocop.yml b/.rubocop.yml
index 8d382dab..12fa6955 100644
--- a/.rubocop.yml
+++ b/.rubocop.yml
@@ -5,7 +5,7 @@ require:
 AllCops:
   NewCops: enable
   DisplayCopNames: true
-  TargetRubyVersion: '2.6'
+  TargetRubyVersion: 3.1
   Include:
   - "**/*.rb"
   Exclude:
diff --git a/.sync.yml b/.sync.yml
index d45e736e..e4b120cf 100644
--- a/.sync.yml
+++ b/.sync.yml
@@ -20,13 +20,12 @@ Gemfile:
         version: '~> 1.0'
       - gem: beaker-hostgenerator
         from_env: BEAKER_HOSTGENERATOR_VERSION
+        version: '~> 2.0'
       - gem: beaker-rspec
         from_env: BEAKER_RSPEC_VERSION
-      # Prevent beaker-puppet from being installed on Ruby > 3.1 until beaker-puppet supports newer Rubies (PA-6136)
       - gem: beaker-puppet
         from_env: BEAKER_PUPPET_VERSION
         version: '~> 4.0'
-        condition: Gem::Requirement.create('< 3.2.0').satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
       - gem: beaker-module_install_helper
       - gem: beaker-puppet_install_helper
       - gem: nokogiri
@@ -41,22 +40,14 @@ Gemfile:
       - gem: 'orchestrator_client'
         version: '< 0.7.1'
         condition: 'ENV["GEM_BOLT"]'
-      - gem: async
-        version: '~> 1.30' # otherwise async 2.0.0(needs ruby >=3.1.0) is wrongly selected by bundler on jenkins while running with ruby 2.7.1
     ":system_tests":
       - gem: voxpupuli-acceptance
         version: '~> 3'
 
-appveyor.yml:
-  delete: true
-.travis.yml:
-  delete: true
 .github/workflows/release.yml:
   unmanaged: false
 .github/workflows/release_prep.yml:
   unmanaged: false
-.gitlab-ci.yml:
-  delete: true
 spec/default_facts.yml:
   delete: true
 spec/spec_helper.rb:
diff --git a/Gemfile b/Gemfile
index d7c2e970..ceb5bdbf 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,49 +1,73 @@
-source ENV['GEM_SOURCE'] || 'https://rubygems.org'
+# frozen_string_literal: true
 
-def location_for(place_or_version, fake_version = nil)
-  git_url_regex = %r{\A(?<url>(https?|git)[:@][^#]*)(#(?<branch>.*))?}
-  file_url_regex = %r{\Afile:\/\/(?<path>.*)}
+# For puppetcore, set GEM_SOURCE_PUPPETCORE = 'https://rubygems-puppetcore.puppet.com'
+gemsource_default = ENV['GEM_SOURCE'] || 'https://rubygems.org'
+gemsource_puppetcore = if ENV['PUPPET_FORGE_TOKEN']
+  'https://rubygems-puppetcore.puppet.com'
+else
+  ENV['GEM_SOURCE_PUPPETCORE'] || gemsource_default
+end
+source gemsource_default
+
+def location_for(place_or_constraint, fake_constraint = nil, opts = {})
+  git_url_regex  = /\A(?<url>(?:https?|git)[:@][^#]*)(?:#(?<branch>.*))?/
+  file_url_regex = %r{\Afile://(?<path>.*)}
+
+  if place_or_constraint && (git_url = place_or_constraint.match(git_url_regex))
+    # Git source → ignore :source, keep fake_constraint
+    [fake_constraint, { git: git_url[:url], branch: git_url[:branch], require: false }].compact
+
+  elsif place_or_constraint && (file_url = place_or_constraint.match(file_url_regex))
+    # File source → ignore :source, keep fake_constraint or default >= 0
+    [fake_constraint || '>= 0', { path: File.expand_path(file_url[:path]), require: false }]
 
-  if place_or_version && (git_url = place_or_version.match(git_url_regex))
-    [fake_version, { git: git_url[:url], branch: git_url[:branch], require: false }].compact
-  elsif place_or_version && (file_url = place_or_version.match(file_url_regex))
-    ['>= 0', { path: File.expand_path(file_url[:path]), require: false }]
   else
-    [place_or_version, { require: false }]
+    # Plain version constraint → merge opts (including :source if provided)
+    [place_or_constraint, { require: false }.merge(opts)]
+  end
+end
+
+# Print debug information if DEBUG_GEMS or VERBOSE is set
+def print_gem_statement_for(gems)
+  puts 'DEBUG: Gem definitions that will be generated:'
+  gems.each do |gem_name, gem_params|
+    puts "DEBUG:   gem #{([gem_name.inspect] + gem_params.map(&:inspect)).join(', ')}"
   end
 end
 
 group :development do
-  gem "json", '= 2.6.1',                                                       require: false if Gem::Requirement.create(['>= 3.1.0', '< 3.1.3']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
-  gem "json", '= 2.6.3',                                                       require: false if Gem::Requirement.create(['>= 3.2.0', '< 4.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
-  gem "racc", '~> 1.4.0',                                                      require: false if Gem::Requirement.create(['>= 2.7.0', '< 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
-  gem "deep_merge", '~> 1.2.2',                                                require: false
-  gem "voxpupuli-puppet-lint-plugins", '~> 5.0',                               require: false
-  gem "facterdb", '~> 1.18',                                                   require: false
-  gem "metadata-json-lint", '~> 4.0',                                          require: false
-  gem "rspec-puppet-facts", '~> 3.0',                                          require: false
-  gem "json-schema", '< 5.1.1',                                                require: false
-  gem "dependency_checker", '~> 1.0.0',                                        require: false
-  gem "parallel_tests", '= 3.12.1',                                            require: false
-  gem "pry", '~> 0.10',                                                        require: false
-  gem "simplecov-console", '~> 0.9',                                           require: false
-  gem "puppet-debugger", '~> 1.6',                                             require: false
-  gem "rubocop", '~> 1.50.0',                                                  require: false
-  gem "rubocop-performance", '= 1.16.0',                                       require: false
-  gem "rubocop-rspec", '= 2.19.0',                                             require: false
-  gem "rb-readline", '= 0.5.5',                                                require: false, platforms: [:mswin, :mingw, :x64_mingw]
+  gem "json", '= 2.6.1',                                                                     require: false if Gem::Requirement.create(['>= 3.1.0', '< 3.1.3']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "json", '= 2.6.3',                                                                     require: false if Gem::Requirement.create(['>= 3.2.0', '< 4.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "racc", '~> 1.4.0',                                                                    require: false if Gem::Requirement.create(['>= 2.7.0', '< 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "deep_merge", '~> 1.2.2',                                                              require: false
+  gem "voxpupuli-puppet-lint-plugins", '~> 5.0',                                             require: false
+  gem "facterdb", '~> 2.1',                                                                  require: false if Gem::Requirement.create(['< 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "facterdb", '~> 3.0',                                                                  require: false if Gem::Requirement.create(['>= 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "metadata-json-lint", '~> 4.0',                                                        require: false
+  gem "json-schema", '< 5.1.1',                                                              require: false
+  gem "rspec-puppet-facts", '~> 4.0',                                                        require: false if Gem::Requirement.create(['< 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "rspec-puppet-facts", '~> 5.0',                                                        require: false if Gem::Requirement.create(['>= 3.0.0']).satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
+  gem "dependency_checker", '~> 1.0.0',                                                      require: false
+  gem "parallel_tests", '= 3.12.1',                                                          require: false
+  gem "pry", '~> 0.10',                                                                      require: false
+  gem "simplecov-console", '~> 0.9',                                                         require: false
+  gem "puppet-debugger", '~> 1.6',                                                           require: false
+  gem "rubocop", '~> 1.50.0',                                                                require: false
+  gem "rubocop-performance", '= 1.16.0',                                                     require: false
+  gem "rubocop-rspec", '= 2.19.0',                                                           require: false
+  gem "rb-readline", '= 0.5.5',                                                              require: false, platforms: [:mswin, :mingw, :x64_mingw]
+  gem "bigdecimal", '< 3.2.2',                                                               require: false, platforms: [:mswin, :mingw, :x64_mingw]
   gem "beaker", *location_for(ENV['BEAKER_VERSION'] || '~> 6.0')
   gem "beaker-abs", *location_for(ENV['BEAKER_ABS_VERSION'] || '~> 1.0')
-  gem "beaker-hostgenerator", *location_for(ENV['BEAKER_HOSTGENERATOR_VERSION'] || '~> 2')
+  gem "beaker-hostgenerator", *location_for(ENV['BEAKER_HOSTGENERATOR_VERSION'] || '~> 2.0')
   gem "beaker-rspec"
-  gem "beaker-puppet", *location_for(ENV['BEAKER_PUPPET_VERSION'] || '~> 4.0') if Gem::Requirement.create('< 3.2.0').satisfied_by?(Gem::Version.new(RUBY_VERSION.dup))
-  gem "beaker-module_install_helper",                                          require: false
-  gem "beaker-puppet_install_helper",                                          require: false
-  gem "nokogiri",                                                              require: false
-  gem "bolt", '~> 3.0',                                                        require: false if ENV["GEM_BOLT"]
-  gem "beaker-task_helper", '~> 1.9',                                          require: false if ENV["GEM_BOLT"]
-  gem "orchestrator_client", '< 0.7.1',                                        require: false if ENV["GEM_BOLT"]
-  gem "async", '~> 1.30',                                                      require: false
+  gem "beaker-puppet", *location_for(ENV['BEAKER_PUPPET_VERSION'] || '~> 4.0')
+  gem "beaker-module_install_helper",                                                        require: false
+  gem "beaker-puppet_install_helper",                                                        require: false
+  gem "nokogiri",                                                                            require: false
+  gem "bolt", '~> 3.0',                                                                      require: false if ENV["GEM_BOLT"]
+  gem "beaker-task_helper", '~> 1.9',                                                        require: false if ENV["GEM_BOLT"]
+  gem "orchestrator_client", '< 0.7.1',                                                      require: false if ENV["GEM_BOLT"]
 end
 group :development, :release_prep do
   gem "puppet-strings", '~> 4.0',         require: false
@@ -51,6 +75,8 @@ group :development, :release_prep do
   gem "puppet-blacksmith", '~> 7.0',      require: false
 end
 group :system_tests do
+  gem "puppet_litmus", '~> 2.0',      require: false, platforms: [:ruby, :x64_mingw] if !ENV['PUPPET_FORGE_TOKEN'].to_s.empty?
+  gem "puppet_litmus", '~> 1.0',      require: false, platforms: [:ruby, :x64_mingw] if ENV['PUPPET_FORGE_TOKEN'].to_s.empty?
   gem "CFPropertyList", '< 3.0.7',    require: false, platforms: [:mswin, :mingw, :x64_mingw]
   gem "serverspec", '~> 2.41',        require: false
   gem "voxpupuli-acceptance", '~> 3', require: false
@@ -61,18 +87,12 @@ puppet_version = ENV.fetch('PUPPET_GEM_VERSION', nil)
 facter_version = ENV.fetch('FACTER_GEM_VERSION', nil)
 hiera_version = ENV.fetch('HIERA_GEM_VERSION', nil)
 
-# If PUPPET_FORGE_TOKEN is set then use authenticated source for both puppet and facter, since facter is a transitive dependency of puppet
-# Otherwise, do as before and use location_for to fetch gems from the default source
-if !ENV['PUPPET_FORGE_TOKEN'].to_s.empty?
-  gems['puppet'] = ['~> 8.11', { require: false, source: 'https://rubygems-puppetcore.puppet.com' }]
-  gems['facter'] = ['~> 4.11', { require: false, source: 'https://rubygems-puppetcore.puppet.com' }]
-else
-  gems['puppet'] = location_for(puppet_version)
-  gems['facter'] = location_for(facter_version) if facter_version
-end
-
-gems['hiera'] = location_for(hiera_version) if hiera_version
+gems['puppet'] = location_for(puppet_version, nil, { source: gemsource_puppetcore })
+gems['facter'] = location_for(facter_version, nil, { source: gemsource_puppetcore })
+gems['hiera'] = location_for(hiera_version, nil, {}) if hiera_version
 
+# Generate the gem definitions
+print_gem_statement_for(gems) if ENV['DEBUG']
 gems.each do |gem_name, gem_params|
   gem gem_name, *gem_params
 end
@@ -80,12 +100,14 @@ end
 # Evaluate Gemfile.local and ~/.gemfile if they exist
 extra_gemfiles = [
   "#{__FILE__}.local",
-  File.join(Dir.home, '.gemfile'),
+  File.join(Dir.home, '.gemfile')
 ]
 
 extra_gemfiles.each do |gemfile|
-  if File.file?(gemfile) && File.readable?(gemfile)
-    eval(File.read(gemfile), binding)
-  end
+  next unless File.file?(gemfile) && File.readable?(gemfile)
+
+  # rubocop:disable Security/Eval
+  eval(File.read(gemfile), binding)
+  # rubocop:enable Security/Eval
 end
 # vim: syntax=ruby
diff --git a/Rakefile b/Rakefile
index 7101afe1..d5560851 100644
--- a/Rakefile
+++ b/Rakefile
@@ -8,4 +8,13 @@ require 'puppet-strings/tasks' if Gem.loaded_specs.key? 'puppet-strings'
 require 'voxpupuli/acceptance/rake' if Gem.loaded_specs.key? 'voxpupuli-acceptance'
 
 PuppetLint.configuration.send('disable_relative')
+PuppetLint.configuration.send('disable_80chars')
+PuppetLint.configuration.send('disable_140chars')
+PuppetLint.configuration.send('disable_class_inherits_from_params_class')
+PuppetLint.configuration.send('disable_autoloader_layout')
+PuppetLint.configuration.send('disable_documentation')
+PuppetLint.configuration.send('disable_single_quote_string_with_variables')
 PuppetLint.configuration.send('disable_puppet_url_without_modules')
+PuppetLint.configuration.fail_on_warnings = true
+PuppetLint.configuration.ignore_paths = [".vendor/**/*.pp", ".bundle/**/*.pp", "pkg/**/*.pp", "spec/**/*.pp", "tests/**/*.pp", "types/**/*.pp", "vendor/**/*.pp"]
+
diff --git a/metadata.json b/metadata.json
index 27f52b12..0d3b36ac 100644
--- a/metadata.json
+++ b/metadata.json
@@ -82,7 +82,7 @@
       "version_requirement": ">= 7.0.0 < 9.0.0"
     }
   ],
-  "pdk-version": "3.2.0",
-  "template-url": "https://github.com/puppetlabs/pdk-templates#3.2.0",
-  "template-ref": "tags/3.2.0-0-gb257ef1"
+  "pdk-version": "3.5.1",
+  "template-url": "https://github.com/puppetlabs/pdk-templates#3.5.1",
+  "template-ref": "tags/3.5.1-0-g9d5b193"
 }
diff --git a/spec/classes/puppet_agent_osfamily_darwin_spec.rb b/spec/classes/puppet_agent_osfamily_darwin_spec.rb
index cc9c5f7f..a5ccebe7 100644
--- a/spec/classes/puppet_agent_osfamily_darwin_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_darwin_spec.rb
@@ -34,7 +34,7 @@
   }
 
   describe 'supported environment' do
-    let(:params) { { package_version: package_version } }
+    let(:params) { { package_version: } }
 
     context 'when running a supported macOS' do
       ['osx-11-x86_64', 'osx-12-x86_64'].each do |tag|
diff --git a/spec/classes/puppet_agent_osfamily_debian_spec.rb b/spec/classes/puppet_agent_osfamily_debian_spec.rb
index bef70c0f..1fda9695 100644
--- a/spec/classes/puppet_agent_osfamily_debian_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_debian_spec.rb
@@ -23,7 +23,7 @@
   package_version = '1.10.100'
   let(:params) do
     {
-      package_version: package_version
+      package_version:
     }
   end
   let(:facts) { facts }
@@ -48,7 +48,7 @@
       let(:params) do
         {
           manage_repo: true,
-          package_version: package_version
+          package_version:
         }
       end
 
@@ -74,7 +74,7 @@
       let(:params) do
         {
           manage_repo: false,
-          package_version: package_version
+          package_version:
         }
       end
 
@@ -94,7 +94,7 @@
         let(:params) do
           {
             manage_repo: true,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -118,7 +118,7 @@
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -133,7 +133,7 @@
       let(:params) do
         {
           manage_repo: true,
-          package_version: package_version
+          package_version:
         }
       end
 
@@ -166,7 +166,7 @@
       let(:params) do
         {
           manage_repo: true,
-          package_version: package_version,
+          package_version:,
           source: 'https://fake-apt-mirror.com'
         }
       end
@@ -188,7 +188,7 @@
       let(:params) do
         {
           manage_repo: false,
-          package_version: package_version
+          package_version:
         }
       end
 
@@ -207,7 +207,7 @@
       let(:params) do
         {
           manage_repo: true,
-          package_version: package_version,
+          package_version:,
           collection: 'puppet5',
         }
       end
@@ -229,7 +229,7 @@
       let(:params) do
         {
           manage_repo: true,
-          package_version: package_version,
+          package_version:,
           collection: 'puppet5',
           apt_source: 'https://fake-apt-mirror.com/'
         }
@@ -252,7 +252,7 @@
       let(:params) do
         {
           manage_repo: false,
-          package_version: package_version
+          package_version:
         }
       end
 
diff --git a/spec/classes/puppet_agent_osfamily_redhat_spec.rb b/spec/classes/puppet_agent_osfamily_redhat_spec.rb
index 04e08d1d..f06a7f84 100644
--- a/spec/classes/puppet_agent_osfamily_redhat_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_redhat_spec.rb
@@ -5,7 +5,7 @@
   package_version = '5.5.4'
   let(:params) do
     {
-      package_version: package_version
+      package_version:
     }
   end
 
@@ -107,7 +107,7 @@
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -181,7 +181,7 @@
         let(:params) do
           {
             manage_repo: true,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -204,7 +204,7 @@
           let(:params) do
             {
               manage_repo: true,
-              package_version: package_version,
+              package_version:,
               disable_proxy: true,
             }
           end
@@ -217,7 +217,7 @@
           let(:params) do
             {
               manage_repo: true,
-              package_version: package_version,
+              package_version:,
               proxy: 'http://myrepo-proxy.example.com',
             }
           end
@@ -230,7 +230,7 @@
           let(:params) do
             {
               manage_repo: true,
-              package_version: package_version,
+              package_version:,
               skip_if_unavailable: 'true',
             }
           end
@@ -243,7 +243,7 @@
           let(:params) do
             {
               manage_repo: true,
-              package_version: package_version,
+              package_version:,
               username: 'forge-key',
               password: sensitive('open-sesame'),
             }
@@ -263,7 +263,7 @@
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -276,7 +276,7 @@
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
diff --git a/spec/classes/puppet_agent_osfamily_solaris_spec.rb b/spec/classes/puppet_agent_osfamily_solaris_spec.rb
index bddf35e1..974fd411 100644
--- a/spec/classes/puppet_agent_osfamily_solaris_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_solaris_spec.rb
@@ -73,7 +73,7 @@ def install_script(ver, arch)
   # is how developer builds are labelled.
   sol11_package_version = '1.10.100.90.9335'
   pe_version = '2000.0.0'
-  let(:params) { { package_version: package_version } }
+  let(:params) { { package_version: } }
 
   describe 'unsupported environment' do
     context 'when not PE' do
@@ -85,7 +85,7 @@ def install_script(ver, arch)
       # fact isn't available.
       let(:params) do
         {
-          package_version: package_version
+          package_version:
         }
       end
 
@@ -111,7 +111,7 @@ def install_script(ver, arch)
       end
       let(:params) do
         {
-          package_version: package_version,
+          package_version:,
           source: 'http://fake-solaris-source.com'
         }
       end
@@ -146,7 +146,7 @@ def install_script(ver, arch)
         let(:params) do
           {
             manage_repo: true,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -163,7 +163,7 @@ def install_script(ver, arch)
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -202,7 +202,7 @@ def install_script(ver, arch)
         let(:params) do
           {
             manage_repo: true,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -219,7 +219,7 @@ def install_script(ver, arch)
         let(:params) do
           {
             manage_repo: false,
-            package_version: package_version
+            package_version:
           }
         end
 
@@ -244,7 +244,7 @@ def install_script(ver, arch)
       end
       let(:params) do
         {
-          package_version: package_version,
+          package_version:,
           source: 'http://fake-solaris-source.com'
         }
       end
diff --git a/spec/classes/puppet_agent_osfamily_suse_spec.rb b/spec/classes/puppet_agent_osfamily_suse_spec.rb
index b3732f3b..2730c1f6 100644
--- a/spec/classes/puppet_agent_osfamily_suse_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_suse_spec.rb
@@ -20,7 +20,7 @@
 
   let(:params) do
     {
-      package_version: package_version
+      package_version:
     }
   end
 
@@ -45,7 +45,7 @@
 
             let(:params) do
               {
-                package_version: package_version,
+                package_version:,
               }
             end
 
@@ -120,7 +120,7 @@
                   {
                     manage_repo: true,
                     collection: 'puppet6',
-                    package_version: package_version
+                    package_version:
                   }
                 end
 
@@ -149,7 +149,7 @@
                   {
                     manage_repo: false,
                     collection: 'puppet6',
-                    package_version: package_version
+                    package_version:
                   }
                 end
 
@@ -169,7 +169,7 @@
                 let(:params) do
                   {
                     manage_repo: true,
-                    package_version: package_version,
+                    package_version:,
                     collection: 'puppet6',
                     yum_source: 'https://nightlies.puppet.com/yum',
                   }
@@ -249,7 +249,7 @@
                 let(:params) do
                   {
                     manage_repo: true,
-                    package_version: package_version
+                    package_version:
                   }
                 end
 
@@ -277,7 +277,7 @@
                 let(:params) do
                   {
                     manage_repo: false,
-                    package_version: package_version
+                    package_version:
                   }
                 end
 
@@ -297,7 +297,7 @@
                 let(:params) do
                   {
                     manage_repo: true,
-                    package_version: package_version,
+                    package_version:,
                     source: 'https://fake-sles-source.com',
                   }
                 end
@@ -323,7 +323,7 @@
                 let(:params) do
                   {
                     manage_repo: false,
-                    package_version: package_version
+                    package_version:
                   }
                 end
 
diff --git a/spec/classes/puppet_agent_osfamily_windows_spec.rb b/spec/classes/puppet_agent_osfamily_windows_spec.rb
index cb6b1ddb..e087c9b9 100644
--- a/spec/classes/puppet_agent_osfamily_windows_spec.rb
+++ b/spec/classes/puppet_agent_osfamily_windows_spec.rb
@@ -4,7 +4,7 @@
   package_version = '1.10.100'
   pe_version = '2000.0.0'
 
-  let(:params) { { package_version: package_version } }
+  let(:params) { { package_version: } }
   let(:version_file) { '/opt/puppetlabs/puppet/VERSION' }
   let(:windows_version_file) { 'C:\Program Files\Puppet Labs\Puppet\VERSION' }
 
diff --git a/spec/classes/puppet_agent_spec.rb b/spec/classes/puppet_agent_spec.rb
index 822e6608..7844a94d 100644
--- a/spec/classes/puppet_agent_spec.rb
+++ b/spec/classes/puppet_agent_spec.rb
@@ -4,7 +4,6 @@
 
 # maps AIX release major fact value to the known AIX version
 AIX_VERSION = {
-  '6100': '6.1',
   '7100': '7.2',
   '7200': '7.2',
 }.freeze
@@ -13,8 +12,10 @@ def redhat_familly_supported_os
   on_supported_os(
     supported_os: [
       {
-        'operatingsystem' => 'RedHat',
-        "operatingsystemrelease": ['5', '6', '7', '8'],
+        'os' => {
+          'name' => 'RedHat',
+          'release' => ['6', '7', '8', '9', '10'],
+        }
       },
     ],
   )
@@ -22,7 +23,7 @@ def redhat_familly_supported_os
 
 describe 'puppet_agent' do
   package_version = '6.5.4'
-  global_params = { package_version: package_version }
+  global_params = { package_version: }
 
   def global_facts(facts, os)
     facts.merge(
@@ -30,7 +31,6 @@ def global_facts(facts, os)
         {
           is_pe: true,
           env_temp_variable: '/tmp',
-          operatingsystemmajrelease: facts[:operatingsystemrelease].split('.')[0],
         }
       elsif %r{redhat|centos|fedora|scientific|oracle}.match?(os)
         {
@@ -120,12 +120,21 @@ def global_facts(facts, os)
   end
 
   context 'package provider' do
-    # module is still pinned to older rspec-puppet and facterdb
-    os_name = 'fedora-41-x86_64'
-    os_facts = {
-      os_name => on_supported_os['fedora-39-x86_64'],
-    }
-    os_facts.values.first[:os]['release'] = { 'full' => '41', 'major' => '41' }
+    # Package provider behavior changes on Fedora in >= 41
+    # Fedora 41 facts were introduced to FacterDB in 3.8.0, the PDK template
+    # pins FacterDB to 2.1.0 in Ruby < 3.0.
+    # Once we drop tests for Puppet 7, we can use just the first conditional
+    if on_supported_os['fedora-41-x86_64']
+      os_facts = {
+        'fedora-41-x86_64' => on_supported_os['fedora-41-x86_64']
+      }
+    else
+      os_name = 'fedora-41-x86_64'
+      os_facts = {
+        os_name => on_supported_os['fedora-38-x86_64'],
+      }
+      os_facts.values.first[:os]['release'] = { 'full' => '41', 'major' => '41' }
+    end
     os_facts.each do |os, facts|
       context "on #{os}" do
         let(:facts) do
@@ -349,10 +358,10 @@ def global_facts(facts, os)
             it { is_expected.to contain_class('puppet_agent::prepare') }
             it { is_expected.to contain_class('puppet_agent::install').that_requires('Class[puppet_agent::prepare]') }
 
-            if facts[:osfamily] == 'Debian'
+            if facts[:os]['family'] == 'Debian'
               deb_package_version = package_version + '-1' + facts.dig(:os, 'distro', 'codename')
               it { is_expected.to contain_package('puppet-agent').with_ensure(deb_package_version) }
-            elsif facts[:osfamily] == 'Solaris'
+            elsif facts[:os]['family'] == 'Solaris'
               if facts[:operatingsystemmajrelease] == '11'
                 it { is_expected.to contain_package('puppet-agent').with_ensure('6.5.4') }
               else
@@ -363,7 +372,7 @@ def global_facts(facts, os)
                     )
                 end
               end
-            elsif facts[:osfamily] == 'windows'
+            elsif facts[:os]['family'] == 'windows'
               # Windows does not contain any Package resources
             else
               it { is_expected.to contain_package('puppet-agent').with_ensure(package_version) }
@@ -377,7 +386,7 @@ def global_facts(facts, os)
 
             # Windows platform does not use Service resources; their services
             # are managed by the MSI installer.
-            unless facts[:osfamily] == 'windows'
+            unless facts[:os]['family'] == 'windows'
               if params[:service_names].nil? && os !~ %r{sles|solaris|aix}
                 it { is_expected.to contain_service('puppet') }
               else
diff --git a/spec/classes/puppet_agent_windows_install_spec.rb b/spec/classes/puppet_agent_windows_install_spec.rb
index d4009ff4..f409d467 100644
--- a/spec/classes/puppet_agent_windows_install_spec.rb
+++ b/spec/classes/puppet_agent_windows_install_spec.rb
@@ -4,8 +4,8 @@
   package_version = '5.10.100.1'
   collection = 'puppet5'
   global_params = {
-    package_version: package_version,
-    collection: collection
+    package_version:,
+    collection:
   }
   ['x86', 'x64'].each do |arch|
     context "Windows arch #{arch}" do
diff --git a/spec/unit/functions/any_resources_of_type_spec.rb b/spec/unit/functions/any_resources_of_type_spec.rb
index 82d0883a..659b5a88 100644
--- a/spec/unit/functions/any_resources_of_type_spec.rb
+++ b/spec/unit/functions/any_resources_of_type_spec.rb
@@ -17,12 +17,12 @@
 
   # A fresh environment is needed for each test since tests create resources
   let(:environment) { Puppet::Node::Environment.create(:testing, [File.expand_path(fixtures('modules'))]) }
-  let(:node) { Puppet::Node.new('yaynode', environment: environment) }
+  let(:node) { Puppet::Node.new('yaynode', environment:) }
   let(:compiler) { Puppet::Parser::Compiler.new(node) }
   let(:scope) { Puppet::Parser::Scope.new(compiler) }
 
   def newresource(type, title, parameters = {})
-    resource = Puppet::Resource.new(type, title, parameters: parameters)
+    resource = Puppet::Resource.new(type, title, parameters:)
     compiler.add_resource(scope, resource)
     resource
   end
diff --git a/tasks/delete_local_filebucket.rb b/tasks/delete_local_filebucket.rb
index 683cd5e5..02a454b6 100755
--- a/tasks/delete_local_filebucket.rb
+++ b/tasks/delete_local_filebucket.rb
@@ -27,7 +27,7 @@ def run
     begin
       path = clientbucketdir
       if path && !path.empty? && (File.directory?(path) || force)
-        FileUtils.rm_r(Dir.glob("#{path}/*"), secure: true, force: force)
+        FileUtils.rm_r(Dir.glob("#{path}/*"), secure: true, force:)
         { "success": true }
       else
         error_result(