Chef Workstation፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

Bug fixes
- Fixed REXML XPath deprecation warnings that appeared during Test Kitchen converge operations when using the Azure driver on Windows platforms.
- Fixed “Exception in finalizer” and “can’t alloc thread (ThreadError)” warnings that appeared after Test Kitchen completed a kitchen verify run against Windows targets.
Component updates
- Updated Cookstyle to v8.6.10.
- Updated Berkshelf to v8.1.21.
- Updated Chef Vault to v4.2.9.
- Updated Fauxhai to v9.4.20.
- Updated Test Kitchen to v4.0.0, which moves the provisioner to its own gem.
- Updated the kitchen-omnibus-chef gem. This gem provides the Chef provisioner to Test Kitchen and now supports authenticated downloads with a license from the Chef Downloads API. This gem is deprecated, and starting with Chef Workstation 26, the kitchen-chef-enterprise plugin will be automatically bundled and shipped for enterprise customer usage.
- Replaced winrm, winrm-elevated, and winrm-fs gems with chef-winrm, chef-winrm-elevated, and chef-winrm-fs.
Updated the following Test Kitchen drivers:
- Updated kitchen-ec2 to v3.22.3.
- Updated kitchen-digitalocean to v0.16.2.
- Updated kitchen-google to v2.6.2.
- Updated kitchen-openstack to v7.0.1.
- Updated kitchen-vagrant to v2.2.1.
- Updated kitchen-vcenter to v2.12.3.
Dependency updates
- Updated mixlib-install to v3.16.0.
- Updated net-ssh to v7.3.2.
- Updated mixlib-archive to v1.3.3.
- Updated openssl gem to v4.0.1.
Security
- Updated cURL from v8.16.0 to v8.19.0.
- Updated Go from v1.23.12 to v1.26.2.
- Updated git-windows from v2.48.1 to v2.54.0.
- Updated activesupport from v7.2.3 to v7.2.3.1.
- Updated json from v2.18.1 to v2.19.5.
- Updated rack from v3.2.5 to v3.2.6.
- Updated net-imap from v0.2.5 to v0.5.14.
- Updated chef-analyze from v0.1.192 to v0.1.194.
- Updated golang.org/x/text from v0.3.8 to v0.24.0.
- Updated golang.org/x/crypto from v0.31.0 to v0.45.0.

Component Updates
Test Kitchen
- Updated Test Kitchen to v3.9.1.
Knife
- Updated Knife from v18.8.13 to v18.8.68 to address code scanning alerts.
chef-cli
- Updated chef-cli from v5.6.21 to v5.6.23 to to address code scanning alerts
Security
- Updated cURL from v8.14.1 to v8.16.0 to resolve the following CVE:
- CVE-2025-10148
- Updated OpenSSL from v3.2.4 to v3.2.6 to resolve the following CVE:
- CVE-2025-9230
- CVE-2025-9231
- CVE-2025-9232
- Updated libxml2 from v2.13.8 to v2.14.4 to resolve the following CVE:
- CVE-2025-6021
- Updated git-windows from v2.47.0 to v2.48.1 to resolve the following CVE:
- CVE-2025-0725
- Updated REXML to v3.4.4 to address CVE-2025-58767
- Updated google-protobuf to v3.25.5 to address CVE-2024-7254
- Updated rack to v3.2.4 to address CVE-2025-61919
- Updated net-imap to v0.2.5 to address CVE-2025-43857
- Updated resolv to v0.2.3 to address CVE-2025-24294
- Updated golang.org/x/text ( Go ) to v 0.3.8 to address CVE-2022-32149
- Updated golang.org/spf13/cobra from v1.10.1 to v1.10.2.
- Updated golang.org/x/sys from v0.28.0 to v0.38.0.
- Updated the chef-zero Ruby gem to v15.0.26.
- Updated the activesupport Ruby gem to v7.0.10.
- Updated the kitchen-vagrant Ruby gem to v2.2.0.
- Updated the license_scout Ruby gem to 1.4.1.
- Updated the uri Ruby gem to 1.0.4.
Bug Fixes
- Updated Test Kitchen to v3.9.1 to resolve a Windows convergence issue introduced in v3.9.0. The issue prevented Chef configuration files (client.rb, dna.json, and cookbooks) from being detected on the guest system.
Packaging
We no longer build packages for:
- macOS 12 x86-64
- macOS 12 ARM64

Release Date: September 30, 2025.
New features
- Updated Test Kitchen to 3.9.0. This adds support for using SSH transport on Windows platforms.
Component updates
- Updated Chef Infra Client to v18.8.11. See the Chef Infra Client release notes for a full list of improvements and features.
- Updated Chef InSpec to v5.22.95. See the InSpec release notes for more information.
- Updated Knife to v18.8.13.
- Updated Test Kitchen to v3.9.0.
- Updated chef-vault from 4.1.23 to 4.2.5
- Updated knife-tidy from 2.1.6 to 2.3.2
- Updated kitchen-vagrant from 2.0.1 to 2.1.2
- Updated kitchen-dokken from 2.20.7 to 2.20.8
- Updated kitchen-ec2 from 3.19.0 to 3.20.0
Security updates
- Updated ruby and ruby-msys2-devkit from 3.1.6 to 3.1.7
- Updated Go from 1.23.9 to 1.23.12 to resolve the following CVE:
- CVE-2025-0913
- Updated git from 2.39.3 to 2.43.7 to resolve the following CVE:
- CVE-2025-48384
- Updated cURL from 8.12.1 to 8.14.1 to resolve the following CVEs:
- CVE-2025-5025
- CVE-2025-4947
- Updated libxml2 from 2.12.10 to 2.13.8 to resolve the following CVEs:
- CVE-2025-32415
- CVE-2025-32414
- Updated libarchive from 3.7.9 to 3.8.1 to resolve the following CVEs:
- CVE-2025-5914
- CVE-2025-5915
- CVE-2025-5916
- CVE-2025-5917
- CVE-2025-5918
- Updated Berkshelf from 8.0.22 to 8.1.6 to address code scanning and dependabot alerts.
Packaging
We now build Windows packages for:
- Windows 2019
We no longer build packages for:
- Windows 8
- Windows Server 2012
- Windows Server 2012 R2.

Release Date: May 27, 2025.
Components
Chef Infra Client
- Updated Chef Infra Client to v18.7.10. See the Chef Infra Client release notes for a full list of improvements and features.
InSpec
- Updated Chef InSpec to v5.22.80. See the InSpec release notes for more information.
Knife
- Updated Knife to v18.7.9.
Test Kitchen
- Updated Test Kitchen to v3.7.0.
Security
- Updated OpenSSL from v3.0.15 to v3.2.4 while maintaining FIPS algorithm support from v3.0.9.
- Updated cURL from v8.4.0 to v8.12.1 to resolve the following CVE:
- CVE-2025-0725
- CVE-2024-9681
- CVE-2023-46219
- CVE-2023-46218
- Updated libxml2 from v2.12.7 to v2.12.10 to resolve the following CVE:
- CVE-2025-27113
- CVE-2025-24928
- CVE-2024-56171
- CVE-2024-40896
- Updated libxslt from v1.1.39 to v1.1.43 to resolve the following CVE:
- CVE-2024-55549
- CVE-2025-24855
- Updated libarchive from v3.7.5 to v3.7.9 to resolve the following CVE:
- CVE-2024-48615
- Updated REXML to v3.4.1 to address CVE-2024-49761
- Updated Go from v1.22.5 to v1.23.9 as support for the 1.22 series is nearing end-of-life.
We updated several components to address critical security issues identified through Dependabot and GitHub code scanning alerts:
- Berkshelf was updated from v8.0.9 to v8.0.22.
- Chef CLI was updated from v5.6.16 to v5.6.21.
- Ohai was updated from v18.1.18 to v18.2.6.
- Fauxhai was updated from v9.3.16 to v9.3.26.
- Chef Vault was updated from v4.1.11 to v4.1.23.
Bug Fixes
- Fixed a bootstrap failure on Windows caused by an incorrect URL in Knife.
- Resolved unexpected kitchen doctor errors appearing during kitchen test runs.
- Fixed knife-vsphere failures caused by licensing changes introduced in Chef Infra Client 19.
- Resolved Windows pipeline failures in the chef-vault repository during verification steps.
Packaging
- We no longer build packages for macOS 11 Big Sur.
- We now build packages for macOS 13 and 14 on aarch64.

Components
Knife
Important Notice: Upcoming Omnitruck API Deprecation
We updated Knife from v18.6.2 to v18.6.13. This release introduces a warning message when running knife bootstrap that notifies users about the upcoming Omnitruck API deprecation.
To ensure uninterrupted downloads and remove this warning:
- For connected environments: Activate your Chef license and Knife automatically uses the new download APIs.
- For air-gapped environments: Set up a local Chef licensing service and configure the CHEF_LICENSE_SERVER environment variable to point to its URL. For more information, see the Chef Local License Service documentation.
Activating your Chef license ensures a smooth transition to the new download mechanism before the Omnitruck API is deprecated.
Chef Habitat
- Updated Chef Habitat from v1.6.1041 to v1.6.1243. See the Habitat release notes for more information.
Improvements
- To improve security and mitigate vulnerabilities, we replaced Kernel.open with File.open and IO.read with File.read.
Security
Updated expat from v2.5.0 to v2.6.4 to resolve the following CVEs:
- CVE-2023-52425
- CVE-2023-52426
- CVE-2024-45492