Chef Infra Client: vanhemmat versiot ja versiohistoria

Compliance Phase Improvements
New Resources
Resource Updates
- Correcting race condition when installing chocolatey packages #15640
- Update Platforms for platform-specific gems #15650
- Fix kitchen test homebrew_package failure #15558
- Raise 'FileTypeMismatch' when directory :create encounters a file #15557
Packaging
- Updated Kitchen.yml for a consistent build experience #15654
- Updating linting to cookstyle, corrected a large number of files #15644
- Ensure we remove vulnerable net-imap and rexml versions #15633
- Updating Inspec-core and Inspec-core-bin to 5.24.5 #15636
- Update Omnibus to get latest license_scout #15641
- Downgrade Docker to overcome build failures with newer version #15639
- Bump train-core to 3.16.0 #15572
- Fix rubygem version parsing #15662
Security
- Updating uri to 1.0.4 #15645

New features
- Added the -a/--all-users flag to the knife user list command to display detailed user information, including email, display name, first name, and last name. (#15494)
Improvements
- The path property in resources is now read once and reused, avoiding repeated property‑handling overhead. This reduces unnecessary computation and speeds up resource processing. Thanks @dafyddcrosby! (#15485)
Packaging
- We’ve dropped support for building packages on macOS 12 and added support for macOS 13. (#15415)
Security
- Updated the rack gem to 3.2.4. (#15439)
- Updated the resolv gem to 0.2.1. (#15459)
- Removed vulnerable bundled versions of the rexml gem. (#15462)
- Removed vulnerable bundled versions of the uri gem to address CVE-2025-27221. (#15475)
- Improved how Chef Infra Client and Knife extract YAML documents. The new method is no longer vulnerable to malicious YAML files. (#15466)
- Improved software bill of materials (SBOM) generation and security scanning in the CI pipeline to improve traceability, auditability, and transparency in dependency management. (#15502)
- Updated OpenSSL library to 3.2.6 to address CVE-2025-9230
Dependency updates
- Updated Ohai to 18.2.13 (#15520)
- Removed direct dependency on activesupport (#15472)
- Updated the multi_json gem to 1.17.0. (#15421)
- Updated the chef gem to 18.8.54 in the knife lockfile. (#15490)

Improvements
- Chef Infra Client now has optimized property access with reduced instance variable name lookups for better performance. Thanks @dafyddcrosby! #15329
- We've enhanced recipe loading capabilities by adding support for the include_recipes key in recipe hash processing. Thanks @dafyddcrosby! #15315
Resource updates
- We enhanced resource stability by addressing edge cases that could cause failures when resources encounter unexpected data types. Thanks @fretb! #15373
Packaging
- We upgraded to chef-powershell 18.6.5 and mixlib-archive 1.3.3 for improved Windows PowerShell integration and better archive handling. #15410
- We've updated Ohai to the latest version for enhanced system detection capabilities and improved hardware reporting. #15407

Improvements
- Chef Infra Client has improved performance when building large arrays of cookbooks. Thanks @dafyddcrosby! #15274
- We updated knife-ec-backup to include cookbooks with a frozen status. Before, this led to Chef Infra Server upgrades that didn't include frozen cookbooks. #15217
Resource updates
- We fixed the ohai resource where a nil value could be assigned to the plug-in path in the reload action. #15229
- We fixed a bug in the chocolatey_installer resource that always downloaded the installer from Choco and ignored the custom URL option. #15306
- We updated the apt_repository resource with the following changes:
- apt_repository now correctly handles an array of key URLs in the key property when signed_by is true (the default).
- If you invoke apt_repository more than once with the same key URL, later instances of apt_repository now correctly import their keys. Before, only the first instance would have its key imported.
- apt_repository can now handle GPG key imports on Debian version 13/Trixie.
#15235
Packaging
- We aren't releasing an AIX package for this release.
- We added a software bill of materials (SBOM) to all builds. #15317 #15319
- We removed old .NET version 5 DLL files from the build. We now use .NET 8 and these files now come directly from the chef-powershell gem. #15190
- We added Black Duck workflows to scan for security vulnerabilities. #15093
Security
- We updated the activesupport gem to address CVE-2023-22796. #15298

Updates
This is a re-release of Chef Infra Client 18.8.9 to update the metadata in the chef gem, ensuring compatibility with the latest version of Chef InSpec (5.22.95).
Please note: We are not producing an AIX package for this release. AIX users can continue using Infra Client 18.8.9 to access the same functionality.

New features
- We added support for recipes in JSON format. This builds on earlier work that allows you to define recipes in YAML. This provides a low-code syntax for simple use cases. To write recipes in JSON, Chef resources and any user-defined parameters can be added as elements in a resources object, such as the example below:
{
"resources": [
{
"type": "package",
"name": "httpd"
},
{
"type": "template",
"name": "/var/www/html/index.html",
"source": "index.html.erb"
},
{
"type": "service",
"name": "httpd",
"action": [
"enable",
"start"
]
}
]
}
Thanks dafyddcrosby! (#15106)
Compliance Phase improvements
- We updated the inspec-core and train-core gems. (#15042)
Resource updates
- We added the environment property to the apt_package, dnf_package, dpkg_package, package, rpm_package, and yum_package resources. This allows you to customize package installation using environment variables for packages that don’t use preseed files.
For example:
apt_package "percona-xtradb-cluster-server" do
environemnt({"PERCONA_TELEMETRY_DISABLE" => "1"})
end
Thanks kristofvandam! (#15091)
- We fixed an idempotency bug when dearmoring keys in the apt_repository resource. (#15056)
- We fixed a bug with the apt_repository resource where it was erroneously accepting empty keys. (#15043)
Bug fixes
- We fixed a bug in the irb prompt that caused the cursor to jump. (#15069)
- We fixed a bug where Chef Infra Client was not handling Ohai custom plug-ins correctly. The plug-in name would return an Ohai::Exceptions::AttributeNotFound error. (#15115)
- We fixed the error NoMethodError: undefined method 'present?' for nil:NilClass when running knife bootstrap. (#15108)
Packaging
- We now build packages for Ubuntu 24.04 on x86-64 and ARM64 platforms and no longer support packages for Ubuntu 16.04. (#15062)
- We now build packages for Windows Server 2025 on x86_64 platforms. (#15165)
Security
- Chef Infra Client now supports the openssl Ruby gem version 3.3.0. (#15147)
- We updated the uri Ruby gem to 1.0.3. (#15131)
- We updated the rack gem in chef-zero because it was vulnerable to a CVE. (#332)
- We updated the json gem to 2.13.2 (7bc6001)
- We updated the thor gem to 1.4.0 (#15196
- We updated chef-zero to update dependencies and fix CVEs. (#15117)
- We updated activesupport support in Chef to fix a CVE. (#15189)
- We updated chef-foundation to 3.2.32 to incorporate the following:
- nokogiri gem updated to 1.18.9
- cgi gem bumped to 0.3.7
- libxml2 updated to 2.13.8
- libxslt updated to 1.1.43
- rbs and typeprof bundled gems removed to reduce attack surface
- OpenSSL 3.2.4 library and executables and OpenSSL 3.1.2 FIPS bump

Resource Updates
- We corrected a bug in the apt_repository resource introduced in Chef Infra Client 18.7.3 when using the signed_by property and ASCII-armored GPG keys. The resource now correctly dearmors keys when authenticating with a repository. (#14967)
Dependencies
- We updated train-core to 3.2.13 so it's compatible with the next release of Chef Workstation. (#15003)

Dependencies
- We fixed a regression in mixlib logging. (#14951)
- We updated ffi-libarchive to prevent potential man-in-the-middle attacks on Windows nodes. (#91)
- In Ohai, we constrained the ffi version to <= 1.17.0. (#1860)
Resource Updates
- We improved the registry_key resource to prevent it from logging extraneous registry keys on Windows nodes. (#14961)
Packaging
- We now build packages for macOS 13 and 14. (#14949)

Security
- Updated REXML to 3.4.0 to address CVE-2024-49761. (#14823)
Improvements
- Updated Chef::Util::Powershell::PSCredential to avoid leaking credentials as plaintext in resources. (#14897)
- Improved performance when fetching remote cookbooks using Chef::Cookbook::RemoteFileVendor. Thanks @dafyddcrosby! (#14829)
Resource improvements
- In the apt_repository resource, we added the signed_by property.
If set to true and a key is supplied, apt_repository uses the key in the Signed-By option to verify the authenticity of packages. If set to a string, apt_repository passes it to the Signed-By option.
The default value is true.
Thanks @tmccombs! (#14131)
- In the registry_key resource, we added the only_record_changes option, which suppresses the reporting of the current value of sibling values in a registry key. The default value is true. (#14883)
- In the dnf_package resource, we fixed the :remove action in cases where a package is version locked. Previously, :remove would attempt to uninstall the package manager if the specified package is version locked. Thanks @vmagro! (#14821)
Licensing
- We updated the Chef licensing warning message with more information. (#14795)
Compliance phase
- Updated Chef Inspec to v5.22.72. (#14841)
- The quiet attribute in Compliance Phase now correctly suppresses CLI output when set to true. (#14817)
Bug Fixes
- We fixed an error where the Windows Chef Infra Client Habitat package stated that Microsoft Visual C++ is missing and is a required dependency. (#14906)
- We fixed a licensing issue when running knife bootstrap in air-gapped environments. If a Chef Local Licensing Service or license isn't set, it would attempt to connect to Chef's licensing server and return an error instead of a warning. (#14777)
- We fixed a "No such file or directory" error when Chef Infra Client is installed as a gem on Windows. (#14780)
Packages
- We no longer build packages for macOS 11 Big Sur. (#14782)
Dependency updates
- Pinned mixlib-log to >= 2.0.3, <= 3.1.1. (#14905)
- Updated Chef Zero to 15.0.17. (#14904)
- Updated Chef Foundation to v3.2.15. (#14907)
- Removed the RDoc pin for ~> 6.4.1 since Ruby 3.1.6 already has the updated version. (#14857)
- Updated Train-WinRM to ~> 0.2.17. (#14842)
- Limit ffi gem to be no later than 1.17.0. (#14809)
Bundled dependencies
- Bundled ohai updated from 18.2.4 to 18.2.5.
- Bundled ffi (~> 1.9) replaced with ffi (~> 1.9, <= 1.17.0).
- Bundled activesupport (7.0.8.7).
- Bundled aws-partitions updated from 1.981.0 to 1.1048.0.
- Bundled aws-sdk-core updated from 3.209.1 to 3.218.1.
- Bundled aws-sdk-kms updated from 1.94.0 to 1.98.0.
- Bundled aws-sdk-s3 updated from 1.166.0 to 1.180.0.
- Bundled aws-sdk-secretsmanager updated from 1.108.0 to 1.112.0.
- Bundled aws-sigv4 updated from 1.10.0 to 1.11.0.
- Bundled bigdecimal updated from 3.1.8 to 3.1.9.
- Bundled gyoku (1.4.0) replaced with chef-gyoku (1.4.1).
- Bundled chef-zero updated from 15.0.11 to 15.0.17.
- Bundled winrm (2.3.9) replaced with chef-winrm (2.3.11).
- Bundled winrm-elevated (1.2.3) replaced with chef-winrm-elevated (1.2.5).
- Bundled winrm-fs (1.3.5) replaced with chef-winrm-fs (1.3.7).
- Bundled cheffish updated from 17.1.7 to 17.1.8.
- Bundled concurrent-ruby updated from 1.3.4 to 1.3.5.
- Bundled date updated from 3.3.4 to 3.4.1.
- Bundled erubi updated from 1.13.0 to 1.13.1.
- Bundled faraday updated from 2.12.0 to 2.12.2.
- Bundled faraday-net_http updated from 3.3.0 to 3.4.0.
- Bundled http-cookie updated from 1.0.7 to 1.0.8.
- Bundled i18n (1.14.7).
- Bundled inspec-core updated from 5.22.58 to 5.22.72.
- Bundled inspec-core-bin updated from 5.22.58 to 5.22.72.
- Bundled json updated from 2.7.2 to 2.10.0.
- Bundled mime-types updated from 3.5.2 to 3.6.0.
- Bundled mime-types-data updated from 3.2024.0903 to 3.2025.0204.
- Bundled mime-types updated from 3.5.2 to 3.6.0.
- Bundled minitest (5.25.5).
- Bundled mixlib-log updated from 3.0.9 to 3.1.1.
- Bundled mixlib-shellout updated from 3.2.8 to 3.3