diff --git a/content/release_notes/client.md b/content/release_notes/client.md index d018c7852..8cba50e46 100644 --- a/content/release_notes/client.md +++ b/content/release_notes/client.md @@ -17,6 +17,85 @@ summary = "Chef Infra Client release notes" +## Chef Infra Client 19.4.x + +Release date: TBD + +### Improvements + +- We updated Chef-19 with support for Ruby 3.4.10 and OpenSSL 3.5.7 +([16242](https://github.com/chef/chef/pull/16242)) + +- The `chef_client_config` resource now accepts two new properties. `directory_specs` lets you configure permissions (owner, group, mode, and Windows rights and inherits) for each Chef-managed directory: `:config`, `:client_d`, `:logs`, `:cache`, and `:backups`. `client_rb_mode` lets you set the file mode of the generated `client.rb` file (defaults to `"0640"`). + ([#16019](https://github.com/chef/chef/pull/16019)) + +- Template error messages now include the cookbook name and template filename, and are truncated to 10,000 characters to prevent exposing large node attribute data in logs. + ([#16073](https://github.com/chef/chef/pull/16073)) + +- Sensitive properties — passwords, auth tokens, and private key passphrases — are now correctly masked in logs and run reports for `chocolatey_installer`, `chocolatey_package`, `habitat_package`, `habitat_sup`, `openssl_ec_private_key`, and `openssl_rsa_private_key`. + ([#16107](https://github.com/chef/chef/pull/16107)) + +### Bug fixes + +- Fixed idempotency in the `sysctl` resource so that it no longer reports a spurious change when the kernel parameter is already at the correct value. + ([#16035](https://github.com/chef/chef/pull/16035)) + +- Fixed a bug in the `chocolatey_installer` resource where the installer was always downloaded from Chocolatey's default URL, ignoring a custom URL option. The resource now constructs a full file path for `Invoke-WebRequest -OutFile`, which PowerShell 5.1 requires. + ([#16036](https://github.com/chef/chef/pull/16036)) + +- Fixed the NOTICE file path so that a missing or misplaced NOTICE file raises an error rather than silently continuing. + ([#16153](https://github.com/chef/chef/pull/16153)) + +### Security + +- Fixed a path traversal vulnerability in the `archive_file` resource. Extraction now rejects archive entries containing `..` sequences, absolute paths, and unsafe symlinks. + ([#16095](https://github.com/chef/chef/pull/16095)) + +- Updated `faraday` to 2.14.3 to address GHSA-98m9-rrrm-r99r and GHSA-5rv5-xj5j-3484. + ([#16132](https://github.com/chef/chef/pull/16132)) + +- Applied Cookstyle corrections across the codebase. + ([#16201](https://github.com/chef/chef/pull/16201)) + +### Compliance Phase + +- Updated InSpec to 7.1.7. + ([#16135](https://github.com/chef/chef/pull/16135)) + + +### Packaging + +- Added Habitat build plan and GitHub workflows for macOS ARM (`aarch64-darwin`). Chef Infra Client Habitat packages are now released for Apple Silicon natively. What this means is that for now, there won't be a dmg file for macos packages but the migration tool can be used to install it + ([#16115](https://github.com/chef/chef/pull/16115), [#16130](https://github.com/chef/chef/pull/16130)) + +- Updated the Habitat ARM package build and promotion pipeline. + ([#15986](https://github.com/chef/chef/pull/15986)) + +- Updated Habitat package version tracking to promote alongside `base-2025`. + ([#15998](https://github.com/chef/chef/pull/15998)) + +- Updated Habitat version pinning strategy in the build pipeline. + ([#15995](https://github.com/chef/chef/pull/15995)) + + +### Dependency updates + +- Updated `aws-sdk-s3` from 1.222.0 to 1.227.0. + ([#16028](https://github.com/chef/chef/pull/16028), [#16113](https://github.com/chef/chef/pull/16113), [#16189](https://github.com/chef/chef/pull/16189)) + +- Updated `aws-sdk-secretsmanager` from 1.130.0 to 1.133.0. + ([#16026](https://github.com/chef/chef/pull/16026), [#16079](https://github.com/chef/chef/pull/16079)) + +- Updated `chef-vault` from 4.2.9 to 4.2.12. + ([#16127](https://github.com/chef/chef/pull/16127)) + +- Updated `faraday` from 2.14.1 to 2.14.3. + ([#16132](https://github.com/chef/chef/pull/16132)) + +- Updated Ohai from 19.1.31 to 19.1.40. + ([#16023](https://github.com/chef/chef/pull/16023), [#16117](https://github.com/chef/chef/pull/16117), [#16128](https://github.com/chef/chef/pull/16128), [#16140](https://github.com/chef/chef/pull/16140)) + + ## Chef Infra Client 19.3.15 Release date: May 22, 2026