Skip to content

Updating the release notes for 19.4.x #4701

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
johnmccrae wants to merge 3 commits into
base: main
Choose a base branch
from
+79 −0
Open

Updating the release notes for 19.4.x #4701

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
eabf5ef
Updating the release notes for 19.4.x
johnmccrae Jul 20, 2026
dd2c9bf
Updating per Neha's feedback
johnmccrae Jul 29, 2026
5e870fa
Updating Ruby and Openssl versions
johnmccrae Jul 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
79 changes: 79 additions & 0 deletions content/release_notes/client.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,85 @@ summary = "Chef Infra Client release notes"
<!-- cSpell:disable -->
<!-- vale off -->

## Chef Infra Client 19.4.x

Release date: TBD

### Improvements

- We updated Chef-19 with support for Ruby 3.4.10 and OpenSSL 3.5.7
([16242](https://github.com/chef/chef/pull/16242))

- The `chef_client_config` resource now accepts two new properties. `directory_specs` lets you configure permissions (owner, group, mode, and Windows rights and inherits) for each Chef-managed directory: `:config`, `:client_d`, `:logs`, `:cache`, and `:backups`. `client_rb_mode` lets you set the file mode of the generated `client.rb` file (defaults to `"0640"`).
([#16019](https://github.com/chef/chef/pull/16019))

- Template error messages now include the cookbook name and template filename, and are truncated to 10,000 characters to prevent exposing large node attribute data in logs.
([#16073](https://github.com/chef/chef/pull/16073))

- Sensitive properties — passwords, auth tokens, and private key passphrases — are now correctly masked in logs and run reports for `chocolatey_installer`, `chocolatey_package`, `habitat_package`, `habitat_sup`, `openssl_ec_private_key`, and `openssl_rsa_private_key`.
([#16107](https://github.com/chef/chef/pull/16107))

### Bug fixes

- Fixed idempotency in the `sysctl` resource so that it no longer reports a spurious change when the kernel parameter is already at the correct value.
([#16035](https://github.com/chef/chef/pull/16035))

- Fixed a bug in the `chocolatey_installer` resource where the installer was always downloaded from Chocolatey's default URL, ignoring a custom URL option. The resource now constructs a full file path for `Invoke-WebRequest -OutFile`, which PowerShell 5.1 requires.
([#16036](https://github.com/chef/chef/pull/16036))

- Fixed the NOTICE file path so that a missing or misplaced NOTICE file raises an error rather than silently continuing.
Comment thread
johnmccrae marked this conversation as resolved.
([#16153](https://github.com/chef/chef/pull/16153))

### Security

- Fixed a path traversal vulnerability in the `archive_file` resource. Extraction now rejects archive entries containing `..` sequences, absolute paths, and unsafe symlinks.
([#16095](https://github.com/chef/chef/pull/16095))

- Updated `faraday` to 2.14.3 to address GHSA-98m9-rrrm-r99r and GHSA-5rv5-xj5j-3484.
([#16132](https://github.com/chef/chef/pull/16132))

- Applied Cookstyle corrections across the codebase.
Comment thread
johnmccrae marked this conversation as resolved.
([#16201](https://github.com/chef/chef/pull/16201))

### Compliance Phase

- Updated InSpec to 7.1.7.

@Stromweld Stromweld Jul 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead of listing this only on update, can we make a permanent section to list versions of chef products in the chef-client like ohai, inspec, etc... This would be similar to how Automate release notes list product versions integrated in the product. https://docs.chef.io/release_notes/automate/#chef-packaged-product-versions

([#16135](https://github.com/chef/chef/pull/16135))


### Packaging

- Added Habitat build plan and GitHub workflows for macOS ARM (`aarch64-darwin`). Chef Infra Client Habitat packages are now released for Apple Silicon natively. What this means is that for now, there won't be a dmg file for macos packages but the migration tool can be used to install it
([#16115](https://github.com/chef/chef/pull/16115), [#16130](https://github.com/chef/chef/pull/16130))

- Updated the Habitat ARM package build and promotion pipeline.
([#15986](https://github.com/chef/chef/pull/15986))

- Updated Habitat package version tracking to promote alongside `base-2025`.
([#15998](https://github.com/chef/chef/pull/15998))

- Updated Habitat version pinning strategy in the build pipeline.
([#15995](https://github.com/chef/chef/pull/15995))


### Dependency updates

- Updated `aws-sdk-s3` from 1.222.0 to 1.227.0.
([#16028](https://github.com/chef/chef/pull/16028), [#16113](https://github.com/chef/chef/pull/16113), [#16189](https://github.com/chef/chef/pull/16189))

- Updated `aws-sdk-secretsmanager` from 1.130.0 to 1.133.0.
([#16026](https://github.com/chef/chef/pull/16026), [#16079](https://github.com/chef/chef/pull/16079))

- Updated `chef-vault` from 4.2.9 to 4.2.12.
([#16127](https://github.com/chef/chef/pull/16127))

- Updated `faraday` from 2.14.1 to 2.14.3.
([#16132](https://github.com/chef/chef/pull/16132))

- Updated Ohai from 19.1.31 to 19.1.40.
([#16023](https://github.com/chef/chef/pull/16023), [#16117](https://github.com/chef/chef/pull/16117), [#16128](https://github.com/chef/chef/pull/16128), [#16140](https://github.com/chef/chef/pull/16140))


## Chef Infra Client 19.3.15

Release date: May 22, 2026
Expand Down
Loading