Chef Infra Client 18.7.3$$$Release date: March 31; 2025$$$$$$Security$$$Updated REXML to 3.4.0 to address CVE-2024-49761. (#14823)$$$Improvements$$$Updated Chef::Util::Powershell::PSCredential to avoid leaking credentials as plaintext in resources. (#14897)$$$Improved performance when fetching remote cookbooks using Chef::Cookbook::RemoteFileVendor. Thanks @dafyddcrosby! (#14829)$$$Resource improvements$$$In the apt_repository resource; we added the signed_by property.$$$$$$If set to true and a key is supplied; apt_repository uses the key in the Signed-By option to verify the authenticity of packages. If set to a string; apt_repository passes it to the Signed-By option.$$$$$$The default value is true.$$$$$$Thanks @tmccombs! (#14131)$$$$$$In the registry_key resource; we added the only_record_changes option; which suppresses the reporting of the current value of sibling values in a registry key. The default value is true. (#14883)$$$$$$In the dnf_package resource; we fixed the :remove action in cases where a package is version locked. Previously; :remove would attempt to uninstall the package manager if the specified package is version locked. Thanks @vmagro! (#14821)$$$$$$Licensing$$$We updated the Chef licensing warning message with more information. (#14795)$$$Compliance phase$$$Updated Chef Inspec to v5.22.72. (#14841)$$$The quiet attribute in Compliance Phase now correctly suppresses CLI output when set to true. (#14817)$$$Bug Fixes$$$We fixed an error where the Windows Chef Infra Client Habitat package stated that Microsoft Visual C++ is missing and is a required dependency. (#14906)$$$We fixed a licensing issue when running knife bootstrap in air-gapped environments. If a Chef Local Licensing Service or license isn’t set; it would attempt to connect to Chef’s licensing server and return an error instead of a warning. (#14777)$$$We fixed a “No such file or directory” error when Chef Infra Client is installed as a gem on Windows. (#14780)

Chef Infra Client 18.3.0$$$Improvements$$$Reformatted the output of the knife cookbook list -a -F json command so it returns a hierarchical JSON object of cookbook versions instead of a flat array. (#13654) Thanks aknarts!$$$Resource updates$$$Added an options parameter to the apt_repository resource to set arbitrary options for Apt repositories. (#13728) Thanks; tmccombs!$$$Resource bug fixes$$$Fixed an issue where the homebrew_tap resource on ARM64 (Apple Silicon) machines would not untap a Homebrew tap with the :untap action. (#13669).$$$Fixed an issue where an integer passed to the program_arguments property in the launchd resource would cause a kernel panic in launchd because it requires a string. (#13682) Thanks; gbatye!$$$Fixed an idempotency issue in the zypper_package resource by verifying that the named package is already installed. (#13691) Thanks; ramereth!$$$Fixed a bug in the windows_security_policy resource when the user running Chef Infra Client has a space in their username. (#13809) Thanks; jwdean!$$$Updated the chocolatey_package resource to handle changes introduced in Chocolatey CLI v2.0. (#13833)$$$Fixed a type error in the yum_package resource when the makecache_fast property is false. (#13829). Thanks chouetz!$$$Bug fixes$$$Fixed an issue where attributes loaded slowly due to a regression in net/http in Ruby 3.1. (#13745)$$$Fixed an Invalid Memory object error when Infra Client runs on Windows. (#13677)$$$Fixed an issue where knife bootstrap would fail using the --sudo option on EL8 systems. (#13636)

Release notes not yet updated by vendor.$$$$$$**File not scanned as it is too large**

Release notes not yet updated by vendor.

Updated Components $$$license_scout 1.0 -> 1.3 (#12992)$$$ncurses 5.9 -> 6.3 (#12953)$$$libxml2 2.9.10 -> 2.9.13 (#12752)$$$libxslt 1.1.14 -> 1.1.15 (#12752)$$$win32-api 1.5.3 -> 1.5 to allow for the latest releases (#12614)$$$diff-lcs to not 1.4.0 and < 1.6.0 (#12534)$$$Windows versions are now built on Universal CRT (#12959)$$$Use new msys2-based development kit for Windows (#13097)$$$inspec 4.23 -> 5.18.14 (#13144)$$$Bug Fixes $$$Fixed the chef_client_config resource to properly return the datacollector parameters. (#12732)$$$Fixed the zypper-package resource so it correctly handles packages specified in the source property. (#12182)$$$Fixed the plist resource so it will correctly generate a new file using the file resource. (#12680). Thanks (jazaval)!$$$Fixed the mount resource so it can handle spaces in a file path. (#11626)$$$Fixed the crod_d resource so it will accept a space in the name of the resource block. (#12377)$$$Fixed the locale resource regenerated all installed locales on every Chef Infra run. (#12833)$$$Fixed an issue when specifying a package version when using the yum_package resource. (#12657)$$$Fixed missing X-Vault-AWS-IAM-Server-ID header in the Secrets Management Integration helper when using AWS IAM to fetch secrets from HashiCorp Vault. (#12956)$$$Improved error message when using knife upload to upload a file with a syntax error to chef-zero. (#11678)$$$Fixed bug where ChefSpec fails to load Compliance Profiles in Compliance Phase that contain an InSpec profile. (#12830)$$$Fixed a performance issue when reading attributes from nodes. (#12742)$$$Fixed an issue where a PEM file was not generated when a new user is created with knife user create. (#12619)$$$Resolved failures when running the audit-enforcer reporter. (#12595)$$$Introduced a new compliance-enforcer reporter as an alias to the audit-enforcer. This forces the Infra Client run to fail if the Compliance Phase fails. (#12595)$$$The subscribes property in a resource will now validate an incorrectly formatted resource call. (#12525)$$$Fixes bug in compare_user on linux systems.(13223) - Shoutout to fretb from the community!$$$Fixes missing require and small error in REST implementation(13066) - Shoutout to tecracer-theinen from the community!

Bug Fixes $$$Fixed an issue with the powershell_package resource where it was calling an incorrect error handling method. (#12722)