Automate version 4.13.118 Released!

We are delighted to announce the availability of version 4.13.118 of Chef Automate.

Upgrade Journey

Chef lets you choose your upgrade journey based on your current version of Chef Automate. You can do all the version upgrades manually.

Your Current Version Upgrade To
Any version before 20220329091442 20220329091442
20220329091442 3.0.x
3.0.49 4.x

See the Chef Automate 4.x upgrade documentation for more information.

Improvements

  • The Infra Server in Automate now allows organisations to be accessed by having dex or assets as a substring. (#8744)

Bug Fixes

  • Fixes the issue of stopping Automate from loading more than 100 controls in the compliance reports page for a node. (#8673)
  • Fixes the issue that stopped Automate from expanding the control test results for a node in case the number of tests exceeds 50. (#8673)
  • Added Preflight check for Port 6432,5432 in Automate HA Verification

Security

Security Improvements

(examples: new security configurations)

  • The X-XSS-Protection and CSP-header values are now configurable. (#8767)
  • Remove the plain text password and encrypt it while storing it for Automate / Automate HA from the configs.

Security Updates

(examples: dependency updates, CVE fixes)

  • Updated open-policy-agent/opa to v0.42.0
  • Updated lodash to v4.17.19
  • Update crypto to v0.31.0

Chef Packaged Product Versions

This release uses:

  • Chef Habitat version:1.6.1205/20241107140309
  • Chef Habitat Builder version: 9497/20221221224518
  • Chef Infra Server version: 15.10.33/20250220084434
  • Chef InSpec version: 4.56.61/20240809111842

Service Versions

This release uses:

  • Postgres: 13.18
  • OpenSearch: 1.3.20
  • Nginx: 1.25.4
  • HAProxy: 2.2.29
  • Dex: 2.35.0

Supported External Chef Products

This release supports the following external chef products:

  • Chef Infra Server version: 14.0.58+
  • Chef Inspec version: 4.3.2+
  • Chef Infra Client: 17.0.242+
  • Chef Habitat: 0.81+

Supported framework versions

This release is built on the following framework versions:

  • GoLang: 1.22.5
  • OpenJDK: 11.0.22+7
  • Angular: 17.3.0

View the package manifest for the latest release.


As always, we welcome your feedback and invite you to contact us directly or share your feedback online. Thanks for using Chef Automate!