Chef Infra Client 18.9.4 Released!

Chef Release Announcements
1

We are delighted to announce the availability of version 18.9.4 of Chef Infra Client.

New features

  • Added the -a/--all-users flag to the knife user list command to display detailed user information, including email, display name, first name, and last name. (#15494)

Improvements

  • The path property in resources is now read once and reused, avoiding repeated property‑handling overhead. This reduces unnecessary computation and speeds up resource processing. Thanks @dafyddcrosby! (#15485)

Packaging

  • We now build packages for RHEL 10. (#15515)
  • We’ve dropped support for building packages on macOS 12 and added support for macOS 13. (#15415)

Security

  • Updated the rack gem to 3.2.4. (#15439)
  • Updated the resolv gem to 0.2.1. (#15459)
  • Removed vulnerable bundled versions of the rexml gem. (#15462)
  • Removed vulnerable bundled versions of the uri gem to address CVE-2025-27221. (#15475)
  • Improved how Chef Infra Client and Knife extract YAML documents. The new method is no longer vulnerable to malicious YAML files. (#15466)
  • Improved software bill of materials (SBOM) generation and security scanning in the CI pipeline to improve traceability, auditability, and transparency in dependency management. (#15502)
  • Updated OpenSSL library to 3.2.6 to address CVE-2025-9230

Dependency updates

  • Updated Ohai to 18.2.13 (#15520)
  • Removed direct dependency on activesupport (#15472)
  • Updated the multi_json gem to 1.17.0. (#15421)
  • Updated the chef gem to 18.8.54 in the knife lockfile. (#15490)

Get the Build

As always, you can download binaries from chef.io/downloads or by using the mixlib-install command-line utility:

$ mixlib-install download chef -v 18.9.4

Alternatively, you can install Chef Infra Client using one of the following command options:

# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 18.9.4
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex