ChefDK 1.5.0 Released with security fixes!

Ohai Chefs!

We’re happy to announce the release of ChefDK v1.5!

Release Highlights

Security Fixes

This release of Chef Client contains a new version of zlib, fixing 4
CVEs:

Chef 12.21

Chef has been updated to the 12.21 release, fixing a number of bugs:

  • On Debian based systems, correctly prefer Systemd to Upstart
  • Handle the supports pseudo-property more gracefully
  • Don’t crash when we downgrade from Chef 13 to Chef 12
  • Provide better system information when Chef crashes

See the Release Notes for further information

Notable Updated Gems

ChefDK 1.4 Release Notes

InSpec

InSpec has been updated to 1.25.1 with the following new functionality:

  • Consistent hashing for InSpec profiles
  • Add platform info to json formatter
  • Allow mysql_session to test databases on different hosts
  • Add an oracledb_session resource
  • Support new Chef Automate compliance backend

Find the full list of changes here.

Notable Updated Gems

Please see the CHANGELOG for the complete list of changes.

Get the Build

As always, you can download binaries directly from downloads.chef.io or by using the new mixlib-install command line utility available in ChefDK 0.19.6 or greater.

$ mixlib-install download chefdk -v 1.5.0

Alternatively, you can install ChefDK using one of the following command options:

# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chefdk -v 1.5.0

# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chefdk -version 1.5.0

If you want to give this version a spin in Test Kitchen, create or add the following to a .kitchen.local.yml file:

provisioner:
  product_name: chefdk
  product_version: 1.5.0