Pending Release Notes

Release Date: 5 February, 2025.

Components

Chef Habitat

• Updated Habitat from v1.6.1041 to v1.6.1243. See the Habitat release notes for more information.

Improvements

• Replaced Kernel.open with File.open and IO.read with File.read to improve security and mitigate vulnerabilities.

Knife

Important Notice: Upcoming Omnitruck API Deprecation

Updated the knife from v18.6.2 to v18.6.13. In this release, we have introduced a warning message during knife bootstrap to notify users about the licensing and upcoming deprecation of the Omnitruck API.

To ensure uninterrupted downloads and remove this warning:

• For connected environments: Activate your Chef license, and new download APIs will be used automatically.
• For airgapped environments: Set up a local Chef licensing service and configure the CHEF_LICENSE_SERVER environment variable to point to its URL. More information on how to setup the service can be found here

Activating your license ensures a smooth transition to the new download mechanism before the Omnitruck API is deprecated.

Security

Updated expat from v2.5.0 to v2.6.4 to resolve the following CVEs:

• CVE-2023-52425
• CVE-2023-52426
• CVE-2024-45492